I've been asked to create a website (shop-front) for a local company, now that it's done they have allowed me to share a link to my personal portfolio.

The repository is currently private, but if possible I would like to either make it public, or on my portfolio - add a link and description to BOTH the website and the code repository.

I'm relatively close to the owners, so I'll certainly ask permission but is there a security risk to doing something like this?

All of the hosting details are obsfucated & my plan was to archive the original repository, clone it and push 1 commit to a new public repository to ensure any nefarious information from commit history should be removed (eg, `.env` files etc)

Appreciate any advice