3 ms·
Mostly a Git issue. In general Git won't remove old data pushed to remotes. Maybe if they run a garbage collection. However GitHub does exacerbate it a little
by kevincox 3y ago
Mostly a Git issue. In general Git won't remove old data pushed to remotes. Maybe if they run a garbage collection.
However GitHub does exacerbate it a little by providing APIs that list commits that are no longer in the history. However there are other ways to get this info such as brute-forcing short prefixes of commits.
But really this is another case of the general problem that once you publish information you can't unpublish it. If you push a secret to a repo you can't 100% reliably clean it up. You should assume that everyone with the repo took a copy.