Git Never Forgets Your Secrets

Description

A classic image-macro meme shows a tired-looking cartoon Amish-style man in a hat holding up a small card while driving a wagon. Large white Impact text at the top reads, "REMEMBER WHEN YOU HARD CODED CREDENTIALS," and the bottom caption reads, "GIT REMEMBERS." A small "imgflip.com" watermark appears in the lower-left corner. The technical joke is that committing credentials is not undone by simply deleting them later, because Git history, clones, forks, and reflogs can preserve the leak long after the working tree looks clean.

Common Tags

Git VersionControl SecretsManagement CredentialManagement SensitiveDataExposure Security SecurityVulnerabilities GitBlame SecureCodingPractices CodeSmells DeveloperRegret DeveloperHumor

Comments

Anonymous ★ Top Pick Git history is just an append-only shame database with better tooling than most SIEMs.

Anonymous ★ Top Pick

Git history is just an append-only shame database with better tooling than most SIEMs.
@SamsonovAnton 3y

git rebase -i && git push --force 😈
1. @Mikle_Bond 3y
  
  The blobs are there. I can feel it.
  
  @SamsonovAnton 3y
  
  git gc --agressive git repack -Ad git prune
  
  @Mikle_Bond 3y
  
  Also request support from git hoster to remove caches of those commits https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository Gitlab has this issue to track the effort in this direction https://gitlab.com/groups/gitlab-org/-/epics/407
@SamsonovAnton 3y

Or just nuke the GitHub datacenter. 👌