Truffle Security Blog company blog
I scanned all of GitHub's "oops commits" for leaked secrets
GitHub Archive logs every public commit, even the ones developers try to delete. Force pushes often cover up mistakes like leaked credentials by rewriting Git history. GitHub keeps these dangling commits, from what we can tell, forever. In the archive, they show up as “zero-commit” PushEvents.
- Points
- 203
- HN comments
- 110
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jul 3, 2025 | I scanned all of GitHub's "oops commits" for leaked secrets by elza_1111 | 203 | 110 |
