Authentication & Secrets
Git History Leak
Also: secret in git history
A secret that was committed once and stays retrievable from older commits after being deleted.
In more detail
Deleting a file in a new commit does not remove it from earlier ones, and clones and forks copy the whole history. Rewriting history can reduce exposure but cannot recall copies, so the first response is always to revoke and rotate the credential.