A sign pointing at it
Toby committed a prod API key, then pushed a second commit deleting it. The deletion is a public diff showing exactly where the key was.
The mistake
Toby commits a production key, then pushes a commit removing it and calls the file clean. The key is still in history, and the removal is a red-lined public diff that says which commit to look in.
- git
- secrets
- security