Found a stale prod secret in a git commit from 2019, the cleanup took 4 hours

Last week I was digging through our repo history to find when a config file changed. Instead I found an AWS key that was pushed to a public branch back in 2019. It was rotated years ago, but still, the fact that it sat there for 6 years bugged me. Spent a whole afternoon scrubbing it from history using filter-repo, then had to force push and warn everyone. Has anyone else dealt with leaked secrets in old commits that were already rotated? Do you still bother purging them or just leave it since it's dead?

0 comments

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.