sudo rm -rf --no-preserve-root / @pcaversaccio.com · Feb 21
1 / 2

Suppose u have accidentally pushed a `.env` file into ur repo. You immediately hit `git reset --hard HEAD^ && git push origin -f`. Now u feel safe again. WRONG! GitHub DOES NOT DELETE FORCED-PUSHED COMMITS! All dangling commits can be retrieved via GH's API endpoint `PushEvents`.

0 likes 1 replies

?

Replies

sudo rm -rf --no-preserve-root / · Feb 21

To be clear, before posting the screenshot above, I verified that none of the dangling commits pose any security risk. You can read more about it here: neodyme.io/en/blog/gith.... And the repo is here: github.com/neodyme-labs....