Coordinate clone cleanup before rewriting Git history to remove sensitive data

A central history rewrite leaves other copies and can be undone by a collaborator pushing old history back.

Source facts

GitHub warns that sensitive-data history rewriting changes commit hashes and requires coordination with collaborators. Old clones can reintroduce the removed material. Rewritten history can also break signatures and affect pull-request views. Data may remain in forks, cached views or referenced pull requests after a force push. GitHub directs credential owners to revoke or rotate exposed secrets before considering additional history cleanup.

Source: GitHub — Removing sensitive data from a repository.

Applicability

This concerns a separately approved sensitive-data removal operation. It is not a routine repair to run against a shared repository without preservation, coordination and a clear exposure decision.

DSE recommendation

DSE recommends separating credential containment from repository cleanup planning. Identify affected branches, forks, open work and consumers of commit hashes before authorizing a rewrite. Agree how collaborators will replace or clean existing clones and when writes will pause. Preserve required incident evidence securely, then use the official procedure and escalation path for residual hosting references where applicable. Agree the write-pause and clone-replacement instructions before the approved cleanup window. Ask a collaborator to rehearse the instructions in the isolated exercise and record the remaining hosting or fork references that require a separate owner or escalation.

Verification

Proposed verification: rehearse the chosen cleanup in an isolated repository using harmless sample data. Verify affected references and clone replacement instructions, then confirm old history is not reintroduced by the approved workflow. Track the credential’s revoked state separately and document remaining copies instead of claiming universal erasure from a successful force push.

Official reference

GitHub — Removing sensitive data from a repository. Reviewed October 20, 2026.