#secrets

Secrets in Git and how to recover

Rotate first, rewrite second. What actually happens after an API key lands in a commit, why force-push is not enough, and the exact commands that end the incident.