HackBlue

Labs / Secrets in Git

Deleted from the code, still in the history

A commit titled “remove secrets” deleted an AWS key from config. The key is still in Git history. Find the commit that added it, the key ID, and who committed it.

  • Terminal mission
  • Beginner
  • 3 objectives
  • 0 of 3 solved

Briefing

The reporting service’s repository is about to be made public. The last commit message says secrets were removed, so the team believes it is clean.

Git keeps every version of every file. git log -p shows each change, and git log -S <text> lists only commits that added or removed that text.

analyst@dev-laptop

dev-laptop · Secrets in Git

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.