The revert that brought the password back
A credential was removed from config in one commit and quietly restored by a revert two days later. Use the pickaxe search to list every commit that touched it and find which is current.
Briefing
Last month’s secrets review closed a finding in billing-worker: an SMTP password in settings.py, removed in a commit titled "remove hardcoded smtp password".
A new scan has flagged the same line again. git log -S <text> lists every commit where the number of occurrences of that text changed, which shows adds, removals, and re-adds.
dev-laptop · Secrets in Git
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.