A compose override that only exists in history
The working tree has no secrets, but a deleted docker-compose.override.yml did. Use git show with a commit and path to read the file as it was and judge what it exposed.
Briefing
inventory-api is about to be open-sourced. The current tree passes the secret scan, but legal wants to know whether anything sensitive is in the history.
git log --stat lists files each commit touched, including deleted ones. git show <sha>:<path> prints a file exactly as it was in that commit, even if it is gone now.
dev-laptop · Secrets in Git
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.