PSA: You can view deleted commits on a @GitHub repository, even if you force-push the whole repository. ⚠️ This is my commit history for my website: https://github.com/grikomsn/personal-websites/commits/main This commit history does not exist on my repository: https://github.com/grikomsn/personal-websites/commits/106baefac869ba1049b3100a1cab6313efaaa5cd (read more below)
I have force-pushed my repo many times, assuming that previous histories are deleted. Here are different commit histories which should not exist: https://github.com/grikomsn/personal-websites/commits/106baefac869ba1049b3100a1cab6313efaaa5cd https://github.com/grikomsn/personal-websites/commits/e4c856f44bb90b88f7ba8de16643dd0db0477a46 https://github.com/grikomsn/personal-websites/commits/1c43f7819656ac8a73259cc163b627af7dc1816f
Here are more commit histories which should not exist: https://github.com/grikomsn/personal-websites/commits/8bd406afadb20fec9bba8d8cdb8cafd1b65c30f2 https://github.com/grikomsn/personal-websites/commits/5b85058dea5ce4b8d73d6d3c95460e74dd6c039b https://github.com/grikomsn/personal-websites/commits/d2f2d849931f5965c75b4f47571387a2b84900f2
Theoretically, if someone tracks all commit hashes for a repo on @GitHub, they can view the repo's past, present, and future history, regardless if it has been replaced or deleted. This is basically a git multiverse. ✨
One solution I can find to remove all references is from their docs page: "Contact GitHub Support, asking them to remove cached views and references to the sensitive data in pull requests on GitHub" https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/removing-sensitive-data-from-a-repository#fully-removing-the-data-from-github
I have asked @GitHubHelp (ticket 1466521) if it's possible to clear these dangling references. Sadly there's no way to remove those unless all forks are removed, which it will never happen anytime soon. I guess there's a reason why we don't mess with the multiverse.