Comment by darthbanane

I don't get it. If github declines the push then the blob must have already crossed the internet?

The message says to remove the secret from the commit but the actual action to take would be to rotate the secret since it's been exposed to github, no?