Comment by Osiris

2 years ago

Anyone at your company and just push to a public git repository at any time. Nothing stopping them except threat of consequences.

So? Employees with access to sensitive data are capable of leaking that data. News at eleven!

And anyone in the world can pull what was pushed to a public git repo before you delete it. You should always assume that has happened.

  • This is about access to private repos, not public ones:

    "Anyone can access deleted and private repository data on GitHub"