Secrets、Credentials 与“删掉 Commit 仍可能泄漏” | Git

本章覆盖：password；API key；private key；`.env`；gitignore；secret scanning platform boundary；already committed secret；rotate secret first；deleting file in newest commit does not remove old history；history rewrite；clone copies；Git history should be treated as durable published data。