Collected research
Anyone can Access Deleted and Private Repository Data on GitHub
Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.
Commits pushed to a GitHub fork or upstream repository stay reachable from every repository in the fork network forever, surviving fork deletion, repository deletion and private-to-public transitions. Anyone who guesses a four-character short commit hash or reads the public events archive can retrieve deleted and private commit data, including leaked API keys.
Record
- Document
- Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.
- Researcher
- Joe Leon
- Published by
- trufflesecurity.com
- Topic
- Supply
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Joe Leon, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .