When migrating projects over to GitHub, I found there were still some passwords inside my SVN repositories. Obviously it’s not good practice to store your passwords in a code repository - let alone at a remote location, so I wanted to replace all passwords. Not only in the current version, but in all commits that have been made over the past 3 years. Luckily with Git - you can.
Now, there is a guide to Remove sensitive data on GitHub; but that removes files completely.
I wanted to preserve the files and just replace the passwords in Git history.
So my plan was to:
- Create GitHub accounts for every SVN comitter
- Store the SVN<>GitHub account mapping in
- Checkout SVN tree as a local Git repo (using
- Go over all the commits and replace all passwords with
Go over all code in the HEAD - the current version of the project
- replace with
App::configtake the password from a config file that’s outside the repository
Now that I have a working HEAD without real passwords or
xXxXxXxXxXx, and a
lot of previous versions with just
xXxXxXxXxXx in them:
- Send it to GitHub
- Continue leading a happy life without worries.
Here are the commands I ended up using:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
Lookout for these keywords as you’ll have to substitute them with your own:
Warning! Rewriting history Can be Dangerous! : )
Seriously though.. Be absolutely sure you know what you’re doing and make backups before doing anything.