Delete files with secrets in git history - github

github_remove_secret_files_history.sh

#!/bin/bash

while read -r line; do
    if [[ $line == *"blob id:"* ]]; then
        # echo "$line"
        arrIN=(${line//:/ })
        blobId=${arrIN[4]}
        echo "blob id:$blobId"
        pathx=$(git rev-list --all --objects | grep $blobId)
        # echo "$pathx"
        arrPath=(${pathx// / })
        path=${arrPath[1]}
        echo "path: $path"
        # BEWARE!! git filter-repo below command with empty string means wiping off repo.
        if [ -n "$path" ]; then
            echo "cleaning git history for path: $path"
            git filter-repo --invert-paths --path "$path"
        fi
    fi
done < ./github_rule_output.log