Unverified50% confidenceFactExact time
A git bundle carries git-tracked files and their full history; gitignored files that were never committed are not included, while files that were committed and later deleted are included as well. Therefore, once a secret enters any single commit, every bundle will carry it, and the key needs to be rotated.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
Unverified即便开发者在发现硬编码密钥后立即删除并重新提交，密钥依然存在于Git的提交历史中，可通过git log或git show命令找回75% similarVerifiedGitHub dynamically generates a temporary merge commit (refs/pull/*/merge) on the server side for each PR, which must be explicitly fetched via git fetch and does not exist in a normal git clone result.74% similarUnverifiedGit can run on object storage if one is willing to regenerate packfiles.73% similarUnverifiedGit协议只传输代码对象（commit、tree、blob、tag四种底层对象），PR评论、CI历史和密钥无法通过Git迁移72% similarUnverifiedIf a file has no changes between two commits, Git directly reuses the same Blob object instead of creating a new copy.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1040628API
curl https://kongchang.com/api/v1/knowledge/claims/1040628MCP
get_claim(id=1040628)