That&#x27;s pretty sweet, but by then the damage&#x27;s already done. Rejecting the push would be even better, making sure the confidential data never goes public. AIUI dark-hatted people are scraping the real-time push feeds at Github for credentials and botting up exploits, so even a few seconds could be a big enough window for damage to be done.<p>An example of this happening on AWS just like you mentioned: <a href="https:&#x2F;&#x2F;www.humankode.com&#x2F;security&#x2F;how-a-bug-in-visual-studio-2015-exposed-my-source-code-on-github-and-cost-me-6500-in-a-few-hours" rel="nofollow">https:&#x2F;&#x2F;www.humankode.com&#x2F;security&#x2F;how-a-bug-in-visual-studi...</a>