Skip to content
GKgkml.dev
← All scenarios
GitAWShard~18 min

The credential that was deleted in the very next commit

A developer committed a file containing a live AWS access key pair to a repository, noticed within four minutes, deleted the file, and committed the deletion. Both commits were pushed to a private GitHub repository with eight collaborators.

They add the path to `.gitignore` and report it resolved. GitHub's secret scanning has not alerted. The key belongs to an IAM user with S3 read access to a production bucket.

Rank what has to happen, in order, and justify the ordering. Then tell me what is wrong with the developer's mental model of what deleting a file in Git accomplishes.

Choose how you want to be interrogated

The same case under two modes is two different exercises. If you are unsure, RCA drill is the one that trains root-cause analysis most directly.

Before you start: you begin locked. The Mentor will give you nothing — not a nudge, not a category — until you state a specific position and the mechanism you think produces it. Four genuine attempts unlock the resolution. There is no shortcut.