source
So you or a team member has committed some credentials into the codebase, what do we do now? You can use a tool called BFG to clean up your repository and remove any credentials from all the refs in git history.
Deleting sensitive information from GitHub repository
