change the password or rotate the API key 2. Remove the file from tracking: ```bash git rm --cached secrets.env echo "secrets.env" >> .gitignore git add .gitignore git commit -m "Remove secrets.env from tracking" git push ``` 3. For truly sensitive data, look into `git filter-branch` or the `BFG Rep