GhostAction now scans your git history for secrets. I deleted 30 keys and recovered all 30.

GitGuardian says GhostAction's new payload scans full git history and pairs AWS IDs with secrets from 2 lines of context. I planted 30 credential pairs, deleted them, and recovered 30/30 from history — pairing worked for only 15/30.