Re:Repositories held for ransom by using valid credentials
by ishitatsuyuki on Saturday May 04, 2019 @07:09AM
(#19825733)
You can access unreachable refs by means of Pull Request force pushes; even if you force push, you can still view the state at the original commit given that you have the hash of that. That plus some internal knowing of Git allows the author to guess how GitHub works this way.
As on GitLab, it's open source, so you can easily check that.
As on GitLab, it's open source, so you can easily check that.