divekit history on Divekit

divekit history redact

Mon, 01 Jan 0001 00:00:00 +0000

Synopsis

Replace the literal strings of a file in the whole history of the repositories of a distribution, where the surrounding files must remain. Values are literal, never patterns. They are never printed, logged or stored: the run file keeps salted fingerprints only, so a resume needs the original file again until the rewrite is verified.

The steps are those of history remove. Matching is exact and case sensitive and covers file content only: commit messages, ref names and encoded variants of a value are not touched.

divekit history remove

Mon, 01 Jan 0001 00:00:00 +0000

Synopsis

Remove every historical blob version of one or more complete files from the repositories of a distribution, also where the path is already absent from the current tree.

WHAT HAPPENS:

Mirrors every selected repository and records branches, tags, the blob versions at the paths and the other paths that reuse those blobs
Shows the plan and asks for the destructive confirmation
Makes affected projects private, archives them and schedules GitLab’s server-side rewrite
Verifies the result from a fresh mirror, runs housekeeping, waits GitLab’s 30 minute grace interval, prunes and verifies that the blobs are gone
Unarchives projects that were not archived before

–dry-run stops after the inventory and changes nothing. The run is resumable: an interruption prints the run ID and the exact resume command.

divekit history resume

Mon, 01 Jan 0001 00:00:00 +0000

Synopsis

Continue a run from the state each repository recorded. Completed destructive steps are not repeated. A repository that was only planned asks for the confirmation again, and a redact run needs –literal-file until the rewrite is verified.

Usage

divekit history resume <run-id> [flags]

Examples

divekit history resume 20261021-1a2b3c -d ST2M4

Flags

-d, --distribution string Distribution name
 --literal-file string The literal file of the original redact run, needed until the rewrite is verified
 -r, --remote string Remote repository URL (e.g. GitLab instance)
 -t, --token string GitLab token or token file path (file:///...)

Inherited Flags

-l, --loglevel string log level (debug, info, warn, error, fatal) (default "info")
 --no-index skip project index update
 --non-interactive run in non-interactive mode (fails if interactive input is required)
 -y, --yes assume yes/default for all prompts (non-interactive with automatic defaults)

Parent Command

divekit history