Immediately revoke or rotate the secret (e.g., from AWS, GitHub, Stripe?

dashboard).

→ This prevents misuse.

Remove the secret from code:

git rm --cached path/to/file

git commit -m "Remove sensitive file"