BFG Repo-Cleaner (https://rtyley.github.io/bfg-repo-cleaner/) scans the history for secrets and removes them.