[lucaspiller]

And they usually commit passwords, private keys, etc too.

(From my prior experience working for a publicly traded US company)

[walterbell]

Blackduck should offer an inline git-commit code scrubbing proxy.