Just a reminder that even if you managed to amend those commits and force-push, the commits would still exist and will be addressable given the hash is known.
I am fully aware of that. Rewriting commits of code already pushed to production with container images, etc., is just crazy. And GitHub charges an arm and a leg for Advanced Security. And it ignored my pre-commit Git hooks, which include GitLeaks.