saw this and got paranoid about my own repos. checked the commit history and sure enough my personal email was plastered across years of commits. spent a couple hours hacking together a scanner — github.com/vexorkai/git-shield. runs locally, tells you which repos are leaking your email and how to fix it going forward. it's my own project fwiw, nothing fancy but it does the job.