If you confirm a secret is real, you need to remove the secret from your branch, from all the commits it appears in, before pushing again.