How can I find out who force pushed in git?

Someone used git push --force but I can't tell who did it from the logs. Is there a way to identify the culprit?

Solution 1:

Update Nov. 2018: if you are pushing to a centralized Git repository hosting service like GitHub, then you would be able to see who has forced push your branch. But only because GitHub has chosen to surface that event in its GUI.

See more at "Find committer of a force push on GitHub".

Original answer 2013:

As I mention in "Distributed Version Control Systems and the Enterprise - a Good mix?", there is no authorization or authentication with Git alone.

You need an authorization layer like Gitolite in order to keep track of who does what. (Gitolite comes with its own audit trail mechanism).

But if your repo is accessible through file (or local) protocol, then you cannot know who forced pushed.

^{(from motivationalgenerator.com, and wikipedia)}

Solution 2:

If you are lucky enough to use GitHub or GitHub for Enterprise, you can have a look to the events REST API and check who/when Pushed/Dropped to the remote refs, example for log4j:

https://api.github.com/repos/apache/log4j/events