If I'm at all worried about having accidentally committed secrets in the past, I usually create a new repo for the public release with a fresh git init.