Though I'd assume they did more in depth investigations than just looking at the commit history, what with being a company that literally makes a living out of git.
That only works if you reverted the commits almost immediately after they are pushed. With a distributed system like Git, Horvath certainly would've noticed, and anyone who pulled before the revert would've known too.
> commit history, push log, and all issues and pull requests
A force push will still show up in the log. Issues and PRs aren't deletable, so that lends a bit of credibility to this. Sure, said engineer probably has access to erase the push log and delete the issues or PRs directly from the database, but parties involved would likely still have email notifications related to it.
Though I'd assume they did more in depth investigations than just looking at the commit history, what with being a company that literally makes a living out of git.