Accidentally shared .git folder

Question

I've accidentally emailed my .git folder to someone.

Would they be able to git pull and clone without the ssh key, which is stored in another dir?

Answer 1

By virtue of sending along your .git folder, you've already sent your entire repository. This means, if they're truly wanted to, they could extract your history from that alone.

This doesn't mean that they can publish any of the changes or pull anything else down. GitHub would still require them to have the necessary credentials for the repository.