> The article author could have avoided a lot of headache if he simply did not check in secrets into any source control system. FTFY It baffles me that people

> The article author could have avoided a lot of headache if he simply did not check in secrets into any source control system. FTFY It baffles me that people actually do this. Passwords and secrets DO NOT BELONG THERE. Even your 'if he simply checked the repo' statement is in my view completely crazy. No you should not have to worry about that, because that should not be there at all. Leaking your source-code should not result in a system-breach at any point.