> The fact that Amazon has paid engineers to write a bot that scans for API keys suggests that most people aren't that careful The fact that GitHub has not pai

> The fact that Amazon has paid engineers to write a bot that scans for API keys suggests that most people aren't that careful The fact that GitHub has not paid engineers to write a bot that scans for API keys, RSA keys, and other common credentials mistakenly committed and dropping the files from UI view / search indices without notification and explicit permission surprises me a lot more. The company seems to be full of great engineers and UI people; doing something like this would vastly improve the UX of developers beginning to use the platform, and would likely not get in the way of seasoned ones.