You could have a git hook (even remote) that would check for pre-configured patterns and reject the push if it contains them. Quick google yielded this https:/

You could have a git hook (even remote) that would check for pre-configured patterns and reject the push if it contains them. Quick google yielded this https://github.com/awslabs/git-secrets https://github.com/awslabs/git-secrets