As the person on call for exactly that sort of problem, it saddens me that people still push secrets to git at all. Every gitops platform on the planet support

As the person on call for exactly that sort of problem, it saddens me that people still push secrets to git at all. Every gitops platform on the planet supports not pushing secrets to version control. There is no valid reason to have credentials inside a git repo ever. If the repo itself is what's secret, you should have known the risk when you pushed it to someone else's server. There is no excuse when gitlab is free and a docker container away.