I read it a bit differently. I don't think they store their credentials directly in their source code repository. I think they are saying they have a separate

I read it a bit differently. I don't think they store their credentials directly in their source code repository. I think they are saying they have a separate repository specifically for credentials. It seems like a bit of a strange way to manage sensitive information, but not really any worse then a lot of other things I've seen.