For the curious, the proper way to do this is to have a wiki page with links to entries in, e.g., AWS Secrets Manager, which has authentication & authorization.
https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
#CISA #AWS #GovCloud #CyberSecurity #DataLeak #InfoSec #GitHub #CloudSecurity #DevSecOps