&gt; The article author could have avoided a lot of headache if he simply <i>did not check in secrets into any source control system</i>.<p>FTFY<p>It baffles me that people actually do this. Passwords and secrets DO NOT BELONG THERE. Even your &#x27;if he simply checked the repo&#x27; statement is in my view completely crazy. No you should not have to worry about that, because that should not be there at all. Leaking your source-code should not result in a system-breach at any point.