How bad can it git? Characterizing secret leakage in public GitHub repositories

Link: How bad can it git? Characterizing secret leakage in public GitHub repositories: "Everyone knows by now to never put secret keys in code, right?"