[kawsper]

So how is that different, or better, than putting in the source?

[jacques_chester]

Different repos with different access credentials to create another layer of separation between secrets and source. Defence in depth.

[jordic]

You shouldn't put in your repo sensitiva data.