[muhammadn]

Nothing new. You can find .env files that has database passwords, secrets all over by typing "filetype:env" in google

[ellisv]

Personally I like "filetype:id_rsa"

[Someone]

I know it wouldn’t fix the leak, but files like those would be extremely simple for Google to filter out of their index.

For github/gitlab/etc links, they probably also could inform project owners about the problem.