[rozab]

I thought github had hooks for this kind of thing now? I remember it caught a private key I tried to push to a similar django repo (not for a prod site or anything), and that was about 2 years ago

[dewey]

I think this only works for secret keys that have a certain pattern like AWS keys.