You can use this for a blog post, LinkedIn article, YouTube script, or security awareness training.

Use GitHub's Code Search (Limitations)

GitHub’s regular search will find password.txt in the current branch. But what if you deleted it in a later commit? The file may still exist in the Git history. Use:

RockYou.txt: A legendary list originating from a 2009 data breach, often used as a standard "dictionary" for password cracking practice.

Here are advanced search queries to locate exposed secrets (use only on your own repos or with permission):