I absolutely agree. Most of the negative comments on here are nothing more than apologists for incompetence. Like with all security research the solution is to expose the defect to the world. If people didn't want their passwords and keys exposed to the world then they shouldn't put them on public github for all the world to see.

It would be more helpful though if such a search engine could auto create an issue on github when exposed secrets come up in a search result.

Most of the data on there is not meant to be public. It's just a tool to abuse people's ignorance, disguised as a "research tool".