Google already monitors Github repositories and notify's if a Firebase configuration file was accidentally committed.

The same could be done for credit cards, passwords etc, not sure it's Github's responsibility though...