Speaking of credentials, you can use https://github.com/zricethezav/gitleaks to check if your repos contain any secrets