You can configure GitLab to reject the push if you comitted secrets, based on regex marching with common formats for tokens.