19
GitHub Copilot, Amazon Code Whisperer emit people's API keys
(www.theregister.com)
A community for all things related to application security.
I guess it depends on who should have access to them, but at the company I work for, we keep all the private config files backed up in a secure place (local network server, encrypted cloud storage, whatever) and the config files are added to .gitignore. This is especially important for databases with personal info.