Raise awareness that developers need to stop doing this.
It has done a lot of good though even though I prefer something like project zero where vendors a given some limited time before the information gets disclosed.
As for this, I'm afraid one of the first results will be that the repo services shuts down the firehose access, which I think is bad. (I think I can see a number of other ways to improve the security that would work better than that.)
The cat is already out and information is contagious / wants to be free.
Or really anything other than decreasing the barrier between would-be attackers and exposed secrets and then publicizing them on a website with very high viewership.
The HN community is better than many online communities, but it's still very large and this post is almost guaranteed to lead to someone using credentials found on this website.