GitHub private repos considered private-­ish

"We cram our secrets into git"

Or we don't and use OIDC.

https://docs.github.com/en/actions/deployment/security-harde...