Note that this is not just a matter of "don't upload your production credentials to GitHub." Don't upload your personal or test ones either, because there's a good chance that they're correlated, or that you'll make a mistake. And there's a good chance some of this information will sneak into your config files. Just don't do it.