8.37`.gitignore` isn't secret management

A common mistake:

secret.properties

added to .gitignore.

That's better than intentionally committing it, but:

local plaintext file

can still:

be backed up
be emailed
be copied
be accidentally committed
sit on developer laptops

Enterprise design should use real secret controls.