531
Developer posts secret key on GitHub, loses $40K in 2 minutes
(cointelegraph.com)
This is a most excellent place for technology news and articles.
I think you really need the project specific gitignore as well, to make sure any other contributor that joins by default has the same protections in place.