If the criminals can create a bot to scan for AWS keys, I wonder if github can't create a plugin to detect the same and warn the committer or maybe limit access to this data to original committer only. It won't be 100% but I bet the bots aren't 100% either, so if it covers most of the cases it would still be useful.
Or maybe just have a script on local github pre-commit hook?
Or maybe just have a script on local github pre-commit hook?