@Crocmagnon I can recommend the "pass" utility https://www.passwordstore.org/ that will help you keep your stuff encrypted using gpg, having only the encrypted files in your git repo.

How do you do it now, are you using some GitHub-specific way of handling secrets?