@Crocmagnon ok I see, in this case I think using something like pass (or ansible-vault or something of that type) would have two advantages for you:

(1) You become independent from GitHub (Microsoft). If GitHub disappears or displeases you, you can just move to different hosting of your git repos without changing anything regarding your secrets.

(2) Your secrets become more secret. After all, something is not so secret if it is known by Microsoft 😉