531
Developer posts secret key on GitHub, loses $40K in 2 minutes
(cointelegraph.com)
This is a most excellent place for technology news and articles.
I like your CI plan but maybe they just needed some sort of sane policy. Like never commit plaintext keys to any repo. Never work with a $40k key in a new project under development. Never convert a private repo to public.