Yep. Use free tools like gitguardian, gitleaks, etc. and run them in pre-commit hooks. Makes it a lot easier to catch.

And if you leak one by accident, change it immediately. There are bots trolling sites and repos for this information.