Of course an open source harness can put secrets into a commit.

Humans do it!