If even github accidentally pushes their private key to a public github repo, you need to treat such an event as statistically inevitable as bad weather and have a plan https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/