To help secure the open source supply chain, we’re scanning for package registry credentials—now including PyPI and RubyGems secrets!
https://github.blog/2021-06-08-securing-open-source-supply-chain-scanning-package-registry-credentials/

https://twitter.com/github/status/1402318007339257860