Rod at work wrote:
Secrets are in all our source code.
Well that is a problem! Perhaps you should find a solution for the older apps first. Updating only that part. Only then, and to be a consistent, new apps would use it in the same way. Not to give away a secret though - I doubt github can find all secrets. So you can probably find a way to obfuscate in the code. But that should be a stopgap.