ellisv parent
Personally I like "filetype:id_rsa"
I know it wouldn’t fix the leak, but files like those would be extremely simple for Google to filter out of their index.
For github/gitlab/etc links, they probably also could inform project owners about the problem.