The Indian Government should have asked Github for their "Secret Scanning" service (https://docs.github.com/en/code-security/secret-security/abo...).

That would have prevented the author just randomly stumbling on the credentials.