Secrets found in self‐hosted, private GitLab instances and Docker registries were 3 to 4 times more likely to be valid.