GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties