If you're reading this, you may have found some credentials in scripts of previous commits by our engineer during building & testing the app (password to a ClickHouse instance and a GCP IAM key for bucket access) - Don't worry, These credentials are already invalidated before this repository is made public.
However, if by any chance, you may have found a new working set of credentials, please do not hesistate to send an email to security@clickhouse.com and let us know.
Thank you for taking your time and attempt to report the issue with us.