Neat idea. This could be refined by adding a git hook that runs (rip)grep on the entire codebase and fails if anything is found upon commit may accomplish a similar result and stop the code from being committed entirely. Requires a bit more setup work on de developers end, though.

KeepassXC is multiplatform. (Also: KeepassDX is quite nice as an an Android app for Keepass databases.)