I worked for a client a few months back that used to hardcode all their AWS secret keys.

Selecting their organization and doing an search for SECRET_KEY = was always popcorn fun.