Github+Heroku Configuring Sensitive Data

I want to deploy a python flask app to Heroku, but also be able to have the code on github. The problem is that my local repo contains a file with sensitive credentials. How can I deploy the repo with the credentials to heroku, and yet prevent the sensitive data from being exposed on github?