CircleCI is certainly the more interesting target as they have access to numerous companies' source code.
How much do you think that is worth on the black market?
You might be able to find a few vulnerabilities... maybe some good ones, maybe some hard coded keys, but about that's all.
Having a companies code doesn't mean you can make a successful business out of it. Especially if they are already established as a major player.