Gitleaks
Gitleaks is an open secret scanner for Git repositories, directories, and standard input, with pre-commit and CI workflows.
Why use it
API keys, cloud credentials, and private tokens can be caught before entering shared history.
Where it fits
Use testing, performance, accessibility, and diagnostic tools to remove problems players will notice.
What to check
Pattern detection has false positives and negatives, and committed secrets must be rotated rather than merely removed.