https://gitleaks.io/
https://github.com/gitleaks/gitleaks

alternatives: detect-secrets, ripsecrets, trufflehog