https://github.com/sirwart/ripsecrets

alternatives: detect-secrets, gitleaks, trufflehog