QA: Consider secret scanning
To prevent token and other secrets leaking, we might consider deploying secret scanning tools. Here's two that we might consider:
- trufflehog -13.2k stars on github
- gitleaks - 14.6k stars on github
There are plenty others, too.