Secret-leak-scan-lite – scan repos for leaked credentials before you commit