Secrets Guard

Scan for exposed secrets:

1. Hardcoded Secrets in Code

Search for patterns:

• API keys: [A-Za-z0-9_-]{20,}
• JWT secrets: secret, jwt_secret, TOKEN
• Database URLs with passwords
• AWS keys: AKIA[0-9A-Z]{16}
• Private keys: -----BEGIN.*PRIVATE KEY-----

2. Environment Files

• .env committed to git (should be in .gitignore)
• .env.example containing real values
• docker-compose.yml with hardcoded passwords