Your PR scan is missing half the problem (opens in new tab)

Most secret detection programs catch secrets at merge. Here's what happens to everything before the pull request opens.