Secrets workflows

1 workflows for finding credentials and tokens where they should not be: public GitHub, archived HTTP responses, and similar leak surfaces. Use them when the question is “what did we leave behind,” not “is this host vulnerable.”