7gzgn/dsh-leak-guard

Pre-publish credential audit: walks a directory tree and flags API keys, tokens, private keys, database connection strings and hard-coded passwords before you commit, publish or ship. Zero dependencies, fully offline, findings are redacted to the first six characters.