Access secrets detection is no longer optional. Codebases hold tokens, passwords, API keys, database credentials, and certificates—scattered in commits, pipelines, and config files. Even small teams deploy with dozens of secrets hidden in plain sight. Attackers know this. They scan public repos, logs, and even cached CI artifacts. The