#!/usr/bin/env bash set -euo pipefail scripts/scan-secrets.sh