Scans repository files, commits and histories for hardcoded passwords, API keys and other secrets, helping security engineers and developers prevent credential leakage in source code.