I Built a Tool to Catch Leaked API Keys — Then It Almost Missed One of Its Own

A tiny, zero-dependency Python CLI that catches hardcoded secrets, .env drift, and gitignore mistakes before you push — built after a real near-miss with a leaked GitHub token during its own development.

If this saves you from a leaked key someday, a ⭐ on GitHub helps other people find it too.