Github itself has a product like this. It's better than the pre-commit hook approach since developers can turn that off (or never install it in the first place

Github itself has a product like this. It's better than the pre-commit hook approach since developers can turn that off (or never install it in the first place if you don't roll it out via MDM), and this centralized approach can't be bypassed. But, even if you're on their enterprise plan it's still an additional addon (and expensive): https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/about-secret-scanning#about-secret-scanning-for-advanced-security https://docs.github.com/en/enterprise-cloud@latest/code-secu...