DevOps

Secret Scanning in CI: What Pre-Commit, Pull Request, and Main Branch Each Actually Catch

A teammate pastes an AWS access key into a PR comment to "debug quickly." Another commits .env.production because .gitignore was wrong on a new micr…