I built a live secret scanner for VS Code (and why CI scanning is too late)

We've all done it: pasted an API key into a file "just to test," then a week later it's in your git history, a screenshot, or a livestream. Most secret scanners — gitleaks, trufflehog — run in CI, aft...