There are a lot of code repository scanners out there, but I recently used TruffleHog to scan our GitHub repos due to its simplicity in setup and execution. TruffleHog is an open-source security tool that scans code repositories for hardcoded secrets, such as API keys, passwords, and private encryption keys.