I wrote Securelog to scan and scrub it. It predicts leaks in repos, logs, and inputs before they hit prod. I caught it in CI/CD and dodged a mess.
How do you spot this stuff early? Try it out: securelog.com