* Detect any secrets like AWS keys, passwords/email ids Etc. * CLI and config file support. * Secrets scanner should be purely nodejs and not require python/other deps in this template. * Gitignore should be honored when checking files to scan for secrets. Can use this lib: https://www.npmjs.com/package/gitignore-parser * Builds should fail on commit & push if any secrets are detected. * Secrets scan should be a part of pull request validation step to.