Catch leaked secrets before `git push`, with one stdlib Python file

Everyone has a story about an API key that landed in a public repo. Usually it is not carelessness: a...