Data Protection
Secret Scanning
Also: credential scanning
Automatically searching code, logs and other text for credentials such as API keys and private keys.
In more detail
Scanners match known key formats and high-entropy strings. Run them on commits, in CI and on agent output, so a leaked key is caught before it spreads. A hit should trigger rotation, not just deletion, since the secret may already be copied.