Secret Scanning

Secret scanning is the automated detection of credentials, API keys, tokens, and other sensitive values that have been accidentally committed to code repositories, configuration files, or agent prompts. In AI development workflows, secret scanning should be applied to all repositories containing agent code, MCP server configurations, and prompt templates, as exposed credentials can give attackers immediate access to production systems.