pub fn scan_for_leaks(
paths: &[&str],
secrets: &BTreeMap<String, String>,
min_length: usize,
) -> Vec<ScanFinding>Expand description
Scan files under the given paths for leaked secret values.
Skips hidden directories, target/, node_modules/, .murk files,
.lock files, and binary/unreadable files. Values shorter than
min_length are skipped to reduce false positives.