trufflesecurity / trufflehog Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live. security devops developer-tools