feat: add sealed Containerfile (Nix-retirement escape hatch) #45
secret-scanner.yml
on: pull_request
scan
/
gitleaks
4s
scan
/
rust-secrets
5s
scan
/
shell-secrets
5s