Gitleaks tutorial: scan git history, block secrets with a pre-commit hook and gate pull requests in GitHub Actions. 12 steps, ...
Witness, an open source software supply chain tool, signs each build step and fails artifacts that break a signed policy.