GitHub now scans for secret leaks in developer workflows

The new tool aims to protect developers against API and token exposure.