secret-rotation

## What problem does it solve? Validate secret storage practices and rotation policies to prevent leaked credentials and ensure compliant secret lifecycle management across a codebase.

## Core Features & Use Cases

• Discover hardcoded secrets and insecure configurations in source code, config files, and deployment manifests.
• Assess secret manager usage (Vault, AWS Secrets Manager, etc.) and verify that secrets are referenced securely, not embedded.
• Evaluate rotation schedules and automation, generating remediation steps and improvement recommendations.
• Use Case: Audit a repository to identify exposed credentials and verify rotation plans before deployment.

### Quick Start Run a scan against a target path to detect secrets, validate rotation configuration, and produce a remediation report. Example: secret-rotation --path ./my-project --output secret-rotation-report.md