trufflesecurity/trufflehog is a powerful open-source tool that helps software engineers scan for and find sensitive information like API keys