secrets-scanlisted

# Secrets Scan <phase name="1-setup"> ## Phase 1: Setup **EXECUTE** using Bash tool: ```bash git rev-parse --is-inside-work-tree 2>/dev/null || { echo "ERROR: Not git repo"; exit 1; } REPO=$(git rev-parse --show-toplevel) && cd "$REPO" TS=$(date +%Y%m%d-%H%M%S) DIR="$REPO/.claude/reports/${TS}_secrets-scan" && mkdir -p "$DIR" git ls-files \ | grep -viE '\.(png|jpe?g|gif|bmp|ico|svgz|webp|tiff?|pdf|psd|ai|eot|ttf|otf|woff2?|mp[34]|m4a|wav|ogg|avi|mov|mkv|webm|zip|tar|t?gz|tgz|bz2|xz|7z|rar|jar|war|ear|class|pyc|pyo|so|dylib|dll|exe|bin|dat|db|sqlite3?|wasm|pack|idx|min\.js|min\.css|map)$' \ | grep -vE '(^|/)(node_modules|vendor|third_party|\.venv|venv|dist|build|target|out|coverage|__pycache__|\.next|\.nuxt|\.gradle|Pods|bower_components)/' \ | grep -vE '(^|/)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|poetry\.lock|Cargo\.lock|composer\.lock|Gemfile\.lock|go\.sum|Pipfile\.lock|gradle\.lockfile)$' \ > "$DIR/files.txt" || true echo "DIR=$DIR|REPO=$REPO|TS=$TS|TOTAL=$(wc -l < "$DIR/files.txt" | tr -d ' ')" cat "$DIR/files.txt" ``` > **STOP if ERROR** — must run in git repository. </phase> <phase name="2-parallel-scan"> ## Phase 2: Split & Launch 10 Agents 1. Parse file list → split into 10 chunks (`ceil(total/10)`) 2. Send 10 Task calls in parallel (single message) Config: `Task(subagent_type="general-purpose", model="haiku", description="Agent N/10 scan")` ### Delegation A big task handed to one agent = an agent gone for an hour: you cannot observe it, cann