$ErrorActionPreference = "Continue"

Write-Host "Credential terms"
rg -n --hidden -i "(password|passwd|secret|token|api[_-]?key|apikey|bearer|authorization|credential|private key|smtp_pass|postmark)" . -g "!.git/**"

Write-Host "Email addresses"
rg -n --hidden "([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,})" . -g "!.git/**"

Write-Host "Paths, IPs, exports"
rg -n --hidden "((?:[0-9]{1,3}\.){3}[0-9]{1,3}|/mnt/c/Users|C:\\Users|/home/|/srv/data|/opt/|\.jsonl|\.csv|\.sql)" . -g "!.git/**"

Write-Host "Generated/data files tracked"
git ls-files | rg "(__pycache__|\.pyc$|\.env$|\.csv$|\.jsonl$|\.sql$|\.tar\.gz$|\.pem$|id_rsa|id_ed25519)"