Add gitleaks to your ddev instance and check for secrets on startup. - View it on GitHub