pre-deploy security scanner from my last post, Beta Access - Want feedback

hey, following up on that post about building an agent security scanner, appreciate all the input on pre-deploy vs runtime checks etc. ended up building it, it's called shrine. cli tool, one command, scans your codebase + database for exposure before stuff hits production. what it does rn: catches leaked api keys (aws, stripe, openai, anthropic, github, etc) catches leaked .env files and secrets hiding in old git commits even if deleted actually proves your supabase RLS is broken instead of just guessing, tries a real anonymous read/write and shows the result flags public storage buckets and weak jwt setups optional sql injection testing, asks for confirmation first went with pre-deploy scanning first like a lot of you suggested, runtime/kill-switch stuff is a separate thing i wanna tackle later. still early, js/ts only for the deep code-aware scanning, one project at a time, no live dashboard yet. putting it out for beta testing while i get real feedback before calling it v1. if you're dealing with this stuff already, would genuinely love for you to try it and tell me what's missing or wrong