Scan a codebase for API keys and passwords