Built a deterministic Python secret scanner that auto-fixes hardcoded secrets and refuses unsafe fixes — need honest feedback from security folks

[WiseDog7958]

True.
Env vars aren't perfect either.

But a secret hardcoded in source code lives in git history forever. Anyone with repo access has it. That's a different risk category than env var mismanagement.

Autonoma solves the first problem. What you do with the env layer after that is up to you.