Coderx838/Gitrisk ? reverse-engineered prompt

Build me a Python command line tool that scans a Git repository on my local machine and tells me what looks risky before I push it anywhere. It should be privacy first, work offline, and never upload code or require an account. I want it to check for leaked secrets, hidden credentials in Git history, dangerous or outdated dependencies using a local vulnerability database, missing security files like a SECURITY.md, risky .gitignore settings, exposed .env files, unsafe GitHub Actions workflows, hardcoded connection strings, and other obvious repo health problems.

Please make it easy to run on a folder, show a clean readable report in the terminal, and also support JSON and SARIF output for CI or code scanning tools. If it finds safe issues, I want an optional fix mode that can apply simple changes or preview them first. Look up current docs online if you need to.