deepfence/SecretScanner ? reverse-engineered prompt

Build me a lightweight secret scanning tool that can look through container images and local file systems for things like passwords, API keys, tokens, AWS credentials, SSH keys, and other hard coded secrets.

I want it to run from the command line, scan either an image or a directory, and then output the results in JSON so it’s easy to review or plug into other tools. It should be able to use a rules based approach to detect a lot of common secret types, and work well in container and Kubernetes style environments.

Please make it practical for real world use, with clear scan results, a simple way to run it in Docker, and enough structure that it can be extended later with more rules or scan targets. If you need to check current best practices or docs while building it, go ahead and look them up online.