intruder-io/gitreaper ? reverse-engineered prompt

Build me a Go command line tool that scans exposed .git directories on live websites and looks for secrets in the repository history.

It should be able to take one URL, a list of URLs from a file, or URLs piped in from stdin, then normalise the target so people can pass either the site root or the .git path. For each repo, it should try to reconstruct the git history from HTTP, scan blobs for secret like values, and report matches with the repo URL, commit hash, file path, line number, and the matched line. I want both plain text output and NDJSON output for piping into other tools.

Please include sensible defaults for common secret patterns, some false positive filtering for placeholders and obvious template values, and support scanning many targets at once with progress feedback. It would also be useful to have a mode that dumps the current working tree to disk. Keep it simple to run from the command line, and if you need to check any current docs or patterns online, go ahead and look them up.