discover
Find secret-manager consumers in one repository:
1mellon discover
Scan a directory that contains multiple repositories:
1mellon discover --path ~/Developer
Use JSON for scripts or migration analysis:
1mellon discover --path ~/Developer --json
The report identifies these integration types:
- Local commands and package scripts
- GitHub Actions workflows
- Xcode Cloud post-clone scripts
- Cloudflare and Wrangler commands
The report includes file locations, project names, and environment names. It does not include command text, token values, or secret values.
Mellon ignores
.env files, dependencies, build output, archives, and files larger than 1 MB. The command does not change files or remote state.