What is missing or needs to be updated?
The static analysis section (Rule #9 ) is missing specific options for secrets detection.
It's a growing concern to mitigate supply chains attacks and needs specialized tools.
How should this be resolved?
Add a list with a few secrets detection tools
