The open source tool tjactions/changed-files searched for sensitive information in the CI process with GitHub Actions and saved it in the build log.