Part V · Adoption · Including three where you are right · p. 56–57
Twelve objections, answered honestly
Start here if you are evaluating this for a team. They will raise these before you finish your first sentence.
Then you have covered one of four layers, at the latest possible moment. CI catches secrets after they are committed and pushed — the credential is already in history. A pre-commit gate catches it before it exists anywhere durable. Keep your CI scanner; add the gate that runs earlier.