# Scorecard Rule: GitHub Secrets

A Datadog Lambda that evaluates if services have GitHub secrets exposure issues.

## Overview

This lambda:
1.  Fetches all services from the Datadog Software Catalog.
2.  Checks for GitHub secrets exposure.
3.  Updates the corresponding Datadog Scorecard Rule with `PASS` or `FAIL`.

## Configuration

*   **`DD_SCORECARD_RULE_ID`**: Env var
*   **`DD_API_KEY`**: Secret (qa, prod) or env var (dev)
*   **`DD_APP_KEY`**: Secret (qa, prod) or env var (dev)

## Development

Uses `uv` for dependency management and `ruff` for linting.

```bash
# Build and Test
make lint_and_test

# Run Locally
docker-compose up function
```