Scans the full git history on push, pull request and weekly, so a credential
that was committed and later removed is still detected. The scanner archive is
pinned by version and verified by SHA-256 before it runs, and matched values
are redacted so they never reach the CI log.
The layout here is theirs and the idea of scoring releases by named custom
formats is theirs; the content is not, and could not be -- their guides describe
movies and TV, where quality is a resolution and a bitrate over a runtime, and a
game release has neither. Borrowing the layout without saying so invites the
reading that this is their work, or a fork of it. It is neither, and the people
who did originate it should not have to guess which.