They use tools like Jercretz and TruffleHog to automate the search for plaintext keys, secrets, and passwords across code repositories.