idea: prevent publishing

[azu]

Initial idea is that secretlint prevent to commit credentials.
We need to think how to prevent publishing credentials.

For example, npm publish expose data that is not under tha git.
These exposed data is controlled by files and .gitignore.

We want to add check step by secretlint before publishing

Example: npm publish

1. npm pack
2. check files by secretlint
3. npm publish

Can we add the check step into npm publish?

So, we need to think that secretlint integration for non-git.