detect-secrets does not detect secrets in subdirectories