By default, where will secret scanning look in a repository in order to execute its job? Each correct answer presents part of the solution. (Choose three.)