Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab