I'm building Vault++ to solve this exact problem.

It's heavily inspired by Trufflehog, having pre-baked detectors with verification against its live API. The plot twist is that unlike Trufflehog, it can detect secrets that it doesn't have the detector yet. How? Instead of relying on high entropy strings (which tends to give A LOT of false positives), it uses a context aware scanner to extract potential secrets and check its presence in the vault (by comparing its hashes).

Please let me know if this is something that can help solve your problem.