Evaluation Qualification crates-io-trusted-publishing-token Cases redact-secret · Evaluation · Qualification
Cases of crates-io-trusted-publishing-token Every case the populations hold for this detector family, with what each scanner recorded.
What these rows are
A row is one case of one population; the same id in two populations is two rows, and no figure is a sum across populations or scanners. A scanner’s word is what its run artifact recorded. The evidence class is the artifact’s own label for the case and is not a support status. Pending and not measured are not misses.
Evidence credential-evidence · snapshot-2026.10.06.4
Corpus digest sha256:2319e44084d4
Semantic digest sha256:4bec6e539482
Run class public Cases of public-evidence-snapshot Case Kind Tier Group Evidence class (the artifact’s label) flare-redact gitleaks redact-secret trufflehog crates-io--crates-io-trusted-publishing-token-actions-logPath crates-io/crates-io-trusted-publishing-token-actions-log/crates-io-trusted-publishing-token-actions-log.logCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 143 to 182 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-bare-prosePath crates-io/crates-io-trusted-publishing-token-bare-prose/crates-io-trusted-publishing-token-bare-prose.mdCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 82 to 121 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS MISS EXACT MISS must-redact T1 documented-format-literal provider-documented OVERBROAD MISS EXACT MISS crates-io--crates-io-trusted-publishing-token-body-31-twinPath crates-io/crates-io-trusted-publishing-token-body-31-twin/crates-io-trusted-publishing-token-body-31-twin.envCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-dotenvTwin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported must-not-flag T1 wrong-length provider-documented Not flagged Not flagged · co-detected Not flagged · co-detected Not flagged crates-io--crates-io-trusted-publishing-token-body-33-twinPath crates-io/crates-io-trusted-publishing-token-body-33-twin/crates-io-trusted-publishing-token-body-33-twin.shCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-exportTwin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported must-not-flag T1 wrong-length provider-documented Not flagged Not flagged · co-detected Not flagged · co-detected Not flagged crates-io--crates-io-trusted-publishing-token-chat-pastePath crates-io/crates-io-trusted-publishing-token-chat-paste/crates-io-trusted-publishing-token-chat-paste.txtCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 44 to 83 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS MISS EXACT MISS crates-io--crates-io-trusted-publishing-token-check-mismatch-envPath crates-io/crates-io-trusted-publishing-token-check-mismatch-env/crates-io-trusted-publishing-token-check-mismatch-env.envCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 51 to 90 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-check-mismatch-logPath crates-io/crates-io-trusted-publishing-token-check-mismatch-log/crates-io-trusted-publishing-token-check-mismatch-log.logCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 36 to 75 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS MISS EXACT MISS crates-io--crates-io-trusted-publishing-token-dotenvPath crates-io/crates-io-trusted-publishing-token-dotenv/crates-io-trusted-publishing-token-dotenv.envCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 28 to 67 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-ellipsis-placeholderPath crates-io/crates-io-trusted-publishing-token-ellipsis-placeholder/crates-io-trusted-publishing-token-ellipsis-placeholder.mdCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 documentation-placeholder project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-env-reference-referencePath crates-io/crates-io-trusted-publishing-token-env-reference-reference/crates-io-trusted-publishing-token-env-reference-reference.envCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 templated-reference project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-exportPath crates-io/crates-io-trusted-publishing-token-export/crates-io-trusted-publishing-token-export.shCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 29 to 68 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-github-env-exportPath crates-io/crates-io-trusted-publishing-token-github-env-export/crates-io-trusted-publishing-token-github-env-export.ymlCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 88 to 127 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-hyphen-in-body-twinPath crates-io/crates-io-trusted-publishing-token-hyphen-in-body-twin/crates-io-trusted-publishing-token-hyphen-in-body-twin.jsonCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-json-tokenTwin mutation alphabet Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T1 wrong-alphabet provider-documented Not flagged Not flagged · co-detected Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-hyphen-separator-twinPath crates-io/crates-io-trusted-publishing-token-hyphen-separator-twin/crates-io-trusted-publishing-token-hyphen-separator-twin.httpCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-x-api-key-headerTwin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported must-not-flag T1 prefix-near-miss provider-documented Not flagged Not flagged · co-detected Not flagged · co-detected Not flagged crates-io--crates-io-trusted-publishing-token-json-api-keyPath crates-io/crates-io-trusted-publishing-token-json-api-key/crates-io-trusted-publishing-token-json-api-key.jsonCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 16 to 55 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-json-tokenPath crates-io/crates-io-trusted-publishing-token-json-token/crates-io-trusted-publishing-token-json-token.jsonCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 14 to 53 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-leading-glue-twinPath crates-io/crates-io-trusted-publishing-token-leading-glue-twin/crates-io-trusted-publishing-token-leading-glue-twin.mdCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-bare-proseTwin mutation boundary Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 boundary-violation project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-prefix-at-eol-near-missPath crates-io/crates-io-trusted-publishing-token-prefix-at-eol-near-miss/crates-io-trusted-publishing-token-prefix-at-eol-near-miss.logCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T1 format-near-miss provider-documented Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-sdk-kwargPath crates-io/crates-io-trusted-publishing-token-sdk-kwarg/crates-io-trusted-publishing-token-sdk-kwarg.pyCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans secret 33 to 72 flare-redact 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 39 bytes · collateral 0 bytes · 0 findings reported must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-setting-name-public-idPath crates-io/crates-io-trusted-publishing-token-setting-name-public-id/crates-io-trusted-publishing-token-setting-name-public-id.tomlCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 public-identifier project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-step-output-referencePath crates-io/crates-io-trusted-publishing-token-step-output-reference/crates-io-trusted-publishing-token-step-output-reference.ymlCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 templated-reference project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-token-guidance-prosePath crates-io/crates-io-trusted-publishing-token-token-guidance-prose/crates-io-trusted-publishing-token-token-guidance-prose.mdCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 prose-mention project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-trailing-hyphen-twinPath crates-io/crates-io-trusted-publishing-token-trailing-hyphen-twin/crates-io-trusted-publishing-token-trailing-hyphen-twin.txtCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-chat-pasteTwin mutation boundary Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 boundary-violation project-policy Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-truncated-near-missPath crates-io/crates-io-trusted-publishing-token-truncated-near-miss/crates-io-trusted-publishing-token-truncated-near-miss.logCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T1 format-near-miss provider-documented Not flagged Not flagged Not flagged Not flagged crates-io--crates-io-trusted-publishing-token-uppercase-prefix-twinPath crates-io/crates-io-trusted-publishing-token-uppercase-prefix-twin/crates-io-trusted-publishing-token-uppercase-prefix-twin.httpCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of crates-io--crates-io-trusted-publishing-token-bearer-headerTwin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 1 finding reported · another detector also reported it gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported must-not-flag T1 prefix-near-miss provider-documented Not flagged · co-detected Not flagged Not flagged · co-detected Not flagged crates-io--crates-io-trusted-publishing-token-workflow-name-public-idPath crates-io/crates-io-trusted-publishing-token-workflow-name-public-id/crates-io-trusted-publishing-token-workflow-name-public-id.mdCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 public-identifier project-policy Not flagged Not flagged Not flagged Not flagged must-redact T1 documented-format-literal provider-documented MISS EXACT EXACT MISS crates-io--crates-io-trusted-publishing-token-x-run-placeholderPath crates-io/crates-io-trusted-publishing-token-x-run-placeholder/crates-io-trusted-publishing-token-x-run-placeholder.envCorpus family crates-io:trusted-publishing-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families crates-io-trusted-publishing-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported must-not-flag T3 documentation-placeholder project-policy Not flagged Not flagged Not flagged Not flagged
Back to crates-io-trusted-publishing-token