redact-secret · Evaluation · Qualification
github-token
Taxonomy families: github · Classic personal access token; github · OAuth access token; github · GitHub App user-to-server token; github · GitHub App server-to-server token; github · OAuth refresh token. The status and its evidence, then what each scanner recorded per population.
Support status of the product
Provisional The product’s qualification, derived by the adapter. It is not a scanner observation.
- Route
- No route
- Evidence tier
- T1
- Evidence basis
- provider-documented
- Contract tier
- T1
- Fixture profile claimed
- stable-documented
- Fixture profile cells met
- arrival-provisional, stable-documented, stable-empirical, context-constrained-empirical
Why the status is not stable
- differential.unresolvedContractDisagreements: 23 > 0 — An unresolved disagreement with a peer scanner over what the provider contract requires means the contract itself may be wrong; stable requires it settled.
Evidence the status was judged on
Floors and fixture-profile cells are read from public-evidence-snapshot alone; a gate reads each gate-bearing population on its own.
- Scored cases
- 198
- Positive cases
- 131
- Positive context axes
- 44
- Benign controls
- 21
- Benign control axes
- 9
- Twin pairs
- 46
- Metamorphic critical failures
- 0
- Mutation unresolved critical
- 0
- Differential unresolved disagreements
- 23
Zero-tolerance gates
The classifier receives the worst gate-bearing population, never a sum. Each population is shown on its own.
| Population | Twin pairs that did not discriminate | Benign controls flagged |
|---|---|---|
public-evidence-snapshot | 0 of 46 | 0 of 21 |
regression-corpus | No pair | No control |
Scanner observations
What each scanner recorded for this family, per population. These are counts and carry no support status; a case that is pending or not measured is not a miss.
| Population | Scanner | Cases | Positive spans | Span outcomes | Leaked | Benign controls flagged | Twin pairs discriminated | Pending / not measured |
|---|---|---|---|---|---|---|---|---|
policy-corpuspolicy route | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
policy-corpuspolicy route | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
public-evidence-snapshotfloors and gates | flare-redact | 201 | 145 | EXACT 135 · COVERED 1 · OVERBROAD 3 · MISS 6 | 6 spans · 3,104 bytes | 0 of 21 | 46 of 46 | 3 pending |
public-evidence-snapshotfloors and gates | gitleaks | 201 | 145 | EXACT 91 · MISS 54 | 54 spans · 5,984 bytes | 0 of 21 | 46 of 46 | 3 pending |
public-evidence-snapshotfloors and gates | redact-secret | 201 | 145 | EXACT 145 | 0 spans · 0 bytes | 0 of 21 | 46 of 46 | 3 pending |
public-evidence-snapshotfloors and gates | trufflehog | 201 | 145 | EXACT 71 · MISS 74 | 74 spans · 6,784 bytes | 0 of 21 | 42 of 46 | 3 pending |
regression-corpusgates | flare-redact | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | gitleaks | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | redact-secret | 0 | No case | No case in this population | No positive span | No control | No pair | None |
regression-corpusgates | trufflehog | 0 | No case | No case in this population | No positive span | No control | No pair | None |
Cases
Each case of this family, per population, with what every scanner recorded for it and the case’s own facts.