redact-secret · Evaluation · Qualification

Cases of github-token

Every case the populations hold for this detector family, with what each scanner recorded.

View public
Scanners flare-redact, gitleaks, redact-secret, trufflehog

What these rows are

A row is one case of one population; the same id in two populations is two rows, and no figure is a sum across populations or scanners. A scanner’s word is what its run artifact recorded. The evidence class is the artifact’s own label for the case and is not a support status. Pending and not measured are not misses.

public-evidence-snapshot

floors and gates · cases 151 to 200 of this population’s 201 in this scope

Evidence: credential-evidence · snapshot-2026.10.06.4
Corpus digest: sha256:2319e44084d4
Semantic digest: sha256:4bec6e539482
Run class: public

Cases of public-evidence-snapshot
Case	Kind	Tier	Group	Evidence class (the artifact’s label)	flare-redact	gitleaks	redact-secret	trufflehog
`github-actions-workflow-commands-authored--add-mask-literal-argument` Path `github-actions-workflow-commands-authored/add-mask-literal-argument/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 18 to 58 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-literal-credential-in-command-text	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--base-token` Path `github-actions-workflow-commands-authored/base-token/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 0 to 40 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-literal-credential-in-command-text	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--env-file-echo` Path `github-actions-workflow-commands-authored/env-file-echo/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 15 to 55 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-literal-credential-in-command-text	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--expression-in-environment-file-echo` Path `github-actions-workflow-commands-authored/expression-in-environment-file-echo/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T1	workflow-command-reference-and-masked-value-in-place-of-credential	provider-documented	Not flagged	Not flagged	Not flagged	Not flagged
`github-actions-workflow-commands-authored--multiline-record-eof-delimiter` Path `github-actions-workflow-commands-authored/multiline-record-eof-delimiter/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 14 to 54 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-file-multiline-record-value	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--multiline-record-guid-delimiter` Path `github-actions-workflow-commands-authored/multiline-record-guid-delimiter/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 47 to 87 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-file-multiline-record-value	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--multiline-record-written-by-brace-group` Path `github-actions-workflow-commands-authored/multiline-record-written-by-brace-group/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 33 to 73 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-file-multiline-record-value	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--output-file-echo` Path `github-actions-workflow-commands-authored/output-file-echo/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 12 to 52 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	workflow-command-literal-credential-in-command-text	provider-documented	EXACT	EXACT	EXACT	MISS
`github-actions-workflow-commands-authored--runner-mask-in-log-line` Path `github-actions-workflow-commands-authored/runner-mask-in-log-line/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T1	workflow-command-reference-and-masked-value-in-place-of-credential	provider-documented	Not flagged	Not flagged	Not flagged	Not flagged
`github-actions-workflow-commands-authored--unset-secret-expanded-to-empty-value` Path `github-actions-workflow-commands-authored/unset-secret-expanded-to-empty-value/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T1	workflow-command-reference-and-masked-value-in-place-of-credential	provider-documented	Not flagged	Not flagged	Not flagged	Not flagged
`github-actions-workflow-commands-authored--variable-reference-in-add-mask-and-output` Path `github-actions-workflow-commands-authored/variable-reference-in-add-mask-and-output/fixture.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T1	workflow-command-reference-and-masked-value-in-place-of-credential	provider-documented	Not flagged	Not flagged	Not flagged	Not flagged
`github-installation-token-authored--base-ids-json` Path `github-installation-token-authored/base-ids-json/base-ids-json.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	github-app-and-installation-ids-in-json	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`github-installation-token-authored--base-no-app-id` Path `github-installation-token-authored/base-no-app-id/base-no-app-id.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Pending: the case has no scored outcome yet. It is not a miss and not a pass. gitleaks Pending: the case has no scored outcome yet. It is not a miss and not a pass. redact-secret Pending: the case has no scored outcome yet. It is not a miss and not a pass. trufflehog Pending: the case has no scored outcome yet. It is not a miss and not a pass.	must-redact	T0	installation-token-without-app-id-segment	unresolved	Pending	Pending	Pending	Pending
`github-installation-token-authored--base-opaque` Path `github-installation-token-authored/base-opaque/base-opaque.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 0 to 40 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	opaque-installation-token-forty-characters-literal	provider-documented	EXACT	EXACT	EXACT	MISS
`github-installation-token-authored--base-prose-notation` Path `github-installation-token-authored/base-prose-notation/base-prose-notation.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	installation-token-notation-and-header-name-in-prose	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`github-installation-token-authored--base-stateless-a` Path `github-installation-token-authored/base-stateless-a/base-stateless-a.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 0 to 520 flare-redact 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--base-stateless-b` Path `github-installation-token-authored/base-stateless-b/base-stateless-b.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 0 to 512 flare-redact 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--mutation-incomplete-header-only` Path `github-installation-token-authored/mutation-incomplete-header-only/mutation-incomplete-header-only.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of `github-installation-token-authored--base-stateless-a` Twin mutation header-segment-only Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Pending: the case has no scored outcome yet. It is not a miss and not a pass. gitleaks Pending: the case has no scored outcome yet. It is not a miss and not a pass. redact-secret Pending: the case has no scored outcome yet. It is not a miss and not a pass. trufflehog Pending: the case has no scored outcome yet. It is not a miss and not a pass.	must-not-flag	T0	installation-token-with-incomplete-jwt-segments	unresolved	Pending	Pending	Pending	Pending
`github-installation-token-authored--mutation-incomplete-no-signature` Path `github-installation-token-authored/mutation-incomplete-no-signature/mutation-incomplete-no-signature.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of `github-installation-token-authored--base-stateless-a` Twin mutation dropped-signature-segment Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Pending: the case has no scored outcome yet. It is not a miss and not a pass. gitleaks Pending: the case has no scored outcome yet. It is not a miss and not a pass. redact-secret Pending: the case has no scored outcome yet. It is not a miss and not a pass. trufflehog Pending: the case has no scored outcome yet. It is not a miss and not a pass.	must-not-flag	T0	installation-token-with-incomplete-jwt-segments	unresolved	Pending	Pending	Pending	Pending
`github-installation-token-authored--projection-opaque-crlf` Path `github-installation-token-authored/projection-opaque-crlf/projection-opaque-crlf.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 37 to 77 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	opaque-installation-token-forty-characters-literal	provider-documented	EXACT	EXACT	EXACT	MISS
`github-installation-token-authored--projection-opaque-env` Path `github-installation-token-authored/projection-opaque-env/projection-opaque-env.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	opaque-installation-token-forty-characters-literal	provider-documented	EXACT	EXACT	EXACT	MISS
`github-installation-token-authored--projection-opaque-json` Path `github-installation-token-authored/projection-opaque-json/projection-opaque-json.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 10 to 50 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	opaque-installation-token-forty-characters-literal	provider-documented	EXACT	EXACT	EXACT	MISS
`github-installation-token-authored--projection-stateless-a-authorization` Path `github-installation-token-authored/projection-stateless-a-authorization/projection-stateless-a-authorization.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 22 to 542 flare-redact 1 span: OVERBROAD · leaked 0 bytes · collateral 7 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	OVERBROAD	MISS	EXACT	MISS
`github-installation-token-authored--projection-stateless-a-crlf` Path `github-installation-token-authored/projection-stateless-a-crlf/projection-stateless-a-crlf.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 37 to 557 flare-redact 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--projection-stateless-a-git-url` Path `github-installation-token-authored/projection-stateless-a-git-url/projection-stateless-a-git-url.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 33 to 553 flare-redact 1 span: OVERBROAD · leaked 0 bytes · collateral 24 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	OVERBROAD	MISS	EXACT	MISS
`github-installation-token-authored--projection-stateless-a-json` Path `github-installation-token-authored/projection-stateless-a-json/projection-stateless-a-json.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 10 to 530 flare-redact 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--projection-stateless-a-korean-emoji` Path `github-installation-token-authored/projection-stateless-a-korean-emoji/projection-stateless-a-korean-emoji.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 20 to 540 flare-redact 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 520 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--projection-stateless-b-env` Path `github-installation-token-authored/projection-stateless-b-env/projection-stateless-b-env.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 525 flare-redact 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 512 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	stateless-jwt-installation-token-literal	provider-documented	MISS	MISS	EXACT	MISS
`github-installation-token-authored--twin-body-35` Path `github-installation-token-authored/twin-body-35/twin-body-35.txt` Corpus family github:app-server-to-server-token Taxonomy Not recorded Targets None named Twin of `github-installation-token-authored--base-opaque` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	installation-token-body-shorter-than-documented-minimum	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`large-and-repeated-input-projections-generated--github-classic-pat-head-of-1mib` Path `large-and-repeated-input-projections-generated/github-classic-pat-head-of-1mib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-head-of-256kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-head-of-256kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-head-of-64kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-head-of-64kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-middle-of-1mib` Path `large-and-repeated-input-projections-generated/github-classic-pat-middle-of-1mib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 524,301 to 524,341 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-middle-of-256kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-middle-of-256kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 131,085 to 131,125 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-middle-of-64kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-middle-of-64kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 32,781 to 32,821 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-tail-of-1mib` Path `large-and-repeated-input-projections-generated/github-classic-pat-tail-of-1mib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 1,048,589 to 1,048,629 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-tail-of-256kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-tail-of-256kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 262,157 to 262,197 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-tail-of-64kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-tail-of-64kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 65,549 to 65,589 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	policy	T3	credential-after-long-input	project-policy	EXACT	MISS	EXACT	MISS
`large-and-repeated-input-projections-generated--github-classic-pat-three-occurrences-in-1mib` Path `large-and-repeated-input-projections-generated/github-classic-pat-three-occurrences-in-1mib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 524,355 to 524,395; secret 1,048,697 to 1,048,737 flare-redact 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported gitleaks 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported redact-secret 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported trufflehog 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 3	MISS 3	EXACT 3	MISS 3
`large-and-repeated-input-projections-generated--github-classic-pat-three-occurrences-in-256kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-three-occurrences-in-256kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 131,139 to 131,179; secret 262,265 to 262,305 flare-redact 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported gitleaks 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported redact-secret 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported trufflehog 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 3	MISS 3	EXACT 3	MISS 3
`large-and-repeated-input-projections-generated--github-classic-pat-three-occurrences-in-64kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-three-occurrences-in-64kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 32,835 to 32,875; secret 65,657 to 65,697 flare-redact 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported gitleaks 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported redact-secret 3 spans: EXACT, EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 3 findings reported trufflehog 3 spans: MISS, MISS, MISS · leaked 120 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 3	MISS 3	EXACT 3	MISS 3
`large-and-repeated-input-projections-generated--github-classic-pat-two-distinct-keys-in-1mib` Path `large-and-repeated-input-projections-generated/github-classic-pat-two-distinct-keys-in-1mib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 1,048,643 to 1,048,683 flare-redact 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported gitleaks 2 spans: MISS, EXACT · leaked 40 bytes · collateral 0 bytes · 1 finding reported redact-secret 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported trufflehog 2 spans: MISS, MISS · leaked 80 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 2	EXACT 1 · MISS 1	EXACT 2	MISS 2
`large-and-repeated-input-projections-generated--github-classic-pat-two-distinct-keys-in-256kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-two-distinct-keys-in-256kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 262,211 to 262,251 flare-redact 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported gitleaks 2 spans: MISS, EXACT · leaked 40 bytes · collateral 0 bytes · 1 finding reported redact-secret 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported trufflehog 2 spans: MISS, MISS · leaked 80 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 2	EXACT 1 · MISS 1	EXACT 2	MISS 2
`large-and-repeated-input-projections-generated--github-classic-pat-two-distinct-keys-in-64kib` Path `large-and-repeated-input-projections-generated/github-classic-pat-two-distinct-keys-in-64kib/input.txt` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 13 to 53; secret 65,603 to 65,643 flare-redact 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported gitleaks 2 spans: MISS, EXACT · leaked 40 bytes · collateral 0 bytes · 1 finding reported redact-secret 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported trufflehog 2 spans: MISS, MISS · leaked 80 bytes · collateral 0 bytes · 0 findings reported	policy	T3	multiple-credentials-per-input	project-policy	EXACT 2	EXACT 1 · MISS 1	EXACT 2	MISS 2
`opentelemetry-log-records-authored--attribute-string` Path `opentelemetry-log-records-authored/attribute-string/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 453 to 493 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT	MISS	EXACT	MISS
`opentelemetry-log-records-authored--body-nested-map-and-array` Path `opentelemetry-log-records-authored/body-nested-map-and-array/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 441 to 481 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT	MISS	EXACT	MISS
`opentelemetry-log-records-authored--body-string` Path `opentelemetry-log-records-authored/body-string/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 315 to 355 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT	MISS	EXACT	MISS
`opentelemetry-log-records-authored--body-string-holding-serialized-json` Path `opentelemetry-log-records-authored/body-string-holding-serialized-json/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 320 to 360 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT	MISS	EXACT	MISS
`opentelemetry-log-records-authored--exception-message-and-stacktrace` Path `opentelemetry-log-records-authored/exception-message-and-stacktrace/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 491 to 531; secret 700 to 740 flare-redact 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported gitleaks 2 spans: MISS, EXACT · leaked 40 bytes · collateral 0 bytes · 1 finding reported redact-secret 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported trufflehog 2 spans: MISS, MISS · leaked 80 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT 2	EXACT 1 · MISS 1	EXACT 2	MISS 2
`opentelemetry-log-records-authored--resource-attribute` Path `opentelemetry-log-records-authored/resource-attribute/input.json` Corpus family github:classic-personal-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families github-token Expected spans secret 169 to 209 flare-redact 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 40 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	credential-in-opentelemetry-log-record-fields	provider-documented	EXACT	MISS	EXACT	MISS

Back to github-token