redact-secret · Evaluation · Qualification

Cases of heroku-api-key

Every case the populations hold for this detector family, with what each scanner recorded.

View public
Scanners flare-redact, gitleaks, redact-secret, trufflehog

What these rows are

A row is one case of one population; the same id in two populations is two rows, and no figure is a sum across populations or scanners. A scanner’s word is what its run artifact recorded. The evidence class is the artifact’s own label for the case and is not a support status. Pending and not measured are not misses.

public-evidence-snapshot

floors and gates · cases 1 to 29 of this population’s 29 in this scope

Evidence: credential-evidence · snapshot-2026.10.06.4
Corpus digest: sha256:2319e44084d4
Semantic digest: sha256:4bec6e539482
Run class: public

Cases of public-evidence-snapshot
Case	Kind	Tier	Group	Evidence class (the artifact’s label)	flare-redact	gitleaks	redact-secret	trufflehog
`heroku--heroku-api-key-authorization-ids-public-id` Path `heroku/heroku-api-key-authorization-ids-public-id/heroku-api-key-authorization-ids-public-id.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Flagged · 1 finding reported	must-not-flag	T2	public-identifier	tool-corroborated	Not flagged	Not flagged	Not flagged	Flagged
`heroku--heroku-api-key-authorizations-create-g1` Path `heroku/heroku-api-key-authorizations-create-g1/heroku-api-key-authorizations-create-g1.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 209 to 250 flare-redact 1 span: MISS · leaked 41 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 41 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 41 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	MISS	EXACT	MISS
`heroku--heroku-api-key-authorizations-create-g1-separator-twin` Path `heroku/heroku-api-key-authorizations-create-g1-separator-twin/heroku-api-key-authorizations-create-g1-separator-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-authorizations-create-g1` Twin mutation boundary Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	boundary-violation	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-bearer-header-g2` Path `heroku/heroku-api-key-bearer-header-g2/heroku-api-key-bearer-header-g2.http` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 112 to 177 (envelope 90 to 177) flare-redact 1 span: COVERED · leaked 0 bytes · collateral 0 bytes · 1 finding reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	COVERED	EXACT	EXACT	EXACT
`heroku--heroku-api-key-bearer-header-g2-prefix-case-twin` Path `heroku/heroku-api-key-bearer-header-g2-prefix-case-twin/heroku-api-key-bearer-header-g2-prefix-case-twin.http` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-bearer-header-g2` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 1 finding reported · another detector also reported it gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged · co-detected	Not flagged	Not flagged · co-detected	Not flagged
`heroku--heroku-api-key-compose-env` Path `heroku/heroku-api-key-compose-env/heroku-api-key-compose-env.yml` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 117 to 182 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-env-g1` Path `heroku/heroku-api-key-env-g1/heroku-api-key-env-g1.env` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 15 to 56 flare-redact 1 span: MISS · leaked 41 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: PARTIAL · leaked 5 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	PARTIAL
`heroku--heroku-api-key-env-g1-length-twin` Path `heroku/heroku-api-key-env-g1-length-twin/heroku-api-key-env-g1-length-twin.env` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-env-g1` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged · co-detected	Not flagged · co-detected	Not flagged
`heroku--heroku-api-key-generation-note-prose` Path `heroku/heroku-api-key-generation-note-prose/heroku-api-key-generation-note-prose.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	prose-mention	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-github-actions-deploy` Path `heroku/heroku-api-key-github-actions-deploy/heroku-api-key-github-actions-deploy.yml` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 74 to 139 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-label-prose` Path `heroku/heroku-api-key-label-prose/heroku-api-key-label-prose.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	benign-lookalike	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-mask` Path `heroku/heroku-api-key-mask/heroku-api-key-mask.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	benign-lookalike	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-netrc-g2` Path `heroku/heroku-api-key-netrc-g2/heroku-api-key-netrc-g2.netrc` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 58 to 123; secret 182 to 247 flare-redact 2 spans: MISS, MISS · leaked 130 bytes · collateral 0 bytes · 0 findings reported gitleaks 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported redact-secret 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported trufflehog 2 spans: EXACT, EXACT · leaked 0 bytes · collateral 0 bytes · 2 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS 2	EXACT 2	EXACT 2	EXACT 2
`heroku--heroku-api-key-netrc-template-placeholder` Path `heroku/heroku-api-key-netrc-template-placeholder/heroku-api-key-netrc-template-placeholder.netrc` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	documentation-placeholder	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefix-only` Path `heroku/heroku-api-key-prefix-only/heroku-api-key-prefix-only.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	benign-lookalike	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-bare` Path `heroku/heroku-api-key-prefixed-shape-bare/heroku-api-key-prefixed-shape-bare.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 0 to 65 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-prefixed-shape-bare-twin` Path `heroku/heroku-api-key-prefixed-shape-bare-twin/heroku-api-key-prefixed-shape-bare-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-bare` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-prefix-bare-twin` Path `heroku/heroku-api-key-prefixed-shape-prefix-bare-twin/heroku-api-key-prefixed-shape-prefix-bare-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-bare` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-prefix-quoted-twin` Path `heroku/heroku-api-key-prefixed-shape-prefix-quoted-twin/heroku-api-key-prefixed-shape-prefix-quoted-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-quoted` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-prefix-unicode-crlf-twin` Path `heroku/heroku-api-key-prefixed-shape-prefix-unicode-crlf-twin/heroku-api-key-prefixed-shape-prefix-unicode-crlf-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-unicode-crlf` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-quoted` Path `heroku/heroku-api-key-prefixed-shape-quoted/heroku-api-key-prefixed-shape-quoted.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 7 to 72 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-prefixed-shape-quoted-twin` Path `heroku/heroku-api-key-prefixed-shape-quoted-twin/heroku-api-key-prefixed-shape-quoted-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-quoted` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-prefixed-shape-unicode-crlf` Path `heroku/heroku-api-key-prefixed-shape-unicode-crlf/heroku-api-key-prefixed-shape-unicode-crlf.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 21 to 86 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-prefixed-shape-unicode-crlf-twin` Path `heroku/heroku-api-key-prefixed-shape-unicode-crlf-twin/heroku-api-key-prefixed-shape-unicode-crlf-twin.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of `heroku--heroku-api-key-prefixed-shape-unicode-crlf` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-python-heroku3-client` Path `heroku/heroku-api-key-python-heroku3-client/heroku-api-key-python-heroku3-client.py` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 41 to 106 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-reference` Path `heroku/heroku-api-key-reference/heroku-api-key-reference.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	benign-lookalike	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-shell-export-api-key` Path `heroku/heroku-api-key-shell-export-api-key/heroku-api-key-shell-export-api-key.sh` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 22 to 87 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT
`heroku--heroku-api-key-short-body` Path `heroku/heroku-api-key-short-body/heroku-api-key-short-body.txt` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	benign-lookalike	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`heroku--heroku-api-key-terraform-provider` Path `heroku/heroku-api-key-terraform-provider/heroku-api-key-terraform-provider.tf` Corpus family heroku:oauth-access-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families heroku-api-key Expected spans secret 63 to 128 flare-redact 1 span: MISS · leaked 65 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	EXACT

Back to heroku-api-key