redact-secret · Evaluation · Qualification
Cases of npm-token
Every case the populations hold for this detector family, with what each scanner recorded.
What these rows are
A row is one case of one population; the same id in two populations is two rows, and no figure is a sum across populations or scanners. A scanner’s word is what its run artifact recorded. The evidence class is the artifact’s own label for the case and is not a support status. Pending and not measured are not misses.
public-evidence-snapshot
floors and gates · cases 1 to 50 of this population’s 55 in this scope
- Evidence
- credential-evidence · snapshot-2026.10.06.4
- Corpus digest
sha256:2319e44084d4- Semantic digest
sha256:4bec6e539482- Run class
- public
| Case | Kind | Tier | Group | Evidence class (the artifact’s label) | flare-redact | gitleaks | redact-secret | trufflehog |
|---|---|---|---|---|---|---|---|---|
| policy | T3 | environment-assignment | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | environment-assignment | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | value-at-input-edges | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | partial-span-leakage | project-policy | OVERBROAD | EXACT | EXACT | MISS |
| policy | T3 | multibyte-text-offsets | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | crlf-line-endings | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | multibyte-text-offsets | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | structured-text-value | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | multibyte-text-offsets | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | environment-assignment | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | markdown-and-comment-value | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | multibyte-text-offsets | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | quoted-value-extent | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | partial-span-leakage | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | structured-text-value | project-policy | EXACT | MISS | EXACT | MISS |
| policy | T3 | structured-text-value | project-policy | EXACT | EXACT | EXACT | MISS |
| must-not-flag | T2 | bare-prefixes-and-truncated-tokens | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | credential-after-long-input | project-policy | EXACT | EXACT | EXACT | MISS |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 3 | EXACT 3 | EXACT 3 | MISS 3 |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 3 | EXACT 3 | EXACT 3 | MISS 3 |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 3 | EXACT 3 | EXACT 3 | MISS 3 |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 2 | EXACT 2 | EXACT 2 | MISS 2 |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 2 | EXACT 2 | EXACT 2 | MISS 2 |
| policy | T3 | multiple-credentials-per-input | project-policy | EXACT 2 | EXACT 2 | EXACT 2 | MISS 2 |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-not-flag | T2 | boundary-violation | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-not-flag | T2 | boundary-violation | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-not-flag | T2 | wrong-length | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-not-flag | T2 | prefix-near-miss | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-not-flag | T2 | prefix-near-miss | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-not-flag | T2 | wrong-length | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-not-flag | T3 | prose-mention | project-policy | Not flagged | Not flagged | Not flagged | Not flagged |
| must-not-flag | T3 | benign-lookalike | project-policy | Not flagged | Not flagged | Not flagged | Not flagged |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-not-flag | T2 | benign-lookalike | tool-corroborated | Not flagged | Not flagged | Not flagged | Not flagged |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |
| must-not-flag | T3 | benign-lookalike | project-policy | Not flagged | Not flagged | Not flagged | Not flagged |
| must-redact | T1 | documented-format-literal | provider-documented | EXACT | EXACT | EXACT | EXACT |