redact-secret · Evaluation · Qualification

Cases of sonarqube-analysis-token

Every case the populations hold for this detector family, with what each scanner recorded.

View public
Scanners flare-redact, gitleaks, redact-secret, trufflehog

What these rows are

A row is one case of one population; the same id in two populations is two rows, and no figure is a sum across populations or scanners. A scanner’s word is what its run artifact recorded. The evidence class is the artifact’s own label for the case and is not a support status. Pending and not measured are not misses.

public-evidence-snapshot

floors and gates · cases 1 to 28 of this population’s 28 in this scope

Evidence: credential-evidence · snapshot-2026.10.06.4
Corpus digest: sha256:2319e44084d4
Semantic digest: sha256:4bec6e539482
Run class: public

Cases of public-evidence-snapshot
Case	Kind	Tier	Group	Evidence class (the artifact’s label)	flare-redact	gitleaks	redact-secret	trufflehog
`sonarqube--sonarqube-analysis-token-actions-env` Path `sonarqube/sonarqube-analysis-token-actions-env/sonarqube-analysis-token-actions-env.yml` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 113 to 157 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-actions-secret-reference` Path `sonarqube/sonarqube-analysis-token-actions-secret-reference/sonarqube-analysis-token-actions-secret-reference.yml` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	templated-reference	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-angle-brackets-placeholder` Path `sonarqube/sonarqube-analysis-token-angle-brackets-placeholder/sonarqube-analysis-token-angle-brackets-placeholder.sh` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	documentation-placeholder	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-badge-token-markdown-public-id` Path `sonarqube/sonarqube-analysis-token-badge-token-markdown-public-id/sonarqube-analysis-token-badge-token-markdown-public-id.md` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	public-identifier	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-bare-prose` Path `sonarqube/sonarqube-analysis-token-bare-prose/sonarqube-analysis-token-bare-prose.md` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 72 to 116 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	MISS	EXACT	MISS
`sonarqube--sonarqube-analysis-token-bearer-header` Path `sonarqube/sonarqube-analysis-token-bearer-header/sonarqube-analysis-token-bearer-header.http` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 75 to 119 flare-redact 1 span: OVERBROAD · leaked 0 bytes · collateral 7 bytes · 1 finding reported gitleaks 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	OVERBROAD	MISS	EXACT	MISS
`sonarqube--sonarqube-analysis-token-body-39-twin` Path `sonarqube/sonarqube-analysis-token-body-39-twin/sonarqube-analysis-token-body-39-twin.env` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-dotenv` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged · co-detected	Not flagged · co-detected	Not flagged
`sonarqube--sonarqube-analysis-token-body-41-twin` Path `sonarqube/sonarqube-analysis-token-body-41-twin/sonarqube-analysis-token-body-41-twin.sh` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-export` Twin mutation length Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-length	tool-corroborated	Not flagged	Not flagged · co-detected	Not flagged · co-detected	Not flagged
`sonarqube--sonarqube-analysis-token-chat-paste` Path `sonarqube/sonarqube-analysis-token-chat-paste/sonarqube-analysis-token-chat-paste.txt` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 34 to 78 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	MISS	EXACT	MISS
`sonarqube--sonarqube-analysis-token-dotenv` Path `sonarqube/sonarqube-analysis-token-dotenv/sonarqube-analysis-token-dotenv.env` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 19 to 63 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-ellipsis-placeholder` Path `sonarqube/sonarqube-analysis-token-ellipsis-placeholder/sonarqube-analysis-token-ellipsis-placeholder.md` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	documentation-placeholder	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-export` Path `sonarqube/sonarqube-analysis-token-export/sonarqube-analysis-token-export.sh` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 20 to 64 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-git-sha-encoded-value` Path `sonarqube/sonarqube-analysis-token-git-sha-encoded-value/sonarqube-analysis-token-git-sha-encoded-value.txt` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	benign-encoded-value	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-gradle-reference-reference` Path `sonarqube/sonarqube-analysis-token-gradle-reference-reference/sonarqube-analysis-token-gradle-reference-reference.properties` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	templated-reference	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-hyphen-separator-twin` Path `sonarqube/sonarqube-analysis-token-hyphen-separator-twin/sonarqube-analysis-token-hyphen-separator-twin.http` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-x-api-key-header` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Flagged · 1 finding reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged	Not flagged · co-detected	Not flagged · co-detected	Flagged
`sonarqube--sonarqube-analysis-token-json-api-key` Path `sonarqube/sonarqube-analysis-token-json-api-key/sonarqube-analysis-token-json-api-key.json` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 16 to 60 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-json-token` Path `sonarqube/sonarqube-analysis-token-json-token/sonarqube-analysis-token-json-token.json` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 14 to 58 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-leading-glue-twin` Path `sonarqube/sonarqube-analysis-token-leading-glue-twin/sonarqube-analysis-token-leading-glue-twin.md` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-bare-prose` Twin mutation boundary Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	boundary-violation	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-project-key-public-id` Path `sonarqube/sonarqube-analysis-token-project-key-public-id/sonarqube-analysis-token-project-key-public-id.properties` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	public-identifier	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-project-properties` Path `sonarqube/sonarqube-analysis-token-project-properties/sonarqube-analysis-token-project-properties.properties` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 65 to 109 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-scanner-token-flag` Path `sonarqube/sonarqube-analysis-token-scanner-token-flag/sonarqube-analysis-token-scanner-token-flag.sh` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 104 to 148 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-sdk-kwarg` Path `sonarqube/sonarqube-analysis-token-sdk-kwarg/sonarqube-analysis-token-sdk-kwarg.py` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 34 to 78 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS
`sonarqube--sonarqube-analysis-token-token-guidance-prose` Path `sonarqube/sonarqube-analysis-token-token-guidance-prose/sonarqube-analysis-token-token-guidance-prose.md` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T3	prose-mention	project-policy	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-trailing-hyphen-twin` Path `sonarqube/sonarqube-analysis-token-trailing-hyphen-twin/sonarqube-analysis-token-trailing-hyphen-twin.txt` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-chat-paste` Twin mutation boundary Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	boundary-violation	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-truncated-near-miss` Path `sonarqube/sonarqube-analysis-token-truncated-near-miss/sonarqube-analysis-token-truncated-near-miss.log` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	format-near-miss	tool-corroborated	Not flagged	Not flagged	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-uppercase-hex-byte-twin` Path `sonarqube/sonarqube-analysis-token-uppercase-hex-byte-twin/sonarqube-analysis-token-uppercase-hex-byte-twin.json` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-json-token` Twin mutation alphabet Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 0 findings reported gitleaks Not flagged · 1 finding reported · another detector also reported it redact-secret Not flagged · 0 findings reported trufflehog Not flagged · 0 findings reported	must-not-flag	T2	wrong-alphabet	tool-corroborated	Not flagged	Not flagged · co-detected	Not flagged	Not flagged
`sonarqube--sonarqube-analysis-token-uppercase-prefix-twin` Path `sonarqube/sonarqube-analysis-token-uppercase-prefix-twin/sonarqube-analysis-token-uppercase-prefix-twin.http` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of `sonarqube--sonarqube-analysis-token-bearer-header` Twin mutation prefix Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans None: a control expects no finding flare-redact Not flagged · 1 finding reported · another detector also reported it gitleaks Not flagged · 0 findings reported redact-secret Not flagged · 1 finding reported · another detector also reported it trufflehog Not flagged · 0 findings reported	must-not-flag	T2	prefix-near-miss	tool-corroborated	Not flagged · co-detected	Not flagged	Not flagged · co-detected	Not flagged
`sonarqube--sonarqube-analysis-token-x-api-key-header` Path `sonarqube/sonarqube-analysis-token-x-api-key-header/sonarqube-analysis-token-x-api-key-header.http` Corpus family sonarqube:analysis-token Taxonomy Not recorded Targets None named Twin of Not a twin Attribution Named by the evidence itself (its targets, family or taxonomy family) Product detector families sonarqube-analysis-token Expected spans secret 63 to 107 flare-redact 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported gitleaks 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported redact-secret 1 span: EXACT · leaked 0 bytes · collateral 0 bytes · 1 finding reported trufflehog 1 span: MISS · leaked 44 bytes · collateral 0 bytes · 0 findings reported	must-redact	T1	documented-format-literal	provider-documented	MISS	EXACT	EXACT	MISS

Back to sonarqube-analysis-token