redact-secret · Report

Providers

Counts are fixture rows for redact-secret on the current run. Open a provider to see its families, then pick a family to see every row behind it. A fixture in two families counts once for its provider. Choose an evidence level to count only the rows at that level.

102 providers
184 families
6,140 fixtures
Run 2026-10-07
Mode published · redact-secret 0.1.0-beta.14

New pipelineAuthority

Built from the new pipeline

The new pipeline is the authority for credential qualification. These numbers are read from the qualification view derived from the official credential-eval run of the public-evidence-snapshot population. The regression and policy populations keep their own counts on the qualification pages and are not added in here.

Authority: new
Population: public-evidence-snapshot
Engine: credential-eval 0.1.0-alpha.16
Evidence: snapshot-2026.10.06.4
Run: sha256:4bec6e539482…
Recorded: 2026-10-07
Authorised for: @redact-secret/core@0.1.0-beta.14

Maintainer-reviewed (independent review pending)

598 fixtures of the 7,041 in evidence release snapshot-2026.10.06.4 carry this label. They are counted in the numbers on this page.

Passed the project’s own verification (source evidence, automated checks, recorded counter-arguments); not yet independently reviewed.

OpenRedaction default (all patterns): not measured in this run (optional)

The default (all-pattern) profile is slow and noisy for credential evaluation: personal data and resource identifiers dominate its findings, and its last official measurement took 7 minutes of scanner time on a population the credential profile scans in seconds (its methods run takes 40+ minutes), so it is a manual measurement and never blocks other scanners or core verification (#763). Its earlier results stay as history with their run identity; the credential profile is a separate scanner, never spliced with it.

Last measurement: policy-corpus@linux-x64 (configuration sha256:2451ce7bf380), public-evidence-snapshot+methods@linux-x64 (configuration sha256:d47d081ce5fb), public-evidence-snapshot@linux-x64 (configuration sha256:2451ce7bf380), regression-corpus@linux-x64 (configuration sha256:2451ce7bf380) · engine 0.1.0-alpha.5 · recorded 2026-10-05 · retained record, no longer listed by the run registry. It stays labelled with that run identity and is never combined with another profile or another run.

Open the qualification page for this pointer

OpenRedaction credential profile (33 types): not measured in an official run (local exploratory diagnostics only: see ADR)

The credential profile is the comparison profile chosen in docs/decisions/2026-10-06-choose-the-openredaction-credential-bearing-profile-as-the-comparison-scanner.md. It is optional in the official run class because no pinned engine configuration measures it yet: making it required would refuse every official view until the owner approves the one profile-only run. Its own history starts with that run; nothing of the default's is reused for it.

No earlier measurement of it is recorded. Nothing is shown in its place.

Official measurement: pending: requires owner approval (one profile-only run; see the decision).

Open the qualification page for this pointer

Every population and its qualification

Find

Evidence level

103 providers · 184 families

Amazon Web Services5 families · 126 fixtures1 left readable0 too much0 false alarms

IAM user access keyaws:iam-user-access-key31 fixtures0 left readable0 too much0 false alarms
STS temporary access keyaws:sts-temporary-access-key31 fixtures0 left readable0 too much0 false alarms
STS service bearer tokenaws:sts-service-bearer-token0 fixturesNo fixtures
Context-specific credentialaws:context-specific-credential0 fixturesNo fixtures
IAM user secret access keyaws:iam-user-secret-access-key64 fixtures1 left readable0 too much0 false alarms

GitHub6 families · 235 fixtures0 left readable0 too much0 false alarms

Classic personal access tokengithub:classic-personal-access-token116 fixtures0 left readable0 too much0 false alarms
OAuth access tokengithub:oauth-access-token14 fixtures0 left readable0 too much0 false alarms
GitHub App user-to-server tokengithub:app-user-to-server-token13 fixtures0 left readable0 too much0 false alarms
GitHub App server-to-server tokengithub:app-server-to-server-token42 fixtures0 left readable0 too much0 false alarms
OAuth refresh tokengithub:oauth-refresh-token10 fixtures0 left readable0 too much0 false alarms
Fine-grained personal access tokengithub:fine-grained-personal-access-token40 fixtures0 left readable0 too much0 false alarms

GitLab3 families · 130 fixtures0 left readable0 too much7 false alarms

Legacy personal access tokengitlab:legacy-personal-access-token56 fixtures0 left readable0 too much0 false alarms
Routable personal access tokengitlab:routable-personal-access-token31 fixtures0 left readable0 too much7 false alarms
Runner authentication tokengitlab:runner-authentication-token43 fixtures0 left readable0 too much0 false alarms

OpenAI2 families · 90 fixtures0 left readable0 too much0 false alarms

Secret API keyopenai:secret-api-key47 fixtures0 left readable0 too much0 false alarms
Admin API key (sk-admin-)openai:admin-api-key43 fixtures0 left readable0 too much0 false alarms

Anthropic3 families · 106 fixtures0 left readable0 too much0 false alarms

Secret API keyanthropic:secret-api-key30 fixtures0 left readable0 too much0 false alarms
Enterprise organization key (sk-ant-api01-)anthropic:compliance-access-key37 fixtures0 left readable0 too much0 false alarms
Admin API key (sk-ant-admin01-)anthropic:admin-api-key39 fixtures0 left readable0 too much0 false alarms

Shopify2 families · 21 fixtures0 left readable0 too much0 false alarms

Custom app access tokenshopify:custom-app-access-token13 fixtures0 left readable0 too much0 false alarms
Public app access tokenshopify:public-app-access-token8 fixtures0 left readable0 too much0 false alarms

HashiCorp Vault3 families · 22 fixtures0 left readable0 too much0 false alarms

Service tokenhashicorp-vault:service-token15 fixtures0 left readable0 too much0 false alarms
Batch tokenhashicorp-vault:batch-token4 fixtures0 left readable0 too much0 false alarms
Recovery tokenhashicorp-vault:recovery-token3 fixtures0 left readable0 too much0 false alarms

Stripe6 families · 158 fixtures0 left readable0 too much0 false alarms

Live secret keystripe:secret-key-live21 fixtures0 left readable0 too much0 false alarms
Test secret keystripe:secret-key-test71 fixtures0 left readable0 too much0 false alarms
Live restricted keystripe:restricted-key-live5 fixtures0 left readable0 too much0 false alarms
Test restricted keystripe:restricted-key-test4 fixtures0 left readable0 too much0 false alarms
Organization API keystripe:organization-api-key28 fixtures0 left readable0 too much0 false alarms
Webhook signing secretstripe:webhook-signing-secret29 fixtures0 left readable0 too much0 false alarms

Slack4 families · 113 fixtures0 left readable0 too much0 false alarms

Bot tokenslack:bot-token46 fixtures0 left readable0 too much0 false alarms
User tokenslack:user-token27 fixtures0 left readable0 too much0 false alarms
App-level tokenslack:app-level-token40 fixtures0 left readable0 too much0 false alarms
Workflow webhook tokenslack:workflow-webhook-token0 fixturesNo fixtures

Python Package Index (PyPI)1 family · 26 fixtures0 left readable0 too much0 false alarms

API tokenpypi:api-token26 fixtures0 left readable0 too much0 false alarms

Hugging Face1 family · 26 fixtures0 left readable0 too much0 false alarms

API tokenhuggingface:api-token26 fixtures0 left readable0 too much0 false alarms

Docker Hub2 families · 36 fixtures0 left readable0 too much0 false alarms

Personal access tokendocker:personal-access-token14 fixtures0 left readable0 too much0 false alarms
OAuth access tokendocker:oauth-access-token22 fixtures0 left readable0 too much0 false alarms

Cloudflare1 family · 24 fixtures0 left readable0 too much0 false alarms

Scannable API tokencloudflare:api-token24 fixtures0 left readable0 too much0 false alarms

DigitalOcean3 families · 34 fixtures0 left readable0 too much0 false alarms

Personal access tokendigitalocean:personal-access-token18 fixtures0 left readable0 too much0 false alarms
OAuth tokendigitalocean:oauth-token9 fixtures0 left readable0 too much0 false alarms
Refresh tokendigitalocean:refresh-token7 fixtures0 left readable0 too much0 false alarms

Linear2 families · 27 fixtures0 left readable0 too much0 false alarms

Personal API keylinear:personal-api-key27 fixtures0 left readable0 too much0 false alarms
OAuth access tokenlinear:oauth-access-token0 fixturesNo fixtures

Supabase2 families · 56 fixtures0 left readable0 too much0 false alarms

Project secret keysupabase:secret-key30 fixtures0 left readable0 too much0 false alarms
Personal access tokensupabase:personal-access-token26 fixtures0 left readable0 too much0 false alarms

Vercel6 families · 140 fixtures0 left readable0 too much3 false alarms

Compatibility aggregate (unreviewed Vercel token shapes)vercel:access-token20 fixtures0 left readable0 too much0 false alarms
Personal access tokenvercel:personal-access-token40 fixtures0 left readable0 too much1 false alarms
Integration tokenvercel:integration-token0 fixturesNo fixtures
App access tokenvercel:app-access-token40 fixtures0 left readable0 too much1 false alarms
App refresh tokenvercel:app-refresh-token40 fixtures0 left readable0 too much1 false alarms
API keyvercel:api-key0 fixturesNo fixtures

npm2 families · 54 fixtures0 left readable0 too much0 false alarms

Granular access tokennpm:granular-access-token54 fixtures0 left readable0 too much0 false alarms
Legacy tokennpm:legacy-token0 fixturesNo fixtures

Google3 families · 72 fixtures0 left readable0 too much0 false alarms

Generic API keygoogle:generic-api-key32 fixtures0 left readable0 too much0 false alarms
OAuth2 access and refresh tokensgoogle:oauth2-credential0 fixturesNo fixtures
OAuth client secretgoogle:oauth-client-secret40 fixtures0 left readable0 too much0 false alarms

Twilio SendGrid1 family · 167 fixtures30 left readable0 too much0 false alarms

API keysendgrid:api-key167 fixtures30 left readable0 too much0 false alarms

Microsoft Entra ID1 family · 45 fixtures0 left readable0 too much0 false alarms

Application client secretmicrosoft-entra:application-client-secret45 fixtures0 left readable0 too much0 false alarms

Azure DevOps1 family · 29 fixtures0 left readable0 too much0 false alarms

Personal access tokenazure-devops:personal-access-token29 fixtures0 left readable0 too much0 false alarms

Notion2 families · 53 fixtures0 left readable0 too much0 false alarms

Legacy integration tokennotion:legacy-integration-token29 fixtures0 left readable0 too much0 false alarms
Integration tokennotion:integration-token24 fixtures0 left readable0 too much0 false alarms

Atlassian2 families · 45 fixtures0 left readable0 too much0 false alarms

API tokenatlassian:api-token45 fixtures0 left readable0 too much0 false alarms
Access tokenatlassian:access-token0 fixturesNo fixtures

Twilio2 families · 114 fixtures0 left readable0 too much0 false alarms

Account auth tokentwilio:auth-token64 fixtures0 left readable0 too much0 false alarms
API key secrettwilio:api-key-secret50 fixtures0 left readable0 too much0 false alarms

Telegram1 family · 40 fixtures0 left readable0 too much0 false alarms

Bot tokentelegram:bot-token40 fixtures0 left readable0 too much0 false alarms

Discord1 family · 46 fixtures0 left readable0 too much0 false alarms

Bot tokendiscord:bot-token46 fixtures0 left readable0 too much0 false alarms

Sentry2 families · 80 fixtures0 left readable0 too much0 false alarms

User auth tokensentry:user-auth-token40 fixtures0 left readable0 too much0 false alarms
Organization auth tokensentry:organization-auth-token40 fixtures0 left readable0 too much0 false alarms

Datadog3 families · 117 fixtures0 left readable0 too much0 false alarms

API keydatadog:api-key36 fixtures0 left readable0 too much0 false alarms
Application key (ddapp_-prefixed)datadog:application-key29 fixtures0 left readable0 too much0 false alarms
Application key (legacy 40-hex)datadog:application-key-legacy52 fixtures0 left readable0 too much0 false alarms

Grafana2 families · 72 fixtures0 left readable0 too much0 false alarms

Service account tokengrafana:service-account-token36 fixtures0 left readable0 too much0 false alarms
Cloud access policy tokengrafana:cloud-access-policy-token36 fixtures0 left readable0 too much0 false alarms

New Relic2 families · 78 fixtures0 left readable0 too much0 false alarms

User API keynew-relic:user-api-key36 fixtures0 left readable0 too much0 false alarms
License keynew-relic:license-key42 fixtures0 left readable0 too much0 false alarms

Firebase1 family · 45 fixtures0 left readable0 too much0 false alarms

Legacy FCM server keyfirebase:server-key45 fixtures0 left readable0 too much0 false alarms

HashiCorp Terraform Cloud/Enterprise3 families · 15 fixtures0 left readable0 too much0 false alarms

User tokenhashicorp-terraform:user-token6 fixtures0 left readable0 too much0 false alarms
Organization tokenhashicorp-terraform:organization-token6 fixtures0 left readable0 too much0 false alarms
Team tokenhashicorp-terraform:team-token3 fixtures0 left readable0 too much0 false alarms

Pulumi3 families · 15 fixtures0 left readable0 too much0 false alarms

Personal access tokenpulumi:personal-access-token6 fixtures0 left readable0 too much0 false alarms
Organization access tokenpulumi:organization-access-token6 fixtures0 left readable0 too much0 false alarms
Team access tokenpulumi:team-access-token3 fixtures0 left readable0 too much0 false alarms

Databricks1 family · 47 fixtures0 left readable0 too much0 false alarms

Personal access tokendatabricks:personal-access-token47 fixtures0 left readable0 too much0 false alarms

Confluent Cloud2 families · 91 fixtures0 left readable0 too much0 false alarms

Cloud API secret (cflt-prefixed)confluent:cloud-api-secret31 fixtures0 left readable0 too much0 false alarms
Cloud API secret (unprefixed, pre-2025-07-30)confluent:cloud-api-secret-legacy60 fixtures0 left readable0 too much0 false alarms

Postman2 families · 88 fixtures0 left readable0 too much0 false alarms

API keypostman:api-key46 fixtures0 left readable0 too much0 false alarms
Collection access keypostman:collection-access-key42 fixtures0 left readable0 too much0 false alarms

Netlify2 families · 24 fixtures0 left readable0 too much0 false alarms

Personal access tokennetlify:personal-access-token24 fixtures0 left readable0 too much0 false alarms
CLI, OAuth, app and build tokens (nfc_/nfo_/nfu_/nfb_)netlify:other-prefixed-tokens0 fixturesNo fixtures

Heroku2 families · 92 fixtures0 left readable0 too much0 false alarms

OAuth access token (HRKU-prefixed)heroku:oauth-access-token29 fixtures0 left readable0 too much0 false alarms
Legacy API key (bare UUID)heroku:legacy-api-key63 fixtures0 left readable0 too much0 false alarms

Mailchimp1 family · 54 fixtures0 left readable0 too much0 false alarms

Marketing API keymailchimp:marketing-api-key54 fixtures0 left readable0 too much0 false alarms

Mailgun3 families · 43 fixtures0 left readable0 too much0 false alarms

Private API key and HTTP webhook signing keymailgun:private-api-key43 fixtures0 left readable0 too much0 false alarms
Public validation key (pubkey-)mailgun:public-validation-key0 fixturesNo fixtures
Prefix-less 32-8-8 hex key tripletmailgun:legacy-signing-key-triplet0 fixturesNo fixtures

Okta1 family · 40 fixtures0 left readable0 too much0 false alarms

Management API token (SSWS)okta:api-token40 fixtures0 left readable0 too much0 false alarms

Replicate1 family · 32 fixtures0 left readable0 too much0 false alarms

API tokenreplicate:api-token32 fixtures0 left readable0 too much0 false alarms

Groq1 family · 41 fixtures0 left readable0 too much0 false alarms

API keygroq:api-key41 fixtures0 left readable0 too much0 false alarms

xAI1 family · 41 fixtures0 left readable0 too much0 false alarms

API keyxai:api-key41 fixtures0 left readable0 too much0 false alarms

OpenRouter2 families · 32 fixtures0 left readable0 too much0 false alarms

Inference API keyopenrouter:api-key32 fixtures0 left readable0 too much0 false alarms
Management API keyopenrouter:management-api-key0 fixturesNo fixtures

LangSmith (LangChain)1 family · 42 fixtures0 left readable0 too much0 false alarms

API key (personal access token or service key)langsmith:api-key42 fixtures0 left readable0 too much0 false alarms

Langfuse1 family · 42 fixtures0 left readable0 too much0 false alarms

Secret API keylangfuse:secret-key42 fixtures0 left readable0 too much0 false alarms

Perplexity1 family · 41 fixtures0 left readable0 too much0 false alarms

API keyperplexity:api-key41 fixtures0 left readable0 too much0 false alarms

Fireworks AI1 family · 32 fixtures0 left readable0 too much0 false alarms

API keyfireworks-ai:api-key32 fixtures0 left readable0 too much0 false alarms

Pinecone2 families · 91 fixtures0 left readable0 too much0 false alarms

API key (pcsk_)pinecone:api-key43 fixtures0 left readable0 too much0 false alarms
Legacy API key (bare UUID)pinecone:legacy-api-key48 fixtures0 left readable0 too much0 false alarms

Travis CI1 family · 48 fixtures0 left readable0 too much0 false alarms

API tokentravis-ci:api-token48 fixtures0 left readable0 too much0 false alarms

Neon1 family · 42 fixtures0 left readable0 too much0 false alarms

API keyneon:api-key42 fixtures0 left readable0 too much0 false alarms

Amazon Bedrock2 families · 78 fixtures0 left readable0 too much0 false alarms

Long-term API key (ABSK)aws-bedrock:long-term-api-key44 fixtures0 left readable0 too much0 false alarms
Short-term API key (bedrock-api-key-)aws-bedrock:short-term-api-key34 fixtures0 left readable0 too much0 false alarms

ElevenLabs1 family · 38 fixtures0 left readable0 too much0 false alarms

API key (sk_)elevenlabs:api-key38 fixtures0 left readable0 too much0 false alarms

Together AI1 family · 56 fixtures0 left readable0 too much0 false alarms

Project API key (tgp_v1_)together:api-key56 fixtures0 left readable0 too much0 false alarms

Tavily1 family · 45 fixtures0 left readable0 too much0 false alarms

API key (tvly-)tavily:api-key45 fixtures0 left readable0 too much0 false alarms

Mistral AI2 families · 68 fixtures0 left readable0 too much0 false alarms

Studio API key (unprefixed)mistral:api-key68 fixtures0 left readable0 too much0 false alarms
Realtime client token (rt_)mistral:realtime-client-token0 fixturesNo fixtures

Cohere1 family · 78 fixtures0 left readable0 too much0 false alarms

API key (unprefixed)cohere:api-key78 fixtures0 left readable0 too much0 false alarms

Deepgram1 family · 82 fixtures0 left readable0 too much0 false alarms

API key (unprefixed)deepgram:api-key82 fixtures0 left readable0 too much0 false alarms

AI21 Labs1 family · 60 fixtures0 left readable0 too much0 false alarms

API key (unprefixed)ai21:api-key60 fixtures0 left readable0 too much0 false alarms

Exa1 family · 30 fixtures2 left readable0 too much0 false alarms

API key (no evidenced shape)exa:api-key30 fixtures2 left readable0 too much0 false alarms

Voyage AI1 family · 0 fixturesNo fixtures

API key (pa- or al-)voyage-ai:api-key0 fixturesNo fixtures

Convex1 family · 41 fixtures0 left readable0 too much0 false alarms

Deployment, project and admin key (hex body)convex:deployment-key41 fixtures0 left readable0 too much0 false alarms

1Password1 family · 39 fixtures0 left readable0 too much0 false alarms

Service account token (ops_)onepassword:service-account-token39 fixtures0 left readable0 too much0 false alarms

Inngest1 family · 40 fixtures0 left readable0 too much0 false alarms

Signing key (signkey-)inngest:signing-key40 fixtures0 left readable0 too much0 false alarms

Resend1 family · 42 fixtures0 left readable0 too much0 false alarms

API key (re_)resend:api-key42 fixtures0 left readable0 too much0 false alarms

Apify1 family · 38 fixtures0 left readable0 too much0 false alarms

API token (apify_api_)apify:api-token38 fixtures0 left readable0 too much0 false alarms

Weights & Biases1 family · 35 fixtures0 left readable0 too much0 false alarms

API key (wandb_v1_)wandb:api-key35 fixtures0 left readable0 too much0 false alarms

Doppler7 families · 268 fixtures0 left readable0 too much0 false alarms

Service token (dp.st.)doppler:service-token51 fixtures0 left readable0 too much0 false alarms
Personal token (dp.pt.)doppler:personal-token36 fixtures0 left readable0 too much0 false alarms
CLI token (dp.ct.)doppler:cli-token36 fixtures0 left readable0 too much0 false alarms
Service account token (dp.sa.)doppler:service-account-token37 fixtures0 left readable0 too much0 false alarms
Service account identity token (dp.said.)doppler:service-account-identity-token36 fixtures0 left readable0 too much0 false alarms
SCIM token (dp.scim.)doppler:scim-token36 fixtures0 left readable0 too much0 false alarms
Audit token (dp.audit.)doppler:audit-token36 fixtures0 left readable0 too much0 false alarms

Trigger.dev2 families · 78 fixtures0 left readable0 too much0 false alarms

Environment secret key (tr_ENV_ / tr_ENV_sk_)trigger-dev:secret-api-key50 fixtures0 left readable0 too much0 false alarms
Personal access token (tr_pat_)trigger-dev:personal-access-token28 fixtures0 left readable0 too much0 false alarms

E2B1 family · 43 fixtures0 left readable0 too much0 false alarms

Team API key (e2b_)e2b:api-key43 fixtures0 left readable0 too much0 false alarms

PostHog2 families · 80 fixtures0 left readable0 too much0 false alarms

Personal API key (phx_)posthog:personal-api-key44 fixtures0 left readable0 too much0 false alarms
Project secret API key (phs_)posthog:project-secret-api-key36 fixtures0 left readable0 too much0 false alarms

Helicone2 families · 81 fixtures0 left readable0 too much0 false alarms

Read-write key (sk-helicone-)helicone:api-key45 fixtures0 left readable0 too much0 false alarms
Write-only key (pk-helicone-)helicone:write-api-key36 fixtures0 left readable0 too much0 false alarms

Firecrawl1 family · 48 fixtures0 left readable0 too much0 false alarms

API key (fc-)firecrawl:api-key48 fixtures0 left readable0 too much0 false alarms

Composio3 families · 120 fixtures0 left readable0 too much0 false alarms

Project API key (ak_)composio:project-api-key48 fixtures0 left readable0 too much0 false alarms
Org API key (oak_)composio:org-api-key36 fixtures0 left readable0 too much0 false alarms
User API key (uak_)composio:user-api-key36 fixtures0 left readable0 too much0 false alarms

Daytona1 family · 44 fixtures0 left readable0 too much0 false alarms

API key (dtn_)daytona:api-key44 fixtures0 left readable0 too much0 false alarms

ClickHouse Cloud1 family · 45 fixtures0 left readable0 too much0 false alarms

API key secret (4b1d)clickhouse-cloud:api-key45 fixtures0 left readable0 too much0 false alarms

NVIDIA1 family · 39 fixtures0 left readable0 too much0 false alarms

API key (nvapi-)nvidia:ngc-api-key39 fixtures0 left readable0 too much0 false alarms

Browserbase1 family · 38 fixtures0 left readable0 too much0 false alarms

API key (bb_live_)browserbase:api-key38 fixtures0 left readable0 too much0 false alarms

Cerebras1 family · 46 fixtures0 left readable0 too much0 false alarms

Inference API key (csk-)cerebras:inference-api-key46 fixtures0 left readable0 too much0 false alarms

RunPod1 family · 36 fixtures0 left readable0 too much0 false alarms

API key (rpa_)runpod:api-key36 fixtures0 left readable0 too much0 false alarms

Bitwarden1 family · 46 fixtures0 left readable0 too much0 false alarms

Secrets Manager access token (0. + UUID layout)bitwarden:secrets-manager-access-token46 fixtures0 left readable0 too much0 false alarms

Polar2 families · 66 fixtures0 left readable0 too much0 false alarms

Organization access token (polar_oat_)polar:organization-access-token38 fixtures0 left readable0 too much0 false alarms
API credentials (polar_pat_, polar_at_, polar_rt_, polar_cs_, polar_crt_)polar:api-credential28 fixtures0 left readable0 too much0 false alarms

SonarQube2 families · 68 fixtures0 left readable0 too much0 false alarms

User token (squ_)sonarqube:user-token40 fixtures0 left readable0 too much0 false alarms
Analysis tokens (sqa_, sqp_)sonarqube:analysis-token28 fixtures0 left readable0 too much0 false alarms

RubyGems.org1 family · 39 fixtures0 left readable0 too much0 false alarms

API key (rubygems_)rubygems:api-key39 fixtures0 left readable0 too much0 false alarms

Clojars1 family · 37 fixtures0 left readable0 too much0 false alarms

Deploy token (CLOJARS_)clojars:deploy-token37 fixtures0 left readable0 too much0 false alarms

crates.io2 families · 66 fixtures0 left readable0 too much0 false alarms

API token (cio)crates-io:api-token37 fixtures0 left readable0 too much0 false alarms
Trusted-publishing token (cio_tp_)crates-io:trusted-publishing-token29 fixtures0 left readable0 too much0 false alarms

Dynatrace1 family · 41 fixtures0 left readable0 too much0 false alarms

Access and platform token (dt0c01, dt0s..)dynatrace:api-token41 fixtures0 left readable0 too much0 false alarms

Paddle1 family · 41 fixtures0 left readable0 too much0 false alarms

Billing API key (pdl_live_/pdl_sdbx_apikey_)paddle:api-key41 fixtures0 left readable0 too much0 false alarms

Honeycomb1 family · 39 fixtures0 left readable0 too much0 false alarms

Ingest key (hcXik_, hcXic_)honeycomb:ingest-key39 fixtures0 left readable0 too much0 false alarms

Axiom2 families · 62 fixtures0 left readable0 too much0 false alarms

API token (xaat-)axiom:api-token37 fixtures0 left readable0 too much0 false alarms
Personal access token (xapt-)axiom:personal-token25 fixtures0 left readable0 too much0 false alarms

Square2 families · 0 fixturesNo fixtures

Access token (EAAA)square:access-token0 fixturesNo fixtures
OAuth application secret (sq0csp-, sandbox-sq0csb-)square:oauth-application-secret0 fixturesNo fixtures

Xata1 family · 0 fixturesNo fixtures

API key (xau_, xao_)xata:api-key0 fixturesNo fixtures

Sourcegraph1 family · 0 fixturesNo fixtures

Personal access token (sgp_)sourcegraph:access-token0 fixturesNo fixtures

Unkey1 family · 0 fixturesNo fixtures

Root key (unkey_)unkey:root-key0 fixturesNo fixtures

Buildkite1 family · 0 fixturesNo fixtures

Tokens (bkua_ and sibling role prefixes)buildkite:access-token0 fixturesNo fixtures

Pydantic1 family · 0 fixturesNo fixtures

Logfire token (pylf_v)pydantic:logfire-token0 fixturesNo fixtures

Mapbox1 family · 0 fixturesNo fixtures

Secret access token (sk.)mapbox:secret-access-token0 fixturesNo fixtures

Fly.io1 family · 0 fixturesNo fixtures

Access token (fm1r_, fm1a_, fm2_)fly:access-token0 fixturesNo fixtures

Ory1 family · 0 fixturesNo fixtures

Session and OAuth2 sibling tokensory:network-api-key0 fixturesNo fixtures

Baseten1 family · 0 fixturesNo fixtures

API key (b10_)baseten:api-key0 fixturesNo fixtures

Not provider-specific6 families · 479 fixtures37 left readable0 too much1 false alarms

PEM-encoded private keygeneric:private-key36 fixtures0 left readable0 too much0 false alarms
JSON Web Tokengeneric:jwt26 fixtures0 left readable0 too much0 false alarms
Bearer credentialgeneric:bearer-token52 fixtures2 left readable0 too much0 false alarms
Connection-string passwordgeneric:connection-string-password104 fixtures0 left readable0 too much0 false alarms
OTP seedgeneric:otp-seed24 fixtures0 left readable0 too much0 false alarms
Unclassified assignment literalgeneric:unclassified-assignment-literal237 fixtures35 left readable0 too much1 false alarms

896 fixtures are global or not tied to one family. They count in no provider or family row.