Repository navigation
What changed
- Improve credential detection precision, token boundaries, and independent overlapping findings.
- Reduce false positives for placeholder-like values and credential-named hashes, including spaced and quoted assignments.
- Show masking eligibility and hidden selections before confirmed bulk masking.
- Return an operational error for incomplete CLI scans, and add focused synthetic detector regressions.
Validation
QT_QPA_PLATFORM=offscreen .venv/bin/pytest -q: 82 passed, 32 subtests passed.
Scanning remains read-only; masking still requires review and confirmation. No backup is created by default.