🧠 Improving Accuracy: Report False Positives/Negatives here

[Zayan-Mohamed]

One of the main goals of SecScan v2.0 is to drastically reduce noise using Entropy Analysis.

However, no scanner is perfect! If you encounter:

1. False Positives: A string flagged as a secret that is actually safe code.
2. False Negatives: A real secret that SecScan missed.

Please reply to this thread with a sanitized example!

• For False Positives: Paste the string structure (replace characters with *) and the context. This helps us tune the default Entropy Threshold (currently 5.0).
• For False Negatives: Let us know the format of the key so we can add a Regex pattern to the default ruleset.

Let's make this the most accurate scanner out there.