{
  "name": "levain-true-positive-corpus",
  "license": "MIT",
  "claim": "Every string listed under `secrets` is a credential and a secret scanner is supposed to find it. Sections marked `hard` are secrets that no shape-based scanner can be expected to find; score them separately or not at all.",
  "how_to_score": "For each section, run your scanner over `text`. Every entry in `secrets` your scanner reports is a true positive; every one it does not is a miss. `personal_data` lists non-credential spans a scanner may legitimately flag (identifiers, addresses, paths) -- count them as neither. Match by text, not by offset.",
  "synthetic": "Every credential here is synthetic, generated from a fixed seed, and has never been a live key. What is claimed about them: correct prefix, correct length, correct alphabet. Card numbers additionally pass Luhn; JWT headers and payloads additionally decode to the JSON they claim.",
  "companion": "https://levain.bmac.io/fp-corpus.json",
  "homepage": "https://levain.bmac.io/false-positives.html",
  "text_version": "https://levain.bmac.io/tp-corpus.txt",
  "source": "https://levain.bmac.io/tp-corpus.json",
  "built_by": "Levain, an AI agent. https://levain.bmac.io/",
  "counts": {
    "formats": 42,
    "core": 39,
    "hard": 3,
    "secrets": 81,
    "lines": 332
  },
  "kinds": {
    "groq_api_key": "A Groq API key: gsk_ followed by 52 base62 characters.",
    "xai_api_key": "An xAI API key: xai- followed by 48 base62 characters.",
    "perplexity_api_key": "A Perplexity API key: pplx- followed by 48 base62 characters.",
    "fireworks_api_key": "A Fireworks AI key: fw_ followed by 28 base62 characters.",
    "replicate_api_token": "A Replicate API token: r8_ followed by 37 base62 characters.",
    "pinecone_api_key": "A Pinecone API key: pcsk_, 6 base62, an underscore, then 40 base62.",
    "elevenlabs_api_key": "An ElevenLabs API key: sk_ followed by 48 hex characters. The underscore is what separates it from a Stripe key.",
    "doppler_token": "A Doppler token: dp. then the token class (pt, st, ct, sa), a dot, then 40 base62.",
    "databricks_pat": "A Databricks personal access token: dapi followed by 32 hex characters.",
    "grafana_service_account_token": "A Grafana service-account token: glsa_, 32 base62, an underscore, then an 8-character hex checksum.",
    "planetscale_token": "A PlanetScale token: pscale_tkn_ followed by 40 base62 characters.",
    "supabase_access_token": "A Supabase access token: sbp_ followed by 40 hex characters.",
    "netlify_pat": "A Netlify personal access token: nfp_ followed by 36 base62 characters.",
    "tailscale_auth_key": "A Tailscale auth key: tskey-auth-, a key id, a dash, then the secret.",
    "rubygems_api_key": "A RubyGems API key: rubygems_ followed by 48 hex characters.",
    "nuget_api_key": "A NuGet API key: oy2 followed by 43 lowercase alphanumerics.",
    "sonarqube_token": "A SonarQube user token: squ_ followed by 40 hex characters.",
    "sentry_org_auth_token": "A Sentry organisation auth token: sntrys_, a base64url payload, an underscore, then a hex tail.",
    "newrelic_user_key": "A New Relic user key: NRAK- followed by 26 uppercase alphanumerics.",
    "dynatrace_api_token": "A Dynatrace API token: dt0c01., a 24-character public id, a dot, then a 64-character hex secret.",
    "terraform_cloud_token": "A Terraform Cloud token: a user segment, .atlasv1., then the secret.",
    "discord_webhook_url": "A Discord incoming-webhook URL. The trailing path segment is the credential, so the whole URL must go.",
    "slack_app_level_token": "A Slack app-level token: xapp-, a version digit, an app id, a timestamp, then a hex secret. Not covered by the xoxb/xoxp family.",
    "google_oauth_client_secret": "A Google OAuth client secret: GOCSPX- followed by 28 base64url characters.",
    "resend_api_key": "A Resend API key: re_, 8 base62, an underscore, then 24 base62.",
    "postman_api_key": "A Postman API key: PMAK-, 24 hex, a dash, then 34 hex.",
    "airtable_pat": "An Airtable personal access token: pat, 14 base62, a dot, then 64 hex.",
    "aws_access_key_id": "An AWS access key id: AKIA followed by 16 uppercase alphanumerics.",
    "aws_secret_access_key": "An AWS secret access key: 40 characters of base64 alphabet, no prefix to anchor on.",
    "github_pat_classic": "A classic GitHub personal access token: ghp_ followed by 36 base62 characters.",
    "github_pat_fine_grained": "A fine-grained GitHub token: github_pat_ then 22 base62, an underscore, then 59 base62.",
    "github_oauth_token": "A GitHub OAuth access token: gho_ followed by 36 base62 characters.",
    "slack_bot_token": "A Slack bot token: xoxb- and three dash-separated parts.",
    "slack_webhook_url": "A Slack incoming-webhook URL. The path is the credential.",
    "stripe_secret_key": "A Stripe live secret key: sk_live_ followed by 24 base62 characters.",
    "google_api_key": "A Google API key: AIza followed by 35 characters of the base64url alphabet.",
    "sendgrid_api_key": "A SendGrid key: SG. then 22 characters, a dot, then 43 characters.",
    "twilio_api_key_sid": "A Twilio API key SID: SK followed by 32 hex characters.",
    "npm_token": "An npm access token: npm_ followed by 36 base62 characters.",
    "mailgun_api_key": "A Mailgun private key: key- followed by 32 hex characters.",
    "azure_storage_key": "An Azure Storage account key: 88 characters of base64 ending in two padding characters.",
    "http_basic_auth": "The base64 payload of an HTTP Basic Authorization header. Decodes to user:password.",
    "bearer_token": "An opaque bearer token in an Authorization header.",
    "jwt": "A JSON Web Token. The header and payload here really decode to the JSON they claim.",
    "private_key_pem": "A PEM-armoured private key block.",
    "private_key_escaped_json": "A PEM private key embedded in JSON with literal backslash-n instead of newlines.",
    "url_password": "A password inside a connection string or URL userinfo.",
    "generic_assignment": "A high-entropy value assigned to a name that means secret, with no vendor prefix.",
    "payment_card": "A payment card number that passes the Luhn check.",
    "openai_project_key": "An OpenAI project key: sk-proj- and two 65-character base64url segments around the literal T3BlbkFJ. Its alphabet includes the hyphen, so it may end in one.",
    "gitlab_pat": "A GitLab personal access token: glpat- followed by 20 base64url characters, which may include a trailing hyphen.",
    "confluent_cloud_key": "A Confluent Cloud API key: 16 base62 characters, meaningful only beside its secret.",
    "confluent_cloud_secret": "A Confluent Cloud API secret: 64 characters of base64 alphabet, so it may end in / or +.",
    "vault_service_token": "A modern HashiCorp Vault service token: hvs. followed by 90-120 base62 characters. The prefix contains the legacy s. shape, which is what trips unanchored allowlists.",
    "shapeless_password": "A real password that looks like ordinary words. HARD tier: no shape-based scanner can find this.",
    "custom_internal_format": "A credential in a company's own prefix scheme. HARD tier: unknowable without a custom rule.",
    "capability_url_segment": "An unguessable path segment that IS the credential -- a share link. HARD tier: it is shaped exactly like an object id or a content hash, and nothing in the string says which it is.",
    "account_identifier": "A Twilio account SID. An identifier, not a credential -- neither a hit nor a miss.",
    "key_identifier": "The id of a key, not the key. An identifier, not a credential -- neither a hit nor a miss.",
    "email": "An email address. Not a credential; a redactor may still mask it as personal data.",
    "ipv4": "A public IP address. Not a credential; a redactor may still mask it as personal data.",
    "home_directory": "A filesystem path revealing a username. Not a credential.",
    "wrapped_token": "The head of a real token, broken across two lines by a log formatter. The tail is on the next line and the shape is destroyed. HARD tier: finding the head is the most any scanner can do, and a tool that reports it has still left the tail in the clear."
  },
  "sections": [
    {
      "name": "env-file",
      "hard": false,
      "lines": 10,
      "secrets": [
        {
          "text": "AKIAS848NZIH8SH6OY2G",
          "kind": "aws_access_key_id"
        },
        {
          "text": "yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+",
          "kind": "aws_secret_access_key"
        },
        {
          "text": "sk_live_mgpaxYbyeXz7G8HpO0FDD2nY",
          "kind": "stripe_secret_key"
        },
        {
          "text": "sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR",
          "kind": "generic_assignment"
        }
      ],
      "personal_data": [],
      "text": "# .env.production -- do not commit\nNODE_ENV=production\nPORT=8080\nAWS_REGION=eu-central-1\nAWS_ACCESS_KEY_ID=AKIAS848NZIH8SH6OY2G\nAWS_SECRET_ACCESS_KEY=yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+\nSTRIPE_SECRET_KEY=sk_live_mgpaxYbyeXz7G8HpO0FDD2nY\nSESSION_SECRET=sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR\nLOG_LEVEL=info\nFEATURE_NEW_CHECKOUT=true"
    },
    {
      "name": "docker-run-command",
      "hard": false,
      "lines": 12,
      "secrets": [
        {
          "text": "ghp_w4p47e97ZaWlxQvOxnUTjbmzTNKR9iEIc6kC",
          "kind": "github_pat_classic"
        },
        {
          "text": "sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR",
          "kind": "generic_assignment"
        }
      ],
      "personal_data": [],
      "text": "$ docker run --rm -it \\\n    -e NODE_ENV=production \\\n    -e GITHUB_TOKEN=ghp_w4p47e97ZaWlxQvOxnUTjbmzTNKR9iEIc6kC \\\n    -e SESSION_SECRET=sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR \\\n    -v \"$PWD\":/app -w /app \\\n    node:22-alpine npm run migrate\nUnable to find image 'node:22-alpine' locally\n22-alpine: Pulling from library/node\nStatus: Downloaded newer image for node:22-alpine\n> migrate\n> node ./scripts/migrate.mjs\nmigrations applied: 4"
    },
    {
      "name": "github-actions-log",
      "hard": false,
      "lines": 7,
      "secrets": [
        {
          "text": "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",
          "kind": "github_pat_fine_grained"
        }
      ],
      "personal_data": [],
      "text": "2026-08-14T09:22:41.0114820Z ##[group]Run ./.github/actions/publish\n2026-08-14T09:22:41.0116105Z with:\n2026-08-14T09:22:41.0117331Z   registry: https://npm.pkg.github.com\n2026-08-14T09:22:41.2210884Z + curl -sS -H \"Authorization: token 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\" \\\n2026-08-14T09:22:41.2212440Z     https://api.github.com/repos/acme/widget/releases\n2026-08-14T09:22:41.7788112Z {\"message\":\"Bad credentials\",\"status\":\"401\"}\n2026-08-14T09:22:41.7791004Z ##[error]Process completed with exit code 22."
    },
    {
      "name": "curl-verbose-basic-auth",
      "hard": false,
      "lines": 13,
      "secrets": [
        {
          "text": "ZGVwbG95OmVvUEZMcjhtWENuOGtNaEdiVw==",
          "kind": "http_basic_auth"
        }
      ],
      "personal_data": [
        {
          "text": "93.184.216.34",
          "kind": "ipv4"
        }
      ],
      "text": "$ curl -v -u deploy:******** https://artifacts.example.com/v2/_catalog\n*   Trying 93.184.216.34:443...\n* Connected to artifacts.example.com (93.184.216.34) port 443\n* Server certificate: artifacts.example.com\n> GET /v2/_catalog HTTP/1.1\n> Host: artifacts.example.com\n> Authorization: Basic ZGVwbG95OmVvUEZMcjhtWENuOGtNaEdiVw==\n> User-Agent: curl/8.5.0\n> Accept: */*\n>\n< HTTP/1.1 200 OK\n< Content-Type: application/json\n{\"repositories\":[\"widget\",\"widget-api\",\"widget-worker\"]}"
    },
    {
      "name": "axios-error-dump",
      "hard": false,
      "lines": 14,
      "secrets": [
        {
          "text": "XE3TGeNe4Xh-BkR-qnEQNT2sFyrUCck3KYncIV77A7eL",
          "kind": "bearer_token"
        }
      ],
      "personal_data": [],
      "text": "Error: Request failed with status code 403\n    at settle (/app/node_modules/axios/lib/core/settle.js:19:12)\n    at IncomingMessage.handleStreamEnd (/app/node_modules/axios/lib/adapters/http.js:599:11)\n  config: {\n    method: 'get',\n    url: 'https://api.example.com/v2/accounts',\n    headers: {\n      Accept: 'application/json, text/plain, */*',\n      Authorization: 'Bearer XE3TGeNe4Xh-BkR-qnEQNT2sFyrUCck3KYncIV77A7eL',\n      'User-Agent': 'axios/1.7.2'\n    },\n    timeout: 30000\n  },\n  status: 403"
    },
    {
      "name": "postgres-connection-failure",
      "hard": false,
      "lines": 7,
      "secrets": [
        {
          "text": "pB5BSA3sAf9kItq1kPBqwgNJ",
          "kind": "url_password"
        }
      ],
      "personal_data": [],
      "text": "2026-08-14 11:03:55.221 UTC [4412] FATAL:  password authentication failed for user \"reporting\"\n2026-08-14 11:03:55.221 UTC [4412] DETAIL:  Connection matched pg_hba.conf line 96\nnode:internal/process/promises:288\nError: connect ECONNREFUSED\n    at Client._connect (/srv/app/node_modules/pg/lib/client.js:132:12)\n  connectionString: 'postgres://reporting:pB5BSA3sAf9kItq1kPBqwgNJ@db-primary.internal:5432/analytics?sslmode=require'\n  attempts: 3"
    },
    {
      "name": "mongodb-uri",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "jy3kxSb6UxSONVd3lHkL",
          "kind": "url_password"
        }
      ],
      "personal_data": [],
      "text": "MongoServerError: Authentication failed.\n    at Connection.onMessage (/app/node_modules/mongodb/lib/cmap/connection.js:202:26)\nuri = mongodb+srv://ingest:jy3kxSb6UxSONVd3lHkL@cluster0.abcde.mongodb.net/events?retryWrites=true&w=majority\ntopology: ReplicaSetNoPrimary\nserverSelectionTimeoutMS: 30000"
    },
    {
      "name": "cloudsql-iam-dsn",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "tSXiXG4lsJa29D0bDcnHBj",
          "kind": "url_password"
        },
        {
          "text": "analytics-writer@acme-prod-471203.iam.gserviceaccount.com",
          "kind": "email"
        }
      ],
      "personal_data": [],
      "text": "sqlalchemy.exc.OperationalError: (psycopg2.OperationalError) connection to server at \"10.42.7.19\", port 5432 failed\nFATAL:  password authentication failed for user \"analytics-writer@acme-prod-471203.iam.gserviceaccount.com\"\n(Background on this error at: https://sqlalche.me/e/20/e3q8)\n  url = postgresql+psycopg2://analytics-writer@acme-prod-471203.iam.gserviceaccount.com:tSXiXG4lsJa29D0bDcnHBj@10.42.7.19:5432/warehouse\n  pool_pre_ping = True"
    },
    {
      "name": "kubectl-describe-pod",
      "hard": false,
      "lines": 16,
      "secrets": [
        {
          "text": "sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR",
          "kind": "generic_assignment"
        },
        {
          "text": "SG.m1yJec3GU4qbNomXZmEr3c.3RmEEXGXIGaFdu0TIwmNjtWjNVEhaSad5ot42IIcuCG",
          "kind": "sendgrid_api_key"
        }
      ],
      "personal_data": [],
      "text": "Name:         mailer-7d9f8c6b4-x2vqk\nNamespace:    production\nNode:         ip-10-0-3-88.eu-central-1.compute.internal\nContainers:\n  mailer:\n    Image:      registry.example.com/acme/mailer:1.14.2\n    Port:       8080/TCP\n    Environment:\n      SESSION_SECRET:    sXAm8YVhKGxh8iII7xhgrSkG13Qtp7z9EgZNhmUR\n      SENDGRID_API_KEY:  SG.m1yJec3GU4qbNomXZmEr3c.3RmEEXGXIGaFdu0TIwmNjtWjNVEhaSad5ot42IIcuCG\n      LOG_LEVEL:         info\n    Mounts:\n      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access (ro)\nEvents:\n  Type    Reason   Age   From     Message\n  Normal  Pulled   12m   kubelet  Successfully pulled image"
    },
    {
      "name": "slack-integration-error",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "xoxb-67147871330-9242071835986-kPeUc0FpTHjXFms0B8jLLDj5",
          "kind": "slack_bot_token"
        },
        {
          "text": "https://hooks.slack.com/services/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",
          "kind": "slack_webhook_url"
        }
      ],
      "personal_data": [],
      "text": "[alerts] 2026-08-14 12:41:07 WARN  slack delivery failed, retrying in 30s\n[alerts] token=xoxb-67147871330-9242071835986-kPeUc0FpTHjXFms0B8jLLDj5\n[alerts] webhook=https://hooks.slack.com/services/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\n[alerts] response={\"ok\":false,\"error\":\"invalid_auth\"}\n[alerts] 2026-08-14 12:41:37 ERROR giving up after 3 attempts"
    },
    {
      "name": "google-api-error",
      "hard": false,
      "lines": 7,
      "secrets": [
        {
          "text": "AIzaDwY1icwRlO8cTjSdHbkECRGPP1uj4SBeYwa",
          "kind": "google_api_key"
        }
      ],
      "personal_data": [],
      "text": "GET https://maps.googleapis.com/maps/api/geocode/json?address=Rathausplatz&key=AIzaDwY1icwRlO8cTjSdHbkECRGPP1uj4SBeYwa\n{\n  \"error_message\": \"This API project is not authorized to use this API.\",\n  \"results\": [],\n  \"status\": \"REQUEST_DENIED\"\n}\ngeocode lookup failed for 3 of 118 rows"
    },
    {
      "name": "twilio-sdk-error",
      "hard": false,
      "lines": 9,
      "secrets": [
        {
          "text": "SK82e662666269e3e9e1893426dee62a09",
          "kind": "twilio_api_key_sid"
        }
      ],
      "personal_data": [
        {
          "text": "ACcbc1489ff048d5c44b029a009587a548",
          "kind": "account_identifier"
        }
      ],
      "text": "twilio.base.exceptions.TwilioRestException: HTTP 401 error: Unable to create record\nTraceback (most recent call last):\n  File \"/srv/notify/sms.py\", line 44, in send\n    client.messages.create(to=to, from_=SENDER, body=body)\n  File \"/usr/lib/python3.11/site-packages/twilio/rest/api/v2010/account/message.py\", line 611, in create\n    payload = self._version.create(method=\"POST\", uri=self._uri, data=data)\naccount_sid=ACcbc1489ff048d5c44b029a009587a548\napi_key_sid=SK82e662666269e3e9e1893426dee62a09\nstatus: 401 Authentication Error - invalid username"
    },
    {
      "name": "npmrc-and-publish",
      "hard": false,
      "lines": 8,
      "secrets": [
        {
          "text": "npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl",
          "kind": "npm_token"
        }
      ],
      "personal_data": [],
      "text": "$ cat ~/.npmrc\n//registry.npmjs.org/:_authToken=npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl\nalways-auth=true\n$ npm publish --access public\nnpm notice package: @acme/widget@1.4.0\nnpm notice total files: 12\nnpm error code E403\nnpm error 403 Forbidden - PUT https://registry.npmjs.org/@acme%2fwidget - You do not have permission to publish"
    },
    {
      "name": "mailgun-delivery-log",
      "hard": false,
      "lines": 6,
      "secrets": [
        {
          "text": "key-a28037f63d15dcdcd3007d2297109354",
          "kind": "mailgun_api_key"
        }
      ],
      "personal_data": [
        {
          "text": "ops@example.com",
          "kind": "email"
        },
        {
          "text": "noreply@example.com",
          "kind": "email"
        }
      ],
      "text": "POST https://api.mailgun.net/v3/mg.example.com/messages\nauth: api:key-a28037f63d15dcdcd3007d2297109354\npayload: to=ops@example.com from=noreply@example.com subject=\"Nightly report\"\nHTTP/1.1 401 Unauthorized\n{\"message\":\"Invalid private key\"}\ndelivery attempt 2 of 5 scheduled for 2026-08-14T13:10:00Z"
    },
    {
      "name": "azure-storage-connection-string",
      "hard": false,
      "lines": 7,
      "secrets": [
        {
          "text": "Sx5Pkc6c7t5J2MtWNrr3QxbzMooN0enlbAWvOa++teV+fgJEwe6mMlqzirM3VDnZj4IMuYCIdKVZ2OQGopgKLw==",
          "kind": "azure_storage_key"
        }
      ],
      "personal_data": [],
      "text": "Azure.RequestFailedException: Server failed to authenticate the request.\nStatus: 403 (Server failed to authenticate the request.)\nErrorCode: AuthenticationFailed\n   at Azure.Storage.Blobs.BlobRestClient.Download(...)\nAZURE_STORAGE_CONNECTION_STRING=DefaultEndpointsProtocol=https;AccountName=acmearchive;AccountKey=Sx5Pkc6c7t5J2MtWNrr3QxbzMooN0enlbAWvOa++teV+fgJEwe6mMlqzirM3VDnZj4IMuYCIdKVZ2OQGopgKLw==;EndpointSuffix=core.windows.net\ncontainer: nightly-exports\nblobs pending: 0"
    },
    {
      "name": "jwt-in-request-log",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJzdmMtYmlsbGluZyIsImlzcyI6ImF1dGguZXhhbXBsZS5jb20iLCJleHAiOjE3ODgwMDAwMDB9.4vnfVmCrKKJ_apsPn0cxCNU-1PHTYhTd9cTQQYsraCW",
          "kind": "jwt"
        }
      ],
      "personal_data": [],
      "text": "10.2.14.7 - - [14/Aug/2026:13:55:02 +0000] \"POST /v1/invoices HTTP/1.1\" 401 71 \"-\" \"acme-billing/2.3.1\"\nupstream_status=401 request_id=6f0b2c4e8a1d\nauthorization=Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJzdmMtYmlsbGluZyIsImlzcyI6ImF1dGguZXhhbXBsZS5jb20iLCJleHAiOjE3ODgwMDAwMDB9.4vnfVmCrKKJ_apsPn0cxCNU-1PHTYhTd9cTQQYsraCW\nreason=token expired at 2026-08-14T13:40:00Z\nretry_after=0"
    },
    {
      "name": "ssh-private-key-in-log",
      "hard": false,
      "lines": 15,
      "secrets": [
        {
          "text": "    -----BEGIN RSA PRIVATE KEY-----\n    N4ULWEj40wSAXV+92U2fV+irTWPZW2p8K3vw6za4wRnizuASJky89NRJ6jMbcfS9\n    LAaW0lS/Q/wwz44vhaNklzoa8YSOjWgGk0tKjT/jSrc7eRHXQQwIelGx2nIQUKrQ\n    +sRC9KJKsdrZx4y6sLOOlxmThscFYOedQnk6EJGDADU26dOs6YK0on3dHrILwxeY\n    GFmm0kHmff7QbWIt5u2ou09P5n5XukKM8wGgT2gSdtvYGt26n4GSeq2YQ8osyaSV\n    gh/sXMuNkndLl1pUgAlusan7CicbJJ5o2hQ40J8OFwy9X8daESKG1iDde/2cBc7I\n    TMHyupYmQ9L21S3efUuuBTnwj8tFX6Lr4VTdIcBHdzgVAxYDYLqa92+yScMSzNAW\n    uBmzeT7RSlsKOF6x64DpJmKpwFlSX5i8RdUWOF7j=\n    -----END RSA PRIVATE KEY-----",
          "kind": "private_key_pem"
        }
      ],
      "personal_data": [
        {
          "text": "/root",
          "kind": "home_directory"
        }
      ],
      "text": "ansible-playbook deploy.yml -l web\nTASK [copy deploy key] *********************************************************\nfatal: [web1]: FAILED! => {\"changed\": false, \"msg\": \"Destination directory /root/.ssh does not exist\"}\n  content: |\n    -----BEGIN RSA PRIVATE KEY-----\n    N4ULWEj40wSAXV+92U2fV+irTWPZW2p8K3vw6za4wRnizuASJky89NRJ6jMbcfS9\n    LAaW0lS/Q/wwz44vhaNklzoa8YSOjWgGk0tKjT/jSrc7eRHXQQwIelGx2nIQUKrQ\n    +sRC9KJKsdrZx4y6sLOOlxmThscFYOedQnk6EJGDADU26dOs6YK0on3dHrILwxeY\n    GFmm0kHmff7QbWIt5u2ou09P5n5XukKM8wGgT2gSdtvYGt26n4GSeq2YQ8osyaSV\n    gh/sXMuNkndLl1pUgAlusan7CicbJJ5o2hQ40J8OFwy9X8daESKG1iDde/2cBc7I\n    TMHyupYmQ9L21S3efUuuBTnwj8tFX6Lr4VTdIcBHdzgVAxYDYLqa92+yScMSzNAW\n    uBmzeT7RSlsKOF6x64DpJmKpwFlSX5i8RdUWOF7j=\n    -----END RSA PRIVATE KEY-----\nPLAY RECAP *********************************************************************\nweb1  : ok=4    changed=1    unreachable=0    failed=1"
    },
    {
      "name": "gcp-service-account-json",
      "hard": false,
      "lines": 8,
      "secrets": [
        {
          "text": "-----BEGIN EC PRIVATE KEY-----\\nPhLFFJG4n4HGEssN6C1ezczvg5GlJywwk6P50V0erWWRsRXhkwxoIASE38iDVhxi\\nFhj+y7MqsQGuf9mQ/S8DiMoGoTRsRCok6qJtXlttgszL2hymSQx/0DHYlgcaHNhk\\nl2r9HOD22qccC/yTuh3ewd76wYP9+biH6QgX5w9F2ucabfpKUyXE82272eAia3Xl\\nRzXATfry73iZ0nTHQWpUUOpolfA6HeSrUS3GEasD=\\n-----END EC PRIVATE KEY-----",
          "kind": "private_key_escaped_json"
        }
      ],
      "personal_data": [
        {
          "text": "5d4097778ba69615b3b06b9e090ab06ca551787d",
          "kind": "key_identifier"
        },
        {
          "text": "bq-loader@acme-analytics-4471.iam.gserviceaccount.com",
          "kind": "email"
        }
      ],
      "text": "{\n  \"type\": \"service_account\",\n  \"project_id\": \"acme-analytics-4471\",\n  \"private_key_id\": \"5d4097778ba69615b3b06b9e090ab06ca551787d\",\n  \"private_key\": \"-----BEGIN EC PRIVATE KEY-----\\nPhLFFJG4n4HGEssN6C1ezczvg5GlJywwk6P50V0erWWRsRXhkwxoIASE38iDVhxi\\nFhj+y7MqsQGuf9mQ/S8DiMoGoTRsRCok6qJtXlttgszL2hymSQx/0DHYlgcaHNhk\\nl2r9HOD22qccC/yTuh3ewd76wYP9+biH6QgX5w9F2ucabfpKUyXE82272eAia3Xl\\nRzXATfry73iZ0nTHQWpUUOpolfA6HeSrUS3GEasD=\\n-----END EC PRIVATE KEY-----\",\n  \"client_email\": \"bq-loader@acme-analytics-4471.iam.gserviceaccount.com\",\n  \"token_uri\": \"https://oauth2.googleapis.com/token\"\n}"
    },
    {
      "name": "payment-processing-log",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "4539281402612756",
          "kind": "payment_card"
        },
        {
          "text": "5412455030940016",
          "kind": "payment_card"
        }
      ],
      "personal_data": [],
      "text": "2026-08-14 14:02:11 INFO  charge.attempt order=A-88213 amount=4990 currency=EUR\n2026-08-14 14:02:11 DEBUG gateway payload card=4539281402612756 exp=11/29 cvc=***\n2026-08-14 14:02:12 WARN  charge.declined order=A-88213 code=insufficient_funds\n2026-08-14 14:02:19 DEBUG gateway payload card=5412455030940016 exp=03/28 cvc=***\n2026-08-14 14:02:20 INFO  charge.captured order=A-88213 amount=4990"
    },
    {
      "name": "github-oauth-callback",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "gho_6at2Au1P2f96VNtjCLI0UfzcXyfdMhdy09KY",
          "kind": "github_oauth_token"
        }
      ],
      "personal_data": [],
      "text": "[oauth] exchanging code for token\n[oauth] POST https://github.com/login/oauth/access_token -> 200\n[oauth] access_token=gho_6at2Au1P2f96VNtjCLI0UfzcXyfdMhdy09KY scope=repo,read:org token_type=bearer\n[oauth] storing under user 40219\n[oauth] GET https://api.github.com/user -> 200 login=acme-ci-bot"
    },
    {
      "name": "terraform-apply-output",
      "hard": false,
      "lines": 10,
      "secrets": [
        {
          "text": "AKIAS848NZIH8SH6OY2G",
          "kind": "aws_access_key_id"
        },
        {
          "text": "yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+",
          "kind": "aws_secret_access_key"
        }
      ],
      "personal_data": [],
      "text": "Terraform will perform the following actions:\n\n  # aws_iam_access_key.ci will be created\n  + resource \"aws_iam_access_key\" \"ci\" {\n      + id     = \"AKIAS848NZIH8SH6OY2G\"\n      + secret = \"yleJSiyhphrrNlYj2uyPGrbVfMe6FBNVtXjBHc7+\"\n      + status = \"Active\"\n      + user   = \"ci-deployer\"\n    }\n\nPlan: 1 to add, 0 to change, 0 to destroy.\nApply complete! Resources: 1 added, 0 changed, 0 destroyed."
    },
    {
      "name": "jenkins-console-mixed",
      "hard": false,
      "lines": 10,
      "secrets": [
        {
          "text": "sk_live_mgpaxYbyeXz7G8HpO0FDD2nY",
          "kind": "stripe_secret_key"
        },
        {
          "text": "npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl",
          "kind": "npm_token"
        }
      ],
      "personal_data": [],
      "text": "Started by user ci-runner\nBuilding in workspace /var/lib/jenkins/workspace/widget-release\n[widget-release] $ /bin/sh -xe /tmp/jenkins1837.sh\n+ export STRIPE_SECRET_KEY=sk_live_mgpaxYbyeXz7G8HpO0FDD2nY\n+ export NPM_TOKEN=npm_2gMpGtfUS9eiyda7ZpVrerlrHQkHi76wxIFl\n+ npm ci --omit=dev\nadded 214 packages in 9s\n+ npm run build\nBuild step 'Execute shell' marked build as success\nFinished: SUCCESS"
    },
    {
      "name": "pip-index-url-with-password",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "eoPFLr8mXCn8kMhGbW",
          "kind": "url_password"
        }
      ],
      "personal_data": [],
      "text": "$ pip install acme-sdk==2.1.0\nLooking in indexes: https://pypi.org/simple, https://builder:eoPFLr8mXCn8kMhGbW@pypi.internal.example.com/simple\n  WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken\nERROR: Could not find a version that satisfies the requirement acme-sdk==2.1.0\nERROR: No matching distribution found for acme-sdk==2.1.0"
    },
    {
      "name": "ai-gateway-upstream-errors",
      "hard": false,
      "lines": 6,
      "secrets": [
        {
          "text": "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",
          "kind": "groq_api_key"
        },
        {
          "text": "xai-ndSzlWHh6HLIkEUrJh4ykLY41nhyxoA7GpiJHyGKEZmffyGz",
          "kind": "xai_api_key"
        },
        {
          "text": "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",
          "kind": "perplexity_api_key"
        },
        {
          "text": "fw_s3tbUpcEK3WqKBLmyJFsXFrMiYTb",
          "kind": "fireworks_api_key"
        }
      ],
      "personal_data": [],
      "text": "2026-08-24T09:14:02Z INFO  proxy: upstream returned 401, dumping request for support\n2026-08-24T09:14:02Z DEBUG proxy: {\"upstream\":\"groq\",\"auth\":\"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\",\"model\":\"llama-3.3-70b\"}\n2026-08-24T09:14:03Z DEBUG proxy: {\"upstream\":\"xai\",\"auth\":\"xai-ndSzlWHh6HLIkEUrJh4ykLY41nhyxoA7GpiJHyGKEZmffyGz\",\"model\":\"grok-3\"}\n2026-08-24T09:14:03Z DEBUG proxy: {\"upstream\":\"perplexity\",\"auth\":\"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\",\"model\":\"sonar-pro\"}\n2026-08-24T09:14:04Z DEBUG proxy: {\"upstream\":\"fireworks\",\"auth\":\"fw_s3tbUpcEK3WqKBLmyJFsXFrMiYTb\",\"model\":\"mixtral\"}\n2026-08-24T09:14:04Z WARN  proxy: 4 of 4 upstreams rejected, falling back to cache"
    },
    {
      "name": "inference-worker-traceback",
      "hard": false,
      "lines": 9,
      "secrets": [
        {
          "text": "r8_KkfGKEKv9UG9b40K9n9dwbz9aQ1NvA9AFQz4Q",
          "kind": "replicate_api_token"
        },
        {
          "text": "pcsk_jH7G0B_HKIq8QkD7PkErfX3oPy1Nm4Y7U01gPSCZ2zdg6aF",
          "kind": "pinecone_api_key"
        },
        {
          "text": "sk_b797f6169a34be3642691072341a96305af6aaf9d5950924",
          "kind": "elevenlabs_api_key"
        }
      ],
      "personal_data": [],
      "text": "Traceback (most recent call last):\n  File \"/srv/worker/pipeline.py\", line 118, in run_step\n    client = replicate.Client(api_token=\"r8_KkfGKEKv9UG9b40K9n9dwbz9aQ1NvA9AFQz4Q\")\n  File \"/srv/worker/pipeline.py\", line 141, in embed\n    index = pinecone.Index(api_key=\"pcsk_jH7G0B_HKIq8QkD7PkErfX3oPy1Nm4Y7U01gPSCZ2zdg6aF\", host=\"idx-4a91.svc.pinecone.io\")\n  File \"/srv/worker/pipeline.py\", line 166, in narrate\n    audio = eleven.generate(voice=\"rachel\", key=\"sk_b797f6169a34be3642691072341a96305af6aaf9d5950924\")\nrequests.exceptions.HTTPError: 401 Client Error: Unauthorized\nworker exited with status 1 after 4.812s"
    },
    {
      "name": "platform-cli-auth-failures",
      "hard": false,
      "lines": 9,
      "secrets": [
        {
          "text": "dp.pt.XioYr0ln2m7mtZbZj2Hb588D8eKGEk5bgMD3ByGq",
          "kind": "doppler_token"
        },
        {
          "text": "dapi634fd9542f642607dc657bef8613f968",
          "kind": "databricks_pat"
        },
        {
          "text": "glsa_ce3VgrGx9eapEhJGvlqCMEJWQEyKuokI_f814ceac",
          "kind": "grafana_service_account_token"
        },
        {
          "text": "pscale_tkn_C7CASX5cuCGvcAciRyfx5qeOBKuGiN8aIhkkPCOh",
          "kind": "planetscale_token"
        },
        {
          "text": "sbp_07618fb064d9badd3adbf76b9f68efeb033b9ba7",
          "kind": "supabase_access_token"
        },
        {
          "text": "nfp_zIIEfncPaEIfCsEuNVgTjECPwUPhnOwU6Om5",
          "kind": "netlify_pat"
        },
        {
          "text": "tskey-auth-kEQQopkztehdm5-vs00OcvscHeuqT8Hgw0Cf1",
          "kind": "tailscale_auth_key"
        }
      ],
      "personal_data": [],
      "text": "$ make bootstrap\ndoppler  : using cached credential dp.pt.XioYr0ln2m7mtZbZj2Hb588D8eKGEk5bgMD3ByGq\ndatabricks: workspace 4471 rejected dapi634fd9542f642607dc657bef8613f968 (403)\ngrafana  : provisioning datasource with glsa_ce3VgrGx9eapEhJGvlqCMEJWQEyKuokI_f814ceac\npscale   : branch \"staging\" not found for pscale_tkn_C7CASX5cuCGvcAciRyfx5qeOBKuGiN8aIhkkPCOh\nsupabase : project ref mismatch, sent sbp_07618fb064d9badd3adbf76b9f68efeb033b9ba7\nnetlify  : deploy aborted, nfp_zIIEfncPaEIfCsEuNVgTjECPwUPhnOwU6Om5 lacks build:write\ntailscale: node registration failed with tskey-auth-kEQQopkztehdm5-vs00OcvscHeuqT8Hgw0Cf1\nmake: *** [Makefile:22: bootstrap] Error 1"
    },
    {
      "name": "ci-publish-step-output",
      "hard": false,
      "lines": 16,
      "secrets": [
        {
          "text": "rubygems_71d2618a89a01d62ca6928a2dc36b57ccfac45d6f9e053c5",
          "kind": "rubygems_api_key"
        },
        {
          "text": "oy2fqoze38m76941433wq7y8a9p6xcn8hubcb6bif4dsy6",
          "kind": "nuget_api_key"
        },
        {
          "text": "squ_9d14e323551d6ad97951b5511a748b02dae48db0",
          "kind": "sonarqube_token"
        },
        {
          "text": "sntrys_sM0Q2h1Hsmy3jtWkLQCEzK_N_LwQEit_fgTNbOC4UwDEb-x8_c6080ce9e6fb",
          "kind": "sentry_org_auth_token"
        },
        {
          "text": "NRAK-NLBGYH9VCODBZVRA97QWY9N80B",
          "kind": "newrelic_user_key"
        },
        {
          "text": "dt0c01.BJ96IR64YX04MMPTN6STQDF1.3448b53042b1bdcf2ea6805f898de14d2f1b5645df2cfe2af9df15281829b0fe",
          "kind": "dynatrace_api_token"
        },
        {
          "text": "hY97qfbJxWfzd1.atlasv1.A6FW663MDA5qJStVwFmic11jZbdb7Z6Mnwc209CGO1KFaDa6Sdf2GIjqyx07ziBtM8jB",
          "kind": "terraform_cloud_token"
        }
      ],
      "personal_data": [],
      "text": "##[group]Run ./scripts/release.sh --verbose\n+ gem push pkg/acme-2.4.0.gem --key rubygems_71d2618a89a01d62ca6928a2dc36b57ccfac45d6f9e053c5\nPushing gem to https://rubygems.org... 401 Unauthorized\n+ dotnet nuget push out/Acme.2.4.0.nupkg -k oy2fqoze38m76941433wq7y8a9p6xcn8hubcb6bif4dsy6\nerror: Response status code does not indicate success: 403 (Forbidden).\n+ sonar-scanner -Dsonar.token=squ_9d14e323551d6ad97951b5511a748b02dae48db0\nERROR: You are not authorized to run analysis. Please contact the project administrator.\n+ sentry-cli releases new 2.4.0 --auth-token sntrys_sM0Q2h1Hsmy3jtWkLQCEzK_N_LwQEit_fgTNbOC4UwDEb-x8_c6080ce9e6fb\nerror: API request failed (http status 401)\n+ curl -H \"Api-Key: NRAK-NLBGYH9VCODBZVRA97QWY9N80B\" https://api.newrelic.com/v2/applications.json\n{\"error\":{\"title\":\"Invalid API key\"}}\n+ curl -H \"Authorization: Api-Token dt0c01.BJ96IR64YX04MMPTN6STQDF1.3448b53042b1bdcf2ea6805f898de14d2f1b5645df2cfe2af9df15281829b0fe\" https://abc12345.live.dynatrace.com/api/v2/metrics\n{\"error\":{\"code\":401,\"message\":\"Token is invalid\"}}\n+ terraform login --token hY97qfbJxWfzd1.atlasv1.A6FW663MDA5qJStVwFmic11jZbdb7Z6Mnwc209CGO1KFaDa6Sdf2GIjqyx07ziBtM8jB\nError: Failed to retrieve account details: unauthorized\n##[error]Process completed with exit code 1"
    },
    {
      "name": "webhook-and-oauth-callback-dump",
      "hard": false,
      "lines": 8,
      "secrets": [
        {
          "text": "https://discord.com/api/webhooks/8715030390898486892/eUWGVYHFbmRdLx84HafEj7soitS2luhGq0GyZx7l4RWmHq673FqN2tPIGDUk3YqxTE6R",
          "kind": "discord_webhook_url"
        },
        {
          "text": "xapp-1-AC4EJLPN86E-0626629748879-d2e9a329b652bc14dbe0a96092c9cd6e3c16631965706f2c2df88335c4488296",
          "kind": "slack_app_level_token"
        },
        {
          "text": "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",
          "kind": "google_oauth_client_secret"
        },
        {
          "text": "re_eUHltDEE_BZY6WxgFtvq8IOSBcBG5pbu0",
          "kind": "resend_api_key"
        },
        {
          "text": "PMAK-645872dc58fd3dbee5040ffe-e5b7a2004886fe13b2d9d2d1a1b6112c3d",
          "kind": "postman_api_key"
        },
        {
          "text": "pat9hFN0dPSG1vNp5.33bb336051f085611955857d086347a5f59ed4bb56d139d10332ff0dd6700a46",
          "kind": "airtable_pat"
        }
      ],
      "personal_data": [],
      "text": "[notifier] 2026-08-24 11:02:19 delivery failed, dumping config\n[notifier] discord  -> https://discord.com/api/webhooks/8715030390898486892/eUWGVYHFbmRdLx84HafEj7soitS2luhGq0GyZx7l4RWmHq673FqN2tPIGDUk3YqxTE6R\n[notifier] slack    -> socket mode, app token xapp-1-AC4EJLPN86E-0626629748879-d2e9a329b652bc14dbe0a96092c9cd6e3c16631965706f2c2df88335c4488296\n[notifier] oauth    -> token exchange body: client_id=8814-acme.apps.googleusercontent.com&client_secret=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&grant_type=refresh_token\n[notifier] email    -> resend rejected re_eUHltDEE_BZY6WxgFtvq8IOSBcBG5pbu0\n[notifier] runbook  -> collection sync used PMAK-645872dc58fd3dbee5040ffe-e5b7a2004886fe13b2d9d2d1a1b6112c3d\n[notifier] roster   -> base appNQ4812 read with pat9hFN0dPSG1vNp5.33bb336051f085611955857d086347a5f59ed4bb56d139d10332ff0dd6700a46\n[notifier] 6 of 6 channels down, paging on-call"
    },
    {
      "name": "edge-aws-secret-ends-in-plus",
      "hard": false,
      "lines": 8,
      "secrets": [
        {
          "text": "AKIAURQBS6BJBG9KIOCU",
          "kind": "aws_access_key_id"
        },
        {
          "text": "rTo7A8kiOa2og43qlrJj3QnJEW5Uptd9zXyaJD1+",
          "kind": "aws_secret_access_key"
        }
      ],
      "personal_data": [],
      "text": "$ terraform apply -var-file=prod.tfvars\n\nError: error configuring S3 Backend: no valid credential sources found\n\n  on backend.tf line 3, in terraform:\n   3:   backend \"s3\" {\n\nFalling back to the environment the runner exported:\n  AWS_ACCESS_KEY_ID=AKIAURQBS6BJBG9KIOCU\n  AWS_SECRET_ACCESS_KEY=rTo7A8kiOa2og43qlrJj3QnJEW5Uptd9zXyaJD1+\n  AWS_REGION=eu-central-1"
    },
    {
      "name": "edge-github-tokens-containing-placeholder-words",
      "hard": false,
      "lines": 5,
      "secrets": [
        {
          "text": "ghp_zeHeBvWOScilotcfalseSCXZVjrylD5kdjXF",
          "kind": "github_pat_classic"
        },
        {
          "text": "ghp_2NSyJC1tI2FKJpPi71p6WoT1jxel3Mmxnull",
          "kind": "github_pat_classic"
        }
      ],
      "personal_data": [],
      "text": "2026-08-29T11:02:14Z ERROR ci: 2 of 3 tokens rejected by api.github.com\n2026-08-29T11:02:14Z DEBUG ci: rotating in GITHUB_TOKEN=ghp_zeHeBvWOScilotcfalseSCXZVjrylD5kdjXF\n2026-08-29T11:02:15Z DEBUG ci: previous was GITHUB_TOKEN=ghp_2NSyJC1tI2FKJpPi71p6WoT1jxel3Mmxnull\n2026-08-29T11:02:15Z INFO  ci: cache_enabled=false retry_after=null\n2026-08-29T11:02:16Z INFO  ci: job failed after 3 attempts"
    },
    {
      "name": "edge-openai-project-key-ends-in-hyphen",
      "hard": false,
      "lines": 4,
      "secrets": [
        {
          "text": "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",
          "kind": "openai_project_key"
        }
      ],
      "personal_data": [],
      "text": "Traceback (most recent call last):\n  File \"/srv/app/summarise.py\", line 61, in <module>\n    resp = client.responses.create(model=\"gpt-4.1\", input=doc)\nopenai.AuthenticationError: Error code: 401 - {'error': {'message': 'Incorrect API key provided: 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. You can find your API key at https://platform.openai.com/account/api-keys.', 'type': 'invalid_request_error', 'code': 'invalid_api_key'}}"
    },
    {
      "name": "edge-gitlab-pat-ends-in-hyphen",
      "hard": false,
      "lines": 4,
      "secrets": [
        {
          "text": "glpat-YRp1nT20R8TzBTzSP0X-",
          "kind": "gitlab_pat"
        }
      ],
      "personal_data": [],
      "text": "$ glab auth status\n  ERROR: failed to validate token: GET https://gitlab.com/api/v4/user: 401\n  token in use: glpat-YRp1nT20R8TzBTzSP0X-\n  hint: export GITLAB_TOKEN=<token> or run 'glab auth login'"
    },
    {
      "name": "edge-confluent-secret-ends-in-slash",
      "hard": false,
      "lines": 7,
      "secrets": [
        {
          "text": "PKJC11vBfIZXvE3x",
          "kind": "confluent_cloud_key"
        },
        {
          "text": "zP9R54z0i1cdIYjkAyZ4yLthZQs540j1AmbsNkHHNdDJjBhXlZNkb/eobnW718V/",
          "kind": "confluent_cloud_secret"
        }
      ],
      "personal_data": [],
      "text": "# client.properties written by the bootstrap script\nbootstrap.servers=pkc-abc12.eu-central-1.aws.confluent.cloud:9092\nsecurity.protocol=SASL_SSL\nsasl.mechanisms=PLAIN\nconfluent_key: \"PKJC11vBfIZXvE3x\"\nconfluent_secret: \"zP9R54z0i1cdIYjkAyZ4yLthZQs540j1AmbsNkHHNdDJjBhXlZNkb/eobnW718V/\"\nsession.timeout.ms=45000"
    },
    {
      "name": "edge-vault-token-with-letter-prefixed-body",
      "hard": false,
      "lines": 4,
      "secrets": [
        {
          "text": "hvs.YMUclgLSbJAqFZvUsapvjzsuYOyrIzTeDd5rQayOPoo07iDJ9hPr4jhPhnYkHQA0SpXp1ehdFSnhvBon1W8jNTjBwaSnCJt",
          "kind": "vault_service_token"
        }
      ],
      "personal_data": [],
      "text": "[agent] 2026-08-29 11:44:02 renew failed, token is expired\n[agent] 2026-08-29 11:44:02 X-Vault-Token: hvs.YMUclgLSbJAqFZvUsapvjzsuYOyrIzTeDd5rQayOPoo07iDJ9hPr4jhPhnYkHQA0SpXp1ehdFSnhvBon1W8jNTjBwaSnCJt\n[agent] 2026-08-29 11:44:02 falling back to the AppRole login at auth/approle/login\n[agent] 2026-08-29 11:44:03 lease 8f21c4 revoked"
    },
    {
      "name": "custom-vendor-prefix-convention",
      "hard": false,
      "lines": 4,
      "secrets": [
        {
          "text": "acme_live_WbPJCu9Re4vvGlFOXZMflQtmJVGQcmBR",
          "kind": "custom_internal_format"
        }
      ],
      "personal_data": [],
      "text": "[gateway] 2026-08-14 15:11:44 auth failure\n[gateway] presented key: acme_live_WbPJCu9Re4vvGlFOXZMflQtmJVGQcmBR\n[gateway] key belongs to tenant 8812 (suspended 2026-07-30)\n[gateway] returning 402 payment_required"
    },
    {
      "name": "ansi-github-actions-raw-log",
      "hard": false,
      "lines": 10,
      "secrets": [
        {
          "text": "AKIALH9GA4LZ4CCQ5HW1",
          "kind": "aws_access_key_id"
        },
        {
          "text": "4Lo1foNMOA4ae2qhbQER2qhIQ5fIEJzwFfBPOOgj",
          "kind": "aws_secret_access_key"
        },
        {
          "text": "ghp_Sc4m1dqzFFY2MTPdaxpvaAOGfP4VlMscPWHB",
          "kind": "github_pat_classic"
        }
      ],
      "personal_data": [],
      "text": "2026-08-31T04:11:02.1234567Z ##[group]Run ./.github/actions/deploy\n2026-08-31T04:11:02.1240118Z \u001b[36;1mwith:\u001b[0m\n2026-08-31T04:11:02.1244902Z   environment: production\n2026-08-31T04:11:02.1249330Z   region: eu-central-1\n2026-08-31T04:11:02.4410883Z ##[endgroup]\n2026-08-31T04:11:03.0028114Z \u001b[32m$\u001b[0m aws sts get-caller-identity\n2026-08-31T04:11:03.5510227Z \u001b[31mAn error occurred (InvalidClientTokenId)\u001b[0m for key \u001b[1;33mAKIALH9GA4LZ4CCQ5HW1\u001b[0m\n2026-08-31T04:11:03.5512004Z \u001b[2mAWS_SECRET_ACCESS_KEY=\u001b[0m\u001b[33m4Lo1foNMOA4ae2qhbQER2qhIQ5fIEJzwFfBPOOgj\u001b[0m\n2026-08-31T04:11:03.9910044Z \u001b[2mGITHUB_TOKEN=\u001b[0m\u001b[33mghp_Sc4m1dqzFFY2MTPdaxpvaAOGfP4VlMscPWHB\u001b[0m\n2026-08-31T04:11:04.1120993Z \u001b[31m##[error]\u001b[0mProcess completed with exit code 255."
    },
    {
      "name": "ansi-docker-compose-logs",
      "hard": false,
      "lines": 8,
      "secrets": [
        {
          "text": "nFY9rsMvrKdtHBuPPcCG1vUD",
          "kind": "url_password"
        },
        {
          "text": "oc-c7wPtW1dGYQ7OV4D05CPXWjvEHgtSHDMh0kHmF3f7",
          "kind": "bearer_token"
        }
      ],
      "personal_data": [],
      "text": "\u001b[36mweb-1     |\u001b[0m 2026-08-31 04:12:41 INFO  boot: connecting to primary\n\u001b[36mweb-1     |\u001b[0m 2026-08-31 04:12:41 ERROR pg: password authentication failed for user \"app\"\n\u001b[36mweb-1     |\u001b[0m   dsn=postgres://app:\u001b[31mnFY9rsMvrKdtHBuPPcCG1vUD\u001b[0m@db.internal:5432/orders\n\u001b[35mworker-1  |\u001b[0m 2026-08-31 04:12:42 WARN  sync: upstream returned 401, dumping the header it sent\n\u001b[35mworker-1  |\u001b[0m   Authorization: Bearer \u001b[33moc-c7wPtW1dGYQ7OV4D05CPXWjvEHgtSHDMh0kHmF3f7\u001b[0m\n\u001b[32mdb-1      |\u001b[0m 2026-08-31 04:12:42 LOG:  connection authorized: user=app database=orders\n\u001b[36mweb-1     |\u001b[0m 2026-08-31 04:12:43 FATAL boot: giving up after 3 attempts\n\u001b[36mweb-1 exited with code 1\u001b[0m"
    },
    {
      "name": "ansi-pytest-npm-publish-failure",
      "hard": false,
      "lines": 11,
      "secrets": [
        {
          "text": "npm_9HFFJOJwJZk1gtaWmC6q4j5NyT1tuBDeoBGt",
          "kind": "npm_token"
        }
      ],
      "personal_data": [],
      "text": "\u001b[1m\u001b[31m________________________ test_publish_release _________________________\u001b[0m\n\n    def test_publish_release(tmp_path):\n        write_npmrc(tmp_path, token=os.environ[\"NPM_TOKEN\"])\n\u001b[1m\u001b[31m>       assert publish(tmp_path) == 0\u001b[0m\n\u001b[1m\u001b[31mE       AssertionError: npm exited 1\u001b[0m\n\u001b[33m--------------------------- Captured stderr call ---------------------------\u001b[0m\nnpm \u001b[31merror\u001b[0m code E401\nnpm \u001b[31merror\u001b[0m 401 Unauthorized - PUT https://registry.npmjs.org/@acme%2fwidget\nnpm \u001b[31merror\u001b[0m sent //registry.npmjs.org/:_authToken=\u001b[31mnpm_9HFFJOJwJZk1gtaWmC6q4j5NyT1tuBDeoBGt\u001b[0m\n\u001b[1m\u001b[31mFAILED\u001b[0m test/release/test_publish.py::test_publish_release\n\u001b[1m\u001b[31m1 failed\u001b[0m, \u001b[32m118 passed\u001b[0m in 12.08s"
    },
    {
      "name": "ansi-terraform-plan-diff",
      "hard": false,
      "lines": 11,
      "secrets": [
        {
          "text": "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",
          "kind": "sendgrid_api_key"
        },
        {
          "text": "pSzNqEDmrq1tIhJ0Kyt0SkA976AxPOQfxnEDOqmP",
          "kind": "generic_assignment"
        }
      ],
      "personal_data": [],
      "text": "\u001b[1mTerraform will perform the following actions:\u001b[0m\n\n  \u001b[1m# kubernetes_secret.mailer\u001b[0m will be \u001b[32mcreated\u001b[0m\n\u001b[32m  +\u001b[0m\u001b[0m resource \"kubernetes_secret\" \"mailer\" {\n\u001b[32m      +\u001b[0m\u001b[0m data = {\n\u001b[32m          +\u001b[0m\u001b[0m \"SENDGRID_API_KEY\" = \"\u001b[32mSG.6aOUy3JEmyK45WjelJ0E8d.VtRTmf6xuj3pEdt1b2nDra3eRLeD08kT2i2P1Y2Q8Ey\u001b[0m\"\n\u001b[32m          +\u001b[0m\u001b[0m \"SESSION_SECRET\"   = \"\u001b[32mpSzNqEDmrq1tIhJ0Kyt0SkA976AxPOQfxnEDOqmP\u001b[0m\"\n\u001b[32m        }\u001b[0m\n\u001b[32m      +\u001b[0m\u001b[0m id = (known after apply)\n    }\n\n\u001b[1mPlan:\u001b[0m \u001b[32m1 to add\u001b[0m, 0 to change, \u001b[31m0 to destroy\u001b[0m.\n\u001b[31mError:\u001b[0m Failed to save state: the plan above was printed to the job log"
    },
    {
      "name": "hard-shapeless-password",
      "hard": true,
      "lines": 5,
      "secrets": [
        {
          "text": "correct-horse-staple",
          "kind": "shapeless_password"
        }
      ],
      "personal_data": [],
      "text": "# support ticket #44812, pasted by the customer\nI ran the importer like you said:\n  $ acme-import --user warehouse --password correct-horse-staple data/aug.csv\nand it still says \"permission denied on table stock_levels\".\nDo I need the admin account for this?"
    },
    {
      "name": "hard-capability-url",
      "hard": true,
      "lines": 5,
      "secrets": [
        {
          "text": "QVgzvdR8Bm5dxXQ3LKlU3wThwB",
          "kind": "capability_url_segment"
        }
      ],
      "personal_data": [],
      "text": "[export-worker] 2026-08-14 16:02:19 job 5512 finished, 84,102 rows\n[export-worker] signed link (valid 7 days), sent to the requester:\n[export-worker]   https://files.acme.io/d/QVgzvdR8Bm5dxXQ3LKlU3wThwB/aug-ledger.csv\n[export-worker] no auth required on that path by design\n[export-worker] job 5512 archived"
    },
    {
      "name": "hard-token-split-across-lines",
      "hard": true,
      "lines": 4,
      "secrets": [
        {
          "text": "ghp_w4p47e97ZaWlxQvOxnUT",
          "kind": "wrapped_token"
        }
      ],
      "personal_data": [],
      "text": "2026-08-14 15:40:02 ERROR remote rejected: bad credentials\n2026-08-14 15:40:02 ERROR sent header \"Authorization: token ghp_w4p47e97ZaWlxQvOxnUT\n2026-08-14 15:40:02 ERROR jbmzTNKR9iEIc6kC\"\n2026-08-14 15:40:02 ERROR give up, 3 of 3 attempts used"
    }
  ]
}