Struct RawMatch 

pub struct RawMatch {
    pub detector_id: String,
    pub detector_name: String,
    pub service: String,
    pub severity: Severity,
    pub credential: String,
    pub companion: Option<String>,
    pub location: MatchLocation,
    pub entropy: Option<f64>,
    pub confidence: Option<f64>,
}

A credential match found by the scanner, before verification.

Examples

use keyhog_core::{MatchLocation, RawMatch, Severity};

let finding = RawMatch {
    detector_id: "demo-token".into(),
    detector_name: "Demo Token".into(),
    service: "demo".into(),
    severity: Severity::High,
    credential: "demo_ABC12345".into(),
    companion: None,
    location: MatchLocation {
        source: "filesystem".into(),
        file_path: Some(".env".into()),
        line: Some(1),
        offset: 0,
        commit: None,
        author: None,
        date: None,
    },
    entropy: None,
    confidence: Some(0.9),
};

assert_eq!(finding.detector_id, "demo-token");

Fields

detector_id: String

Stable detector identifier.

detector_name: String

Human-readable detector name.

service: String

Service namespace associated with the detector.

severity: Severity

Detector severity level.

credential: String

Matched credential bytes before redaction.

companion: Option<String>

Companion credential or context value extracted nearby.

location: MatchLocation

Source location for the match.

entropy: Option<f64>

Shannon entropy of the matched credential (0.0 - 8.0).

confidence: Option<f64>

Confidence score (0.0 - 1.0) combining entropy, keyword proximity, file type, etc.

Implementations

impl RawMatch

pub fn deduplication_key(&self) -> (String, String)

Deduplication key: same detector + same credential = same finding. Git history includes commit ID so the same secret in different commits stays distinct.

Examples

use keyhog_core::{MatchLocation, RawMatch, Severity};

let finding = RawMatch {
    detector_id: "demo".into(),
    detector_name: "Demo".into(),
    service: "demo".into(),
    severity: Severity::High,
    credential: "demo_ABC12345".into(),
    companion: None,
    location: MatchLocation {
        source: "filesystem".into(),
        file_path: Some(".env".into()),
        line: Some(1),
        offset: 0,
        commit: None,
        author: None,
        date: None,
    },
    entropy: None,
    confidence: None,
};

assert_eq!(finding.deduplication_key().0, "demo");

Trait Implementations

impl Clone for RawMatch

fn clone(&self) -> RawMatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RawMatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for RawMatch

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.