Struct DedupedMatch 

pub struct DedupedMatch {
    pub detector_id: Arc<str>,
    pub detector_name: Arc<str>,
    pub service: Arc<str>,
    pub severity: Severity,
    pub credential: SensitiveString,
    pub credential_hash: CredentialHash,
    pub companions: HashMap<String, String>,
    pub primary_location: MatchLocation,
    pub additional_locations: Vec<MatchLocation>,
    pub confidence: Option<f64>,
    pub entropy: Option<f64>,
}

A group of related raw matches representing a single distinct secret finding.

Manual Debug impl redacts the credential field - the previous derive-Debug was a CRITICAL leak vector (kimi-wave1 audit finding 1.2).

Fields

detector_id: Arc<str>

Stable detector identifier.

detector_name: Arc<str>

Human-readable detector name.

service: Arc<str>

Service namespace associated with the detector.

severity: Severity

Severity preserved from the original match.

credential: SensitiveString

Unredacted credential for verification.

credential_hash: CredentialHash

SHA-256 hash of the original credential for internal correlation. Named credential digest for suppression, correlation, and reporting.

companions: HashMap<String, String>

Optional companion credentials extracted nearby.

primary_location: MatchLocation

Primary source location.

additional_locations: Vec<MatchLocation>

Additional duplicate locations.

confidence: Option<f64>

Confidence score (0.0 - 1.0) combining entropy, keyword proximity, file type, etc.

entropy: Option<f64>

Shannon entropy measured for the credential, when the detection path computed it. None means entropy was not part of that path.

Trait Implementations

impl Clone for DedupedMatch

fn clone(&self) -> DedupedMatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DedupedMatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for DedupedMatch

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.