List of all items

Structs

• AccessTarget
• AccessTargetCoverage
• AccessTargetReport
• Allowlist
• AllowlistRule
• BetaCounters
• Calibration
• CanonicalHexKeyMaterialSpec
• Chunk
• ChunkMetadata
• CompanionSpec
• ConfidenceProvenance
• CorrelatedCredential
• CorrelatedLocation
• CorrelatedMember
• CoverageGap
• Credential
• CredentialHash
• CredentialShape
• DedupedMatch
• DetectorCorpusManifest
• DetectorDecodeTransformSpec
• DetectorFile
• DetectorIntrospection
• DetectorMatchConfidenceSpec
• DetectorMlPolicySpec
• DetectorPlausibilityPolicySpec
• DetectorPostMatchConfidenceSpec
• DetectorRelationSpec
• DetectorSemanticPolicySpec
• DetectorSpec
• DetectorTestSpec
• EntropyFallbackConfidenceSpec
• EntropyFallbackMetadata
• EntropyFloorBucket
• EntropyShapeSpec
• EvidenceVerdict
• FileContent
• FilesystemContent
• FindingProvenance
• GenericAssignmentConfidenceSpec
• HardeningReport
• HeaderSpec
• JsonReportCoverageGap
• JsonReportEnvelope
• JsonReportSchemaVersion
• JsonlStream
• JsonlStreamHeader
• JsonlStreamSummary
• LoadedDetectorCorpus
• MatchLocation
• MerkleIndex
• MerkleLoadReport
• MetadataSpec
• ObservedPaths
• OobSpec
• PatternSpec
• RawMatch
• RawMatchDedupKey
• RedactedFinding
• ReportError
• ResolvedScanManifest
• ScanBackendRecoverySummary
• ScanConfig
• ScanReport
• ScanReportMetadata
• SensitiveString
• ShapeGrouping
• SourceAdmissionSpec
• StaticRecoveryMetrics
• StepSpec
• SuccessSpec
• TargetEvidence
• TargetedLocation
• UnusedAllowlistEntry
• VerifiedFinding
• VerifySpec
• cache_layout::CacheEvictionPolicy
• compiled_artifact::CompiledArtifactIdentity
• guard_state::FilesystemAuthority
• guard_state::FilesystemIdentity
• guard_state::GitCleanAttestation
• guard_state::GitCleanAttestationKey
• guard_state::GuardPolicyIdentity
• guard_state::GuardReceipt
• guard_state::GuardRootRecord
• guard_state::GuardTransitionRecord
• guard_store::DurableGuardStore
• guard_store::HotAttestationIndex
• guard_store::RootRegistry
• guard_store::StoreMeta
• json_selector::SelectorError
• retry::OpenedFile
• retry::RetryPolicy
• retry::RetryingContentSource
• state_file::StateFileWriteLock
• suppression::rule::RuleSuppressor
• timing::PairedRatioConfidence
• triage::PatternFeedback
• triage::PatternFeedbackRecord
• triage::RuntimeSuppression
• triage::RuntimeSuppressions
• triage::TriageEnvelope
• triage::TriageRecord

Enums

• AccessTargetKind
• AllowlistRuleKind
• AnchorSemanticRole
• AuthSpec
• CalibrationLoadError
• CaptureSemanticRole
• ConfigError
• ContentError
• CorrelationKind
• CorrelationRole
• CoverageGapReason
• DedupScope
• DetectorBase64Alphabet
• DetectorCorpusError
• DetectorCorpusMode
• DetectorHardNegativeClass
• DetectorKind
• DetectorMlMode
• DetectorRelationKind
• DetectorValidatorSpec
• EntropyDetectionRole
• EntropyFallbackClass
• EvidenceDirection
• EvidenceReasonCode
• EvidenceRequirement
• EvidenceScope
• EvidenceTier
• EvidenceValueRelation
• FindingCandidateChannel
• HttpMethod
• MerkleLoadStatus
• OobPolicy
• OobProtocol
• ProviderEvidenceRole
• ProviderEvidenceSensitivity
• QualityIssue
• Redaction
• ReportFormat
• RequiredSemanticEvidence
• ScanCompletionStatus
• ScriptEngine
• SemanticSourceRole
• Severity
• ShapeCharset
• SourceCoverageGapKind
• SourceError
• SpecError
• SuccessPolicy
• TargetRelation
• VerificationResult
• cache_layout::CacheKind
• compiled_artifact::CompiledArtifactClass
• guard_state::GitHashAlgorithm
• guard_state::GuardRootMode
• guard_state::GuardRootState
• guard_state::GuardTransition
• guard_state::ReceiptError
• guard_state::TransitionError
• guard_store::GuardStoreError
• retry::PathOrigin
• suppression::rule::RuleSuppressorError
• triage::RuntimeSuppressionScope
• triage::TriageDisposition
• triage::TriageReason
• triage::TriageScope

Traits

• FileContentSource
• Source

Functions

• access_target_rule_ids
• apply_protections
• apply_protections_with_persistence_paths
• ascii_ci::contains_bytes_ignore_ascii_case
• ascii_ci::contains_ignore_ascii_case
• ascii_ci::ends_with_ignore_ascii_case
• ascii_ci::is_ascii_alphanumeric_bytes
• ascii_ci::is_ascii_alphanumeric_str
• ascii_ci::starts_with_ignore_ascii_case
• associate_access_targets
• associate_access_targets_with
• calibration_default_cache_path
• common_source_types
• compose_detector_corpus
• compute_detector_corpus_digest
• compute_detector_corpus_digest_for_schema
• compute_spec_hash
• correlate_findings
• correlation_composite_part_ids
• current_executable_path
• current_executable_sha256
• decode_standard_base64
• dedup_cross_detector
• dedup_matches
• detector_corpus_load_count
• detector_digest
• detector_spec_by_id
• embedded_detector_count
• embedded_detector_specs
• finding_metadata
• git_hash
• git_lfs::is_git_lfs_oid_line
• git_lfs::is_git_lfs_pointer
• git_lfs::is_git_lfs_size_line
• git_lfs::is_git_lfs_version_line
• guard_store::check_schema_version
• hex_encode
• hyperscan_cache_filename
• hyperscan_cache_header_is_valid
• intern_source_type
• json_selector::select
• json_selector::validate
• json_selector::validate_detector_response_selectors
• key_id_canary_status
• keyhog_matcher_artifacts_root
• load_detector_corpus
• load_detectors
• load_detectors_with_gate
• load_embedded_detectors_or_fail
• max_decode_depth_limit
• merkle_default_cache_path
• parse_canary_account_ids
• parse_jsonl_stream
• read_detector_toml_file
• redact
• redact_companions
• resolve_safe_bin
• retry::classify_io
• retry::open_enumerated
• retry::retry_classified
• retry::retry_io
• set_extra_canary_accounts
• set_extra_trusted_dirs
• sha256_hash
• state_file::read_capped
• state_file::state_file_lock_path
• state_file::sweep_stale_tmp_siblings
• state_file::write_atomically
• state_file::write_atomically_with_prefix
• state_file::write_atomically_with_writer
• state_file::write_atomically_with_writer_and_prefix
• strip_windows_verbatim_prefix
• timing::median_duration
• timing::midpoint_u128
• timing::paired_ratio_confidence_95
• timing::select_confidently_fastest_index
• timing::two_sided_95_student_t_critical
• validate_access_target_policy
• validate_canary_accounts
• validate_correlation_policy
• validate_detector
• validate_detector_for_corpus_schema
• verification_domain::builtin_service_domains
• verification_domain::effective_allowlist
• verification_domain::host_is_allowed
• verification_domain::normalize_allowlist_entry
• winpath::has_windows_drive_prefix
• winpath::is_windows_absolute
• write_csv_coverage_report
• write_hyperscan_cache_header
• write_report
• write_scan_report

Type Aliases

• CompanionMap
• HtmlScanMetadata

Statics

• SOURCE_TYPE_AZURE_BLOB
• SOURCE_TYPE_BINARY
• SOURCE_TYPE_BINARY_GHIDRA_DECOMPILED
• SOURCE_TYPE_BINARY_GHIDRA_STRINGS
• SOURCE_TYPE_BINARY_STRINGS
• SOURCE_TYPE_DOCKER
• SOURCE_TYPE_FILESYSTEM
• SOURCE_TYPE_FILESYSTEM_ARCHIVE
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_ANDROID
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_ANDROID_RESOURCE
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_ANDROID_XML
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_BINARY
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_BINARY_TEX_ORPHANED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_BINARY_TEX_REFERENCED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_BINARY_TEX_ROOT
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_COMMENT_ORPHANED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_COMMENT_REFERENCED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_COMMENT_ROOT
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_ORPHANED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_REFERENCED
• SOURCE_TYPE_FILESYSTEM_ARCHIVE_TEX_ROOT
• SOURCE_TYPE_FILESYSTEM_BINARY_STRINGS
• SOURCE_TYPE_FILESYSTEM_COMPRESSED
• SOURCE_TYPE_FILESYSTEM_COMPRESSED_BINARY
• SOURCE_TYPE_FILESYSTEM_PDF
• SOURCE_TYPE_FILESYSTEM_WINDOWED
• SOURCE_TYPE_GCS
• SOURCE_TYPE_GIT
• SOURCE_TYPE_GITHUB
• SOURCE_TYPE_GIT_DIFF
• SOURCE_TYPE_GIT_DIFF_SLASH
• SOURCE_TYPE_GIT_HEAD
• SOURCE_TYPE_GIT_HISTORY
• SOURCE_TYPE_GIT_HISTORY_SLASH
• SOURCE_TYPE_GIT_STAGED
• SOURCE_TYPE_GIT_STAGED_SLASH
• SOURCE_TYPE_GIT_TAG
• SOURCE_TYPE_GIT_UNREACHABLE
• SOURCE_TYPE_S3
• SOURCE_TYPE_SLACK
• SOURCE_TYPE_STDIN
• SOURCE_TYPE_WEB
• SOURCE_TYPE_WEB_JS
• SOURCE_TYPE_WEB_SOURCEMAP
• SOURCE_TYPE_WEB_SOURCEMAP_RAW
• SOURCE_TYPE_WEB_WASM
• SOURCE_TYPE_WIRE_HAR_REQUEST
• SOURCE_TYPE_WIRE_HAR_RESPONSE

Constants

• DEFAULT_ENTROPY_BPE_MAX_BYTES_PER_TOKEN
• DEFAULT_ENTROPY_THRESHOLD
• DEFAULT_MAX_FILE_SIZE_BYTES
• DEFAULT_WINDOW_OVERLAP_BYTES
• DEFAULT_WINDOW_SIZE_BYTES
• DETECTOR_CORPUS_MANIFEST_FILE
• DETECTOR_CORPUS_MAX_FORWARD_SCHEMA_VERSION
• DETECTOR_CORPUS_MIN_SCHEMA_VERSION
• DETECTOR_CORPUS_SCHEMA_VERSION
• DETECTOR_TOML_FILE_BYTES
• EXECUTION_PACKS_SUBDIR
• HYPERSCAN_CACHE_FILE_BYTES
• HYPERSCAN_CACHE_HEADER_LEN
• HYPERSCAN_CACHE_MAGIC
• HYPERSCAN_CACHE_VERSION
• JSONL_REPORT_SCHEMA_MINOR
• JSON_REPORT_SCHEMA_MAJOR
• JSON_REPORT_SCHEMA_MINOR
• KEYHOG_MATCHER_ARTIFACTS_SUBDIR
• MATCHER_ARTIFACT_FILENAME_PREFIX
• MATCHER_ARTIFACT_FORMAT_VERSION
• MATCHER_ARTIFACT_MAGIC
• MATCHER_ARTIFACT_SUFFIX
• REASSEMBLED_DETECTOR_SUFFIX
• STATIC_RECOVERY_METRICS_SCHEMA_VERSION
• git_lfs::GIT_LFS_VERSION_LINE
• git_lfs::SHA256_HEX_LEN
• guard_state::GUARD_DECODE_POLICY_VERSION
• guard_state::GUARD_REPORT_SEMANTICS_VERSION
• guard_state::GUARD_SCHEMA_VERSION
• guard_store::DEFAULT_HOT_INDEX_MEMORY
• json_selector::MAX_SELECTOR_BYTES
• json_selector::MAX_SELECTOR_SEGMENTS
• state_file::DEFAULT_TMP_PREFIX
• triage::MAX_TRIAGE_INPUT_BYTES
• triage::MAX_TRIAGE_OUTPUT_BYTES
• triage::MAX_TRIAGE_RECORDS
• triage::PATTERN_FEEDBACK_VERSION
• triage::TRIAGE_ENVELOPE_VERSION
• triage::TRIAGE_SUPPRESSION_VERSION