Struct ScanConfig 

pub struct ScanConfig {

    pub min_confidence: f64,
    pub max_decode_depth: usize,
    pub entropy_enabled: bool,
    pub entropy_in_source_files: bool,
    pub entropy_threshold: f64,
    pub min_secret_len: usize,
    pub max_file_size: u64,
    pub dedup: DedupScope,
    pub ml_enabled: bool,
    pub ml_weight: f64,
    pub unicode_normalization: bool,
    pub decode_size_limit: usize,
    pub max_matches_per_chunk: usize,
    pub known_prefixes: Vec<String>,
    pub secret_keywords: Vec<String>,
    pub test_keywords: Vec<String>,
    pub placeholder_keywords: Vec<String>,
}

Configuration for a scan run.

Fields

min_confidence: f64

Minimum confidence (0.0 to 1.0) required to report a finding.

max_decode_depth: usize

Maximum recursive decoding depth (e.g. Base64(Hex(URL(secret)))).

entropy_enabled: bool

Whether to enable Shannon entropy analysis for unknown high-entropy strings.

entropy_in_source_files: bool

Whether to enable entropy analysis even in standard source code files.

entropy_threshold: f64

Shannon entropy threshold (typical secrets are 4.5+).

min_secret_len: usize

Minimum length for entropy-based secret detection.

max_file_size: u64

Maximum file size to scan (bytes). Large files are skipped or sampled.

dedup: DedupScope

Deduplication strategy.

ml_enabled: bool

Whether to enable ML-based probabilistic gating.

ml_weight: f64

Weight given to the ML score (0.0 to 1.0).

unicode_normalization: bool

Whether to normalize Unicode characters before scanning.

decode_size_limit: usize

Maximum bytes allowed from recursive decoding.

max_matches_per_chunk: usize

Maximum matches allowed per chunk to prevent OOM.

known_prefixes: Vec<String>

List of common secret prefixes to prioritize.

secret_keywords: Vec<String>

List of keywords that strongly indicate a secret.

test_keywords: Vec<String>

Keywords used in test environments.

placeholder_keywords: Vec<String>

Keywords for placeholders and documentation.

Implementations

impl ScanConfig

pub fn fast() -> Self

Fast configuration optimized for speed over exhaustive recall.

pub fn thorough() -> Self

Thorough configuration for deep penetration into encoded layers.

pub fn paranoid() -> Self

Maximum paranoia: deep decoding and aggressive entropy analysis.

pub fn validate(&self) -> Result<(), ConfigError>

Validate the configuration parameters.

Trait Implementations

impl Clone for ScanConfig

fn clone(&self) -> ScanConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScanConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ScanConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ScanConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ScanConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.