Struct DedupedMatch 

pub struct DedupedMatch {
    pub detector_id: Arc<str>,
    pub detector_name: Arc<str>,
    pub service: Arc<str>,
    pub severity: Severity,
    pub credential: Arc<str>,
    pub credential_hash: String,
    pub companions: HashMap<String, String>,
    pub primary_location: MatchLocation,
    pub additional_locations: Vec<MatchLocation>,
    pub confidence: Option<f64>,
}

A group of related raw matches representing a single distinct secret finding.

Manual Debug impl redacts the credential field — the previous derive-Debug was a CRITICAL leak vector (kimi-wave1 audit finding 1.2).

Fields

detector_id: Arc<str>

Stable detector identifier.

detector_name: Arc<str>

Human-readable detector name.

service: Arc<str>

Service namespace associated with the detector.

severity: Severity

Severity preserved from the original match.

credential: Arc<str>

Unredacted credential for verification.

credential_hash: String

SHA-256 hash of the original credential for internal correlation.

companions: HashMap<String, String>

Optional companion credentials extracted nearby.

primary_location: MatchLocation

Primary source location.

additional_locations: Vec<MatchLocation>

Additional duplicate locations.

confidence: Option<f64>

Confidence score (0.0 - 1.0) combining entropy, keyword proximity, file type, etc.

Trait Implementations

impl Clone for DedupedMatch

fn clone(&self) -> DedupedMatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DedupedMatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for DedupedMatch

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.