Expand description
Live credential verification: confirms whether detected secrets are actually
active by making HTTP requests to the service’s API endpoint as specified in
each detector’s [detector.verify] configuration.
Modules§
- cache
- Shared in-memory verification cache. Verification cache: avoids re-verifying the same credential across scans.
- domain_
allowlist - Service-domain allowlist enforcement for verifier requests.
- interpolate
- Template interpolation helpers for verification requests.
- oob
- Out-of-band (OOB) callback verification via an embedded interactsh client.
- rate_
limit - Per-service rate limiting for verification requests.
- reqwest
- Local HTTP compatibility shim backed by reqwest..
Structs§
- Verification
Engine - Live-verification engine with shared client, cache, and concurrency limits.
- Verify
Config - Runtime configuration for live verification.
Enums§
- Dedup
Scope - Deduplication scope for grouping findings.
- Verify
Error - Errors returned while constructing or executing live verification.
Functions§
- dedup_
matches - Deduplicate raw matches according to the given
DedupScope.