Function shannonEntropy

hooks_src/quality-gate.js:484–494

(value)

// Messages name the file and the pattern class but NEVER echo the matched
// value, since leaking a real secret back into the context window would
// defeat the purpose of the sweep.

// Named credential shapes. Anchored prefixes with real length requirements
// so substrings inside ordinary identifiers (the sk- trap: "task_created")
// can never match.
const SECRET_PATTERNS = [
  {
    cls: 'aws-access-key-id',
    regex: /\bAKIA[A-Z0-9]{16}\b/,
    label: 'AWS access key ID',
  },
  {
    cls: 'github-token',
    regex: /\bghp_[A-Za-z0-9]{36}\b/,