Replies: 1 comment
-
This makes sense, we should definitely output the violating entropy (if that is the trigger). See also #4113 and #4494, we are considering changing the entropy heuristic entirely. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
If the noSecrets identifies a string as a secret based on its entropy the message should include the calculated entropy to allow efficiently tweaking the treshold (potentially aswell as the current threshold value). Additionally, point 3 of the info message should include information whether the treshold should be increased or decreased in case of a false positive which would be more useful than using the word "tweak"
Beta Was this translation helpful? Give feedback.
All reactions