redac---n 0.0.0-stage → 0.0.2

package/dist/yaml.d.ts

@@ -0,0 +1,40 @@
+import { type Span } from "./syntax.ts";
+export interface YamlLine {
+    /** Where the line starts and ends in the text (its end before the line break and a `\r`). */
+    start: number;
+    end: number;
+    /** The column the line's content starts at, after indentation and `- ` list markers. */
+    indent: number;
+    /** The line starts a list item: `- name: x`. */
+    item: boolean;
+    /** A document separator: `---` or `...`. */
+    separator: boolean;
+    /** Nothing but blanks, or a comment: at any column, it neither ends a mapping nor belongs to one. */
+    blank: boolean;
+    /** A mapping entry's key, and its value: without quotes or a trailing comment, absent when empty. */
+    key?: string;
+    value?: Span;
+    /** The value was quoted. */
+    quoted: boolean;
+    /** The value is a block scalar's indicator (`|`, `>-`, `|2`): its lines follow. */
+    block: boolean;
+}
+/** The lines of `text`. */
+export declare function yamlLines(text: string): YamlLine[];
+/** A block scalar's indicator, with its chomping and indentation indicators in either order: `|`, `>-`, `|2-`, `>+1`. */
+export declare function isBlockIndicator(rest: string): boolean;
+/**
+ * The content of the block scalar whose indicator ends the line starting at `keyLine` (`password: |`): the lines below
+ * it indented further, each without the blanks around it.
+ */
+export declare function blockLines(text: string, keyLine: number): Span[];
+/** The content of a block scalar (see blockLines) as one span, from its first line's text to its last's; undefined if empty. */
+export declare function blockExtent(text: string, keyLine: number): Span | undefined;
+/**
+ * The value of `key` in the mapping line `i`'s key belongs to: the lines whose key starts in the same column, from the
+ * line one indented less (the parent), a list item starting there (the next resource of a `kind: List`), a key the
+ * mapping already has (the next resource, printed after another with no separator), a document separator, or a line
+ * that is no mapping's entry at or left of the column (a shell's prompt between two commands' outputs) to the next such
+ * line. Read once per text: each line's mapping, and each mapping's keys.
+ */
+export declare function siblingValue(lines: YamlLine[], i: number, key: string): string | undefined;

package/dist/yaml.js

@@ -0,0 +1,174 @@
+/**
+ * YAML read line by line, the way block mappings and lists are written: each line's indentation, list marker, key and
+ * value, the block scalars (`key: |`) whose lines belong to a key, and a key's siblings in its mapping. Enough for the
+ * shapes secrets sit in (Kubernetes manifests, Compose files, CI configs); not a YAML parser: no flow collections,
+ * anchors, tags or multi-line plain scalars.
+ */
+import { lastText, lineEnd as lineEndAt, lowerBound } from "./lines.js";
+import { stringEnd } from "./syntax.js";
+const ENTRY = /^([ \t]*(?:-[ \t]+)*)(?:"([^"\n]{1,200})"|'([^'\n]{1,200})'|([^\s"'#:{}[\],&*!|>%@`-][^:#\n]{0,200}?|-[^\s:#][^:#\n]{0,200}?)(?<![ \t]))[ \t]*:(?=[ \t]|$)[ \t]*/;
+/** The lines of `text`. */
+export function yamlLines(text) {
+    const lines = [];
+    for (let start = 0;;) {
+        lines.push(readLine(text, start, contentEnd(text, start)));
+        const next = text.indexOf("\n", start);
+        if (next < 0)
+            break;
+        start = next + 1;
+    }
+    return lines;
+}
+/** A block scalar's indicator, with its chomping and indentation indicators in either order: `|`, `>-`, `|2-`, `>+1`. */
+export function isBlockIndicator(rest) {
+    return /^[|>](?:[-+]?\d?|\d[-+])[ \t]*(?:#.*)?$/.test(rest.replace(/\r$/, ""));
+}
+function readLine(text, start, end) {
+    const line = text.slice(start, end);
+    const lead = /^[ \t]*(?:-[ \t]+)*/.exec(line)[0];
+    const base = {
+        start,
+        end,
+        indent: lead.length,
+        item: lead.includes("-"),
+        separator: /^(?:---|\.\.\.)(?:[ \t]|$)/.test(line),
+        blank: /^[ \t]*(?:#.*)?$/.test(line),
+        quoted: false,
+        block: false,
+    };
+    const m = ENTRY.exec(line);
+    if (!m || base.separator)
+        return base;
+    const key = (m[2] ?? m[3] ?? m[4]).trim();
+    let at = m[0].length;
+    const rest = line.slice(at);
+    if (isBlockIndicator(rest))
+        return { ...base, key, block: true };
+    // A double-quoted scalar escapes with a backslash, a single-quoted one by doubling its quote; a plain one ends at a
+    // comment (` #`).
+    const close = rest[0] === '"' || rest[0] === "'"
+        ? stringEnd(rest, 0, { escapes: rest[0] === '"' ? "backslash" : "doubled" })
+        : -1;
+    if (close > 0)
+        return {
+            ...base,
+            key,
+            quoted: true,
+            value: { value: rest.slice(1, close), start: start + at + 1, end: start + at + close },
+        };
+    const comment = rest.search(/(?:^|[ \t])#/);
+    const value = (comment < 0 ? rest : rest.slice(0, comment)).trimEnd();
+    return { ...base, key, value: value ? { value, start: start + at, end: start + at + value.length } : undefined };
+}
+/**
+ * A text's lines for block scalars, read once per text (the last text is kept): where each starts, its indent (-1 for
+ * a line of blanks; a `#` line is content inside a block), and the next line no deeper than it, found with a stack.
+ */
+const blocks = lastText((text) => {
+    const lines = yamlLines(text);
+    const indent = new Int32Array(lines.length);
+    lines.forEach((l, k) => (indent[k] = text.slice(l.start, l.end).trim() ? l.indent : -1));
+    const next = new Int32Array(lines.length);
+    const deeper = [];
+    for (let k = lines.length - 1; k >= 0; k--) {
+        // (A line of blanks ends no block: it neither answers nor clears what's below it.)
+        if (indent[k] < 0)
+            continue;
+        while (deeper.length && indent[deeper.at(-1)] > indent[k])
+            deeper.pop();
+        next[k] = deeper.at(-1) ?? lines.length;
+        deeper.push(k);
+    }
+    return { lines, starts: lines.map((l) => l.start), indent, next };
+});
+/**
+ * The content of the block scalar whose indicator ends the line starting at `keyLine` (`password: |`): the lines below
+ * it indented further, each without the blanks around it.
+ */
+export function blockLines(text, keyLine) {
+    const { lines, starts, indent, next } = blocks(text);
+    const k = lowerBound(starts, keyLine);
+    const out = [];
+    for (let j = k + 1; j < next[k]; j++) {
+        if (indent[j] < 0)
+            continue;
+        const line = text.slice(lines[j].start, lines[j].end);
+        const value = line.trim();
+        const at = lines[j].start + line.indexOf(value);
+        out.push({ value, start: at, end: at + value.length });
+    }
+    return out;
+}
+/** The content of a block scalar (see blockLines) as one span, from its first line's text to its last's; undefined if empty. */
+export function blockExtent(text, keyLine) {
+    const { lines, starts, indent, next } = blocks(text);
+    const k = lowerBound(starts, keyLine);
+    let first = k + 1;
+    while (first < next[k] && indent[first] < 0)
+        first++;
+    let last = next[k] - 1;
+    while (last > first && indent[last] < 0)
+        last--;
+    if (first >= next[k])
+        return undefined;
+    const head = text.slice(lines[first].start, lines[first].end);
+    const start = lines[first].start + head.length - head.trimStart().length;
+    const tail = text.slice(lines[last].start, lines[last].end);
+    const end = lines[last].start + tail.trimEnd().length;
+    return { value: text.slice(start, end), start, end };
+}
+/** Where the content of the line that starts at `start` ends: before its line break and a `\r`, however long the line. */
+function contentEnd(text, start) {
+    const end = lineEndAt(text, start, Infinity);
+    return text[end - 1] === "\r" ? end - 1 : end;
+}
+/**
+ * The value of `key` in the mapping line `i`'s key belongs to: the lines whose key starts in the same column, from the
+ * line one indented less (the parent), a list item starting there (the next resource of a `kind: List`), a key the
+ * mapping already has (the next resource, printed after another with no separator), a document separator, or a line
+ * that is no mapping's entry at or left of the column (a shell's prompt between two commands' outputs) to the next such
+ * line. Read once per text: each line's mapping, and each mapping's keys.
+ */
+export function siblingValue(lines, i, key) {
+    const { mapping, keys } = mappingsOf(lines);
+    return mapping[i] < 0 ? undefined : keys[mapping[i]].get(key);
+}
+const MAPPINGS = new WeakMap();
+/** Each line's mapping (-1 for none), and each mapping's keys and their values. */
+function mappingsOf(lines) {
+    const known = MAPPINGS.get(lines);
+    if (known)
+        return known;
+    const mapping = new Int32Array(lines.length).fill(-1);
+    const keys = [];
+    // The mappings open at each column, outermost first.
+    const open = [];
+    lines.forEach((l, k) => {
+        if (l.blank)
+            return;
+        // (A line that is no entry ends the mappings at or right of its column: a document separator, a shell's prompt
+        // (`$ kubectl get secret …`), a list's item with no key (`- foo`).)
+        if (l.key === undefined) {
+            while (open.length && open.at(-1).col >= l.indent)
+                open.pop();
+            return;
+        }
+        while (open.length && open.at(-1).col > l.indent)
+            open.pop();
+        // (A list item starts a mapping of its own, the next resource of a `kind: List`; so does a key the mapping has
+        // already, the next resource printed with nothing between: `kubectl get configmap -o yaml; kubectl get secret …`.)
+        const top = open.at(-1);
+        if (top?.col === l.indent && (l.item || keys[top.id].has(l.key)))
+            open.pop();
+        if (open.at(-1)?.col !== l.indent) {
+            open.push({ col: l.indent, id: keys.length });
+            keys.push(new Map());
+        }
+        const id = open.at(-1).id;
+        mapping[k] = id;
+        keys[id].set(l.key, l.value?.value);
+    });
+    const out = { mapping, keys };
+    MAPPINGS.set(lines, out);
+    return out;
+}

package/docs/creddata.svg

@@ -0,0 +1,318 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1774 1070" width="1774" height="1070" role="img" aria-labelledby="t">
+<title id="t">CredData by kind of value: secrets caught against false values hit, on its dev and test splits</title>
+<style>
+.bg { fill: #fcfcfb; } .accent { fill: #2a78d6; } .accent-line { stroke: #2a78d6; } .other { fill: #898781; }
+.hollow { fill: none; stroke: #898781; } .chain { fill: none; stroke: #c3c2b7; stroke-width: 1.5; }
+.k0 { fill: #2a78d6; } .k1 { fill: #eb6834; } .k2 { fill: #1baf7a; } .k3 { fill: #b9b8b2; } .gap { stroke: #fcfcfb; stroke-width: 2; }
+.ring { stroke: #fcfcfb; } .grid { stroke: #e1e0d9; stroke-width: 1; } .axis, .lead { stroke: #c3c2b7; stroke-width: 1; }
+text { font-family: system-ui, -apple-system, "Segoe UI", sans-serif; fill: #52514e; font-size: 12px; }
+.title { fill: #0b0b0b; font-size: 15px; font-weight: 600; } .panel { fill: #0b0b0b; font-size: 13px; font-weight: 600; }
+.tick { fill: #898781; font-size: 11px; font-variant-numeric: tabular-nums; }
+.ours { fill: #0b0b0b; font-weight: 600; }
+@media (prefers-color-scheme: dark) {
+  .bg { fill: #1a1a19; } .accent { fill: #3987e5; } .accent-line { stroke: #3987e5; } .ring { stroke: #1a1a19; }
+  .other { fill: #a3a29c; } .hollow { stroke: #a3a29c; } .chain { stroke: #4a4a47; }
+  .k0 { fill: #3987e5; } .k1 { fill: #d95926; } .k2 { fill: #199e70; } .k3 { fill: #5e5d58; } .gap { stroke: #1a1a19; }
+  .grid { stroke: #2c2c2a; } .axis, .lead { stroke: #383835; }
+  text { fill: #c3c2b7; } .title, .panel, .ours { fill: #ffffff; }
+}
+</style>
+<rect width="1774" height="1070" rx="8" class="bg"/>
+<text x="16" y="26" class="title">CredData by kind of value: secrets caught against false values hit, on its dev and test splits</text>
+<text x="16" y="44">Each labelled value, true or false, sorted by the ordinary-text chart's classifier; a false value is hit only if it is redacted. Top: the dev split, the repositories the fixes were made on.</text>
+<text x="16" y="60">Bottom: the test split, repositories they never saw. Blue: redac---n (guessing off, confident, eager). Grey: other scanners; a line from gitleaks adds Betterleaks and Kingfisher, then TruffleHog</text>
+<text x="16" y="76">and Nosey Parker, then detect-secrets (the other six). Hollow: CredSweeper, which CredData's lines partly come from and whose model is trained on its labels. √ scale across; up and left is better.</text>
+<text x="16" y="116" class="title">Dev split (the fixes were made on it)</text>
+<text x="16" y="606" class="title">Test split (never seen by the fixes)</text>
+<text x="56" y="148" class="panel">credential-shaped <tspan class="tick">4,560 true, 10,669 false</tspan></text>
+<line class="grid" x1="56" x2="436" y1="490" y2="490"/><text class="tick" x="50" y="494" text-anchor="end">0%</text>
+<line class="grid" x1="56" x2="436" y1="407.5" y2="407.5"/><text class="tick" x="50" y="411.5" text-anchor="end">25%</text>
+<line class="grid" x1="56" x2="436" y1="325" y2="325"/><text class="tick" x="50" y="329" text-anchor="end">50%</text>
+<line class="grid" x1="56" x2="436" y1="242.5" y2="242.5"/><text class="tick" x="50" y="246.5" text-anchor="end">75%</text>
+<line class="grid" x1="56" x2="436" y1="160" y2="160"/><text class="tick" x="50" y="164" text-anchor="end">100%</text>
+<line class="grid" x1="419.95034277332184" x2="419.95034277332184" y1="160" y2="490"/><text class="tick" x="419.95034277332184" y="504" text-anchor="middle">20%</text>
+<line class="grid" x1="313.3517553901843" x2="313.3517553901843" y1="160" y2="490"/><text class="tick" x="313.3517553901843" y="504" text-anchor="middle">10%</text>
+<line class="grid" x1="237.97517138666092" x2="237.97517138666092" y1="160" y2="490"/><text class="tick" x="237.97517138666092" y="504" text-anchor="middle">5%</text>
+<line class="grid" x1="171.09120383626998" x2="171.09120383626998" y1="160" y2="490"/><text class="tick" x="171.09120383626998" y="504" text-anchor="middle">2%</text>
+<line class="grid" x1="137.3817706875497" x2="137.3817706875497" y1="160" y2="490"/><text class="tick" x="137.3817706875497" y="504" text-anchor="middle">1%</text>
+<line class="grid" x1="56" x2="56" y1="160" y2="490"/><text class="tick" x="56" y="504" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="296.23485612070624,307.3421052631579 337.1070378925266,262.0394736842105 347.2020908546517,250.38815789473685 389.28204733667116,227.15789473684208"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="192.23881939564785,269.56578947368416 194.2740347893205,176.28289473684208 195.83650285579614,174.03947368421052"/>
+<circle cx="296.23485612070624" cy="307.3421052631579" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 55.4% caught, 8.7% lost</title></circle>
+<circle cx="317.88625179591025" cy="265.73026315789474" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 68.0% caught, 10.4% lost</title></circle>
+<circle cx="118.0617486347827" cy="476.5394736842105" r="4" class="other ring" stroke-width="1.5"><title>Kingfisher: 4.1% caught, 0.6% lost</title></circle>
+<circle cx="154.12824062937938" cy="479.07236842105266" r="4" class="other ring" stroke-width="1.5"><title>TruffleHog: 3.3% caught, 1.5% lost</title></circle>
+<circle cx="171.83906376458884" cy="404.3881578947368" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 25.9% caught, 2.0% lost</title></circle>
+<circle cx="262.4382748299062" cy="303.7236842105263" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 56.4% caught, 6.4% lost</title></circle>
+<circle cx="127.37318697497005" cy="168.39473684210526" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 97.5% caught, 0.8% lost</title></circle>
+<circle cx="337.1070378925266" cy="262.0394736842105" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 69.1% caught, 11.9% lost</title></circle>
+<circle cx="347.2020908546517" cy="250.38815789473685" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 72.6% caught, 12.8% lost</title></circle>
+<circle cx="389.28204733667116" cy="227.15789473684208" r="4" class="other ring" stroke-width="1.5"><title>the other six: 79.6% caught, 16.8% lost</title></circle>
+<circle cx="192.23881939564785" cy="269.56578947368416" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 66.8% caught, 2.8% lost</title></circle>
+<circle cx="194.2740347893205" cy="176.28289473684208" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 95.1% caught, 2.9% lost</title></circle>
+<circle cx="195.83650285579614" cy="174.03947368421052" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 95.7% caught, 3.0% lost</title></circle>
+<text x="202.2740347893205" y="180.28289473684208" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<line class="lead" x1="127.37318697497005" y1="172.39473684210526" x2="135.37318697497005" y2="187.39473684210526"/>
+<text x="135.37318697497005" y="197.39473684210526" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="381.28204733667116" y="219.15789473684208" text-anchor="end" font-size="11">the other six</text>
+<text x="309.88625179591025" y="269.73026315789474" text-anchor="end" font-size="11">Betterleaks</text>
+<text x="254.43827482990622" y="307.7236842105263" text-anchor="end" font-size="11">detect-secrets</text>
+<text x="304.23485612070624" y="311.3421052631579" text-anchor="start" font-size="11">gitleaks</text>
+<text x="179.83906376458884" y="408.3881578947368" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="126.0617486347827" y="468.5394736842105" text-anchor="start" font-size="11">Kingfisher</text>
+<text x="162.12824062937938" y="483.07236842105266" text-anchor="start" font-size="11">TruffleHog</text>
+<text x="492" y="148" class="panel">hex <tspan class="tick">2,846 true, 613 false</tspan></text>
+<line class="grid" x1="492" x2="872" y1="490" y2="490"/><text class="tick" x="486" y="494" text-anchor="end">0%</text>
+<line class="grid" x1="492" x2="872" y1="407.5" y2="407.5"/><text class="tick" x="486" y="411.5" text-anchor="end">25%</text>
+<line class="grid" x1="492" x2="872" y1="325" y2="325"/><text class="tick" x="486" y="329" text-anchor="end">50%</text>
+<line class="grid" x1="492" x2="872" y1="242.5" y2="242.5"/><text class="tick" x="486" y="246.5" text-anchor="end">75%</text>
+<line class="grid" x1="492" x2="872" y1="160" y2="160"/><text class="tick" x="486" y="164" text-anchor="end">100%</text>
+<line class="grid" x1="841.3212923880935" x2="841.3212923880935" y1="160" y2="490"/><text class="tick" x="841.3212923880935" y="504" text-anchor="middle">50%</text>
+<line class="grid" x1="762.5831095789475" x2="762.5831095789475" y1="160" y2="490"/><text class="tick" x="762.5831095789475" y="504" text-anchor="middle">30%</text>
+<line class="grid" x1="712.9301838280029" x2="712.9301838280029" y1="160" y2="490"/><text class="tick" x="712.9301838280029" y="504" text-anchor="middle">20%</text>
+<line class="grid" x1="648.2212311535714" x2="648.2212311535714" y1="160" y2="490"/><text class="tick" x="648.2212311535714" y="504" text-anchor="middle">10%</text>
+<line class="grid" x1="602.4650919140015" x2="602.4650919140015" y1="160" y2="490"/><text class="tick" x="602.4650919140015" y="504" text-anchor="middle">5%</text>
+<line class="grid" x1="561.8642584776187" x2="561.8642584776187" y1="160" y2="490"/><text class="tick" x="561.8642584776187" y="504" text-anchor="middle">2%</text>
+<line class="grid" x1="526.9321292388094" x2="526.9321292388094" y1="160" y2="490"/><text class="tick" x="526.9321292388094" y="504" text-anchor="middle">0.5%</text>
+<line class="grid" x1="492" x2="492" y1="160" y2="490"/><text class="tick" x="492" y="504" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="669.3468032223275,205.56921995783557 669.3468032223275,205.10541110330286 677.0371984748201,203.13422347153903 825.2820473366712,169.04427266338723"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="492,452.31553056921996 531.9061485146698,180.75544624033733 540.8748507303329,180.4075895994378"/>
+<circle cx="669.3468032223275" cy="205.56921995783557" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 86.2% caught, 12.9% lost</title></circle>
+<circle cx="645.2624714886346" cy="205.8011243851019" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 86.1% caught, 9.6% lost</title></circle>
+<circle cx="526.5597383808987" cy="470.05621925509485" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 6.0% caught, 0.5% lost</title></circle>
+<circle cx="811.8721139547979" cy="199.19184820801127" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 88.1% caught, 41.9% lost</title></circle>
+<circle cx="622.8410578133064" cy="161.62333099086436" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 99.5% caught, 7.0% lost</title></circle>
+<circle cx="669.3468032223275" cy="205.10541110330286" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 86.3% caught, 12.9% lost</title></circle>
+<circle cx="677.0371984748201" cy="203.13422347153903" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 86.9% caught, 14.0% lost</title></circle>
+<circle cx="825.2820473366712" cy="169.04427266338723" r="4" class="other ring" stroke-width="1.5"><title>the other six: 97.3% caught, 45.5% lost</title></circle>
+<circle cx="492" cy="452.31553056921996" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 11.4% caught, 0.0% lost</title></circle>
+<circle cx="531.9061485146698" cy="180.75544624033733" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 93.7% caught, 0.7% lost</title></circle>
+<circle cx="540.8748507303329" cy="180.4075895994378" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 93.8% caught, 1.0% lost</title></circle>
+<line class="lead" x1="531.9061485146698" y1="184.75544624033733" x2="539.9061485146698" y2="187.75544624033733"/>
+<text x="539.9061485146698" y="197.75544624033733" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<line class="lead" x1="622.8410578133064" y1="165.62333099086436" x2="630.8410578133064" y2="216.62333099086436"/>
+<text x="630.8410578133064" y="226.62333099086436" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<line class="lead" x1="825.2820473366712" y1="173.04427266338723" x2="817.2820473366712" y2="236.04427266338723"/>
+<text x="817.2820473366712" y="246.04427266338723" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="811.8721139547979" y1="195.19184820801127" x2="803.8721139547979" y2="169.19184820801127"/>
+<text x="803.8721139547979" y="167.19184820801127" text-anchor="end" font-size="11">detect-secrets</text>
+<text x="661.3468032223275" y="197.56921995783557" text-anchor="end" font-size="11">gitleaks</text>
+<line class="lead" x1="645.2624714886346" y1="209.8011243851019" x2="653.2624714886346" y2="236.8011243851019"/>
+<text x="653.2624714886346" y="246.8011243851019" text-anchor="start" font-size="11">Betterleaks</text>
+<text x="534.5597383808987" y="474.05621925509485" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="492" y="524" class="tick">Catch under 1%, not drawn (caught / lost):</text>
+<text x="492" y="538" class="tick">Kingfisher 0.2% / 0.00%, TruffleHog 0.3% / 0.65%</text>
+<text x="928" y="148" class="panel">word or placeholder <tspan class="tick">1,391 true, 6,788 false</tspan></text>
+<line class="grid" x1="928" x2="1308" y1="490" y2="490"/><text class="tick" x="922" y="494" text-anchor="end">0%</text>
+<line class="grid" x1="928" x2="1308" y1="407.5" y2="407.5"/><text class="tick" x="922" y="411.5" text-anchor="end">25%</text>
+<line class="grid" x1="928" x2="1308" y1="325" y2="325"/><text class="tick" x="922" y="329" text-anchor="end">50%</text>
+<line class="grid" x1="928" x2="1308" y1="242.5" y2="242.5"/><text class="tick" x="922" y="246.5" text-anchor="end">75%</text>
+<line class="grid" x1="928" x2="1308" y1="160" y2="160"/><text class="tick" x="922" y="164" text-anchor="end">100%</text>
+<line class="grid" x1="1222.0523095678277" x2="1222.0523095678277" y1="160" y2="490"/><text class="tick" x="1222.0523095678277" y="504" text-anchor="middle">5%</text>
+<line class="grid" x1="1113.9750098934517" x2="1113.9750098934517" y1="160" y2="490"/><text class="tick" x="1113.9750098934517" y="504" text-anchor="middle">2%</text>
+<line class="grid" x1="1059.504190626895" x2="1059.504190626895" y1="160" y2="490"/><text class="tick" x="1059.504190626895" y="504" text-anchor="middle">1%</text>
+<line class="grid" x1="1020.9875049467258" x2="1020.9875049467258" y1="160" y2="490"/><text class="tick" x="1020.9875049467258" y="504" text-anchor="middle">0.5%</text>
+<line class="grid" x1="928" x2="928" y1="160" y2="490"/><text class="tick" x="928" y="504" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="1096.1628910886952,294.9892163910855 1116.1811316800788,279.568655643422 1261.282047336671,219.07260963335733"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="1037.4252644357064,192.50179726815242 1037.4252644357064,192.02731847591662 1037.4252644357064,192.02731847591662"/>
+<circle cx="1096.1628910886952" cy="294.9892163910855" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 59.1% caught, 1.6% lost</title></circle>
+<circle cx="1080.261243389551" cy="318.9503953989935" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 51.8% caught, 1.3% lost</title></circle>
+<circle cx="1239.143314751819" cy="268.18116462976275" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 67.2% caught, 5.6% lost</title></circle>
+<circle cx="973.1454170465897" cy="174.70884255930986" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 95.5% caught, 0.1% lost</title></circle>
+<circle cx="1096.1628910886952" cy="294.9892163910855" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 59.1% caught, 1.6% lost</title></circle>
+<circle cx="1116.1811316800788" cy="279.568655643422" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 63.8% caught, 2.0% lost</title></circle>
+<circle cx="1261.282047336671" cy="219.07260963335733" r="4" class="other ring" stroke-width="1.5"><title>the other six: 82.1% caught, 6.4% lost</title></circle>
+<circle cx="1037.4252644357064" cy="192.50179726815242" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 90.2% caught, 0.7% lost</title></circle>
+<circle cx="1037.4252644357064" cy="192.02731847591662" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 90.3% caught, 0.7% lost</title></circle>
+<circle cx="1037.4252644357064" cy="192.02731847591662" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 90.3% caught, 0.7% lost</title></circle>
+<text x="1045.4252644357064" y="196.02731847591662" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="981.1454170465897" y="178.70884255930986" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="1253.282047336671" y="211.07260963335733" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="1239.143314751819" y1="272.18116462976275" x2="1231.143314751819" y2="275.18116462976275"/>
+<text x="1231.143314751819" y="285.18116462976275" text-anchor="end" font-size="11">detect-secrets</text>
+<text x="1088.1628910886952" y="298.9892163910855" text-anchor="end" font-size="11">Betterleaks</text>
+<text x="1088.261243389551" y="322.9503953989935" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="928" y="524" class="tick">Catch under 1%, not drawn (caught / lost):</text>
+<text x="928" y="538" class="tick">gitleaks 0.9% / 0.00%, Kingfisher 0.9% / 0.01%</text>
+<text x="928" y="552" class="tick">TruffleHog 0.1% / 0.16%</text>
+<text x="1364" y="148" class="panel">other <tspan class="tick">859 true, 12,420 false</tspan></text>
+<line class="grid" x1="1364" x2="1744" y1="490" y2="490"/><text class="tick" x="1358" y="494" text-anchor="end">0%</text>
+<line class="grid" x1="1364" x2="1744" y1="407.5" y2="407.5"/><text class="tick" x="1358" y="411.5" text-anchor="end">25%</text>
+<line class="grid" x1="1364" x2="1744" y1="325" y2="325"/><text class="tick" x="1358" y="329" text-anchor="end">50%</text>
+<line class="grid" x1="1364" x2="1744" y1="242.5" y2="242.5"/><text class="tick" x="1358" y="246.5" text-anchor="end">75%</text>
+<line class="grid" x1="1364" x2="1744" y1="160" y2="160"/><text class="tick" x="1358" y="164" text-anchor="end">100%</text>
+<line class="grid" x1="1673.192496674806" x2="1673.192496674806" y1="160" y2="490"/><text class="tick" x="1673.192496674806" y="504" text-anchor="middle">10%</text>
+<line class="grid" x1="1582.6321110907545" x2="1582.6321110907545" y1="160" y2="490"/><text class="tick" x="1582.6321110907545" y="504" text-anchor="middle">5%</text>
+<line class="grid" x1="1502.2750881395489" x2="1502.2750881395489" y1="160" y2="490"/><text class="tick" x="1502.2750881395489" y="504" text-anchor="middle">2%</text>
+<line class="grid" x1="1461.7752524926425" x2="1461.7752524926425" y1="160" y2="490"/><text class="tick" x="1461.7752524926425" y="504" text-anchor="middle">1%</text>
+<line class="grid" x1="1433.1375440697743" x2="1433.1375440697743" y1="160" y2="490"/><text class="tick" x="1433.1375440697743" y="504" text-anchor="middle">0.5%</text>
+<line class="grid" x1="1364" x2="1364" y1="160" y2="490"/><text class="tick" x="1364" y="504" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="1440.9615288509585,460.034924330617 1570.4349403937827,453.8882421420256 1579.0134163971384,448.8940628637951 1697.282047336671,413.9348079161816"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="1434.7334476179146,291.7694994179278 1443.929518066188,282.1653084982538 1443.929518066188,267.5669383003492"/>
+<circle cx="1440.9615288509585" cy="460.034924330617" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 9.1% caught, 0.6% lost</title></circle>
+<circle cx="1566.294530136326" cy="454.2724097788126" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 10.8% caught, 4.3% lost</title></circle>
+<circle cx="1462.8394191060975" cy="481.9324796274738" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 2.4% caught, 1.0% lost</title></circle>
+<circle cx="1663.7434800728013" cy="426.22817229336437" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 19.3% caught, 9.4% lost</title></circle>
+<circle cx="1417.3493565673837" cy="190.73341094295694" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 90.7% caught, 0.3% lost</title></circle>
+<circle cx="1570.4349403937827" cy="453.8882421420256" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 10.9% caught, 4.5% lost</title></circle>
+<circle cx="1579.0134163971384" cy="448.8940628637951" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 12.5% caught, 4.8% lost</title></circle>
+<circle cx="1697.282047336671" cy="413.9348079161816" r="4" class="other ring" stroke-width="1.5"><title>the other six: 23.1% caught, 11.6% lost</title></circle>
+<circle cx="1434.7334476179146" cy="291.7694994179278" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 60.1% caught, 0.5% lost</title></circle>
+<circle cx="1443.929518066188" cy="282.1653084982538" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 63.0% caught, 0.7% lost</title></circle>
+<circle cx="1443.929518066188" cy="267.5669383003492" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 67.4% caught, 0.7% lost</title></circle>
+<text x="1451.929518066188" y="286.1653084982538" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="1425.3493565673837" y="194.73341094295694" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="1689.282047336671" y="405.9348079161816" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="1663.7434800728013" y1="430.22817229336437" x2="1671.7434800728013" y2="433.22817229336437"/>
+<text x="1671.7434800728013" y="443.22817229336437" text-anchor="start" font-size="11">detect-secrets</text>
+<line class="lead" x1="1566.294530136326" y1="458.2724097788126" x2="1574.294530136326" y2="461.2724097788126"/>
+<text x="1574.294530136326" y="471.2724097788126" text-anchor="start" font-size="11">Betterleaks</text>
+<text x="1432.9615288509585" y="464.034924330617" text-anchor="end" font-size="11">gitleaks</text>
+<text x="1470.8394191060975" y="485.9324796274738" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="1364" y="524" class="tick">Catch under 1%, not drawn (caught / lost):</text>
+<text x="1364" y="538" class="tick">Kingfisher 0.5% / 0.02%, TruffleHog 0.0% / 0.16%</text>
+<text x="56" y="638" class="panel">credential-shaped <tspan class="tick">1,219 true, 3,557 false</tspan></text>
+<line class="grid" x1="56" x2="436" y1="980" y2="980"/><text class="tick" x="50" y="984" text-anchor="end">0%</text>
+<line class="grid" x1="56" x2="436" y1="897.5" y2="897.5"/><text class="tick" x="50" y="901.5" text-anchor="end">25%</text>
+<line class="grid" x1="56" x2="436" y1="815" y2="815"/><text class="tick" x="50" y="819" text-anchor="end">50%</text>
+<line class="grid" x1="56" x2="436" y1="732.5" y2="732.5"/><text class="tick" x="50" y="736.5" text-anchor="end">75%</text>
+<line class="grid" x1="56" x2="436" y1="650" y2="650"/><text class="tick" x="50" y="654" text-anchor="end">100%</text>
+<line class="grid" x1="336.5446521847196" x2="336.5446521847196" y1="650" y2="980"/><text class="tick" x="336.5446521847196" y="994" text-anchor="middle">10%</text>
+<line class="grid" x1="254.3750259854366" x2="254.3750259854366" y1="650" y2="980"/><text class="tick" x="254.3750259854366" y="994" text-anchor="middle">5%</text>
+<line class="grid" x1="181.46338260181358" x2="181.46338260181358" y1="650" y2="980"/><text class="tick" x="181.46338260181358" y="994" text-anchor="middle">2%</text>
+<line class="grid" x1="144.7160086283447" x2="144.7160086283447" y1="650" y2="980"/><text class="tick" x="144.7160086283447" y="994" text-anchor="middle">1%</text>
+<line class="grid" x1="56" x2="56" y1="650" y2="980"/><text class="tick" x="56" y="994" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="157.9785871654912,842.2067268252666 294.92957735690345,788.605414273995 336.66293396308345,757.4733388022969 389.2820473366711,731.7555373256768"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="278.1326989628354,716.0541427399507 283.5453634559027,688.1706316652994 283.5453634559027,685.4634946677604"/>
+<circle cx="157.9785871654912" cy="842.2067268252666" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 41.8% caught, 1.3% lost</title></circle>
+<circle cx="293.5363901021059" cy="798.8925348646432" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 54.9% caught, 7.2% lost</title></circle>
+<circle cx="137.4743096447404" cy="902.5758818703856" r="4" class="other ring" stroke-width="1.5"><title>Kingfisher: 23.5% caught, 0.8% lost</title></circle>
+<circle cx="131.84845448530092" cy="974.5857260049221" r="4" class="other ring" stroke-width="1.5"><title>TruffleHog: 1.6% caught, 0.7% lost</title></circle>
+<circle cx="242.38454082332623" cy="826.7760459392945" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 46.4% caught, 4.4% lost</title></circle>
+<circle cx="340.5775293508991" cy="835.1681706316654" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 43.9% caught, 10.3% lost</title></circle>
+<circle cx="117.33163219891229" cy="670.5742411812962" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 93.8% caught, 0.5% lost</title></circle>
+<circle cx="294.92957735690345" cy="788.605414273995" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 58.0% caught, 7.3% lost</title></circle>
+<circle cx="336.66293396308345" cy="757.4733388022969" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 67.4% caught, 10.0% lost</title></circle>
+<circle cx="389.2820473366711" cy="731.7555373256768" r="4" class="other ring" stroke-width="1.5"><title>the other six: 75.2% caught, 14.1% lost</title></circle>
+<circle cx="278.1326989628354" cy="716.0541427399507" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 80.0% caught, 6.3% lost</title></circle>
+<circle cx="283.5453634559027" cy="688.1706316652994" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 88.4% caught, 6.6% lost</title></circle>
+<circle cx="283.5453634559027" cy="685.4634946677604" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 89.3% caught, 6.6% lost</title></circle>
+<text x="291.5453634559027" y="692.1706316652994" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="125.33163219891229" y="674.5742411812962" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="381.2820473366711" y="723.7555373256768" text-anchor="end" font-size="11">the other six</text>
+<text x="301.5363901021059" y="802.8925348646432" text-anchor="start" font-size="11">Betterleaks</text>
+<text x="250.38454082332623" y="830.7760459392945" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="348.5775293508991" y="839.1681706316654" text-anchor="start" font-size="11">detect-secrets</text>
+<text x="149.9785871654912" y="846.2067268252666" text-anchor="end" font-size="11">gitleaks</text>
+<text x="145.4743096447404" y="906.5758818703856" text-anchor="start" font-size="11">Kingfisher</text>
+<text x="139.84845448530092" y="978.5857260049221" text-anchor="start" font-size="11">TruffleHog</text>
+<text x="492" y="638" class="panel">hex <tspan class="tick">221 true, 50 false</tspan></text>
+<line class="grid" x1="492" x2="872" y1="980" y2="980"/><text class="tick" x="486" y="984" text-anchor="end">0%</text>
+<line class="grid" x1="492" x2="872" y1="897.5" y2="897.5"/><text class="tick" x="486" y="901.5" text-anchor="end">25%</text>
+<line class="grid" x1="492" x2="872" y1="815" y2="815"/><text class="tick" x="486" y="819" text-anchor="end">50%</text>
+<line class="grid" x1="492" x2="872" y1="732.5" y2="732.5"/><text class="tick" x="486" y="736.5" text-anchor="end">75%</text>
+<line class="grid" x1="492" x2="872" y1="650" y2="650"/><text class="tick" x="486" y="654" text-anchor="end">100%</text>
+<line class="grid" x1="843.3101242759785" x2="843.3101242759785" y1="650" y2="980"/><text class="tick" x="843.3101242759785" y="994" text-anchor="middle">20%</text>
+<line class="grid" x1="740.4137711750332" x2="740.4137711750332" y1="650" y2="980"/><text class="tick" x="740.4137711750332" y="994" text-anchor="middle">10%</text>
+<line class="grid" x1="667.6550621379893" x2="667.6550621379893" y1="650" y2="980"/><text class="tick" x="667.6550621379893" y="994" text-anchor="middle">5%</text>
+<line class="grid" x1="603.0940157788904" x2="603.0940157788904" y1="650" y2="980"/><text class="tick" x="603.0940157788904" y="994" text-anchor="middle">2%</text>
+<line class="grid" x1="570.5553319064987" x2="570.5553319064987" y1="650" y2="980"/><text class="tick" x="570.5553319064987" y="994" text-anchor="middle">1%</text>
+<line class="grid" x1="492" x2="492" y1="650" y2="980"/><text class="tick" x="492" y="994" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="806.2213276259947,775.4298642533936 806.2213276259947,775.4298642533936 806.2213276259947,772.4434389140272 825.2820473366711,759.0045248868778"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="649.1106638129974,753.0316742081448 649.1106638129974,742.579185520362 649.1106638129974,741.0859728506787"/>
+<circle cx="806.2213276259947" cy="775.4298642533936" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 62.0% caught, 16.0% lost</title></circle>
+<circle cx="785.9271378984295" cy="781.4027149321267" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 60.2% caught, 14.0% lost</title></circle>
+<circle cx="492" cy="957.6018099547512" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 6.8% caught, 0.0% lost</title></circle>
+<circle cx="785.9271378984295" cy="865.0226244343892" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 34.8% caught, 14.0% lost</title></circle>
+<circle cx="492" cy="657.4660633484164" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 97.7% caught, 0.0% lost</title></circle>
+<circle cx="806.2213276259947" cy="775.4298642533936" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 62.0% caught, 16.0% lost</title></circle>
+<circle cx="806.2213276259947" cy="772.4434389140272" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 62.9% caught, 16.0% lost</title></circle>
+<circle cx="825.2820473366711" cy="759.0045248868778" r="4" class="other ring" stroke-width="1.5"><title>the other six: 67.0% caught, 18.0% lost</title></circle>
+<circle cx="649.1106638129974" cy="753.0316742081448" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 68.8% caught, 4.0% lost</title></circle>
+<circle cx="649.1106638129974" cy="742.579185520362" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 71.9% caught, 4.0% lost</title></circle>
+<circle cx="649.1106638129974" cy="741.0859728506787" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 72.4% caught, 4.0% lost</title></circle>
+<text x="657.1106638129974" y="746.579185520362" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="500" y="661.4660633484164" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="817.2820473366711" y="751.0045248868778" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="806.2213276259947" y1="779.4298642533936" x2="814.2213276259947" y2="782.4298642533936"/>
+<text x="814.2213276259947" y="792.4298642533936" text-anchor="start" font-size="11">gitleaks</text>
+<text x="777.9271378984295" y="785.4027149321267" text-anchor="end" font-size="11">Betterleaks</text>
+<text x="793.9271378984295" y="869.0226244343892" text-anchor="start" font-size="11">detect-secrets</text>
+<text x="500" y="961.6018099547512" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="492" y="1014" class="tick">Catch under 1%, not drawn (caught / lost):</text>
+<text x="492" y="1028" class="tick">Kingfisher 0.5% / 0.00%, TruffleHog 0.5% / 0.00%</text>
+<text x="928" y="638" class="panel">word or placeholder <tspan class="tick">358 true, 3,952 false</tspan></text>
+<line class="grid" x1="928" x2="1308" y1="980" y2="980"/><text class="tick" x="922" y="984" text-anchor="end">0%</text>
+<line class="grid" x1="928" x2="1308" y1="897.5" y2="897.5"/><text class="tick" x="922" y="901.5" text-anchor="end">25%</text>
+<line class="grid" x1="928" x2="1308" y1="815" y2="815"/><text class="tick" x="922" y="819" text-anchor="end">50%</text>
+<line class="grid" x1="928" x2="1308" y1="732.5" y2="732.5"/><text class="tick" x="922" y="736.5" text-anchor="end">75%</text>
+<line class="grid" x1="928" x2="1308" y1="650" y2="650"/><text class="tick" x="922" y="654" text-anchor="end">100%</text>
+<line class="grid" x1="1267.882332579968" x2="1267.882332579968" y1="650" y2="980"/><text class="tick" x="1267.882332579968" y="994" text-anchor="middle">10%</text>
+<line class="grid" x1="1168.3331021727968" x2="1168.3331021727968" y1="650" y2="980"/><text class="tick" x="1168.3331021727968" y="994" text-anchor="middle">5%</text>
+<line class="grid" x1="1080" x2="1080" y1="650" y2="980"/><text class="tick" x="1080" y="994" text-anchor="middle">2%</text>
+<line class="grid" x1="1035.4802307403552" x2="1035.4802307403552" y1="650" y2="980"/><text class="tick" x="1035.4802307403552" y="994" text-anchor="middle">1%</text>
+<line class="grid" x1="1004" x2="1004" y1="650" y2="980"/><text class="tick" x="1004" y="994" text-anchor="middle">0.5%</text>
+<line class="grid" x1="928" x2="928" y1="650" y2="980"/><text class="tick" x="928" y="994" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="1170.9941436457962,799.3296089385475 1207.8900883176493,763.3798882681565 1261.282047336671,725.586592178771"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="1125.9121794363116,675.8100558659219 1125.9121794363116,675.8100558659219 1125.9121794363116,675.8100558659219"/>
+<circle cx="1170.9941436457962" cy="800.2513966480446" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 54.5% caught, 5.1% lost</title></circle>
+<circle cx="1129.570754899537" cy="831.5921787709497" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 45.0% caught, 3.5% lost</title></circle>
+<circle cx="1223.6349099818897" cy="753.2402234636871" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 68.7% caught, 7.6% lost</title></circle>
+<circle cx="976.3576419861591" cy="660.1396648044692" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 96.9% caught, 0.2% lost</title></circle>
+<circle cx="1170.9941436457962" cy="799.3296089385475" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 54.7% caught, 5.1% lost</title></circle>
+<circle cx="1207.8900883176493" cy="763.3798882681565" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 65.6% caught, 6.8% lost</title></circle>
+<circle cx="1261.282047336671" cy="725.586592178771" r="4" class="other ring" stroke-width="1.5"><title>the other six: 77.1% caught, 9.6% lost</title></circle>
+<circle cx="1125.9121794363116" cy="675.8100558659219" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 92.2% caught, 3.4% lost</title></circle>
+<circle cx="1125.9121794363116" cy="675.8100558659219" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 92.2% caught, 3.4% lost</title></circle>
+<circle cx="1125.9121794363116" cy="675.8100558659219" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 92.2% caught, 3.4% lost</title></circle>
+<text x="1133.9121794363116" y="679.8100558659219" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="984.3576419861591" y="664.1396648044692" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="1253.282047336671" y="717.586592178771" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="1223.6349099818897" y1="757.2402234636871" x2="1231.6349099818897" y2="760.2402234636871"/>
+<text x="1231.6349099818897" y="770.2402234636871" text-anchor="start" font-size="11">detect-secrets</text>
+<text x="1178.9941436457962" y="804.2513966480446" text-anchor="start" font-size="11">Betterleaks</text>
+<text x="1137.570754899537" y="835.5921787709497" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="928" y="1014" class="tick">Catch under 1%, not drawn (caught / lost):</text>
+<text x="928" y="1028" class="tick">gitleaks 0.6% / 0.00%, Kingfisher 0.0% / 0.00%</text>
+<text x="928" y="1042" class="tick">TruffleHog 0.0% / 0.00%</text>
+<text x="1364" y="638" class="panel">other <tspan class="tick">248 true, 6,177 false</tspan></text>
+<line class="grid" x1="1364" x2="1744" y1="980" y2="980"/><text class="tick" x="1358" y="984" text-anchor="end">0%</text>
+<line class="grid" x1="1364" x2="1744" y1="897.5" y2="897.5"/><text class="tick" x="1358" y="901.5" text-anchor="end">25%</text>
+<line class="grid" x1="1364" x2="1744" y1="815" y2="815"/><text class="tick" x="1358" y="819" text-anchor="end">50%</text>
+<line class="grid" x1="1364" x2="1744" y1="732.5" y2="732.5"/><text class="tick" x="1358" y="736.5" text-anchor="end">75%</text>
+<line class="grid" x1="1364" x2="1744" y1="650" y2="650"/><text class="tick" x="1358" y="654" text-anchor="end">100%</text>
+<line class="grid" x1="1689.1459678952585" x2="1689.1459678952585" y1="650" y2="980"/><text class="tick" x="1689.1459678952585" y="994" text-anchor="middle">10%</text>
+<line class="grid" x1="1593.9129187742008" x2="1593.9129187742008" y1="650" y2="980"/><text class="tick" x="1593.9129187742008" y="994" text-anchor="middle">5%</text>
+<line class="grid" x1="1509.4096973647524" x2="1509.4096973647524" y1="650" y2="980"/><text class="tick" x="1509.4096973647524" y="994" text-anchor="middle">2%</text>
+<line class="grid" x1="1466.8201830569" x2="1466.8201830569" y1="650" y2="980"/><text class="tick" x="1466.8201830569" y="994" text-anchor="middle">1%</text>
+<line class="grid" x1="1436.7048486823762" x2="1436.7048486823762" y1="650" y2="980"/><text class="tick" x="1436.7048486823762" y="994" text-anchor="middle">0.5%</text>
+<line class="grid" x1="1364" x2="1364" y1="650" y2="980"/><text class="tick" x="1364" y="994" text-anchor="middle">0%</text>
+<polyline fill="none" class="chain" stroke-width="2" points="1377.0824647148497,888.1854838709678 1529.9978679545663,886.8548387096774 1542.4210308255276,881.5322580645161 1697.282047336671,865.5645161290322"/>
+<polyline fill="none" class="accent-line" stroke-width="2" points="1472.671113586155,880.2016129032259 1477.2974678717346,791.0483870967741 1477.2974678717346,768.4274193548388"/>
+<circle cx="1377.0824647148497" cy="888.1854838709678" r="4" class="other ring" stroke-width="1.5"><title>gitleaks: 27.8% caught, 0.0% lost</title></circle>
+<circle cx="1529.9978679545663" cy="886.8548387096774" r="4" class="other ring" stroke-width="1.5"><title>Betterleaks: 28.2% caught, 2.6% lost</title></circle>
+<circle cx="1364" cy="976.008064516129" r="4" class="other ring" stroke-width="1.5"><title>Kingfisher: 1.2% caught, 0.0% lost</title></circle>
+<circle cx="1390.1649294296997" cy="976.008064516129" r="4" class="other ring" stroke-width="1.5"><title>TruffleHog: 1.2% caught, 0.1% lost</title></circle>
+<circle cx="1470.2824457707345" cy="953.3870967741935" r="4" class="other ring" stroke-width="1.5"><title>Nosey Parker: 8.1% caught, 1.1% lost</title></circle>
+<circle cx="1664.8966884415452" cy="876.2096774193549" r="4" class="other ring" stroke-width="1.5"><title>detect-secrets: 31.5% caught, 8.6% lost</title></circle>
+<circle cx="1421.0251416244669" cy="660.6451612903226" r="4" class="hollow" stroke-width="1.5"><title>CredSweeper (tuned on CredData): 96.8% caught, 0.3% lost</title></circle>
+<circle cx="1529.9978679545663" cy="886.8548387096774" r="4" class="other ring" stroke-width="1.5"><title>gitleaks + Betterleaks + Kingfisher: 28.2% caught, 2.6% lost</title></circle>
+<circle cx="1542.4210308255276" cy="881.5322580645161" r="4" class="other ring" stroke-width="1.5"><title>the other five but detect-secrets: 29.8% caught, 3.0% lost</title></circle>
+<circle cx="1697.282047336671" cy="865.5645161290322" r="4" class="other ring" stroke-width="1.5"><title>the other six: 34.7% caught, 10.5% lost</title></circle>
+<circle cx="1472.671113586155" cy="880.2016129032259" r="5" class="accent ring" stroke-width="1.5"><title>guessing off: 30.2% caught, 1.1% lost</title></circle>
+<circle cx="1477.2974678717346" cy="791.0483870967741" r="5" class="accent ring" stroke-width="1.5"><title>guessing confident: 57.3% caught, 1.2% lost</title></circle>
+<circle cx="1477.2974678717346" cy="768.4274193548388" r="5" class="accent ring" stroke-width="1.5"><title>guessing eager: 64.1% caught, 1.2% lost</title></circle>
+<text x="1485.2974678717346" y="795.0483870967741" text-anchor="start" class="ours" font-size="11">redac---n</text>
+<text x="1429.0251416244669" y="664.6451612903226" text-anchor="start" font-size="11">CredSweeper (tuned on CredData)</text>
+<text x="1689.282047336671" y="857.5645161290322" text-anchor="end" font-size="11">the other six</text>
+<line class="lead" x1="1664.8966884415452" y1="880.2096774193549" x2="1672.8966884415452" y2="883.2096774193549"/>
+<text x="1672.8966884415452" y="893.2096774193549" text-anchor="start" font-size="11">detect-secrets</text>
+<line class="lead" x1="1529.9978679545663" y1="890.8548387096774" x2="1537.9978679545663" y2="893.8548387096774"/>
+<text x="1537.9978679545663" y="903.8548387096774" text-anchor="start" font-size="11">Betterleaks</text>
+<line class="lead" x1="1377.0824647148497" y1="892.1854838709678" x2="1385.0824647148497" y2="895.1854838709678"/>
+<text x="1385.0824647148497" y="905.1854838709678" text-anchor="start" font-size="11">gitleaks</text>
+<text x="1478.2824457707345" y="957.3870967741935" text-anchor="start" font-size="11">Nosey Parker</text>
+<text x="1372" y="968.008064516129" text-anchor="start" font-size="11">Kingfisher</text>
+<line class="lead" x1="1390.1649294296997" y1="972.008064516129" x2="1398.1649294296997" y2="946.008064516129"/>
+<text x="1398.1649294296997" y="944.008064516129" text-anchor="start" font-size="11">TruffleHog</text>
+</svg>