secret-scan 命中合成 fixture 里的假 OpenAI key：脱敏输出、熵值、指纹齐全，退出码 2 06 · secret-scan-fixture-openai-key-2 
$ node C:/Users/Administrator/.qoder-cn/plugins/cache/qoder-marketplace/better-harness/0.2.20/scripts/agent-guardrails/secret-scan.mjs .scratch/bh-evidence/fixture
secret-scan.mjs v1.0.0
Scanned 1 files, skipped 0. Findings: 1.
Severity: critical=1, high=0, medium=0, low=0
 
Findings:
 
[CRITICAL] OpenAI API key (openai-api-key, high)
  .scratch\bh-evidence\fixture\leak.js:1:25
  secret: sk-abc************************6789
  entropy: 4.36
  context: const OPENAI_API_KEY = "sk-abc************************6789";
  fingerprint: f3f6fcc0a1290b5d26e4e2f3
 
Exit threshold: --fail-on high
exit 2 · 0.9s