$ node C:/Users/Administrator/.qoder-cn/plugins/cache/qoder-marketplace/better-harness/0.2.20/scripts/agent-guardrails/secret-scan.mjs .scratch/bh-evidence/fixture
# cwd: D:\repos\CodeWiki-Plus
# exit: 2  duration_ms: 924  codec: utf-8

secret-scan.mjs v1.0.0
Scanned 1 files, skipped 0. Findings: 1.
Severity: critical=1, high=0, medium=0, low=0

Findings:

[CRITICAL] OpenAI API key (openai-api-key, high)
  .scratch\bh-evidence\fixture\leak.js:1:25
  secret: sk-abc************************6789
  entropy: 4.36
  context: const OPENAI_API_KEY = "sk-abc************************6789";
  fingerprint: f3f6fcc0a1290b5d26e4e2f3

Exit threshold: --fail-on high
