QFinch detects secret-like material in supported repository scopes while redacting sensitive values. Dedicated lifecycle views distinguish a new detection, an accepted baseline, remediation progress and later verification.
A pattern match is not proof that a credential is active. Provider verification must be explicitly authorised, fail closed and retain only approved fingerprints or checksums—never the submitted credential.
CTA: Review repository secret risk