For a coding assistant: every credential shape the registry knows, plus machine identifiers and the email address, and nothing else. Inherits regex-default without the country packs, card numbers, URLs and its IPv4, since the network detector carries a wider set. URL is dropped on purpose: a credential embedded in a URL, as in https://ghp_...@github.com/o/r, sits inside the URL span, and the URL starts first, so no ordering keeps the token. Losing the URL matters less here than leaking the token. The secrets detector comes first so a long token takes its ground before a phone or card pattern claims the digits inside it.
Tags: international, secrets, network, software-dev, code-assistant, logs