Redact Secret from Vuln Details once it is No Longer Detected

The MR redacts secret values and git refs from vulnerability details when a secret detection vulnerability is no longer detected in the code.

File path and line numbers are not redacted, as they are not git refs and don't expose the secret itself.

All redaction is gated behind the redact_resolved_secret_details FF and only applies to secret_detection report type.

Related to #590976

Edited by Subashis Chakraborty

Merge request reports

Loading