export type SecretSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
export type SecretCategory = 'env_file' | 'credential_store' | 'config' | 'shell_history' | 'ssh_key' | 'other';
export interface SecretFinding {
    id: string;
    category: SecretCategory;
    severity: SecretSeverity;
    provider?: string;
    filePath: string;
    lineNumber?: number;
    title: string;
    detail: string;
    redactedPreview?: string;
    remediation: string;
}
export interface SecretsScanResult {
    findings: SecretFinding[];
    scannedFiles: number;
    scannedStores: number;
    healthScore: number;
    limits?: {
        maxFileBytes: number;
        maxEnvFiles: number;
        maxFindings: number;
        maxDepth: number;
    };
    stats?: {
        candidateFiles: number;
        excludedFiles: number;
    };
    truncated?: {
        candidateFiles: boolean;
        findings: boolean;
    };
}
export declare function scanSecrets(options?: {
    cwd?: string;
    maxEnvDepth?: number;
    extraRoots?: string[];
    disabledRoots?: string[];
    configFiles?: string[];
}): SecretsScanResult;