/**
 * Regression tests for the secrets scanner — W7
 *
 * These tests encode the exact failure modes that caused "0 findings / clean"
 * while two live cloud-SQL passwords were committed to git:
 *
 *   1. Git-history secret: only in a past commit → must be caught
 *   2. Secret in a test path: recall-biased; not suppressed by path filter
 *   3. Degradation: gitleaks unavailable → degraded=true must propagate
 *   4. DB-pattern fallback: postgres:// URI flagged by regex fallback
 *
 * Each test would FAIL on the old behavior.
 */
export {};
//# sourceMappingURL=secrets.test.d.ts.map