{
  "id": 7,
  "category": "medium",
  "title": "CI/CD Pipeline",
  "description": "A deployment workflow prints a secret directly to logs.",
  "scan_mode": "dir",
  "exclude_paths": [],
  "secrets": [
    {
      "id": "s1",
      "type": "github_token",
      "path": "deploy.yml",
      "line": 8,
      "visibility": "surface"
    },
    {
      "id": "s2",
      "type": "assignment_secret",
      "path": "deploy.yml",
      "line": 8,
      "visibility": "shallow"
    },
    {
      "id": "s3",
      "type": "github_token",
      "path": "deploy.yml",
      "line": 8,
      "visibility": "deep",
      "requires_action": "inspect_git_history"
    }
  ]
}