Chore/detect secrets perf optimizations - #294

Merged

Saarett merged 11 commits into

chore/detect-secrets-perf-optimizations

Aug 12, 2026

Commits on Aug 9, 2026

perf: add plan cache to eliminate repeated inspect calls in DI hot path
GillSami
committed
c6509ad

Commits on Aug 10, 2026

fix: pin filter config to restore correct 343-finding parity baseline
GillSami
committed
3168e33
fix: restore correct 343-finding parity baseline + record real checkov timing
GillSami
committed
0f08efe
perf: add pre-gate to skip lines that cannot contain secrets
GillSami
committed
72ba48f
perf: cache filter list in get_filters_with_parameter() to avoid rebuilding it on every line (DETECT_SECRETS_PERF_FILTER_CACHE flag); parity oracle 343 findings unchanged, full suite 1116 passed/1 …
GillSami
committed
3503f9f
perf: short-circuit calculate_shannon_entropy() for strings too short or too uniform to exceed any threshold (DETECT_SECRETS_PERF_ENTROPY_SC flag)
GillSami
committed
80971af
perf: use lazy %-style logging in scan.py hot paths (_is_filtered_out, _get_lines_from_file) to avoid eager string formatting;
GillSami
committed
eaffec1

Commits on Aug 11, 2026