Goal: measure and reduce false positives from the sensitive-file scanner on clean generated bundles.
Acceptance criteria:
- Add representative minified JavaScript, CSS, and source-map fixtures with synthetic non-secret values.
- Record the expected clear or review status for every fixture.
- Keep real credentials and copied production bundles out of the repository.
- Run the corpus in CI with deterministic results.
Goal: measure and reduce false positives from the sensitive-file scanner on clean generated bundles.
Acceptance criteria: