const SENSITIVE_WHOLE_WORD_KEYWORDS: &[(&str, bool)];Expand description
Keywords that must appear as whole words (surrounded by non-alphanumeric characters or at string boundaries) to trigger SENSITIVE escalation, paired with whether a simple trailing “s” (plural) should also match. This prevents false positives from substrings like “patch”, “dispatch”, “pattern”, “tokenize”, “compatibility”, etc.
“pat” opts OUT of plural matching: its natural plural “pats” collides with the extremely common English verb (“the user pats the dog”), which is a far more common false-positive source than the singular “pat” already is on its own (PR #2740 review discussion). The other five keywords’ plurals (“tokens”, “secrets”, “passwords”, “credentials”, “keychains”) don’t collide with unrelated common words, so they opt in.