Secrets stored in plain text when more than one contiguous secrets are detected

[aponcedeleonch]

Describe the issue

If multiple secrets are detected in a file, and they are contiguous, a subset of these secrets may be stored in plain text. This occurs because the secrets are recorded in the database simultaneously as they are being redacted. To resolve this, we should wait until the entire text has been redacted before recording the secrets. Refer to the image below from the dashboard for an illustration of the issue:

Steps to Reproduce

1. Have a file with contiguous secrets. Example:

GITHUB_TOKEN="ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789"
AWS_ACCESS_KEY_ID="AKIAIOSFODNN7EXAMPLE"
AWS_SECRET_ACCESS_KEY="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

2. Pass the file as context to Copilot/Continue

Operating System

Microsoft Windows (Intel)

IDE and Version

All

Extension and Version

v0.1.5

Provider

GitHub Copilot

Model

All

Logs

No response

Additional Context

No response