{
 "repos_total": 91,
 "repos_scanned": 81,
 "repos_with_findings": 52,
 "total_hits": 178,
 "new_public_db_hosts": {
  "103.149.99.107:2903": "PostgreSQL — dace, morning/morning_live, eform, mail_system (VDSS prod?)",
  "14.225.5.225:5432": "PostgreSQL — cms_vdss_live, cms_vdss_draf (VDSS prod CMS)",
  "211.188.52.92:3306": "MariaDB — chondb (chon poc live)",
  "14.225.11.28:4309": "MariaDB — chondb (uat/dev)",
  "14.225.11.28:5432": "PostgreSQL — push_noti, dace, morning/morning_live (VALID noti)",
  "14.225.11.28:3306": "MySQL 8.0.36 — sc_data, vschool (VALID tamdt)"
 },
 "distinct_secrets": {
  "DB passwords (pattern word@YYYY@#)": [
   "Tamdt@2024@#",
   "DaCe@2025@#",
   "dACe@2026@#",
   "mOrNiNg@2025@#",
   "MoRNinG@2026@#",
   "vDoc@2025@#",
   "cMs@2025@#",
   "Vdss@2022#",
   "rP@2025@#",
   "eForM@2026@#",
   "TamDT@2026!@#"
  ],
  "bcy/FPT-akames MES": [
   "api-key.secret XQI4lMdx...IFRe",
   "azure.secret 6hV8Q~LO46QPErIaO2AcX7gbtJl42YxG4o88kbjU",
   "azure.secret xB38Q~CaV9tHPgPo~-q14SFe1qb_zmL55APHjbui",
   "keycloak.secret XUNPTNv4bZv5ylS6Au1CYDEylQbu9Hqr",
   "nas.config Vietnam@123",
   "db.password P@999w0rdAk@No1",
   "salt uuids"
  ],
  "Keycloak (parking)": [
   "client-secret LN1LjiodrgAeKi071TAPjHZLoCdjI0Ob (reused across 5 parking services)"
  ],
  "JWT": [
   "jwt.secret 8L2jKxP5Qv9mW7nT3rY8sF4dG1hJ6kL9oP2qR5tU8vX= (report-platform, tamdt1 eform)"
  ],
  "Private keys": [
   "shared RSA key (dace/vdoc/morning/vdss-cms/chon) — same rsa.private.key across products",
   "2x Firebase service-account private keys (ptsc-marine, stma-dev) in bcy notification"
  ],
  "SMTP": [
   "fmqkbzlpljqyybmm (bcy email), dhynjshowqtuzxvl (merchantx)"
  ],
  "Redis": [
   "vDsS@2025@# (parking export/keycloak/payment)"
  ]
 },
 "artifacts": [
  "L4_fullclone_secrets.json",
  "L4_fullclone_ck/ (81 ckpts)",
  "L4_full_clone_manifest.json"
 ]
}