Add severity for each finding

[roisec]

Description Add a severity level (e.g., Low, Medium, High, Critical) to each finding to help prioritize remediation efforts.

Preferred Solution Include a severity field in the output based on the type of secret and its impact. Example: Critical/high/medium

Additional Context This will improve triaging and integration with CI/CD pipelines.

[kashifkhan0771]

I like the idea, but I am thinking about on what basis TruffleHog will assign severity?

[roisec]

Based on the risk of the relevant secret

[domwhewell-sage]

Just to echo on this, I like this idea. It could be done based on Detector i.e. WorldWeather = Low. (Not saying this API key is a low risk if its leaked, I haven't done enough research for that)

It doesn't have to be hardcoded into the detectors themselves, perhaps an option in the config file e.g.

detector_severity:
  WorldWeather: low
  CustomRegex: critical