From 0dbb4827de353cb3c03e829ea7505b81da7f562b Mon Sep 17 00:00:00 2001
From: nightcityblade <nightcityblade@gmail.com>
Date: Fri, 11 Sep 2026 11:08:03 +0800
Subject: [PATCH] docs: clarify scanner file reading behavior

---
 internal/scanner/scanner.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/internal/scanner/scanner.go b/internal/scanner/scanner.go
index ed090da..cf5f581 100644
--- a/internal/scanner/scanner.go
+++ b/internal/scanner/scanner.go
@@ -69,7 +69,8 @@ func NewDefault() *Scanner {
 }
 
 // Scan recursively walks the directory and classifies any detected environment files.
-// It never opens or reads file contents.
+// Secret detection reads up to 1 MB from each non-allowlisted environment file,
+// skipping binary files.
 func (s *Scanner) Scan(dir string) (*Result, error) {
 	if dir == "" {
 		dir = "."