Function scan

scan(text: string, options?: ScanOptions): ScanMatch[]
Scans free-form text for the same embedded PII (emails, phone numbers, credit card numbers, public IPv4 addresses) and secrets (API keys/tokens, JWTs) that redact detects, but returns each match as structured data instead of masking it in place — for callers that want to inspect, log, or make their own decision about what was found, rather than have it masked automatically.

Reuses exactly the same detection logic redact does, so it carries the same known gaps and false-positive/negative characteristics — see redact's own documentation for the specifics on 'ip' and 'jwt'. scan is best-effort pattern matching, not a complete PII/secret detector.
Parameters
- text: string
  Text to scan.
- options: ScanOptions = {}
  - Optionaltypes?: DetectionType[]
    
    Which types to look for. Default is 'email', 'phone', and 'creditCard'. 'apiKey', 'ip', and 'jwt' are opt-in only, given their higher false-positive risk (or, for 'jwt', simply being a bearer secret rather than classic PII).
Returns ScanMatch[]
Every match found, in the order it appears in the text.
Example
```
scan('Contact jordan@example.com, card 4111 1111 1111 1111');
// [
//   { type: 'email', value: 'jordan@example.com', start: 8, end: 26 },
//   { type: 'creditCard', value: '4111 1111 1111 1111', start: 33, end: 52 },
// ]
```
- Defined in text/scan.ts:43