@@ -110,6 +110,20 @@ function isReviewedFixture(rule, value, paths) {
     paths.includes('api/scripts/ask-posnic-ui-check.js');
 }
 
+// Public translations of token-verification/sign-in errors contain no spaces
+// in these scripts. The assignment heuristic mistakes the final English word
+// in their JSON key for a credential field. Match only these reviewed literals.
+function isReviewedTranslation(rule, value, paths) {
+  if (rule !== 'secret-shaped assignment') return false;
+  const messages = {
+    'languages/server/ja.json': 'トークンの検証中にエラーが発生しました。',
+    'languages/server/th.json': 'เกิดข้อผิดพลาดขณะยืนยันโทเค็น',
+    'languages/server/zh-CN.json': '您尝试使用错误的帐户或密码登录的次数过多',
+    'languages/server/zh-TW.json': '您嘗試使用錯誤的帳戶或密碼登入過多次',
+  };
+  return paths.length > 0 && paths.every(path => messages[path] === value);
+}
+
 function main() {
   /*
    * Every object in the database, with its type.
@@ -200,7 +214,8 @@ function main() {
       const line = content.slice(0, m.index).split('\n').length;
       const context = content.split('\n')[line - 1] || '';
       const declaredFake = SELF_DECLARED_FAKE.test(value) || SELF_DECLARED_FAKE.test(context) ||
-        isReviewedFixture(rule.name, value, pathList);
+        isReviewedFixture(rule.name, value, pathList) ||
+        isReviewedTranslation(rule.name, value, pathList);
 
       const serious =
         ALWAYS_SERIOUS.has(rule.name) ||
@@ -269,5 +284,5 @@ function main() {
   return 1;
 }
 
-module.exports = { isReviewedFixture };
+module.exports = { isReviewedFixture, isReviewedTranslation };
 if (require.main === module) process.exit(main());
@@ -13,3 +13,17 @@ test('reviewed fixture cannot downgrade high-signal credential rules', () => {
   for (const rule of ['private key block', 'GitHub token', 'AWS access key id', 'connection string with credentials'])
     assert.equal(isReviewedFixture(rule, 'synthetic-only', fixture), false);
 });
+
+test('reviewed public error translations do not hide credentials or other paths', () => {
+  const { isReviewedTranslation } = require('../scripts/scan-git-history');
+  for (const [code, key] of [['ja', 'An error occurred while verifying the token'], ['th', 'An error occurred while verifying the token'], ['zh-CN', 'You tried to sign in too many times with an incorrect account or password'], ['zh-TW', 'You tried to sign in too many times with an incorrect account or password']]) {
+    const value = require(`../languages/server/${code}.json`)[key];
+    const paths = [`languages/server/${code}.json`];
+    assert.equal(isReviewedTranslation('secret-shaped assignment', value, paths), true);
+    assert.equal(isReviewedTranslation('secret-shaped assignment', value + 'changed', paths), false);
+    assert.equal(isReviewedTranslation('secret-shaped assignment', value, ['api/src/auth.js']), false);
+    assert.equal(isReviewedTranslation('secret-shaped assignment', value, []), false);
+    for (const rule of ['private key block', 'GitHub token', 'AWS access key id', 'connection string with credentials'])
+      assert.equal(isReviewedTranslation(rule, value, paths), false);
+  }
+});