Clarify behaviour of exclude_regexes_capture and exclude_regexes_match

pkg/custom_detectors/CUSTOM_DETECTORS.md

@@ -39,8 +39,8 @@ This guide will walk you through setting up a custom detector in TruffleHog to i
 
    **Other allowed parameters:**
    - **`primary_regex_name`**: This parameter allows you designate the primary regex pattern when multiple regex patterns are defined in the regex section. If a match is found, the match for the designated primary regex will be used to determine the line number. The value must be one of the names specified in the regex section.
-   - **`exclude_regexes_capture`**: This parameter allows you to define regex patterns to exclude specific parts of a detected secret. If a match is found within the detected secret, the portion matching this regex is excluded from the result.
-   - **`exclude_regexes_match`**: This parameter enables you to define regex patterns to exclude entire matches from being reported as secrets. This applies to the entire matched string, not just the token.
+   - **`exclude_regexes_capture`**: This parameter enables you to define regex patterns to exclude certain captured tokens from being reported as secrets. The pattern is tested against only the captured token, and not the enitre matched string.
+   - **`exclude_regexes_match`**: This parameter enables you to define regex patterns to exclude certain matched strings from being reported as secrets. The pattern is tested against entire matched string, not just the captured token.
    - **`entropy`**: This parameter is used to assess the randomness of detected strings. High entropy often indicates that a string is a potential secret, such as an API key or password, due to its complexity and unpredictability. It helps in filtering false-positives. While an entropy threshold of `3` can be a starting point, it's essential to adjust this value based on your project's specific requirements and the nature of the data you have.
    - **`exclude_words`**: This parameter allows you to specify a list of words that, if present in a detected string, will cause TruffleHog to ignore that string. This is a substring match and does not enforce word boundaries. It applies only to the token.
    - **`validations`**: This parameter lets you define extra validation rules for each regex specified in the regex option. These rules address limitations of Go's RE2 engine, such as the lack of lookahead support, and are applied after a regex match to help reduce false positives.