diff --git a/internal/probe/probe.go b/internal/probe/probe.go index 0766d37..1f8ad32 100644 --- a/internal/probe/probe.go +++ b/internal/probe/probe.go @@ -443,7 +443,9 @@ func classifyStatus(status int, tag string) (model.ExposureState, string) { } switch { case status >= 200 && status < 300: - return model.ExposurePublicRead, fmt.Sprintf("%sstatus=%d anonymous listing allowed", prefix, status) + // Generic HTTP check: anonymous access succeeded, but this is not a + // storage list API, so it does not imply the resource is listable. + return model.ExposurePublicRead, fmt.Sprintf("%sstatus=%d anonymous access succeeded", prefix, status) case status == http.StatusUnauthorized || status == http.StatusForbidden: return model.ExposureAuthRequired, fmt.Sprintf("%sstatus=%d authentication required", prefix, status) case status == http.StatusNotFound || status == http.StatusGone: