Taco names and descriptions and account handles are searched. Private tacos only when you own them, and never counted for anyone else. Entities and files are searched inside one taco at a time. Commit messages are not searched — find the taco, then read its history.