@coo-quack/sensitive-canary 0.6.0 → 0.8.0

package/src/lib/default-config.json

@@ -0,0 +1,570 @@
+{
+  "contextWindow": 3,
+  "rules": [
+    {
+      "id": "aws-access-key",
+      "description": "AWS Access Key ID",
+      "regex": "\\b(A3T[A-Z0-9]|AKIA|ABIA|ACCA|APKA|ASCA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}\\b",
+      "category": "secret",
+      "validate": "aws-key"
+    },
+    {
+      "id": "gcp-api-key",
+      "description": "Google Cloud API Key",
+      "regex": "AIza[0-9A-Za-z_-]{35}",
+      "category": "secret"
+    },
+    {
+      "id": "private-key",
+      "description": "PEM Private Key",
+      "regex": "-----BEGIN ((RSA|EC|DSA|PGP|OPENSSH|ENCRYPTED|SSH2 ENCRYPTED) )?PRIVATE KEY",
+      "category": "secret"
+    },
+    {
+      "id": "github-pat",
+      "description": "GitHub Personal Access Token",
+      "regex": "gh[pousr]_[A-Za-z0-9]{36,255}",
+      "category": "secret"
+    },
+    {
+      "id": "github-fine-grained",
+      "description": "GitHub Fine-Grained Token",
+      "regex": "github_pat_[A-Za-z0-9_]{82}",
+      "category": "secret"
+    },
+    {
+      "id": "gitlab-pat",
+      "description": "GitLab Personal Access Token",
+      "regex": "(?:gl(?:pat|dt|rt|cbt|imt|agent|oas|ptt|soat|ffct|ft)-[A-Za-z0-9_=-]{20,}|GR1348941[A-Za-z0-9_-]{20})",
+      "category": "secret"
+    },
+    {
+      "id": "npm-token",
+      "description": "npm Access Token",
+      "regex": "npm_[A-Za-z0-9]{36}",
+      "category": "secret"
+    },
+    {
+      "id": "slack-token",
+      "description": "Slack Token",
+      "regex": "(?:xox[abeprs]|xapp|xwfp)-[0-9a-zA-Z-]{10,72}",
+      "category": "secret"
+    },
+    {
+      "id": "slack-webhook",
+      "description": "Slack Webhook URL",
+      "regex": "https:\\/\\/hooks\\.slack\\.com\\/services\\/T[A-Za-z0-9_]{8,10}\\/B[A-Za-z0-9_]{8,12}\\/[A-Za-z0-9_]{23,24}",
+      "category": "secret"
+    },
+    {
+      "id": "discord-webhook",
+      "description": "Discord Webhook URL",
+      "regex": "https:\\/\\/discord(?:app)?\\.com\\/api\\/webhooks\\/[0-9]{17,20}\\/[A-Za-z0-9_-]{68}",
+      "category": "secret"
+    },
+    {
+      "id": "telegram-bot-token",
+      "description": "Telegram Bot Token",
+      "regex": "\\b[0-9]{6,12}:AA[0-9A-Za-z_-]{30,128}\\b",
+      "category": "secret"
+    },
+    {
+      "id": "twilio-sid",
+      "description": "Twilio Account SID",
+      "regex": "(?<![A-Za-z0-9])(?:AC|SK)[0-9a-fA-F]{32}(?![A-Za-z0-9])",
+      "category": "secret"
+    },
+    {
+      "id": "sendgrid-key",
+      "description": "SendGrid API Key",
+      "regex": "SG\\.[A-Za-z0-9_-]{20,24}\\.[A-Za-z0-9_-]{39,50}",
+      "category": "secret"
+    },
+    {
+      "id": "mailgun-key",
+      "description": "Mailgun API Key",
+      "regex": "key-[0-9a-zA-Z]{32}",
+      "category": "secret"
+    },
+    {
+      "id": "mailchimp-key",
+      "description": "Mailchimp API Key",
+      "regex": "[0-9a-f]{32}-us[0-9]{1,2}",
+      "category": "secret"
+    },
+    {
+      "id": "stripe-secret-key",
+      "description": "Stripe Secret Key",
+      "regex": "(?:sk_(?:live|test|org))_[0-9a-zA-Z]{24}|whsec_[0-9a-zA-Z]{32,}",
+      "category": "secret"
+    },
+    {
+      "id": "stripe-restricted-key",
+      "description": "Stripe Restricted Key",
+      "regex": "rk_(live|test)_[0-9a-zA-Z]{24}",
+      "category": "secret"
+    },
+    {
+      "id": "openai-key",
+      "description": "OpenAI API Key (legacy)",
+      "regex": "sk-(?!proj-|ant-)[A-Za-z0-9]{48}",
+      "category": "secret"
+    },
+    {
+      "id": "openai-project-key",
+      "description": "OpenAI Project API Key",
+      "regex": "sk-proj-[A-Za-z0-9_-]{40,}",
+      "category": "secret",
+      "entropyThreshold": 3.5
+    },
+    {
+      "id": "anthropic-key",
+      "description": "Anthropic API Key",
+      "regex": "sk-ant-[A-Za-z0-9_-]{95,}",
+      "category": "secret"
+    },
+    {
+      "id": "replicate-token",
+      "description": "Replicate API Token",
+      "regex": "r8_[0-9A-Za-z_-]{37}",
+      "category": "secret"
+    },
+    {
+      "id": "huggingface-token",
+      "description": "Hugging Face Access Token",
+      "regex": "(?:hf_[a-zA-Z0-9]{34}|api_org_[a-zA-Z0-9]{34})",
+      "category": "secret"
+    },
+    {
+      "id": "groq-key",
+      "description": "Groq API Key",
+      "regex": "gsk_[A-Za-z0-9]{52}",
+      "category": "secret"
+    },
+    {
+      "id": "openrouter-key",
+      "description": "OpenRouter API Key",
+      "regex": "sk-or-v1-[0-9a-f]{64}",
+      "category": "secret"
+    },
+    {
+      "id": "xai-key",
+      "description": "xAI (Grok) API Key",
+      "regex": "xai-[0-9A-Za-z_]{80}",
+      "category": "secret"
+    },
+    {
+      "id": "perplexity-key",
+      "description": "Perplexity API Key",
+      "regex": "pplx-[a-zA-Z0-9]{48}",
+      "category": "secret"
+    },
+    {
+      "id": "digitalocean-pat",
+      "description": "DigitalOcean Personal Access Token",
+      "regex": "do[opr]_v1_[a-f0-9]{64}",
+      "category": "secret"
+    },
+    {
+      "id": "square-access-token",
+      "description": "Square Access Token",
+      "regex": "(?<![A-Za-z0-9+/])(?:EAAA[a-zA-Z0-9\\-_+=]{60,1024}|sq0(?:atp|csp)-[A-Za-z0-9_-]{22,128})(?![A-Za-z0-9+/=_-])",
+      "category": "secret"
+    },
+    {
+      "id": "mapbox-token",
+      "description": "Mapbox Token",
+      "regex": "(?<![A-Za-z0-9_-])(?:pk|sk|tk)\\.eyJ[A-Za-z0-9_-]{10,1024}\\.[A-Za-z0-9_-]{10,1024}",
+      "category": "secret"
+    },
+    {
+      "id": "sentry-user-token",
+      "description": "Sentry User Auth Token",
+      "regex": "sntryu_[a-f0-9]{64}",
+      "category": "secret"
+    },
+    {
+      "id": "sentry-org-token",
+      "description": "Sentry Organization Auth Token",
+      "regex": "(?<![A-Za-z0-9_-])sntrys_[A-Za-z0-9+/=]{10,1024}_[A-Za-z0-9]{43}",
+      "category": "secret"
+    },
+    {
+      "id": "atlassian-token",
+      "description": "Atlassian API Token",
+      "regex": "ATATT3[A-Za-z0-9_\\-=]{180,}",
+      "category": "secret"
+    },
+    {
+      "id": "linear-key",
+      "description": "Linear API Key",
+      "regex": "lin_api_[a-zA-Z0-9]{40}",
+      "category": "secret"
+    },
+    {
+      "id": "postman-key",
+      "description": "Postman API Key",
+      "regex": "PMAK-[a-fA-F0-9]{24}-[a-fA-F0-9]{34}",
+      "category": "secret"
+    },
+    {
+      "id": "supabase-key",
+      "description": "Supabase Personal Access Token",
+      "regex": "sbp_[a-z0-9]{40}",
+      "category": "secret"
+    },
+    {
+      "id": "jwt",
+      "description": "JSON Web Token (JWT)",
+      "regex": "(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,4096}\\.eyJ[A-Za-z0-9_-]{10,4096}\\.[A-Za-z0-9_-]{10,4096}",
+      "category": "secret"
+    },
+    {
+      "id": "generic-secret",
+      "description": "Generic API Key / Secret",
+      "regex": "(api[_-]?key|secret[_-]?key|access[_-]?token|api[_-]?secret)\\s*[:=]\\s*['\"]?([A-Za-z0-9\\-_.]{20,})",
+      "category": "secret",
+      "flags": "gi",
+      "secretGroup": 2,
+      "entropyThreshold": 3.5
+    },
+    {
+      "id": "env-assignment",
+      "description": ".env style secret assignment",
+      "regex": "(?:(?:^|\\n)[ \\t-]{0,64}[\"']?[A-Za-z0-9_]{0,64}(?:SECRET|PASSWORD|PASSWD|(?<![A-Za-z])PASS(?![A-Za-z])|TOKEN|API_KEY|ACCESS_KEY|PRIVATE_KEY)[A-Za-z0-9_]{0,64}[\"']?[ \\t]*:|\\b[A-Za-z0-9_]{0,64}(?:SECRET|PASSWORD|PASSWD|(?<![A-Za-z])PASS(?![A-Za-z])|TOKEN|API_KEY|ACCESS_KEY|PRIVATE_KEY)[A-Za-z0-9_]{0,64}[ \\t]*=)[ \\t]*[\"']?(?!\\$)(?=([^\\s\"'\\[\\]{}();,<>]{8,4096}))\\1(?:(?=$|[\\s\"';,)\\]}])|(?=[^\\s\"'\\[\\]{}();,<>]))",
+      "flags": "gi",
+      "category": "secret",
+      "secretGroup": 1,
+      "entropyThreshold": 3
+    },
+    {
+      "id": "connection-string",
+      "description": "Database Connection String with credentials",
+      "regex": "(mongodb(?:\\+srv)?|mysql|postgres|postgresql|redis):\\/\\/[^:\\s]{1,1024}:[^@\\s]{1,1024}@",
+      "category": "secret"
+    },
+    {
+      "id": "pii-email",
+      "description": "Email Address",
+      "regex": "(?<!\\b(?:ssh|scp|rsync|sftp)\\b(?:[ \\t]+[^\\s@,;()]+){0,2}[ \\t]+)\\b(?!(?:git|hg|svn)@)[A-Za-z0-9._%+-]{1,64}@(?![0-9]+\\.)(?!example\\.(?:com|net|org|edu)\\b)(?![A-Za-z0-9.-]{0,255}\\.(?:test|invalid|localhost|local|example)\\b)(?:[A-Za-z0-9-]+\\.)+(?!(?:png|jpg|jpeg|gif|webp|svg|ico|bmp|tiff|tif|css|json|html|htm|xml|yaml|yml|lock|woff|ttf|otf|eot|webm|wav|flac|pdf|tgz|bz|xz)(?![A-Za-z]))[A-Za-z]{2,}(?![A-Za-z0-9.-])(?!:\\S)",
+      "category": "pii"
+    },
+    {
+      "id": "pii-credit-card",
+      "description": "Credit Card Number",
+      "regex": "\\b(?:4[0-9]{3}(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|4[0-9]{3}(?:[\\s-]?[0-9]{4}){3}|4[0-9]{3}(?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{1}|5[1-5][0-9]{2}(?:[\\s-]?[0-9]{4}){3}|2(?:22[1-9]|2[3-9][0-9]|[3-6][0-9]{2}|7[01][0-9]|720)(?:[\\s-]?[0-9]{4}){3}|3[47][0-9]{2}(?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{3}|3[47][0-9]{2}[\\s-]?[0-9]{6}[\\s-]?[0-9]{5}|6(?:011|4[4-9][0-9]|5[0-9]{2})(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|6(?:011|4[4-9][0-9]|5[0-9]{2})(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{2}|6(?:011|4[4-9][0-9]|5[0-9]{2})(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{1}|6(?:011|4[4-9][0-9]|5[0-9]{2})(?:[\\s-]?[0-9]{4}){3}|35(?:2[89]|[3-8][0-9])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|35(?:2[89]|[3-8][0-9])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{2}|35(?:2[89]|[3-8][0-9])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{1}|35(?:2[89]|[3-8][0-9])(?:[\\s-]?[0-9]{4}){3}|3(?:0[0-5]|[689][0-9])[0-9](?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|3(?:0[0-5]|[689][0-9])[0-9](?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{2}|3(?:0[0-5]|[689][0-9])[0-9](?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{1}|3(?:0[0-5]|[689][0-9])[0-9](?:[\\s-]?[0-9]{4}){3}|3(?:0[0-5]|[689][0-9])[0-9](?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{2}|3(?:0[0-5]|[689][0-9])[0-9][\\s-]?[0-9]{6}[\\s-]?[0-9]{4}|(?:62|81)[0-9]{2}(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|(?:62|81)[0-9]{2}(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{2}|(?:62|81)[0-9]{2}(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{1}|(?:62|81)[0-9]{2}(?:[\\s-]?[0-9]{4}){3}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{3}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{2}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){3}[\\s-]?[0-9]{1}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){3}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{3}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{2}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){2}[\\s-]?[0-9]{1}|(?:5018|5020|5038|6304|6759|676[1-3])(?:[\\s-]?[0-9]{4}){2})\\b",
+      "category": "pii",
+      "validate": "luhn"
+    },
+    {
+      "id": "pii-ssn",
+      "description": "US Social Security Number",
+      "regex": "\\b(?!000|666|9\\d{2})\\d{3}[- ](?!00)\\d{2}[- ](?!0000)\\d{4}\\b",
+      "category": "pii"
+    },
+    {
+      "id": "pii-phone-us",
+      "description": "US Phone Number",
+      "regex": "\\b(\\+1[\\s.-]?)?\\(?\\d{3}\\)?[\\s.-]\\d{3}[\\s.-]\\d{4}\\b",
+      "category": "pii"
+    },
+    {
+      "id": "pii-phone-jp",
+      "description": "Japanese Phone Number",
+      "regex": "\\b0\\d{1,4}[\\s-]\\d{1,4}[\\s-]\\d{4}\\b",
+      "category": "pii",
+      "validate": "phone-jp"
+    },
+    {
+      "id": "pii-postal-jp",
+      "description": "Japanese Postal Code",
+      "regex": "\u3012\\d{3}[\\s-]\\d{4}",
+      "category": "pii"
+    },
+    {
+      "id": "pii-mynumber-jp",
+      "description": "Japanese Individual Number (My Number)",
+      "regex": "\\b\\d{12}\\b",
+      "category": "pii",
+      "validate": "mynumber-jp"
+    },
+    {
+      "id": "pii-nir-fr",
+      "description": "French NIR / Social Security Number",
+      "regex": "\\b[12]\\d{2}(?:0[1-9]|1[0-2]|20)(?:\\d{5}|2[AB]\\d{3})\\d{3}\\s?\\d{2}\\b",
+      "category": "pii",
+      "flags": "gi",
+      "validate": "nir-fr"
+    },
+    {
+      "id": "pii-codice-fiscale-it",
+      "description": "Italian Codice Fiscale",
+      "regex": "\\b[A-Z]{6}[0-9LMNPQRSTUV]{2}[A-Z][0-9LMNPQRSTUV]{2}[A-Z][0-9LMNPQRSTUV]{3}[A-Z]\\b",
+      "category": "pii",
+      "validate": "codice-fiscale-it"
+    },
+    {
+      "id": "pii-steuer-id-de",
+      "description": "German Steuer-Identifikationsnummer",
+      "regex": "\\b[1-9]\\d{10}\\b",
+      "category": "pii",
+      "validate": "steuer-id-de"
+    },
+    {
+      "id": "pii-dni-nie-es",
+      "description": "Spanish DNI / NIE",
+      "regex": "\\b(?:\\d{8}[A-Z]|[XYZ]\\d{7}[A-Z])\\b",
+      "category": "pii",
+      "validate": "dni-nie-es"
+    },
+    {
+      "id": "pii-phone-fr",
+      "description": "French Phone Number",
+      "regex": "\\b0[1-9](?:[\\s.-]?\\d{2}){4}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "t\u00e9l",
+        "tel",
+        "t\u00e9l\u00e9phone",
+        "telephone",
+        "phone",
+        "mobile",
+        "portable",
+        "fax"
+      ]
+    },
+    {
+      "id": "pii-phone-it",
+      "description": "Italian Phone Number",
+      "regex": "\\b(?:0\\d{8,9}|3\\d{8,9})\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": ["telefono", "tel", "cellulare", "mobile", "phone", "fax"]
+    },
+    {
+      "id": "pii-phone-de",
+      "description": "German Phone Number",
+      "regex": "\\b0[1-9]\\d{6,11}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": ["telefon", "tel", "handy", "mobil", "phone", "fax"]
+    },
+    {
+      "id": "pii-phone-es",
+      "description": "Spanish Phone Number",
+      "regex": "\\b[67]\\d{8}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "tel\u00e9fono",
+        "telefono",
+        "tel",
+        "m\u00f3vil",
+        "movil",
+        "phone",
+        "fax"
+      ]
+    },
+    {
+      "id": "pii-postal-code",
+      "description": "Postal Code (US ZIP / EU / KR)",
+      "regex": "\\b\\d{5}(?:-\\d{4})?\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "zip",
+        "postal",
+        "postale",
+        "postcode",
+        "plz",
+        "postleitzahl",
+        "\uc6b0\ud3b8\ubc88\ud638",
+        "cap"
+      ],
+      "excludeContext": ["buffer", "bytes", "byte", "memory", "cache"]
+    },
+    {
+      "id": "pii-rrn-kr",
+      "description": "Korean Resident Registration Number",
+      "regex": "\\b\\d{6}[-\\s]?\\d{7}\\b",
+      "category": "pii",
+      "validate": "rrn-kr",
+      "requireContext": true,
+      "contextWords": [
+        "\uc8fc\ubbfc\ub4f1\ub85d\ubc88\ud638",
+        "\uc8fc\ubbfc\ubc88\ud638",
+        "rrn",
+        "resident",
+        "registration",
+        "\uc2e0\ubd84\uc99d",
+        "\uac1c\uc778\uc815\ubcf4"
+      ]
+    },
+    {
+      "id": "pii-brn-kr",
+      "description": "Korean Business Registration Number",
+      "regex": "\\b\\d{3}[-\\s]?\\d{2}[-\\s]?\\d{5}\\b",
+      "category": "pii",
+      "validate": "brn-kr",
+      "requireContext": true,
+      "contextWords": [
+        "\uc0ac\uc5c5\uc790\ub4f1\ub85d\ubc88\ud638",
+        "\uc0ac\uc5c5\uc790\ubc88\ud638",
+        "brn",
+        "business",
+        "registration",
+        "\ubc95\uc778",
+        "\uc138\uae08\uacc4\uc0b0\uc11c"
+      ]
+    },
+    {
+      "id": "pii-resident-id-cn",
+      "description": "Chinese Resident Identity Card",
+      "regex": "\\b\\d{17}[\\dXx]\\b",
+      "category": "pii",
+      "validate": "resident-id-cn"
+    },
+    {
+      "id": "pii-phone-kr",
+      "description": "Korean Phone Number",
+      "regex": "(?:\\+82[-\\s]?)?(?:01[016789]|0\\d{1,2})[-\\s]?\\d{3,4}[-\\s]?\\d{4}",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "\uc804\ud654",
+        "\ud578\ub4dc\ud3f0",
+        "\ud734\ub300",
+        "tel",
+        "phone",
+        "mobile",
+        "fax"
+      ]
+    },
+    {
+      "id": "pii-phone-cn",
+      "description": "Chinese Phone Number",
+      "regex": "(?:\\+86[-\\s]?)?(?:1[3-9]\\d{9}|0\\d{2,3}[-\\s]?\\d{7,8})",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "\u7535\u8bdd",
+        "\u624b\u673a",
+        "tel",
+        "phone",
+        "mobile",
+        "fax"
+      ]
+    },
+    {
+      "id": "pii-postal-cn",
+      "description": "Chinese Postal Code",
+      "regex": "\\b[1-9]\\d{5}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": [
+        "\u90ae\u7f16",
+        "\u90ae\u653f\u7f16\u7801",
+        "postal",
+        "postcode",
+        "zip"
+      ]
+    },
+    {
+      "id": "pii-ipv4-public",
+      "description": "Public IPv4 Address",
+      "regex": "\\b\\d{1,3}(?:\\.\\d{1,3}){3}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": ["ip", "ipv4"],
+      "validate": "public-ipv4"
+    },
+    {
+      "id": "pii-ipv6",
+      "description": "IPv6 Address",
+      "regex": "\\b[0-9A-Fa-f]{1,4}(?::[0-9A-Fa-f]{0,4}){2,7}\\b",
+      "category": "pii",
+      "requireContext": true,
+      "contextWords": ["ipv6", "ip"],
+      "validate": "public-ipv6"
+    },
+    {
+      "id": "openai-service-key",
+      "description": "OpenAI Service Account / Admin Key",
+      "regex": "sk-(?:svcacct|admin)-[A-Za-z0-9_-]{20,}",
+      "category": "secret"
+    },
+    {
+      "id": "azure-storage-key",
+      "description": "Azure Storage Account Key",
+      "regex": "AccountKey=[A-Za-z0-9+/]{86}==",
+      "category": "secret"
+    },
+    {
+      "id": "flyio-token",
+      "description": "Fly.io API Token",
+      "regex": "(?:fo1_[A-Za-z0-9_-]{43}|fm1[ar]_[A-Za-z0-9+/_-]{40,}={0,3}|fm2_[A-Za-z0-9+/_-]{40,}={0,3})",
+      "category": "secret"
+    },
+    {
+      "id": "databricks-token",
+      "description": "Databricks Personal Access Token",
+      "regex": "\\bdapi[0-9a-f]{32}\\b",
+      "category": "secret"
+    },
+    {
+      "id": "vault-token",
+      "description": "HashiCorp Vault Token",
+      "regex": "\\bhv[sb]\\.[A-Za-z0-9_-]{24,}",
+      "category": "secret"
+    },
+    {
+      "id": "shopify-token",
+      "description": "Shopify Access Token",
+      "regex": "\\bshp(?:at|ss|ca|pa)_[0-9a-fA-F]{32}\\b",
+      "category": "secret"
+    },
+    {
+      "id": "doppler-token",
+      "description": "Doppler Token",
+      "regex": "\\bdp\\.(?:pt|st|ct|sa|scim)\\.[A-Za-z0-9]{40,}",
+      "category": "secret"
+    },
+    {
+      "id": "grafana-token",
+      "description": "Grafana Cloud / Service Account Token",
+      "regex": "\\bgl(?:c|sa)_[A-Za-z0-9+/=_-]{32,}",
+      "category": "secret"
+    },
+    {
+      "id": "notion-token",
+      "description": "Notion Integration Token",
+      "regex": "\\b(?:ntn_[A-Za-z0-9]{40,}|secret_[A-Za-z0-9]{43})",
+      "category": "secret"
+    },
+    {
+      "id": "azure-sas-key",
+      "description": "Azure Shared Access Key (Service Bus, Event Hubs, IoT Hub)",
+      "regex": "SharedAccessKey=[A-Za-z0-9+/]{22,86}={0,2}",
+      "category": "secret"
+    },
+    {
+      "id": "google-oauth-secret",
+      "description": "Google OAuth Client Secret",
+      "regex": "\\bGOCSPX-[A-Za-z0-9_-]{20,}",
+      "category": "secret"
+    },
+    {
+      "id": "private-key-base64",
+      "description": "PEM Private Key, base64-encoded",
+      "regex": "(?:LS0tLS1CRUdJTi|0tLS0tQkVHSU4g|tLS0tLUJFR0lOI)[A-Za-z0-9+/=]{40,}",
+      "category": "secret"
+    },
+    {
+      "id": "url-basic-auth",
+      "description": "Credentials embedded in an http(s) URL",
+      "regex": "\\bhttps?://[A-Za-z0-9._~%+-]{1,64}:[^@/\\s\\\"'`<>]{3,256}@[A-Za-z0-9.-]+",
+      "category": "secret"
+    }
+  ]
+}