@desplega.ai/agent-swarm 1.165.0 → 1.166.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (188) hide show
  1. package/dist/{acp-adapter-w6zws6me.js → acp-adapter-yzfxn8vj.js} +4 -4
  2. package/dist/{actions-jna0b3wm.js → actions-qz3m692w.js} +20 -24
  3. package/dist/{amp-adapter-0eve81pz.js → amp-adapter-j1xbmsqz.js} +4 -4
  4. package/dist/{app-75hm5cfa.js → app-43vrdmv8.js} +6 -7
  5. package/dist/{assistant-yzd51j33.js → assistant-ertffmka.js} +21 -25
  6. package/dist/{boot-reembed-z158xq32.js → boot-reembed-998jtpdg.js} +9 -12
  7. package/dist/{boot-reembed-2ex2mcsh.js → boot-reembed-s7k7c6v2.js} +10 -12
  8. package/dist/boot-scrub-sweep-nepsk4t1.js +211 -0
  9. package/dist/{boot-seeds-2bmnh18p.js → boot-seeds-vvzs1zhk.js} +8 -8
  10. package/dist/{claude-adapter-jbj1mycz.js → claude-adapter-2zvmekrp.js} +9 -11
  11. package/dist/{claude-managed-adapter-17ggz09t.js → claude-managed-adapter-s49wbk8t.js} +3 -3
  12. package/dist/{claude-managed-setup-ptm1nzm2.js → claude-managed-setup-cvhqq8qn.js} +4 -4
  13. package/dist/{claude-sdk-session-9re1g7r2.js → claude-sdk-session-kkbxtw5q.js} +2618 -2600
  14. package/dist/{cli-k6xx3pve.js → cli-0nhdwxd5.js} +4 -4
  15. package/dist/{cli-n9ehc28t.js → cli-0qjcsxgz.js} +4 -4
  16. package/dist/{cli-zn2v3t8v.js → cli-3ddybbbx.js} +1 -1
  17. package/dist/{cli-5anb0ev3.js → cli-3qn4r334.js} +71 -14
  18. package/dist/{cli-1kzfvd1z.js → cli-4r1sjfc4.js} +9 -5
  19. package/dist/{cli-ba66wyhy.js → cli-66zh26sp.js} +6 -6
  20. package/dist/{cli-9xb89xca.js → cli-68r1j4sg.js} +6 -6
  21. package/dist/{cli-xnzrzets.js → cli-8kgvmkak.js} +2 -2
  22. package/dist/{cli-28smfvbn.js → cli-8t229cmr.js} +5 -5
  23. package/dist/{cli-9866bd07.js → cli-aqcey741.js} +1 -1
  24. package/dist/{cli-90v942q1.js → cli-cpfmqz3n.js} +8 -8
  25. package/dist/{cli-50eg13rj.js → cli-df56tqdw.js} +459 -282
  26. package/dist/{cli-8gpbwy09.js → cli-dw2q9f7g.js} +5 -5
  27. package/dist/{cli-0n4fasz0.js → cli-ecknp7p1.js} +15 -15
  28. package/dist/{cli-xb3c6aat.js → cli-f2n17zhp.js} +1 -1
  29. package/dist/{cli-ftry7975.js → cli-feh3dkah.js} +1 -1
  30. package/dist/{cli-amwhs8h2.js → cli-fn697bnt.js} +2 -2
  31. package/dist/{cli-prt9emct.js → cli-gt8azyet.js} +3 -3
  32. package/dist/{cli-59jn5twa.js → cli-h3x613ze.js} +2 -2
  33. package/dist/{cli-mmzwwptd.js → cli-hf5s9pgf.js} +1 -1
  34. package/dist/cli-j2jbr8af.js +516 -0
  35. package/dist/{cli-wfajtmf7.js → cli-jhm6hzjn.js} +593 -10
  36. package/dist/{cli-xtgtyafv.js → cli-jvj6a0cv.js} +190 -439
  37. package/dist/{cli-hpryr6em.js → cli-mb75wpxf.js} +1 -1
  38. package/dist/{cli-420bdgw0.js → cli-mv2520nm.js} +1 -1
  39. package/dist/{cli-pjxnr1jn.js → cli-mwegs4af.js} +3 -3
  40. package/dist/{cli-5b2fjjzh.js → cli-p4ztb80h.js} +2 -2
  41. package/dist/{cli-e7t4snpa.js → cli-rggdq8wq.js} +4 -4
  42. package/dist/{cli-bdv39kgj.js → cli-rsy933yz.js} +5 -5
  43. package/dist/{cli-gh5yqzpe.js → cli-v2a8x45d.js} +2 -2
  44. package/dist/{cli-bns5c8k9.js → cli-vzc73wet.js} +43 -47
  45. package/dist/cli-wt7ccy4r.js +2654 -0
  46. package/dist/{cli-j0pdrmwg.js → cli-x7kpr72a.js} +3 -3
  47. package/dist/{cli-x7afk5wm.js → cli-xvc3q9br.js} +1 -1
  48. package/dist/{cli-9s3h836g.js → cli-xvdgasgy.js} +1 -1
  49. package/dist/{cli-zvckv750.js → cli-y59h2pk9.js} +2 -2
  50. package/dist/{cli-qdv8kgz7.js → cli-yshaazs1.js} +13884 -3241
  51. package/dist/{cli-nfygw434.js → cli-ysnyhws9.js} +2 -2
  52. package/dist/{cli-fw6vdcq5.js → cli-zp67qg5x.js} +34 -1
  53. package/dist/{cli-ma3zvh39.js → cli-zy7vwsne.js} +6066 -5829
  54. package/dist/cli.js +24 -20
  55. package/dist/{codex-adapter-3qnxshje.js → codex-adapter-dw1wxqt8.js} +7 -7
  56. package/dist/{codex-login-brkxhhdg.js → codex-login-terbdsqq.js} +2 -2
  57. package/dist/{codex-session-runner-612wnapp.js → codex-session-runner-3cgb8y1g.js} +7 -7
  58. package/dist/{commands-2ybfcxkj.js → commands-mhxam6z2.js} +6 -6
  59. package/dist/{cursor-adapter-p3jgdehv.js → cursor-adapter-2qda3st7.js} +3 -3
  60. package/dist/{db-f4ans0jj.js → db-sjks418k.js} +8 -6
  61. package/dist/{devin-adapter-dhzt01ff.js → devin-adapter-bffjj5n4.js} +2 -2
  62. package/dist/{dispatcher-pk182apd.js → dispatcher-1es759rn.js} +18 -22
  63. package/dist/{dsh-adapter-7twaeps1.js → dsh-adapter-bek4cyw9.js} +3 -3
  64. package/dist/{e2b-y8t3jzyz.js → e2b-nd50eccg.js} +1 -1
  65. package/dist/{event-bus-w7ac4n3c.js → event-bus-vnfthafg.js} +2 -2
  66. package/dist/{grok-adapter-yt9pab3k.js → grok-adapter-ar9cw9jg.js} +5 -5
  67. package/dist/{handlers-g2wnr4t9.js → handlers-1gkbhktr.js} +21 -25
  68. package/dist/{hook-f7jt9vnm.js → hook-ds2zxq9v.js} +14 -16
  69. package/dist/{hook-bbdpnkb4.js → hook-vxa3tcsy.js} +8 -10
  70. package/dist/{http-w40q4w94.js → http-3h21z9md.js} +247 -164
  71. package/dist/{index-056j5kzn.js → index-9b65j1m5.js} +8 -8
  72. package/dist/{index-9bfssf54.js → index-bn6cy8ps.js} +18 -22
  73. package/dist/{index-cj1r9q83.js → index-dkfxpkmm.js} +19 -23
  74. package/dist/{index-7n70jwbb.js → index-f8xnqrye.js} +19 -21
  75. package/dist/{index-fdk1t4d6.js → index-n0rxa4ca.js} +11962 -9900
  76. package/dist/{index-k8xc083e.js → index-n99fycq7.js} +18 -22
  77. package/dist/{keepalive-1tj10tf4.js → keepalive-3xspa9jw.js} +11 -8
  78. package/dist/{lead-st0bg7v4.js → lead-6qphc124.js} +34 -38
  79. package/dist/{maintenance-nz71zats.js → maintenance-0teem1bb.js} +7 -9
  80. package/dist/{node-f0ykebbv.js → node-9sg7ajby.js} +25 -7
  81. package/dist/{oauth-refresh-sweep-aefzwvvq.js → oauth-refresh-sweep-sh9q25xp.js} +10 -7
  82. package/dist/{onboard-kgpr9mbn.js → onboard-54qmnqxe.js} +2 -2
  83. package/dist/{opencode-adapter-0c8e70dk.js → opencode-adapter-wjfa2wvd.js} +2 -2
  84. package/dist/{otel-impl-x8zp4y5a.js → otel-impl-ycqzp2a1.js} +2 -2
  85. package/dist/{pi-mono-adapter-t280ah5c.js → pi-mono-adapter-e77e9zst.js} +4 -4
  86. package/dist/{pricing-refresh-9e0q7cwk.js → pricing-refresh-atnkngqs.js} +7 -7
  87. package/dist/{rbac-roles-kcp6zge2.js → rbac-roles-9pjphh9q.js} +6 -6
  88. package/dist/{rbac-roles-790j3ga8.js → rbac-roles-j78wdksm.js} +6 -6
  89. package/dist/{render-v2-tch4nefj.js → render-v2-pxjs49fx.js} +6 -7
  90. package/dist/{setup-rcm303ns.js → setup-ymej0xtx.js} +2 -2
  91. package/dist/{work-objects-ctg7t70w.js → work-objects-3nh4ymzb.js} +22 -26
  92. package/dist/{worker-5dp0xm55.js → worker-qa9fkz5s.js} +34 -38
  93. package/dist/{x-v3yw66zs.js → x-ma4gnfgy.js} +2 -2
  94. package/openapi.json +5 -2
  95. package/package.json +9 -5
  96. package/src/be/automation-preflight.ts +9 -4
  97. package/src/be/boot-scrub-sweep.ts +302 -0
  98. package/src/be/crypto/key-bootstrap.ts +1 -1
  99. package/src/be/db/approvals.ts +15 -1
  100. package/src/be/db/codex-oauth-device-flows.ts +40 -0
  101. package/src/be/db/config-secrets.ts +31 -0
  102. package/src/be/db/runtime.ts +4 -0
  103. package/src/be/db/script-runs.ts +15 -0
  104. package/src/be/db/tasks/write.ts +1 -1
  105. package/src/be/db-queries/mcp-oauth.ts +5 -0
  106. package/src/be/db-queries/oauth.ts +77 -0
  107. package/src/be/db.ts +162 -59
  108. package/src/be/events.ts +17 -1
  109. package/src/be/memory/index-content.ts +2 -2
  110. package/src/be/memory/providers/sqlite-store.ts +63 -11
  111. package/src/be/memory/types.ts +14 -0
  112. package/src/be/migrations/201_workflow_replay_columns.sql +10 -0
  113. package/src/be/migrations/202_codex_oauth_device_flows.sql +24 -0
  114. package/src/be/scripts/db.ts +28 -4
  115. package/src/be/scripts/source-secrets.ts +37 -0
  116. package/src/be/scrub-json.ts +32 -0
  117. package/src/be/sealed-json.ts +59 -0
  118. package/src/be/secret-registry.ts +131 -0
  119. package/src/be/workflow-replay.ts +77 -0
  120. package/src/http/codex-oauth-device.ts +8 -10
  121. package/src/http/db-query-bounded.ts +3 -0
  122. package/src/http/db-query-shared.ts +107 -15
  123. package/src/http/db-query.ts +10 -2
  124. package/src/http/index.ts +23 -6
  125. package/src/http/script-runs.ts +9 -1
  126. package/src/http/scripts.ts +15 -0
  127. package/src/http/workflows.ts +3 -2
  128. package/src/oauth/mcp-wrapper.ts +1 -1
  129. package/src/providers/acp-adapter.ts +25 -11
  130. package/src/providers/acp-target-catalog.ts +35 -1
  131. package/src/providers/acp-targets.ts +69 -3
  132. package/src/providers/amp-adapter.ts +1 -1
  133. package/src/providers/cursor-adapter.ts +1 -1
  134. package/src/script-workflows/supervisor.ts +11 -2
  135. package/src/scripts-runtime/eval-harness.ts +2 -12
  136. package/src/scripts-runtime/executors/quickjs-bundle.ts +152 -0
  137. package/src/scripts-runtime/executors/quickjs-prelude.ts +285 -0
  138. package/src/scripts-runtime/executors/quickjs-runner.ts +580 -0
  139. package/src/scripts-runtime/executors/quickjs-worker.ts +81 -0
  140. package/src/scripts-runtime/executors/quickjs.ts +196 -0
  141. package/src/scripts-runtime/executors/registry.ts +2 -0
  142. package/src/scripts-runtime/executors/sourcemap.ts +79 -0
  143. package/src/scripts-runtime/script-error-hints.ts +14 -0
  144. package/src/server.ts +3 -1
  145. package/src/tests/acp-adapter.test.ts +127 -2
  146. package/src/tests/boot-scrub-sweep.test.ts +390 -0
  147. package/src/tests/check-text-columns.test.ts +145 -0
  148. package/src/tests/claude-sdk-process.fixture.ts +13 -2
  149. package/src/tests/codex-oauth-device.test.ts +23 -37
  150. package/src/tests/db-query-denylist.test.ts +202 -0
  151. package/src/tests/db-task-read-contract.test.ts +1 -0
  152. package/src/tests/db-task-write-contract.test.ts +1 -0
  153. package/src/tests/entrypoint-acp-target-binary.test.ts +31 -1
  154. package/src/tests/events-scrub.test.ts +88 -0
  155. package/src/tests/fixtures/secret-corpus.ts +320 -0
  156. package/src/tests/script-connections.test.ts +5 -0
  157. package/src/tests/script-executor-conformance.test.ts +3 -0
  158. package/src/tests/script-executor-quickjs.test.ts +442 -0
  159. package/src/tests/script-executor-registry.test.ts +6 -1
  160. package/src/tests/script-runs-http.test.ts +88 -1
  161. package/src/tests/script-runs-scrub.test.ts +275 -0
  162. package/src/tests/scripts-http.test.ts +82 -1
  163. package/src/tests/scrubbed-text-12e.test.ts +289 -0
  164. package/src/tests/sealed-key-guard.test.ts +166 -0
  165. package/src/tests/secret-canary-sweep.test.ts +958 -0
  166. package/src/tests/secret-registry.test.ts +355 -0
  167. package/src/tests/secret-rules.test.ts +230 -0
  168. package/src/tests/secret-scrubber.test.ts +3 -2
  169. package/src/tests/workflow-replay.test.ts +518 -0
  170. package/src/tests/workflow-scrub.test.ts +242 -0
  171. package/src/tools/db-query.ts +1 -1
  172. package/src/tools/inject-learning.ts +1 -1
  173. package/src/tools/workflows/get-workflow-run.ts +3 -2
  174. package/src/types.ts +1 -1
  175. package/src/utils/secret-rules.generated.ts +2055 -0
  176. package/src/utils/secret-scrubber.ts +363 -29
  177. package/src/workflows/engine.ts +39 -4
  178. package/src/workflows/recovery.ts +10 -1
  179. package/src/workflows/resume.ts +62 -3
  180. package/src/workflows/retry-poller.ts +3 -0
  181. package/dist/boot-scrub-logs-246yn076.js +0 -99
  182. package/dist/cli-3a4m1aws.js +0 -572
  183. package/dist/cli-a87b04k8.js +0 -951
  184. package/dist/cli-cvk6yzw5.js +0 -40
  185. package/dist/cli-h1spv8v4.js +0 -427
  186. package/dist/cli-jqt9hrnz.js +0 -168
  187. package/dist/cli-yhmwmv0g.js +0 -9281
  188. package/src/be/boot-scrub-logs.ts +0 -132
@@ -0,0 +1,2055 @@
1
+ // GENERATED by scripts/gen-secret-rules.ts from scripts/vendor/gitleaks/gitleaks.toml.
2
+ // Do not edit. Run `bun run build:secret-rules` after changing the vendored config
3
+ // or the generator. 213 rules kept, 9 excluded (reasons below).
4
+
5
+ export interface GeneratedRegex {
6
+ source: string;
7
+ flags: string;
8
+ }
9
+
10
+ export interface GeneratedAllowlist {
11
+ /** What the allowlist regexes test: the secret, or the whole rule match. */
12
+ target: "secret" | "match";
13
+ regexes: GeneratedRegex[];
14
+ /** Lowercase; a secret containing one is allowed. */
15
+ stopwords: string[];
16
+ }
17
+
18
+ export interface GeneratedSecretRule extends GeneratedRegex {
19
+ id: string;
20
+ /** Lowercase; the rule runs only when the text contains one of them. */
21
+ keywords: string[];
22
+ /** Minimum Shannon entropy of the secret; at or below it is not a finding. */
23
+ entropy?: number;
24
+ /** Capture group holding the secret. Default: the first non-empty group, else the match. */
25
+ secretGroup?: number;
26
+ redactWholeMatch?: boolean;
27
+ allowlists?: GeneratedAllowlist[];
28
+ }
29
+
30
+ export interface GeneratedSecretRuleSet {
31
+ version: string;
32
+ commit: string;
33
+ globalAllowlist: { regexes: GeneratedRegex[]; stopwords: string[] };
34
+ rules: GeneratedSecretRule[];
35
+ excluded: { id: string; reason: string }[];
36
+ }
37
+
38
+ export const GITLEAKS_RULES: GeneratedSecretRuleSet = {
39
+ "version": "v8.30.1",
40
+ "commit": "83d9cd684c87d95d656c1458ef04895a7f1cbd8e", // gitleaks:allow
41
+ "globalAllowlist": {
42
+ "regexes": [
43
+ {
44
+ "source": "^true|false|null$", // gitleaks:allow
45
+ "flags": "i"
46
+ },
47
+ {
48
+ "source": "^(?i:a+|b+|c+|d+|e+|f+|g+|h+|i+|j+|k+|l+|m+|n+|o+|p+|q+|r+|s+|t+|u+|v+|w+|x+|y+|z+|\\*+|\\.+)$", // gitleaks:allow
49
+ "flags": ""
50
+ },
51
+ {
52
+ "source": "^\\$(?:\\d+|{\\d+})$", // gitleaks:allow
53
+ "flags": ""
54
+ },
55
+ {
56
+ "source": "^\\$(?:[A-Z_]+|[a-z_]+)$", // gitleaks:allow
57
+ "flags": ""
58
+ },
59
+ {
60
+ "source": "^\\${(?:[A-Z_]+|[a-z_]+)}$", // gitleaks:allow
61
+ "flags": ""
62
+ },
63
+ {
64
+ "source": "^\\{\\{[ \\t]*[\\w ().|]+[ \\t]*}}$", // gitleaks:allow
65
+ "flags": ""
66
+ },
67
+ {
68
+ "source": "^\\$\\{\\{[ \\t]*(?:(?:env|github|secrets|vars)(?:\\.[A-Za-z]\\w+)+[\\w \"'&./=|]*)[ \\t]*}}$", // gitleaks:allow
69
+ "flags": ""
70
+ },
71
+ {
72
+ "source": "^%(?:[A-Z_]+|[a-z_]+)%$", // gitleaks:allow
73
+ "flags": ""
74
+ },
75
+ {
76
+ "source": "^%[+\\-# 0]?[bcdeEfFgGoOpqstTUvxX]$", // gitleaks:allow
77
+ "flags": ""
78
+ },
79
+ {
80
+ "source": "^\\{\\d{0,2}}$", // gitleaks:allow
81
+ "flags": ""
82
+ },
83
+ {
84
+ "source": "^@(?:[A-Z_]+|[a-z_]+)@$", // gitleaks:allow
85
+ "flags": ""
86
+ },
87
+ {
88
+ "source": "^/Users/(?i:[a-z0-9]+/[\\w .-/]+$)", // gitleaks:allow
89
+ "flags": ""
90
+ },
91
+ {
92
+ "source": "^/(?:bin|etc|home|opt|tmp|usr|var)/[\\w ./-]+$", // gitleaks:allow
93
+ "flags": ""
94
+ }
95
+ ],
96
+ "stopwords": [
97
+ "014df517-39d1-4453-b7b3-9930c563627c",
98
+ "abcdefghijklmnopqrstuvwxyz"
99
+ ]
100
+ },
101
+ "rules": [
102
+ {
103
+ "id": "1password-secret-key",
104
+ "source": "\\bA3-[A-Z0-9]{6}-(?:(?:[A-Z0-9]{11})|(?:[A-Z0-9]{6}-[A-Z0-9]{5}))-[A-Z0-9]{5}-[A-Z0-9]{5}-[A-Z0-9]{5}\\b", // gitleaks:allow
105
+ "flags": "",
106
+ "keywords": [
107
+ "a3-"
108
+ ],
109
+ "entropy": 3.8
110
+ },
111
+ {
112
+ "id": "1password-service-account-token",
113
+ "source": "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}", // gitleaks:allow
114
+ "flags": "",
115
+ "keywords": [
116
+ "ops_"
117
+ ],
118
+ "entropy": 4
119
+ },
120
+ {
121
+ "id": "adafruit-api-key",
122
+ "source": "(?:adafruit)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
123
+ "flags": "i",
124
+ "keywords": [
125
+ "adafruit"
126
+ ]
127
+ },
128
+ {
129
+ "id": "adobe-client-id",
130
+ "source": "(?:adobe)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
131
+ "flags": "i",
132
+ "keywords": [
133
+ "adobe"
134
+ ],
135
+ "entropy": 2
136
+ },
137
+ {
138
+ "id": "adobe-client-secret",
139
+ "source": "\\b(p8e-(?i:[a-z0-9]{32}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
140
+ "flags": "",
141
+ "keywords": [
142
+ "p8e-"
143
+ ],
144
+ "entropy": 2
145
+ },
146
+ {
147
+ "id": "age-secret-key",
148
+ "source": "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}", // gitleaks:allow
149
+ "flags": "",
150
+ "keywords": [
151
+ "age-secret-key-1"
152
+ ]
153
+ },
154
+ {
155
+ "id": "airtable-api-key",
156
+ "source": "(?:airtable)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{17})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
157
+ "flags": "i",
158
+ "keywords": [
159
+ "airtable"
160
+ ]
161
+ },
162
+ {
163
+ "id": "airtable-personnal-access-token",
164
+ "source": "\\b(pat[A-Za-z0-9]{14}\\.[a-f0-9]{64})\\b", // gitleaks:allow
165
+ "flags": "",
166
+ "keywords": [
167
+ "airtable"
168
+ ]
169
+ },
170
+ {
171
+ "id": "algolia-api-key",
172
+ "source": "(?:algolia)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
173
+ "flags": "i",
174
+ "keywords": [
175
+ "algolia"
176
+ ]
177
+ },
178
+ {
179
+ "id": "alibaba-access-key-id",
180
+ "source": "\\b(LTAI(?i:[a-z0-9]{20}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
181
+ "flags": "",
182
+ "keywords": [
183
+ "ltai"
184
+ ],
185
+ "entropy": 2
186
+ },
187
+ {
188
+ "id": "alibaba-secret-key",
189
+ "source": "(?:alibaba)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
190
+ "flags": "i",
191
+ "keywords": [
192
+ "alibaba"
193
+ ],
194
+ "entropy": 2
195
+ },
196
+ {
197
+ "id": "anthropic-admin-api-key",
198
+ "source": "\\b(sk-ant-admin01-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
199
+ "flags": "",
200
+ "keywords": [
201
+ "sk-ant-admin01"
202
+ ]
203
+ },
204
+ {
205
+ "id": "anthropic-api-key",
206
+ "source": "\\b(sk-ant-api03-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
207
+ "flags": "",
208
+ "keywords": [
209
+ "sk-ant-api03"
210
+ ]
211
+ },
212
+ {
213
+ "id": "artifactory-api-key",
214
+ "source": "\\bAKCp[A-Za-z0-9]{69}\\b", // gitleaks:allow
215
+ "flags": "",
216
+ "keywords": [
217
+ "akcp"
218
+ ],
219
+ "entropy": 4.5
220
+ },
221
+ {
222
+ "id": "artifactory-reference-token",
223
+ "source": "\\bcmVmd[A-Za-z0-9]{59}\\b", // gitleaks:allow
224
+ "flags": "",
225
+ "keywords": [
226
+ "cmvmd"
227
+ ],
228
+ "entropy": 4.5
229
+ },
230
+ {
231
+ "id": "asana-client-id",
232
+ "source": "(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
233
+ "flags": "i",
234
+ "keywords": [
235
+ "asana"
236
+ ]
237
+ },
238
+ {
239
+ "id": "asana-client-secret",
240
+ "source": "(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
241
+ "flags": "i",
242
+ "keywords": [
243
+ "asana"
244
+ ]
245
+ },
246
+ {
247
+ "id": "atlassian-api-token",
248
+ "source": "(?:(?-i:ATLASSIAN|[Aa]tlassian)|(?-i:CONFLUENCE|[Cc]onfluence)|(?-i:JIRA|[Jj]ira))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20}[a-f0-9]{4})(?:[\\x60'\"\\s;]|\\\\[nr]|$)|\\b(ATATT3[A-Za-z0-9_\\-=]{186})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
249
+ "flags": "i",
250
+ "keywords": [
251
+ "atlassian",
252
+ "confluence",
253
+ "jira",
254
+ "atatt3"
255
+ ],
256
+ "entropy": 3.5
257
+ },
258
+ {
259
+ "id": "authress-service-client-access-key",
260
+ "source": "\\b((?:sc|ext|scauth|authress)_(?i:[a-z0-9]{5,30}\\.[a-z0-9]{4,6}\\.(?-i:acc)[_-][a-z0-9-]{10,32}\\.[a-z0-9+/_=-]{30,120}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
261
+ "flags": "",
262
+ "keywords": [
263
+ "sc_",
264
+ "ext_",
265
+ "scauth_",
266
+ "authress_"
267
+ ],
268
+ "entropy": 2
269
+ },
270
+ {
271
+ "id": "aws-access-token",
272
+ "source": "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z2-7]{16})\\b", // gitleaks:allow
273
+ "flags": "",
274
+ "keywords": [
275
+ "a3t",
276
+ "akia",
277
+ "asia",
278
+ "abia",
279
+ "acca"
280
+ ],
281
+ "entropy": 3,
282
+ "allowlists": [
283
+ {
284
+ "target": "secret",
285
+ "regexes": [
286
+ {
287
+ "source": ".+EXAMPLE$", // gitleaks:allow
288
+ "flags": ""
289
+ }
290
+ ],
291
+ "stopwords": []
292
+ }
293
+ ]
294
+ },
295
+ {
296
+ "id": "aws-amazon-bedrock-api-key-long-lived",
297
+ "source": "\\b(ABSK[A-Za-z0-9+/]{109,269}={0,2})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
298
+ "flags": "",
299
+ "keywords": [
300
+ "absk"
301
+ ],
302
+ "entropy": 3
303
+ },
304
+ {
305
+ "id": "aws-amazon-bedrock-api-key-short-lived",
306
+ "source": "bedrock-api-key-YmVkcm9jay5hbWF6b25hd3MuY29t", // gitleaks:allow
307
+ "flags": "",
308
+ "keywords": [
309
+ "bedrock-api-key-"
310
+ ],
311
+ "entropy": 3
312
+ },
313
+ {
314
+ "id": "azure-ad-client-secret",
315
+ "source": "(?:^|[\\\\'\"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'\"\\x60\\s<),])", // gitleaks:allow
316
+ "flags": "",
317
+ "keywords": [
318
+ "q~"
319
+ ],
320
+ "entropy": 3
321
+ },
322
+ {
323
+ "id": "beamer-api-token",
324
+ "source": "(?:beamer)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(b_[a-z0-9=_\\-]{44})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
325
+ "flags": "i",
326
+ "keywords": [
327
+ "beamer"
328
+ ]
329
+ },
330
+ {
331
+ "id": "bitbucket-client-id",
332
+ "source": "(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
333
+ "flags": "i",
334
+ "keywords": [
335
+ "bitbucket"
336
+ ]
337
+ },
338
+ {
339
+ "id": "bitbucket-client-secret",
340
+ "source": "(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
341
+ "flags": "i",
342
+ "keywords": [
343
+ "bitbucket"
344
+ ]
345
+ },
346
+ {
347
+ "id": "bittrex-access-key",
348
+ "source": "(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
349
+ "flags": "i",
350
+ "keywords": [
351
+ "bittrex"
352
+ ]
353
+ },
354
+ {
355
+ "id": "bittrex-secret-key",
356
+ "source": "(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
357
+ "flags": "i",
358
+ "keywords": [
359
+ "bittrex"
360
+ ]
361
+ },
362
+ {
363
+ "id": "cisco-meraki-api-key",
364
+ "source": "(?i:(?:(?-i:[Mm]eraki|MERAKI))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
365
+ "flags": "",
366
+ "keywords": [
367
+ "meraki"
368
+ ],
369
+ "entropy": 3
370
+ },
371
+ {
372
+ "id": "clickhouse-cloud-api-secret-key",
373
+ "source": "\\b(4b1d[A-Za-z0-9]{38})\\b", // gitleaks:allow
374
+ "flags": "",
375
+ "keywords": [
376
+ "4b1d"
377
+ ],
378
+ "entropy": 3
379
+ },
380
+ {
381
+ "id": "clojars-api-token",
382
+ "source": "CLOJARS_[a-z0-9]{60}", // gitleaks:allow
383
+ "flags": "i",
384
+ "keywords": [
385
+ "clojars_"
386
+ ],
387
+ "entropy": 2
388
+ },
389
+ {
390
+ "id": "cloudflare-api-key",
391
+ "source": "(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
392
+ "flags": "i",
393
+ "keywords": [
394
+ "cloudflare"
395
+ ],
396
+ "entropy": 2
397
+ },
398
+ {
399
+ "id": "cloudflare-global-api-key",
400
+ "source": "(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{37})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
401
+ "flags": "i",
402
+ "keywords": [
403
+ "cloudflare"
404
+ ],
405
+ "entropy": 2
406
+ },
407
+ {
408
+ "id": "cloudflare-origin-ca-key",
409
+ "source": "\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
410
+ "flags": "",
411
+ "keywords": [
412
+ "cloudflare",
413
+ "v1.0-"
414
+ ],
415
+ "entropy": 2
416
+ },
417
+ {
418
+ "id": "codecov-access-token",
419
+ "source": "(?:codecov)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
420
+ "flags": "i",
421
+ "keywords": [
422
+ "codecov"
423
+ ]
424
+ },
425
+ {
426
+ "id": "cohere-api-token",
427
+ "source": "(?i:(?:cohere|CO_API_KEY)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-zA-Z0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
428
+ "flags": "",
429
+ "keywords": [
430
+ "cohere",
431
+ "co_api_key"
432
+ ],
433
+ "entropy": 4
434
+ },
435
+ {
436
+ "id": "coinbase-access-token",
437
+ "source": "(?:coinbase)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
438
+ "flags": "i",
439
+ "keywords": [
440
+ "coinbase"
441
+ ]
442
+ },
443
+ {
444
+ "id": "confluent-access-token",
445
+ "source": "(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
446
+ "flags": "i",
447
+ "keywords": [
448
+ "confluent"
449
+ ]
450
+ },
451
+ {
452
+ "id": "confluent-secret-key",
453
+ "source": "(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
454
+ "flags": "i",
455
+ "keywords": [
456
+ "confluent"
457
+ ]
458
+ },
459
+ {
460
+ "id": "contentful-delivery-api-token",
461
+ "source": "(?:contentful)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{43})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
462
+ "flags": "i",
463
+ "keywords": [
464
+ "contentful"
465
+ ]
466
+ },
467
+ {
468
+ "id": "databricks-api-token",
469
+ "source": "\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
470
+ "flags": "",
471
+ "keywords": [
472
+ "dapi"
473
+ ],
474
+ "entropy": 3
475
+ },
476
+ {
477
+ "id": "datadog-access-token",
478
+ "source": "(?:datadog)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
479
+ "flags": "i",
480
+ "keywords": [
481
+ "datadog"
482
+ ]
483
+ },
484
+ {
485
+ "id": "defined-networking-api-token",
486
+ "source": "(?:dnkey)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
487
+ "flags": "i",
488
+ "keywords": [
489
+ "dnkey"
490
+ ]
491
+ },
492
+ {
493
+ "id": "digitalocean-access-token",
494
+ "source": "\\b(doo_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
495
+ "flags": "",
496
+ "keywords": [
497
+ "doo_v1_"
498
+ ],
499
+ "entropy": 3
500
+ },
501
+ {
502
+ "id": "digitalocean-pat",
503
+ "source": "\\b(dop_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
504
+ "flags": "",
505
+ "keywords": [
506
+ "dop_v1_"
507
+ ],
508
+ "entropy": 3
509
+ },
510
+ {
511
+ "id": "digitalocean-refresh-token",
512
+ "source": "\\b(dor_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
513
+ "flags": "i",
514
+ "keywords": [
515
+ "dor_v1_"
516
+ ]
517
+ },
518
+ {
519
+ "id": "discord-api-token",
520
+ "source": "(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
521
+ "flags": "i",
522
+ "keywords": [
523
+ "discord"
524
+ ]
525
+ },
526
+ {
527
+ "id": "discord-client-id",
528
+ "source": "(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{18})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
529
+ "flags": "i",
530
+ "keywords": [
531
+ "discord"
532
+ ],
533
+ "entropy": 2
534
+ },
535
+ {
536
+ "id": "discord-client-secret",
537
+ "source": "(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
538
+ "flags": "i",
539
+ "keywords": [
540
+ "discord"
541
+ ],
542
+ "entropy": 2
543
+ },
544
+ {
545
+ "id": "doppler-api-token",
546
+ "source": "dp\\.pt\\.(?i:[a-z0-9]{43})", // gitleaks:allow
547
+ "flags": "",
548
+ "keywords": [
549
+ "dp.pt."
550
+ ],
551
+ "entropy": 2
552
+ },
553
+ {
554
+ "id": "droneci-access-token",
555
+ "source": "(?:droneci)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
556
+ "flags": "i",
557
+ "keywords": [
558
+ "droneci"
559
+ ]
560
+ },
561
+ {
562
+ "id": "dropbox-api-token",
563
+ "source": "(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{15})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
564
+ "flags": "i",
565
+ "keywords": [
566
+ "dropbox"
567
+ ]
568
+ },
569
+ {
570
+ "id": "dropbox-long-lived-api-token",
571
+ "source": "(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
572
+ "flags": "i",
573
+ "keywords": [
574
+ "dropbox"
575
+ ]
576
+ },
577
+ {
578
+ "id": "dropbox-short-lived-api-token",
579
+ "source": "(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(sl\\.[a-z0-9\\-=_]{135})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
580
+ "flags": "i",
581
+ "keywords": [
582
+ "dropbox"
583
+ ]
584
+ },
585
+ {
586
+ "id": "duffel-api-token",
587
+ "source": "duffel_(?:test|live)_(?i:[a-z0-9_\\-=]{43})", // gitleaks:allow
588
+ "flags": "",
589
+ "keywords": [
590
+ "duffel_"
591
+ ],
592
+ "entropy": 2
593
+ },
594
+ {
595
+ "id": "dynatrace-api-token",
596
+ "source": "dt0c01\\.(?i:[a-z0-9]{24}\\.[a-z0-9]{64})", // gitleaks:allow
597
+ "flags": "",
598
+ "keywords": [
599
+ "dt0c01."
600
+ ],
601
+ "entropy": 4
602
+ },
603
+ {
604
+ "id": "easypost-api-token",
605
+ "source": "\\bEZAK(?i:[a-z0-9]{54}\\b)", // gitleaks:allow
606
+ "flags": "",
607
+ "keywords": [
608
+ "ezak"
609
+ ],
610
+ "entropy": 2
611
+ },
612
+ {
613
+ "id": "easypost-test-api-token",
614
+ "source": "\\bEZTK(?i:[a-z0-9]{54}\\b)", // gitleaks:allow
615
+ "flags": "",
616
+ "keywords": [
617
+ "eztk"
618
+ ],
619
+ "entropy": 2
620
+ },
621
+ {
622
+ "id": "etsy-access-token",
623
+ "source": "(?:(?-i:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
624
+ "flags": "i",
625
+ "keywords": [
626
+ "etsy"
627
+ ],
628
+ "entropy": 3
629
+ },
630
+ {
631
+ "id": "facebook-access-token",
632
+ "source": "\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
633
+ "flags": "i",
634
+ "keywords": [
635
+ "facebook"
636
+ ],
637
+ "entropy": 3
638
+ },
639
+ {
640
+ "id": "facebook-page-access-token",
641
+ "source": "\\b(EAA[MC](?i:[a-z0-9]{100,}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
642
+ "flags": "",
643
+ "keywords": [
644
+ "eaam",
645
+ "eaac"
646
+ ],
647
+ "entropy": 4
648
+ },
649
+ {
650
+ "id": "facebook-secret",
651
+ "source": "(?:facebook)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
652
+ "flags": "i",
653
+ "keywords": [
654
+ "facebook"
655
+ ],
656
+ "entropy": 3
657
+ },
658
+ {
659
+ "id": "fastly-api-token",
660
+ "source": "(?:fastly)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
661
+ "flags": "i",
662
+ "keywords": [
663
+ "fastly"
664
+ ]
665
+ },
666
+ {
667
+ "id": "finicity-api-token",
668
+ "source": "(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
669
+ "flags": "i",
670
+ "keywords": [
671
+ "finicity"
672
+ ]
673
+ },
674
+ {
675
+ "id": "finicity-client-secret",
676
+ "source": "(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
677
+ "flags": "i",
678
+ "keywords": [
679
+ "finicity"
680
+ ]
681
+ },
682
+ {
683
+ "id": "finnhub-access-token",
684
+ "source": "(?:finnhub)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
685
+ "flags": "i",
686
+ "keywords": [
687
+ "finnhub"
688
+ ]
689
+ },
690
+ {
691
+ "id": "flickr-access-token",
692
+ "source": "(?:flickr)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
693
+ "flags": "i",
694
+ "keywords": [
695
+ "flickr"
696
+ ]
697
+ },
698
+ {
699
+ "id": "flutterwave-encryption-key",
700
+ "source": "FLWSECK_TEST-(?i:[a-h0-9]{12})", // gitleaks:allow
701
+ "flags": "",
702
+ "keywords": [
703
+ "flwseck_test"
704
+ ],
705
+ "entropy": 2
706
+ },
707
+ {
708
+ "id": "flutterwave-public-key",
709
+ "source": "FLWPUBK_TEST-(?i:[a-h0-9]{32}-X)", // gitleaks:allow
710
+ "flags": "",
711
+ "keywords": [
712
+ "flwpubk_test"
713
+ ],
714
+ "entropy": 2
715
+ },
716
+ {
717
+ "id": "flutterwave-secret-key",
718
+ "source": "FLWSECK_TEST-(?i:[a-h0-9]{32}-X)", // gitleaks:allow
719
+ "flags": "",
720
+ "keywords": [
721
+ "flwseck_test"
722
+ ],
723
+ "entropy": 2
724
+ },
725
+ {
726
+ "id": "flyio-access-token",
727
+ "source": "\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
728
+ "flags": "",
729
+ "keywords": [
730
+ "fo1_",
731
+ "fm1",
732
+ "fm2_"
733
+ ],
734
+ "entropy": 4
735
+ },
736
+ {
737
+ "id": "frameio-api-token",
738
+ "source": "fio-u-(?i:[a-z0-9\\-_=]{64})", // gitleaks:allow
739
+ "flags": "",
740
+ "keywords": [
741
+ "fio-u-"
742
+ ]
743
+ },
744
+ {
745
+ "id": "freshbooks-access-token",
746
+ "source": "(?:freshbooks)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
747
+ "flags": "i",
748
+ "keywords": [
749
+ "freshbooks"
750
+ ]
751
+ },
752
+ {
753
+ "id": "gcp-api-key",
754
+ "source": "\\b(AIza[\\w-]{35})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
755
+ "flags": "",
756
+ "keywords": [
757
+ "aiza"
758
+ ],
759
+ "entropy": 4
760
+ },
761
+ {
762
+ "id": "github-app-token",
763
+ "source": "(?:ghu|ghs)_[0-9a-zA-Z]{36}", // gitleaks:allow
764
+ "flags": "",
765
+ "keywords": [
766
+ "ghu_",
767
+ "ghs_"
768
+ ],
769
+ "entropy": 3
770
+ },
771
+ {
772
+ "id": "github-fine-grained-pat",
773
+ "source": "github_pat_\\w{82}", // gitleaks:allow
774
+ "flags": "",
775
+ "keywords": [
776
+ "github_pat_"
777
+ ],
778
+ "entropy": 3
779
+ },
780
+ {
781
+ "id": "github-oauth",
782
+ "source": "gho_[0-9a-zA-Z]{36}", // gitleaks:allow
783
+ "flags": "",
784
+ "keywords": [
785
+ "gho_"
786
+ ],
787
+ "entropy": 3
788
+ },
789
+ {
790
+ "id": "github-pat",
791
+ "source": "ghp_[0-9a-zA-Z]{36}", // gitleaks:allow
792
+ "flags": "",
793
+ "keywords": [
794
+ "ghp_"
795
+ ],
796
+ "entropy": 3
797
+ },
798
+ {
799
+ "id": "github-refresh-token",
800
+ "source": "ghr_[0-9a-zA-Z]{36}", // gitleaks:allow
801
+ "flags": "",
802
+ "keywords": [
803
+ "ghr_"
804
+ ],
805
+ "entropy": 3
806
+ },
807
+ {
808
+ "id": "gitlab-cicd-job-token",
809
+ "source": "glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}", // gitleaks:allow
810
+ "flags": "",
811
+ "keywords": [
812
+ "glcbt-"
813
+ ],
814
+ "entropy": 3
815
+ },
816
+ {
817
+ "id": "gitlab-deploy-token",
818
+ "source": "gldt-[0-9a-zA-Z_\\-]{20}", // gitleaks:allow
819
+ "flags": "",
820
+ "keywords": [
821
+ "gldt-"
822
+ ],
823
+ "entropy": 3
824
+ },
825
+ {
826
+ "id": "gitlab-feature-flag-client-token",
827
+ "source": "glffct-[0-9a-zA-Z_\\-]{20}", // gitleaks:allow
828
+ "flags": "",
829
+ "keywords": [
830
+ "glffct-"
831
+ ],
832
+ "entropy": 3
833
+ },
834
+ {
835
+ "id": "gitlab-feed-token",
836
+ "source": "glft-[0-9a-zA-Z_\\-]{20}", // gitleaks:allow
837
+ "flags": "",
838
+ "keywords": [
839
+ "glft-"
840
+ ],
841
+ "entropy": 3
842
+ },
843
+ {
844
+ "id": "gitlab-incoming-mail-token",
845
+ "source": "glimt-[0-9a-zA-Z_\\-]{25}", // gitleaks:allow
846
+ "flags": "",
847
+ "keywords": [
848
+ "glimt-"
849
+ ],
850
+ "entropy": 3
851
+ },
852
+ {
853
+ "id": "gitlab-kubernetes-agent-token",
854
+ "source": "glagent-[0-9a-zA-Z_\\-]{50}", // gitleaks:allow
855
+ "flags": "",
856
+ "keywords": [
857
+ "glagent-"
858
+ ],
859
+ "entropy": 3
860
+ },
861
+ {
862
+ "id": "gitlab-oauth-app-secret",
863
+ "source": "gloas-[0-9a-zA-Z_\\-]{64}", // gitleaks:allow
864
+ "flags": "",
865
+ "keywords": [
866
+ "gloas-"
867
+ ],
868
+ "entropy": 3
869
+ },
870
+ {
871
+ "id": "gitlab-pat",
872
+ "source": "glpat-[\\w-]{20}", // gitleaks:allow
873
+ "flags": "",
874
+ "keywords": [
875
+ "glpat-"
876
+ ],
877
+ "entropy": 3
878
+ },
879
+ {
880
+ "id": "gitlab-pat-routable",
881
+ "source": "\\bglpat-[0-9a-zA-Z_-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b", // gitleaks:allow
882
+ "flags": "",
883
+ "keywords": [
884
+ "glpat-"
885
+ ],
886
+ "entropy": 4
887
+ },
888
+ {
889
+ "id": "gitlab-ptt",
890
+ "source": "glptt-[0-9a-f]{40}", // gitleaks:allow
891
+ "flags": "",
892
+ "keywords": [
893
+ "glptt-"
894
+ ],
895
+ "entropy": 3
896
+ },
897
+ {
898
+ "id": "gitlab-rrt",
899
+ "source": "GR1348941[\\w-]{20}", // gitleaks:allow
900
+ "flags": "",
901
+ "keywords": [
902
+ "gr1348941"
903
+ ],
904
+ "entropy": 3
905
+ },
906
+ {
907
+ "id": "gitlab-runner-authentication-token",
908
+ "source": "glrt-[0-9a-zA-Z_\\-]{20}", // gitleaks:allow
909
+ "flags": "",
910
+ "keywords": [
911
+ "glrt-"
912
+ ],
913
+ "entropy": 3
914
+ },
915
+ {
916
+ "id": "gitlab-runner-authentication-token-routable",
917
+ "source": "\\bglrt-t\\d_[0-9a-zA-Z_\\-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b", // gitleaks:allow
918
+ "flags": "",
919
+ "keywords": [
920
+ "glrt-"
921
+ ],
922
+ "entropy": 4
923
+ },
924
+ {
925
+ "id": "gitlab-scim-token",
926
+ "source": "glsoat-[0-9a-zA-Z_\\-]{20}", // gitleaks:allow
927
+ "flags": "",
928
+ "keywords": [
929
+ "glsoat-"
930
+ ],
931
+ "entropy": 3
932
+ },
933
+ {
934
+ "id": "gitlab-session-cookie",
935
+ "source": "_gitlab_session=[0-9a-z]{32}", // gitleaks:allow
936
+ "flags": "",
937
+ "keywords": [
938
+ "_gitlab_session="
939
+ ],
940
+ "entropy": 3
941
+ },
942
+ {
943
+ "id": "gitter-access-token",
944
+ "source": "(?:gitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
945
+ "flags": "i",
946
+ "keywords": [
947
+ "gitter"
948
+ ]
949
+ },
950
+ {
951
+ "id": "gocardless-api-token",
952
+ "source": "(?:gocardless)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(live_[a-z0-9\\-_=]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
953
+ "flags": "i",
954
+ "keywords": [
955
+ "live_",
956
+ "gocardless"
957
+ ]
958
+ },
959
+ {
960
+ "id": "grafana-api-key",
961
+ "source": "\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
962
+ "flags": "i",
963
+ "keywords": [
964
+ "eyjrijoi"
965
+ ],
966
+ "entropy": 3
967
+ },
968
+ {
969
+ "id": "grafana-cloud-api-token",
970
+ "source": "\\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
971
+ "flags": "i",
972
+ "keywords": [
973
+ "glc_"
974
+ ],
975
+ "entropy": 3
976
+ },
977
+ {
978
+ "id": "grafana-service-account-token",
979
+ "source": "\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
980
+ "flags": "i",
981
+ "keywords": [
982
+ "glsa_"
983
+ ],
984
+ "entropy": 3
985
+ },
986
+ {
987
+ "id": "harness-api-key",
988
+ "source": "(?:pat|sat)\\.[a-zA-Z0-9_-]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20}", // gitleaks:allow
989
+ "flags": "",
990
+ "keywords": [
991
+ "pat.",
992
+ "sat."
993
+ ]
994
+ },
995
+ {
996
+ "id": "hashicorp-tf-api-token",
997
+ "source": "[a-z0-9]{14}\\.(?-i:atlasv1)\\.[a-z0-9\\-_=]{60,70}", // gitleaks:allow
998
+ "flags": "i",
999
+ "keywords": [
1000
+ "atlasv1"
1001
+ ],
1002
+ "entropy": 3.5
1003
+ },
1004
+ {
1005
+ "id": "heroku-api-key",
1006
+ "source": "(?:heroku)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1007
+ "flags": "i",
1008
+ "keywords": [
1009
+ "heroku"
1010
+ ]
1011
+ },
1012
+ {
1013
+ "id": "heroku-api-key-v2",
1014
+ "source": "\\b((HRKU-AA[0-9a-zA-Z_-]{58}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1015
+ "flags": "",
1016
+ "keywords": [
1017
+ "hrku-aa"
1018
+ ],
1019
+ "entropy": 4
1020
+ },
1021
+ {
1022
+ "id": "hubspot-api-key",
1023
+ "source": "(?:hubspot)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1024
+ "flags": "i",
1025
+ "keywords": [
1026
+ "hubspot"
1027
+ ]
1028
+ },
1029
+ {
1030
+ "id": "huggingface-access-token",
1031
+ "source": "\\b(hf_(?i:[a-z]{34}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1032
+ "flags": "",
1033
+ "keywords": [
1034
+ "hf_"
1035
+ ],
1036
+ "entropy": 2
1037
+ },
1038
+ {
1039
+ "id": "huggingface-organization-api-token",
1040
+ "source": "\\b(api_org_(?i:[a-z]{34}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1041
+ "flags": "",
1042
+ "keywords": [
1043
+ "api_org_"
1044
+ ],
1045
+ "entropy": 2
1046
+ },
1047
+ {
1048
+ "id": "infracost-api-token",
1049
+ "source": "\\b(ico-[a-zA-Z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1050
+ "flags": "",
1051
+ "keywords": [
1052
+ "ico-"
1053
+ ],
1054
+ "entropy": 3
1055
+ },
1056
+ {
1057
+ "id": "intercom-api-key",
1058
+ "source": "(?:intercom)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{60})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1059
+ "flags": "i",
1060
+ "keywords": [
1061
+ "intercom"
1062
+ ]
1063
+ },
1064
+ {
1065
+ "id": "intra42-client-secret",
1066
+ "source": "\\b(s-s4t2(?:ud|af)-(?i:[abcdef0123456789]{64}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1067
+ "flags": "",
1068
+ "keywords": [
1069
+ "intra",
1070
+ "s-s4t2ud-",
1071
+ "s-s4t2af-"
1072
+ ],
1073
+ "entropy": 3
1074
+ },
1075
+ {
1076
+ "id": "jfrog-api-key",
1077
+ "source": "(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{73})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1078
+ "flags": "i",
1079
+ "keywords": [
1080
+ "jfrog",
1081
+ "artifactory",
1082
+ "bintray",
1083
+ "xray"
1084
+ ]
1085
+ },
1086
+ {
1087
+ "id": "jfrog-identity-token",
1088
+ "source": "(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1089
+ "flags": "i",
1090
+ "keywords": [
1091
+ "jfrog",
1092
+ "artifactory",
1093
+ "bintray",
1094
+ "xray"
1095
+ ]
1096
+ },
1097
+ {
1098
+ "id": "jwt",
1099
+ "source": "\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1100
+ "flags": "",
1101
+ "keywords": [
1102
+ "ey"
1103
+ ],
1104
+ "entropy": 3
1105
+ },
1106
+ {
1107
+ "id": "jwt-base64",
1108
+ "source": "\\bZXlK(?:(?<alg>aGJHY2lPaU)|(?<apu>aGNIVWlPaU)|(?<apv>aGNIWWlPaU)|(?<aud>aGRXUWlPaU)|(?<b64>aU5qUWlP)|(?<crit>amNtbDBJanBi)|(?<cty>amRIa2lPaU)|(?<epk>bGNHc2lPbn)|(?<enc>bGJtTWlPaU)|(?<jku>cWEzVWlPaU)|(?<jwk>cWQyc2lPb)|(?<iss>cGMzTWlPaU)|(?<iv>cGRpSTZJ)|(?<kid>cmFXUWlP)|(?<key_ops>clpYbGZiM0J6SWpwY)|(?<kty>cmRIa2lPaUp)|(?<nonce>dWIyNWpaU0k2)|(?<p2c>d01tTWlP)|(?<p2s>d01uTWlPaU)|(?<ppt>d2NIUWlPaU)|(?<sub>emRXSWlPaU)|(?<svt>emRuUWlP)|(?<tag>MFlXY2lPaU)|(?<typ>MGVYQWlPaUp)|(?<url>MWNtd2l)|(?<use>MWMyVWlPaUp)|(?<ver>MlpYSWlPaU)|(?<version>MlpYSnphVzl1SWpv)|(?<x>NElqb2)|(?<x5c>NE5XTWlP)|(?<x5t>NE5YUWlPaU)|(?<x5ts256>NE5YUWpVekkxTmlJNkl)|(?<x5u>NE5YVWlPaU)|(?<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}", // gitleaks:allow
1109
+ "flags": "",
1110
+ "keywords": [
1111
+ "zxlk"
1112
+ ],
1113
+ "entropy": 2,
1114
+ "redactWholeMatch": true
1115
+ },
1116
+ {
1117
+ "id": "kraken-access-token",
1118
+ "source": "(?:kraken)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1119
+ "flags": "i",
1120
+ "keywords": [
1121
+ "kraken"
1122
+ ]
1123
+ },
1124
+ {
1125
+ "id": "kucoin-access-token",
1126
+ "source": "(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{24})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1127
+ "flags": "i",
1128
+ "keywords": [
1129
+ "kucoin"
1130
+ ]
1131
+ },
1132
+ {
1133
+ "id": "kucoin-secret-key",
1134
+ "source": "(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1135
+ "flags": "i",
1136
+ "keywords": [
1137
+ "kucoin"
1138
+ ]
1139
+ },
1140
+ {
1141
+ "id": "launchdarkly-access-token",
1142
+ "source": "(?:launchdarkly)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1143
+ "flags": "i",
1144
+ "keywords": [
1145
+ "launchdarkly"
1146
+ ]
1147
+ },
1148
+ {
1149
+ "id": "linear-api-key",
1150
+ "source": "lin_api_(?i:[a-z0-9]{40})", // gitleaks:allow
1151
+ "flags": "",
1152
+ "keywords": [
1153
+ "lin_api_"
1154
+ ],
1155
+ "entropy": 2
1156
+ },
1157
+ {
1158
+ "id": "linear-client-secret",
1159
+ "source": "(?:linear)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1160
+ "flags": "i",
1161
+ "keywords": [
1162
+ "linear"
1163
+ ],
1164
+ "entropy": 2
1165
+ },
1166
+ {
1167
+ "id": "linkedin-client-id",
1168
+ "source": "(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{14})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1169
+ "flags": "i",
1170
+ "keywords": [
1171
+ "linkedin",
1172
+ "linked_in",
1173
+ "linked-in"
1174
+ ],
1175
+ "entropy": 2
1176
+ },
1177
+ {
1178
+ "id": "linkedin-client-secret",
1179
+ "source": "(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1180
+ "flags": "i",
1181
+ "keywords": [
1182
+ "linkedin",
1183
+ "linked_in",
1184
+ "linked-in"
1185
+ ],
1186
+ "entropy": 2
1187
+ },
1188
+ {
1189
+ "id": "lob-api-key",
1190
+ "source": "(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}((live|test)_[a-f0-9]{35})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1191
+ "flags": "i",
1192
+ "keywords": [
1193
+ "test_",
1194
+ "live_"
1195
+ ]
1196
+ },
1197
+ {
1198
+ "id": "lob-pub-api-key",
1199
+ "source": "(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}((test|live)_pub_[a-f0-9]{31})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1200
+ "flags": "i",
1201
+ "keywords": [
1202
+ "test_pub",
1203
+ "live_pub",
1204
+ "_pub"
1205
+ ]
1206
+ },
1207
+ {
1208
+ "id": "looker-client-id",
1209
+ "source": "(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1210
+ "flags": "i",
1211
+ "keywords": [
1212
+ "looker"
1213
+ ]
1214
+ },
1215
+ {
1216
+ "id": "looker-client-secret",
1217
+ "source": "(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1218
+ "flags": "i",
1219
+ "keywords": [
1220
+ "looker"
1221
+ ]
1222
+ },
1223
+ {
1224
+ "id": "mailchimp-api-key",
1225
+ "source": "(?:MailchimpSDK.initialize|mailchimp)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32}-us\\d\\d)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1226
+ "flags": "i",
1227
+ "keywords": [
1228
+ "mailchimp"
1229
+ ]
1230
+ },
1231
+ {
1232
+ "id": "mailgun-private-api-token",
1233
+ "source": "(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(key-[a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1234
+ "flags": "i",
1235
+ "keywords": [
1236
+ "mailgun"
1237
+ ]
1238
+ },
1239
+ {
1240
+ "id": "mailgun-pub-key",
1241
+ "source": "(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(pubkey-[a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1242
+ "flags": "i",
1243
+ "keywords": [
1244
+ "mailgun"
1245
+ ]
1246
+ },
1247
+ {
1248
+ "id": "mailgun-signing-key",
1249
+ "source": "(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1250
+ "flags": "i",
1251
+ "keywords": [
1252
+ "mailgun"
1253
+ ]
1254
+ },
1255
+ {
1256
+ "id": "mapbox-api-token",
1257
+ "source": "(?:mapbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1258
+ "flags": "i",
1259
+ "keywords": [
1260
+ "mapbox"
1261
+ ]
1262
+ },
1263
+ {
1264
+ "id": "mattermost-access-token",
1265
+ "source": "(?:mattermost)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{26})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1266
+ "flags": "i",
1267
+ "keywords": [
1268
+ "mattermost"
1269
+ ]
1270
+ },
1271
+ {
1272
+ "id": "maxmind-license-key",
1273
+ "source": "\\b([A-Za-z0-9]{6}_[A-Za-z0-9]{29}_mmk)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1274
+ "flags": "",
1275
+ "keywords": [
1276
+ "_mmk"
1277
+ ],
1278
+ "entropy": 4
1279
+ },
1280
+ {
1281
+ "id": "messagebird-api-token",
1282
+ "source": "(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1283
+ "flags": "i",
1284
+ "keywords": [
1285
+ "messagebird",
1286
+ "message-bird",
1287
+ "message_bird"
1288
+ ]
1289
+ },
1290
+ {
1291
+ "id": "messagebird-client-id",
1292
+ "source": "(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1293
+ "flags": "i",
1294
+ "keywords": [
1295
+ "messagebird",
1296
+ "message-bird",
1297
+ "message_bird"
1298
+ ]
1299
+ },
1300
+ {
1301
+ "id": "microsoft-teams-webhook",
1302
+ "source": "https://[a-z0-9]+\\.webhook\\.office\\.com/webhookb2/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/IncomingWebhook/[a-z0-9]{32}/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}", // gitleaks:allow
1303
+ "flags": "",
1304
+ "keywords": [
1305
+ "webhook.office.com",
1306
+ "webhookb2",
1307
+ "incomingwebhook"
1308
+ ]
1309
+ },
1310
+ {
1311
+ "id": "netlify-access-token",
1312
+ "source": "(?:netlify)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{40,46})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1313
+ "flags": "i",
1314
+ "keywords": [
1315
+ "netlify"
1316
+ ]
1317
+ },
1318
+ {
1319
+ "id": "new-relic-browser-api-token",
1320
+ "source": "(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(NRJS-[a-f0-9]{19})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1321
+ "flags": "i",
1322
+ "keywords": [
1323
+ "nrjs-"
1324
+ ]
1325
+ },
1326
+ {
1327
+ "id": "new-relic-insert-key",
1328
+ "source": "(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(NRII-[a-z0-9-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1329
+ "flags": "i",
1330
+ "keywords": [
1331
+ "nrii-"
1332
+ ]
1333
+ },
1334
+ {
1335
+ "id": "new-relic-user-api-id",
1336
+ "source": "(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1337
+ "flags": "i",
1338
+ "keywords": [
1339
+ "new-relic",
1340
+ "newrelic",
1341
+ "new_relic"
1342
+ ]
1343
+ },
1344
+ {
1345
+ "id": "new-relic-user-api-key",
1346
+ "source": "(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(NRAK-[a-z0-9]{27})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1347
+ "flags": "i",
1348
+ "keywords": [
1349
+ "nrak"
1350
+ ]
1351
+ },
1352
+ {
1353
+ "id": "notion-api-token",
1354
+ "source": "\\b(ntn_[0-9]{11}[A-Za-z0-9]{32}[A-Za-z0-9]{3})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1355
+ "flags": "",
1356
+ "keywords": [
1357
+ "ntn_"
1358
+ ],
1359
+ "entropy": 4
1360
+ },
1361
+ {
1362
+ "id": "npm-access-token",
1363
+ "source": "\\b(npm_[a-z0-9]{36})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1364
+ "flags": "i",
1365
+ "keywords": [
1366
+ "npm_"
1367
+ ],
1368
+ "entropy": 2
1369
+ },
1370
+ {
1371
+ "id": "nytimes-access-token",
1372
+ "source": "(?:nytimes|new-york-times,|newyorktimes)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1373
+ "flags": "i",
1374
+ "keywords": [
1375
+ "nytimes",
1376
+ "new-york-times",
1377
+ "newyorktimes"
1378
+ ]
1379
+ },
1380
+ {
1381
+ "id": "octopus-deploy-api-key",
1382
+ "source": "\\b(API-[A-Z0-9]{26})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1383
+ "flags": "",
1384
+ "keywords": [
1385
+ "api-"
1386
+ ],
1387
+ "entropy": 3
1388
+ },
1389
+ {
1390
+ "id": "okta-access-token",
1391
+ "source": "(?i:(?:(?-i:[Oo]kta|OKTA))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(00[\\w=\\-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1392
+ "flags": "",
1393
+ "keywords": [
1394
+ "okta"
1395
+ ],
1396
+ "entropy": 4
1397
+ },
1398
+ {
1399
+ "id": "openai-api-key",
1400
+ "source": "\\b(sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1401
+ "flags": "",
1402
+ "keywords": [
1403
+ "t3blbkfj"
1404
+ ],
1405
+ "entropy": 3
1406
+ },
1407
+ {
1408
+ "id": "openshift-user-token",
1409
+ "source": "\\b(sha256~[\\w-]{43})(?:[^\\w-]|$)", // gitleaks:allow
1410
+ "flags": "",
1411
+ "keywords": [
1412
+ "sha256~"
1413
+ ],
1414
+ "entropy": 3.5
1415
+ },
1416
+ {
1417
+ "id": "perplexity-api-key",
1418
+ "source": "\\b(pplx-[a-zA-Z0-9]{48})(?:[\\x60'\"\\s;]|\\\\[nr]|$|\\b)", // gitleaks:allow
1419
+ "flags": "",
1420
+ "keywords": [
1421
+ "pplx-"
1422
+ ],
1423
+ "entropy": 4
1424
+ },
1425
+ {
1426
+ "id": "plaid-api-token",
1427
+ "source": "(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1428
+ "flags": "i",
1429
+ "keywords": [
1430
+ "plaid"
1431
+ ]
1432
+ },
1433
+ {
1434
+ "id": "plaid-client-id",
1435
+ "source": "(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1436
+ "flags": "i",
1437
+ "keywords": [
1438
+ "plaid"
1439
+ ],
1440
+ "entropy": 3.5
1441
+ },
1442
+ {
1443
+ "id": "plaid-secret-key",
1444
+ "source": "(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1445
+ "flags": "i",
1446
+ "keywords": [
1447
+ "plaid"
1448
+ ],
1449
+ "entropy": 3.5
1450
+ },
1451
+ {
1452
+ "id": "planetscale-api-token",
1453
+ "source": "\\b(pscale_tkn_(?i:[\\w=\\.-]{32,64}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1454
+ "flags": "",
1455
+ "keywords": [
1456
+ "pscale_tkn_"
1457
+ ],
1458
+ "entropy": 3
1459
+ },
1460
+ {
1461
+ "id": "planetscale-oauth-token",
1462
+ "source": "\\b(pscale_oauth_[\\w=\\.-]{32,64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1463
+ "flags": "",
1464
+ "keywords": [
1465
+ "pscale_oauth_"
1466
+ ],
1467
+ "entropy": 3
1468
+ },
1469
+ {
1470
+ "id": "planetscale-password",
1471
+ "source": "\\b(pscale_pw_[\\w=\\.-]{32,64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1472
+ "flags": "i",
1473
+ "keywords": [
1474
+ "pscale_pw_"
1475
+ ],
1476
+ "entropy": 3
1477
+ },
1478
+ {
1479
+ "id": "postman-api-token",
1480
+ "source": "\\b(PMAK-(?i:[a-f0-9]{24}\\-[a-f0-9]{34}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1481
+ "flags": "",
1482
+ "keywords": [
1483
+ "pmak-"
1484
+ ],
1485
+ "entropy": 3
1486
+ },
1487
+ {
1488
+ "id": "prefect-api-token",
1489
+ "source": "\\b(pnu_[a-zA-Z0-9]{36})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1490
+ "flags": "",
1491
+ "keywords": [
1492
+ "pnu_"
1493
+ ],
1494
+ "entropy": 2
1495
+ },
1496
+ {
1497
+ "id": "privateai-api-token",
1498
+ "source": "(?i:(?:private[_-]?ai)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1499
+ "flags": "",
1500
+ "keywords": [
1501
+ "privateai",
1502
+ "private_ai",
1503
+ "private-ai"
1504
+ ],
1505
+ "entropy": 3
1506
+ },
1507
+ {
1508
+ "id": "pulumi-api-token",
1509
+ "source": "\\b(pul-[a-f0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1510
+ "flags": "",
1511
+ "keywords": [
1512
+ "pul-"
1513
+ ],
1514
+ "entropy": 2
1515
+ },
1516
+ {
1517
+ "id": "pypi-upload-token",
1518
+ "source": "pypi-AgEIcHlwaS5vcmc[\\w-]{50,1000}", // gitleaks:allow
1519
+ "flags": "",
1520
+ "keywords": [
1521
+ "pypi-ageichlwas5vcmc"
1522
+ ],
1523
+ "entropy": 3
1524
+ },
1525
+ {
1526
+ "id": "rapidapi-access-token",
1527
+ "source": "(?:rapidapi)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{50})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1528
+ "flags": "i",
1529
+ "keywords": [
1530
+ "rapidapi"
1531
+ ]
1532
+ },
1533
+ {
1534
+ "id": "readme-api-token",
1535
+ "source": "\\b(rdme_[a-z0-9]{70})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1536
+ "flags": "",
1537
+ "keywords": [
1538
+ "rdme_"
1539
+ ],
1540
+ "entropy": 2
1541
+ },
1542
+ {
1543
+ "id": "rubygems-api-token",
1544
+ "source": "\\b(rubygems_[a-f0-9]{48})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1545
+ "flags": "",
1546
+ "keywords": [
1547
+ "rubygems_"
1548
+ ],
1549
+ "entropy": 2
1550
+ },
1551
+ {
1552
+ "id": "scalingo-api-token",
1553
+ "source": "\\b(tk-us-[\\w-]{48})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1554
+ "flags": "",
1555
+ "keywords": [
1556
+ "tk-us-"
1557
+ ],
1558
+ "entropy": 2
1559
+ },
1560
+ {
1561
+ "id": "sendbird-access-id",
1562
+ "source": "(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1563
+ "flags": "i",
1564
+ "keywords": [
1565
+ "sendbird"
1566
+ ]
1567
+ },
1568
+ {
1569
+ "id": "sendbird-access-token",
1570
+ "source": "(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1571
+ "flags": "i",
1572
+ "keywords": [
1573
+ "sendbird"
1574
+ ]
1575
+ },
1576
+ {
1577
+ "id": "sendgrid-api-token",
1578
+ "source": "\\b(SG\\.(?i:[a-z0-9=_\\-\\.]{66}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1579
+ "flags": "",
1580
+ "keywords": [
1581
+ "sg."
1582
+ ],
1583
+ "entropy": 2
1584
+ },
1585
+ {
1586
+ "id": "sendinblue-api-token",
1587
+ "source": "\\b(xkeysib-[a-f0-9]{64}\\-(?i:[a-z0-9]{16}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1588
+ "flags": "",
1589
+ "keywords": [
1590
+ "xkeysib-"
1591
+ ],
1592
+ "entropy": 2
1593
+ },
1594
+ {
1595
+ "id": "sentry-access-token",
1596
+ "source": "(?:sentry)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1597
+ "flags": "i",
1598
+ "keywords": [
1599
+ "sentry"
1600
+ ],
1601
+ "entropy": 3
1602
+ },
1603
+ {
1604
+ "id": "sentry-org-token",
1605
+ "source": "\\bsntrys_eyJpYXQiO[a-zA-Z0-9+/]{10,200}(?:LCJyZWdpb25fdXJs|InJlZ2lvbl91cmwi|cmVnaW9uX3VybCI6)[a-zA-Z0-9+/]{10,200}={0,2}_[a-zA-Z0-9+/]{43}(?:[^a-zA-Z0-9+/]|$)", // gitleaks:allow
1606
+ "flags": "",
1607
+ "keywords": [
1608
+ "sntrys_eyjpyxqio"
1609
+ ],
1610
+ "entropy": 4.5
1611
+ },
1612
+ {
1613
+ "id": "sentry-user-token",
1614
+ "source": "\\b(sntryu_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1615
+ "flags": "",
1616
+ "keywords": [
1617
+ "sntryu_"
1618
+ ],
1619
+ "entropy": 3.5
1620
+ },
1621
+ {
1622
+ "id": "settlemint-application-access-token",
1623
+ "source": "\\b(sm_aat_[a-zA-Z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1624
+ "flags": "",
1625
+ "keywords": [
1626
+ "sm_aat"
1627
+ ],
1628
+ "entropy": 3
1629
+ },
1630
+ {
1631
+ "id": "settlemint-personal-access-token",
1632
+ "source": "\\b(sm_pat_[a-zA-Z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1633
+ "flags": "",
1634
+ "keywords": [
1635
+ "sm_pat"
1636
+ ],
1637
+ "entropy": 3
1638
+ },
1639
+ {
1640
+ "id": "settlemint-service-access-token",
1641
+ "source": "\\b(sm_sat_[a-zA-Z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1642
+ "flags": "",
1643
+ "keywords": [
1644
+ "sm_sat"
1645
+ ],
1646
+ "entropy": 3
1647
+ },
1648
+ {
1649
+ "id": "shippo-api-token",
1650
+ "source": "\\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1651
+ "flags": "",
1652
+ "keywords": [
1653
+ "shippo_"
1654
+ ],
1655
+ "entropy": 2
1656
+ },
1657
+ {
1658
+ "id": "shopify-access-token",
1659
+ "source": "shpat_[a-fA-F0-9]{32}", // gitleaks:allow
1660
+ "flags": "",
1661
+ "keywords": [
1662
+ "shpat_"
1663
+ ],
1664
+ "entropy": 2
1665
+ },
1666
+ {
1667
+ "id": "shopify-custom-access-token",
1668
+ "source": "shpca_[a-fA-F0-9]{32}", // gitleaks:allow
1669
+ "flags": "",
1670
+ "keywords": [
1671
+ "shpca_"
1672
+ ],
1673
+ "entropy": 2
1674
+ },
1675
+ {
1676
+ "id": "shopify-private-app-access-token",
1677
+ "source": "shppa_[a-fA-F0-9]{32}", // gitleaks:allow
1678
+ "flags": "",
1679
+ "keywords": [
1680
+ "shppa_"
1681
+ ],
1682
+ "entropy": 2
1683
+ },
1684
+ {
1685
+ "id": "shopify-shared-secret",
1686
+ "source": "shpss_[a-fA-F0-9]{32}", // gitleaks:allow
1687
+ "flags": "",
1688
+ "keywords": [
1689
+ "shpss_"
1690
+ ],
1691
+ "entropy": 2
1692
+ },
1693
+ {
1694
+ "id": "sidekiq-secret",
1695
+ "source": "(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1696
+ "flags": "i",
1697
+ "keywords": [
1698
+ "bundle_enterprise__contribsys__com",
1699
+ "bundle_gems__contribsys__com"
1700
+ ]
1701
+ },
1702
+ {
1703
+ "id": "sidekiq-sensitive-url",
1704
+ "source": "\\bhttps?://([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\\/|\\#|\\?|:]|$)", // gitleaks:allow
1705
+ "flags": "i",
1706
+ "keywords": [
1707
+ "gems.contribsys.com",
1708
+ "enterprise.contribsys.com"
1709
+ ]
1710
+ },
1711
+ {
1712
+ "id": "slack-app-token",
1713
+ "source": "xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+", // gitleaks:allow
1714
+ "flags": "i",
1715
+ "keywords": [
1716
+ "xapp"
1717
+ ],
1718
+ "entropy": 2
1719
+ },
1720
+ {
1721
+ "id": "slack-bot-token",
1722
+ "source": "xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*", // gitleaks:allow
1723
+ "flags": "",
1724
+ "keywords": [
1725
+ "xoxb"
1726
+ ],
1727
+ "entropy": 3
1728
+ },
1729
+ {
1730
+ "id": "slack-config-access-token",
1731
+ "source": "xoxe.xox[bp]-\\d-[A-Z0-9]{163,166}", // gitleaks:allow
1732
+ "flags": "i",
1733
+ "keywords": [
1734
+ "xoxe.xoxb-",
1735
+ "xoxe.xoxp-"
1736
+ ],
1737
+ "entropy": 2
1738
+ },
1739
+ {
1740
+ "id": "slack-config-refresh-token",
1741
+ "source": "xoxe-\\d-[A-Z0-9]{146}", // gitleaks:allow
1742
+ "flags": "i",
1743
+ "keywords": [
1744
+ "xoxe-"
1745
+ ],
1746
+ "entropy": 2
1747
+ },
1748
+ {
1749
+ "id": "slack-legacy-bot-token",
1750
+ "source": "xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}", // gitleaks:allow
1751
+ "flags": "",
1752
+ "keywords": [
1753
+ "xoxb"
1754
+ ],
1755
+ "entropy": 2
1756
+ },
1757
+ {
1758
+ "id": "slack-legacy-token",
1759
+ "source": "xox[os]-\\d+-\\d+-\\d+-[a-fA-F\\d]+", // gitleaks:allow
1760
+ "flags": "",
1761
+ "keywords": [
1762
+ "xoxo",
1763
+ "xoxs"
1764
+ ],
1765
+ "entropy": 2
1766
+ },
1767
+ {
1768
+ "id": "slack-legacy-workspace-token",
1769
+ "source": "xox[ar]-(?:\\d-)?[0-9a-zA-Z]{8,48}", // gitleaks:allow
1770
+ "flags": "",
1771
+ "keywords": [
1772
+ "xoxa",
1773
+ "xoxr"
1774
+ ],
1775
+ "entropy": 2
1776
+ },
1777
+ {
1778
+ "id": "slack-user-token",
1779
+ "source": "xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}", // gitleaks:allow
1780
+ "flags": "",
1781
+ "keywords": [
1782
+ "xoxp-",
1783
+ "xoxe-"
1784
+ ],
1785
+ "entropy": 2
1786
+ },
1787
+ {
1788
+ "id": "slack-webhook-url",
1789
+ "source": "(?:https?://)?hooks.slack.com/(?:services|workflows|triggers)/[A-Za-z0-9+/]{43,56}", // gitleaks:allow
1790
+ "flags": "",
1791
+ "keywords": [
1792
+ "hooks.slack.com"
1793
+ ]
1794
+ },
1795
+ {
1796
+ "id": "snyk-api-token",
1797
+ "source": "(?:snyk[_.-]?(?:(?:api|oauth)[_.-]?)?(?:key|token))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1798
+ "flags": "i",
1799
+ "keywords": [
1800
+ "snyk"
1801
+ ]
1802
+ },
1803
+ {
1804
+ "id": "sonar-api-token",
1805
+ "source": "(?:sonar[_.-]?(login|token))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}((?:squ_|sqp_|sqa_)?[a-z0-9=_\\-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1806
+ "flags": "i",
1807
+ "keywords": [
1808
+ "sonar"
1809
+ ],
1810
+ "secretGroup": 2
1811
+ },
1812
+ {
1813
+ "id": "sourcegraph-access-token",
1814
+ "source": "\\b(\\b(sgp_(?:[a-fA-F0-9]{16}|local)_[a-fA-F0-9]{40}|sgp_[a-fA-F0-9]{40})\\b)(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1815
+ "flags": "i",
1816
+ "keywords": [
1817
+ "sgp_",
1818
+ "sourcegraph"
1819
+ ],
1820
+ "entropy": 3
1821
+ },
1822
+ {
1823
+ "id": "square-access-token",
1824
+ "source": "\\b((?:EAAA|sq0atp-)[\\w-]{22,60})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1825
+ "flags": "",
1826
+ "keywords": [
1827
+ "sq0atp-",
1828
+ "eaaa"
1829
+ ],
1830
+ "entropy": 2
1831
+ },
1832
+ {
1833
+ "id": "squarespace-access-token",
1834
+ "source": "(?:squarespace)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1835
+ "flags": "i",
1836
+ "keywords": [
1837
+ "squarespace"
1838
+ ]
1839
+ },
1840
+ {
1841
+ "id": "stripe-access-token",
1842
+ "source": "\\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1843
+ "flags": "",
1844
+ "keywords": [
1845
+ "sk_test",
1846
+ "sk_live",
1847
+ "sk_prod",
1848
+ "rk_test",
1849
+ "rk_live",
1850
+ "rk_prod"
1851
+ ],
1852
+ "entropy": 2
1853
+ },
1854
+ {
1855
+ "id": "sumologic-access-id",
1856
+ "source": "(?i:(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(su[a-zA-Z0-9]{12})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1857
+ "flags": "",
1858
+ "keywords": [
1859
+ "sumo"
1860
+ ],
1861
+ "entropy": 3
1862
+ },
1863
+ {
1864
+ "id": "sumologic-access-token",
1865
+ "source": "(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1866
+ "flags": "i",
1867
+ "keywords": [
1868
+ "sumo"
1869
+ ],
1870
+ "entropy": 3
1871
+ },
1872
+ {
1873
+ "id": "telegram-bot-api-token",
1874
+ "source": "(?:telegr)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{5,16}:(?-i:A)[a-z0-9_\\-]{34})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1875
+ "flags": "i",
1876
+ "keywords": [
1877
+ "telegr"
1878
+ ]
1879
+ },
1880
+ {
1881
+ "id": "travisci-access-token",
1882
+ "source": "(?:travis)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{22})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1883
+ "flags": "i",
1884
+ "keywords": [
1885
+ "travis"
1886
+ ]
1887
+ },
1888
+ {
1889
+ "id": "twilio-api-key",
1890
+ "source": "SK[0-9a-fA-F]{32}", // gitleaks:allow
1891
+ "flags": "",
1892
+ "keywords": [
1893
+ "sk"
1894
+ ],
1895
+ "entropy": 3
1896
+ },
1897
+ {
1898
+ "id": "twitch-api-token",
1899
+ "source": "(?:twitch)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1900
+ "flags": "i",
1901
+ "keywords": [
1902
+ "twitch"
1903
+ ]
1904
+ },
1905
+ {
1906
+ "id": "twitter-access-secret",
1907
+ "source": "(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{45})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1908
+ "flags": "i",
1909
+ "keywords": [
1910
+ "twitter"
1911
+ ]
1912
+ },
1913
+ {
1914
+ "id": "twitter-access-token",
1915
+ "source": "(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1916
+ "flags": "i",
1917
+ "keywords": [
1918
+ "twitter"
1919
+ ]
1920
+ },
1921
+ {
1922
+ "id": "twitter-api-key",
1923
+ "source": "(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1924
+ "flags": "i",
1925
+ "keywords": [
1926
+ "twitter"
1927
+ ]
1928
+ },
1929
+ {
1930
+ "id": "twitter-api-secret",
1931
+ "source": "(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{50})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1932
+ "flags": "i",
1933
+ "keywords": [
1934
+ "twitter"
1935
+ ]
1936
+ },
1937
+ {
1938
+ "id": "twitter-bearer-token",
1939
+ "source": "(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1940
+ "flags": "i",
1941
+ "keywords": [
1942
+ "twitter"
1943
+ ]
1944
+ },
1945
+ {
1946
+ "id": "typeform-api-token",
1947
+ "source": "(?:typeform)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(tfp_[a-z0-9\\-_\\.=]{59})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1948
+ "flags": "i",
1949
+ "keywords": [
1950
+ "tfp_"
1951
+ ]
1952
+ },
1953
+ {
1954
+ "id": "vault-batch-token",
1955
+ "source": "\\b(hvb\\.[\\w-]{138,300})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1956
+ "flags": "",
1957
+ "keywords": [
1958
+ "hvb."
1959
+ ],
1960
+ "entropy": 4
1961
+ },
1962
+ {
1963
+ "id": "vault-service-token",
1964
+ "source": "\\b((?:hvs\\.[\\w-]{90,120}|s\\.(?i:[a-z0-9]{24})))(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1965
+ "flags": "",
1966
+ "keywords": [
1967
+ "hvs.",
1968
+ "s."
1969
+ ],
1970
+ "entropy": 3.5,
1971
+ "allowlists": [
1972
+ {
1973
+ "target": "secret",
1974
+ "regexes": [
1975
+ {
1976
+ "source": "^(?:s\\.[A-Za-z]{24})$", // gitleaks:allow
1977
+ "flags": ""
1978
+ }
1979
+ ],
1980
+ "stopwords": []
1981
+ }
1982
+ ]
1983
+ },
1984
+ {
1985
+ "id": "yandex-access-token",
1986
+ "source": "(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(t1\\.[A-Z0-9a-z_-]+[=]{0,2}\\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1987
+ "flags": "i",
1988
+ "keywords": [
1989
+ "yandex"
1990
+ ]
1991
+ },
1992
+ {
1993
+ "id": "yandex-api-key",
1994
+ "source": "(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(AQVN[A-Za-z0-9_\\-]{35,38})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
1995
+ "flags": "i",
1996
+ "keywords": [
1997
+ "yandex"
1998
+ ]
1999
+ },
2000
+ {
2001
+ "id": "yandex-aws-access-token",
2002
+ "source": "(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(YC[a-zA-Z0-9_\\-]{38})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
2003
+ "flags": "i",
2004
+ "keywords": [
2005
+ "yandex"
2006
+ ]
2007
+ },
2008
+ {
2009
+ "id": "zendesk-secret-key",
2010
+ "source": "(?:zendesk)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)", // gitleaks:allow
2011
+ "flags": "i",
2012
+ "keywords": [
2013
+ "zendesk"
2014
+ ]
2015
+ }
2016
+ ],
2017
+ "excluded": [
2018
+ {
2019
+ "id": "curl-auth-header",
2020
+ "reason": "the key-context pass already redacts auth headers; its unbounded multi-line `.*?` backtracks in JS"
2021
+ },
2022
+ {
2023
+ "id": "curl-auth-user",
2024
+ "reason": "the key-context pass already redacts curl -u/--user; its unbounded multi-line `.*` backtracks in JS"
2025
+ },
2026
+ {
2027
+ "id": "freemius-secret-key",
2028
+ "reason": "path-scoped: gitleaks applies it to matching file names only"
2029
+ },
2030
+ {
2031
+ "id": "generic-api-key",
2032
+ "reason": "entropy on any key-like word; noisy on agent prose, and the scrubber's key-context pass covers sensitive keys"
2033
+ },
2034
+ {
2035
+ "id": "hashicorp-tf-password",
2036
+ "reason": "path-scoped: gitleaks applies it to matching file names only"
2037
+ },
2038
+ {
2039
+ "id": "kubernetes-secret-yaml",
2040
+ "reason": "path-scoped: gitleaks applies it to matching file names only"
2041
+ },
2042
+ {
2043
+ "id": "nuget-config-password",
2044
+ "reason": "path-scoped: gitleaks applies it to matching file names only"
2045
+ },
2046
+ {
2047
+ "id": "pkcs12-file",
2048
+ "reason": "path-scoped: gitleaks applies it to matching file names only"
2049
+ },
2050
+ {
2051
+ "id": "private-key",
2052
+ "reason": "the key-context pass already redacts PEM private-key blocks"
2053
+ }
2054
+ ]
2055
+ };