@desplega.ai/agent-swarm 1.165.0 → 1.167.0

package/dist/cli-wt7ccy4r.js

@@ -0,0 +1,2654 @@
+import {
+  __esm
+} from "./cli-bc05qbss.js";
+
+// src/utils/secret-rules.generated.ts
+var GITLEAKS_RULES;
+var init_secret_rules_generated = __esm(() => {
+  GITLEAKS_RULES = {
+    version: "v8.30.1",
+    commit: "83d9cd684c87d95d656c1458ef04895a7f1cbd8e",
+    globalAllowlist: {
+      regexes: [
+        {
+          source: "^true|false|null$",
+          flags: "i"
+        },
+        {
+          source: "^(?i:a+|b+|c+|d+|e+|f+|g+|h+|i+|j+|k+|l+|m+|n+|o+|p+|q+|r+|s+|t+|u+|v+|w+|x+|y+|z+|\\*+|\\.+)$",
+          flags: ""
+        },
+        {
+          source: "^\\$(?:\\d+|{\\d+})$",
+          flags: ""
+        },
+        {
+          source: "^\\$(?:[A-Z_]+|[a-z_]+)$",
+          flags: ""
+        },
+        {
+          source: "^\\${(?:[A-Z_]+|[a-z_]+)}$",
+          flags: ""
+        },
+        {
+          source: "^\\{\\{[ \\t]*[\\w ().|]+[ \\t]*}}$",
+          flags: ""
+        },
+        {
+          source: `^\\$\\{\\{[ \\t]*(?:(?:env|github|secrets|vars)(?:\\.[A-Za-z]\\w+)+[\\w "'&./=|]*)[ \\t]*}}$`,
+          flags: ""
+        },
+        {
+          source: "^%(?:[A-Z_]+|[a-z_]+)%$",
+          flags: ""
+        },
+        {
+          source: "^%[+\\-# 0]?[bcdeEfFgGoOpqstTUvxX]$",
+          flags: ""
+        },
+        {
+          source: "^\\{\\d{0,2}}$",
+          flags: ""
+        },
+        {
+          source: "^@(?:[A-Z_]+|[a-z_]+)@$",
+          flags: ""
+        },
+        {
+          source: "^/Users/(?i:[a-z0-9]+/[\\w .-/]+$)",
+          flags: ""
+        },
+        {
+          source: "^/(?:bin|etc|home|opt|tmp|usr|var)/[\\w ./-]+$",
+          flags: ""
+        }
+      ],
+      stopwords: [
+        "014df517-39d1-4453-b7b3-9930c563627c",
+        "abcdefghijklmnopqrstuvwxyz"
+      ]
+    },
+    rules: [
+      {
+        id: "1password-secret-key",
+        source: "\\bA3-[A-Z0-9]{6}-(?:(?:[A-Z0-9]{11})|(?:[A-Z0-9]{6}-[A-Z0-9]{5}))-[A-Z0-9]{5}-[A-Z0-9]{5}-[A-Z0-9]{5}\\b",
+        flags: "",
+        keywords: [
+          "a3-"
+        ],
+        entropy: 3.8
+      },
+      {
+        id: "1password-service-account-token",
+        source: "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}",
+        flags: "",
+        keywords: [
+          "ops_"
+        ],
+        entropy: 4
+      },
+      {
+        id: "adafruit-api-key",
+        source: `(?:adafruit)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "adafruit"
+        ]
+      },
+      {
+        id: "adobe-client-id",
+        source: `(?:adobe)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "adobe"
+        ],
+        entropy: 2
+      },
+      {
+        id: "adobe-client-secret",
+        source: `\\b(p8e-(?i:[a-z0-9]{32}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "p8e-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "age-secret-key",
+        source: "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}",
+        flags: "",
+        keywords: [
+          "age-secret-key-1"
+        ]
+      },
+      {
+        id: "airtable-api-key",
+        source: `(?:airtable)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{17})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "airtable"
+        ]
+      },
+      {
+        id: "airtable-personnal-access-token",
+        source: "\\b(pat[A-Za-z0-9]{14}\\.[a-f0-9]{64})\\b",
+        flags: "",
+        keywords: [
+          "airtable"
+        ]
+      },
+      {
+        id: "algolia-api-key",
+        source: `(?:algolia)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "algolia"
+        ]
+      },
+      {
+        id: "alibaba-access-key-id",
+        source: `\\b(LTAI(?i:[a-z0-9]{20}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "ltai"
+        ],
+        entropy: 2
+      },
+      {
+        id: "alibaba-secret-key",
+        source: `(?:alibaba)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "alibaba"
+        ],
+        entropy: 2
+      },
+      {
+        id: "anthropic-admin-api-key",
+        source: `\\b(sk-ant-admin01-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sk-ant-admin01"
+        ]
+      },
+      {
+        id: "anthropic-api-key",
+        source: `\\b(sk-ant-api03-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sk-ant-api03"
+        ]
+      },
+      {
+        id: "artifactory-api-key",
+        source: "\\bAKCp[A-Za-z0-9]{69}\\b",
+        flags: "",
+        keywords: [
+          "akcp"
+        ],
+        entropy: 4.5
+      },
+      {
+        id: "artifactory-reference-token",
+        source: "\\bcmVmd[A-Za-z0-9]{59}\\b",
+        flags: "",
+        keywords: [
+          "cmvmd"
+        ],
+        entropy: 4.5
+      },
+      {
+        id: "asana-client-id",
+        source: `(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "asana"
+        ]
+      },
+      {
+        id: "asana-client-secret",
+        source: `(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "asana"
+        ]
+      },
+      {
+        id: "atlassian-api-token",
+        source: `(?:(?-i:ATLASSIAN|[Aa]tlassian)|(?-i:CONFLUENCE|[Cc]onfluence)|(?-i:JIRA|[Jj]ira))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20}[a-f0-9]{4})(?:[\\x60'"\\s;]|\\\\[nr]|$)|\\b(ATATT3[A-Za-z0-9_\\-=]{186})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "atlassian",
+          "confluence",
+          "jira",
+          "atatt3"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "authress-service-client-access-key",
+        source: `\\b((?:sc|ext|scauth|authress)_(?i:[a-z0-9]{5,30}\\.[a-z0-9]{4,6}\\.(?-i:acc)[_-][a-z0-9-]{10,32}\\.[a-z0-9+/_=-]{30,120}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sc_",
+          "ext_",
+          "scauth_",
+          "authress_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "aws-access-token",
+        source: "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z2-7]{16})\\b",
+        flags: "",
+        keywords: [
+          "a3t",
+          "akia",
+          "asia",
+          "abia",
+          "acca"
+        ],
+        entropy: 3,
+        allowlists: [
+          {
+            target: "secret",
+            regexes: [
+              {
+                source: ".+EXAMPLE$",
+                flags: ""
+              }
+            ],
+            stopwords: []
+          }
+        ]
+      },
+      {
+        id: "aws-amazon-bedrock-api-key-long-lived",
+        source: `\\b(ABSK[A-Za-z0-9+/]{109,269}={0,2})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "absk"
+        ],
+        entropy: 3
+      },
+      {
+        id: "aws-amazon-bedrock-api-key-short-lived",
+        source: "bedrock-api-key-YmVkcm9jay5hbWF6b25hd3MuY29t",
+        flags: "",
+        keywords: [
+          "bedrock-api-key-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "azure-ad-client-secret",
+        source: `(?:^|[\\\\'"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'"\\x60\\s<),])`,
+        flags: "",
+        keywords: [
+          "q~"
+        ],
+        entropy: 3
+      },
+      {
+        id: "beamer-api-token",
+        source: `(?:beamer)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(b_[a-z0-9=_\\-]{44})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "beamer"
+        ]
+      },
+      {
+        id: "bitbucket-client-id",
+        source: `(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "bitbucket"
+        ]
+      },
+      {
+        id: "bitbucket-client-secret",
+        source: `(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "bitbucket"
+        ]
+      },
+      {
+        id: "bittrex-access-key",
+        source: `(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "bittrex"
+        ]
+      },
+      {
+        id: "bittrex-secret-key",
+        source: `(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "bittrex"
+        ]
+      },
+      {
+        id: "cisco-meraki-api-key",
+        source: `(?i:(?:(?-i:[Mm]eraki|MERAKI))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "meraki"
+        ],
+        entropy: 3
+      },
+      {
+        id: "clickhouse-cloud-api-secret-key",
+        source: "\\b(4b1d[A-Za-z0-9]{38})\\b",
+        flags: "",
+        keywords: [
+          "4b1d"
+        ],
+        entropy: 3
+      },
+      {
+        id: "clojars-api-token",
+        source: "CLOJARS_[a-z0-9]{60}",
+        flags: "i",
+        keywords: [
+          "clojars_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "cloudflare-api-key",
+        source: `(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "cloudflare"
+        ],
+        entropy: 2
+      },
+      {
+        id: "cloudflare-global-api-key",
+        source: `(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{37})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "cloudflare"
+        ],
+        entropy: 2
+      },
+      {
+        id: "cloudflare-origin-ca-key",
+        source: `\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "cloudflare",
+          "v1.0-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "codecov-access-token",
+        source: `(?:codecov)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "codecov"
+        ]
+      },
+      {
+        id: "cohere-api-token",
+        source: `(?i:(?:cohere|CO_API_KEY)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-zA-Z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "cohere",
+          "co_api_key"
+        ],
+        entropy: 4
+      },
+      {
+        id: "coinbase-access-token",
+        source: `(?:coinbase)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "coinbase"
+        ]
+      },
+      {
+        id: "confluent-access-token",
+        source: `(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "confluent"
+        ]
+      },
+      {
+        id: "confluent-secret-key",
+        source: `(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "confluent"
+        ]
+      },
+      {
+        id: "contentful-delivery-api-token",
+        source: `(?:contentful)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{43})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "contentful"
+        ]
+      },
+      {
+        id: "databricks-api-token",
+        source: `\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "dapi"
+        ],
+        entropy: 3
+      },
+      {
+        id: "datadog-access-token",
+        source: `(?:datadog)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "datadog"
+        ]
+      },
+      {
+        id: "defined-networking-api-token",
+        source: `(?:dnkey)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "dnkey"
+        ]
+      },
+      {
+        id: "digitalocean-access-token",
+        source: `\\b(doo_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "doo_v1_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "digitalocean-pat",
+        source: `\\b(dop_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "dop_v1_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "digitalocean-refresh-token",
+        source: `\\b(dor_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "dor_v1_"
+        ]
+      },
+      {
+        id: "discord-api-token",
+        source: `(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "discord"
+        ]
+      },
+      {
+        id: "discord-client-id",
+        source: `(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{18})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "discord"
+        ],
+        entropy: 2
+      },
+      {
+        id: "discord-client-secret",
+        source: `(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "discord"
+        ],
+        entropy: 2
+      },
+      {
+        id: "doppler-api-token",
+        source: "dp\\.pt\\.(?i:[a-z0-9]{43})",
+        flags: "",
+        keywords: [
+          "dp.pt."
+        ],
+        entropy: 2
+      },
+      {
+        id: "droneci-access-token",
+        source: `(?:droneci)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "droneci"
+        ]
+      },
+      {
+        id: "dropbox-api-token",
+        source: `(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{15})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "dropbox"
+        ]
+      },
+      {
+        id: "dropbox-long-lived-api-token",
+        source: `(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "dropbox"
+        ]
+      },
+      {
+        id: "dropbox-short-lived-api-token",
+        source: `(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(sl\\.[a-z0-9\\-=_]{135})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "dropbox"
+        ]
+      },
+      {
+        id: "duffel-api-token",
+        source: "duffel_(?:test|live)_(?i:[a-z0-9_\\-=]{43})",
+        flags: "",
+        keywords: [
+          "duffel_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "dynatrace-api-token",
+        source: "dt0c01\\.(?i:[a-z0-9]{24}\\.[a-z0-9]{64})",
+        flags: "",
+        keywords: [
+          "dt0c01."
+        ],
+        entropy: 4
+      },
+      {
+        id: "easypost-api-token",
+        source: "\\bEZAK(?i:[a-z0-9]{54}\\b)",
+        flags: "",
+        keywords: [
+          "ezak"
+        ],
+        entropy: 2
+      },
+      {
+        id: "easypost-test-api-token",
+        source: "\\bEZTK(?i:[a-z0-9]{54}\\b)",
+        flags: "",
+        keywords: [
+          "eztk"
+        ],
+        entropy: 2
+      },
+      {
+        id: "etsy-access-token",
+        source: `(?:(?-i:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "etsy"
+        ],
+        entropy: 3
+      },
+      {
+        id: "facebook-access-token",
+        source: `\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "facebook"
+        ],
+        entropy: 3
+      },
+      {
+        id: "facebook-page-access-token",
+        source: `\\b(EAA[MC](?i:[a-z0-9]{100,}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "eaam",
+          "eaac"
+        ],
+        entropy: 4
+      },
+      {
+        id: "facebook-secret",
+        source: `(?:facebook)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "facebook"
+        ],
+        entropy: 3
+      },
+      {
+        id: "fastly-api-token",
+        source: `(?:fastly)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "fastly"
+        ]
+      },
+      {
+        id: "finicity-api-token",
+        source: `(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "finicity"
+        ]
+      },
+      {
+        id: "finicity-client-secret",
+        source: `(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "finicity"
+        ]
+      },
+      {
+        id: "finnhub-access-token",
+        source: `(?:finnhub)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "finnhub"
+        ]
+      },
+      {
+        id: "flickr-access-token",
+        source: `(?:flickr)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "flickr"
+        ]
+      },
+      {
+        id: "flutterwave-encryption-key",
+        source: "FLWSECK_TEST-(?i:[a-h0-9]{12})",
+        flags: "",
+        keywords: [
+          "flwseck_test"
+        ],
+        entropy: 2
+      },
+      {
+        id: "flutterwave-public-key",
+        source: "FLWPUBK_TEST-(?i:[a-h0-9]{32}-X)",
+        flags: "",
+        keywords: [
+          "flwpubk_test"
+        ],
+        entropy: 2
+      },
+      {
+        id: "flutterwave-secret-key",
+        source: "FLWSECK_TEST-(?i:[a-h0-9]{32}-X)",
+        flags: "",
+        keywords: [
+          "flwseck_test"
+        ],
+        entropy: 2
+      },
+      {
+        id: "flyio-access-token",
+        source: `\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "fo1_",
+          "fm1",
+          "fm2_"
+        ],
+        entropy: 4
+      },
+      {
+        id: "frameio-api-token",
+        source: "fio-u-(?i:[a-z0-9\\-_=]{64})",
+        flags: "",
+        keywords: [
+          "fio-u-"
+        ]
+      },
+      {
+        id: "freshbooks-access-token",
+        source: `(?:freshbooks)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "freshbooks"
+        ]
+      },
+      {
+        id: "gcp-api-key",
+        source: `\\b(AIza[\\w-]{35})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "aiza"
+        ],
+        entropy: 4
+      },
+      {
+        id: "github-app-token",
+        source: "(?:ghu|ghs)_[0-9a-zA-Z]{36}",
+        flags: "",
+        keywords: [
+          "ghu_",
+          "ghs_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "github-fine-grained-pat",
+        source: "github_pat_\\w{82}",
+        flags: "",
+        keywords: [
+          "github_pat_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "github-oauth",
+        source: "gho_[0-9a-zA-Z]{36}",
+        flags: "",
+        keywords: [
+          "gho_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "github-pat",
+        source: "ghp_[0-9a-zA-Z]{36}",
+        flags: "",
+        keywords: [
+          "ghp_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "github-refresh-token",
+        source: "ghr_[0-9a-zA-Z]{36}",
+        flags: "",
+        keywords: [
+          "ghr_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-cicd-job-token",
+        source: "glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}",
+        flags: "",
+        keywords: [
+          "glcbt-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-deploy-token",
+        source: "gldt-[0-9a-zA-Z_\\-]{20}",
+        flags: "",
+        keywords: [
+          "gldt-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-feature-flag-client-token",
+        source: "glffct-[0-9a-zA-Z_\\-]{20}",
+        flags: "",
+        keywords: [
+          "glffct-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-feed-token",
+        source: "glft-[0-9a-zA-Z_\\-]{20}",
+        flags: "",
+        keywords: [
+          "glft-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-incoming-mail-token",
+        source: "glimt-[0-9a-zA-Z_\\-]{25}",
+        flags: "",
+        keywords: [
+          "glimt-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-kubernetes-agent-token",
+        source: "glagent-[0-9a-zA-Z_\\-]{50}",
+        flags: "",
+        keywords: [
+          "glagent-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-oauth-app-secret",
+        source: "gloas-[0-9a-zA-Z_\\-]{64}",
+        flags: "",
+        keywords: [
+          "gloas-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-pat",
+        source: "glpat-[\\w-]{20}",
+        flags: "",
+        keywords: [
+          "glpat-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-pat-routable",
+        source: "\\bglpat-[0-9a-zA-Z_-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b",
+        flags: "",
+        keywords: [
+          "glpat-"
+        ],
+        entropy: 4
+      },
+      {
+        id: "gitlab-ptt",
+        source: "glptt-[0-9a-f]{40}",
+        flags: "",
+        keywords: [
+          "glptt-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-rrt",
+        source: "GR1348941[\\w-]{20}",
+        flags: "",
+        keywords: [
+          "gr1348941"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-runner-authentication-token",
+        source: "glrt-[0-9a-zA-Z_\\-]{20}",
+        flags: "",
+        keywords: [
+          "glrt-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-runner-authentication-token-routable",
+        source: "\\bglrt-t\\d_[0-9a-zA-Z_\\-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b",
+        flags: "",
+        keywords: [
+          "glrt-"
+        ],
+        entropy: 4
+      },
+      {
+        id: "gitlab-scim-token",
+        source: "glsoat-[0-9a-zA-Z_\\-]{20}",
+        flags: "",
+        keywords: [
+          "glsoat-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitlab-session-cookie",
+        source: "_gitlab_session=[0-9a-z]{32}",
+        flags: "",
+        keywords: [
+          "_gitlab_session="
+        ],
+        entropy: 3
+      },
+      {
+        id: "gitter-access-token",
+        source: `(?:gitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "gitter"
+        ]
+      },
+      {
+        id: "gocardless-api-token",
+        source: `(?:gocardless)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(live_[a-z0-9\\-_=]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "live_",
+          "gocardless"
+        ]
+      },
+      {
+        id: "grafana-api-key",
+        source: `\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "eyjrijoi"
+        ],
+        entropy: 3
+      },
+      {
+        id: "grafana-cloud-api-token",
+        source: `\\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "glc_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "grafana-service-account-token",
+        source: `\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "glsa_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "harness-api-key",
+        source: "(?:pat|sat)\\.[a-zA-Z0-9_-]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20}",
+        flags: "",
+        keywords: [
+          "pat.",
+          "sat."
+        ]
+      },
+      {
+        id: "hashicorp-tf-api-token",
+        source: "[a-z0-9]{14}\\.(?-i:atlasv1)\\.[a-z0-9\\-_=]{60,70}",
+        flags: "i",
+        keywords: [
+          "atlasv1"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "heroku-api-key",
+        source: `(?:heroku)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "heroku"
+        ]
+      },
+      {
+        id: "heroku-api-key-v2",
+        source: `\\b((HRKU-AA[0-9a-zA-Z_-]{58}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "hrku-aa"
+        ],
+        entropy: 4
+      },
+      {
+        id: "hubspot-api-key",
+        source: `(?:hubspot)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "hubspot"
+        ]
+      },
+      {
+        id: "huggingface-access-token",
+        source: `\\b(hf_(?i:[a-z]{34}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "hf_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "huggingface-organization-api-token",
+        source: `\\b(api_org_(?i:[a-z]{34}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "api_org_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "infracost-api-token",
+        source: `\\b(ico-[a-zA-Z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "ico-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "intercom-api-key",
+        source: `(?:intercom)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{60})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "intercom"
+        ]
+      },
+      {
+        id: "intra42-client-secret",
+        source: `\\b(s-s4t2(?:ud|af)-(?i:[abcdef0123456789]{64}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "intra",
+          "s-s4t2ud-",
+          "s-s4t2af-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "jfrog-api-key",
+        source: `(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{73})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "jfrog",
+          "artifactory",
+          "bintray",
+          "xray"
+        ]
+      },
+      {
+        id: "jfrog-identity-token",
+        source: `(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "jfrog",
+          "artifactory",
+          "bintray",
+          "xray"
+        ]
+      },
+      {
+        id: "jwt",
+        source: `\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "ey"
+        ],
+        entropy: 3
+      },
+      {
+        id: "jwt-base64",
+        source: "\\bZXlK(?:(?<alg>aGJHY2lPaU)|(?<apu>aGNIVWlPaU)|(?<apv>aGNIWWlPaU)|(?<aud>aGRXUWlPaU)|(?<b64>aU5qUWlP)|(?<crit>amNtbDBJanBi)|(?<cty>amRIa2lPaU)|(?<epk>bGNHc2lPbn)|(?<enc>bGJtTWlPaU)|(?<jku>cWEzVWlPaU)|(?<jwk>cWQyc2lPb)|(?<iss>cGMzTWlPaU)|(?<iv>cGRpSTZJ)|(?<kid>cmFXUWlP)|(?<key_ops>clpYbGZiM0J6SWpwY)|(?<kty>cmRIa2lPaUp)|(?<nonce>dWIyNWpaU0k2)|(?<p2c>d01tTWlP)|(?<p2s>d01uTWlPaU)|(?<ppt>d2NIUWlPaU)|(?<sub>emRXSWlPaU)|(?<svt>emRuUWlP)|(?<tag>MFlXY2lPaU)|(?<typ>MGVYQWlPaUp)|(?<url>MWNtd2l)|(?<use>MWMyVWlPaUp)|(?<ver>MlpYSWlPaU)|(?<version>MlpYSnphVzl1SWpv)|(?<x>NElqb2)|(?<x5c>NE5XTWlP)|(?<x5t>NE5YUWlPaU)|(?<x5ts256>NE5YUWpVekkxTmlJNkl)|(?<x5u>NE5YVWlPaU)|(?<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}",
+        flags: "",
+        keywords: [
+          "zxlk"
+        ],
+        entropy: 2,
+        redactWholeMatch: true
+      },
+      {
+        id: "kraken-access-token",
+        source: `(?:kraken)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "kraken"
+        ]
+      },
+      {
+        id: "kucoin-access-token",
+        source: `(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "kucoin"
+        ]
+      },
+      {
+        id: "kucoin-secret-key",
+        source: `(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "kucoin"
+        ]
+      },
+      {
+        id: "launchdarkly-access-token",
+        source: `(?:launchdarkly)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "launchdarkly"
+        ]
+      },
+      {
+        id: "linear-api-key",
+        source: "lin_api_(?i:[a-z0-9]{40})",
+        flags: "",
+        keywords: [
+          "lin_api_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "linear-client-secret",
+        source: `(?:linear)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "linear"
+        ],
+        entropy: 2
+      },
+      {
+        id: "linkedin-client-id",
+        source: `(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{14})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "linkedin",
+          "linked_in",
+          "linked-in"
+        ],
+        entropy: 2
+      },
+      {
+        id: "linkedin-client-secret",
+        source: `(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "linkedin",
+          "linked_in",
+          "linked-in"
+        ],
+        entropy: 2
+      },
+      {
+        id: "lob-api-key",
+        source: `(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((live|test)_[a-f0-9]{35})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "test_",
+          "live_"
+        ]
+      },
+      {
+        id: "lob-pub-api-key",
+        source: `(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((test|live)_pub_[a-f0-9]{31})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "test_pub",
+          "live_pub",
+          "_pub"
+        ]
+      },
+      {
+        id: "looker-client-id",
+        source: `(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "looker"
+        ]
+      },
+      {
+        id: "looker-client-secret",
+        source: `(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "looker"
+        ]
+      },
+      {
+        id: "mailchimp-api-key",
+        source: `(?:MailchimpSDK.initialize|mailchimp)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32}-us\\d\\d)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mailchimp"
+        ]
+      },
+      {
+        id: "mailgun-private-api-token",
+        source: `(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(key-[a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mailgun"
+        ]
+      },
+      {
+        id: "mailgun-pub-key",
+        source: `(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(pubkey-[a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mailgun"
+        ]
+      },
+      {
+        id: "mailgun-signing-key",
+        source: `(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mailgun"
+        ]
+      },
+      {
+        id: "mapbox-api-token",
+        source: `(?:mapbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mapbox"
+        ]
+      },
+      {
+        id: "mattermost-access-token",
+        source: `(?:mattermost)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{26})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "mattermost"
+        ]
+      },
+      {
+        id: "maxmind-license-key",
+        source: `\\b([A-Za-z0-9]{6}_[A-Za-z0-9]{29}_mmk)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "_mmk"
+        ],
+        entropy: 4
+      },
+      {
+        id: "messagebird-api-token",
+        source: `(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "messagebird",
+          "message-bird",
+          "message_bird"
+        ]
+      },
+      {
+        id: "messagebird-client-id",
+        source: `(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "messagebird",
+          "message-bird",
+          "message_bird"
+        ]
+      },
+      {
+        id: "microsoft-teams-webhook",
+        source: "https://[a-z0-9]+\\.webhook\\.office\\.com/webhookb2/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/IncomingWebhook/[a-z0-9]{32}/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}",
+        flags: "",
+        keywords: [
+          "webhook.office.com",
+          "webhookb2",
+          "incomingwebhook"
+        ]
+      },
+      {
+        id: "netlify-access-token",
+        source: `(?:netlify)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{40,46})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "netlify"
+        ]
+      },
+      {
+        id: "new-relic-browser-api-token",
+        source: `(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRJS-[a-f0-9]{19})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "nrjs-"
+        ]
+      },
+      {
+        id: "new-relic-insert-key",
+        source: `(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRII-[a-z0-9-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "nrii-"
+        ]
+      },
+      {
+        id: "new-relic-user-api-id",
+        source: `(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "new-relic",
+          "newrelic",
+          "new_relic"
+        ]
+      },
+      {
+        id: "new-relic-user-api-key",
+        source: `(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRAK-[a-z0-9]{27})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "nrak"
+        ]
+      },
+      {
+        id: "notion-api-token",
+        source: `\\b(ntn_[0-9]{11}[A-Za-z0-9]{32}[A-Za-z0-9]{3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "ntn_"
+        ],
+        entropy: 4
+      },
+      {
+        id: "npm-access-token",
+        source: `\\b(npm_[a-z0-9]{36})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "npm_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "nytimes-access-token",
+        source: `(?:nytimes|new-york-times,|newyorktimes)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "nytimes",
+          "new-york-times",
+          "newyorktimes"
+        ]
+      },
+      {
+        id: "octopus-deploy-api-key",
+        source: `\\b(API-[A-Z0-9]{26})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "api-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "okta-access-token",
+        source: `(?i:(?:(?-i:[Oo]kta|OKTA))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(00[\\w=\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "okta"
+        ],
+        entropy: 4
+      },
+      {
+        id: "openai-api-key",
+        source: `\\b(sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "t3blbkfj"
+        ],
+        entropy: 3
+      },
+      {
+        id: "openshift-user-token",
+        source: "\\b(sha256~[\\w-]{43})(?:[^\\w-]|$)",
+        flags: "",
+        keywords: [
+          "sha256~"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "perplexity-api-key",
+        source: `\\b(pplx-[a-zA-Z0-9]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$|\\b)`,
+        flags: "",
+        keywords: [
+          "pplx-"
+        ],
+        entropy: 4
+      },
+      {
+        id: "plaid-api-token",
+        source: `(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "plaid"
+        ]
+      },
+      {
+        id: "plaid-client-id",
+        source: `(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "plaid"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "plaid-secret-key",
+        source: `(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "plaid"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "planetscale-api-token",
+        source: `\\b(pscale_tkn_(?i:[\\w=\\.-]{32,64}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "pscale_tkn_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "planetscale-oauth-token",
+        source: `\\b(pscale_oauth_[\\w=\\.-]{32,64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "pscale_oauth_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "planetscale-password",
+        source: `\\b(pscale_pw_[\\w=\\.-]{32,64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "pscale_pw_"
+        ],
+        entropy: 3
+      },
+      {
+        id: "postman-api-token",
+        source: `\\b(PMAK-(?i:[a-f0-9]{24}\\-[a-f0-9]{34}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "pmak-"
+        ],
+        entropy: 3
+      },
+      {
+        id: "prefect-api-token",
+        source: `\\b(pnu_[a-zA-Z0-9]{36})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "pnu_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "privateai-api-token",
+        source: `(?i:(?:private[_-]?ai)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "privateai",
+          "private_ai",
+          "private-ai"
+        ],
+        entropy: 3
+      },
+      {
+        id: "pulumi-api-token",
+        source: `\\b(pul-[a-f0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "pul-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "pypi-upload-token",
+        source: "pypi-AgEIcHlwaS5vcmc[\\w-]{50,1000}",
+        flags: "",
+        keywords: [
+          "pypi-ageichlwas5vcmc"
+        ],
+        entropy: 3
+      },
+      {
+        id: "rapidapi-access-token",
+        source: `(?:rapidapi)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{50})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "rapidapi"
+        ]
+      },
+      {
+        id: "readme-api-token",
+        source: `\\b(rdme_[a-z0-9]{70})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "rdme_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "rubygems-api-token",
+        source: `\\b(rubygems_[a-f0-9]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "rubygems_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "scalingo-api-token",
+        source: `\\b(tk-us-[\\w-]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "tk-us-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "sendbird-access-id",
+        source: `(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sendbird"
+        ]
+      },
+      {
+        id: "sendbird-access-token",
+        source: `(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sendbird"
+        ]
+      },
+      {
+        id: "sendgrid-api-token",
+        source: `\\b(SG\\.(?i:[a-z0-9=_\\-\\.]{66}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sg."
+        ],
+        entropy: 2
+      },
+      {
+        id: "sendinblue-api-token",
+        source: `\\b(xkeysib-[a-f0-9]{64}\\-(?i:[a-z0-9]{16}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "xkeysib-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "sentry-access-token",
+        source: `(?:sentry)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sentry"
+        ],
+        entropy: 3
+      },
+      {
+        id: "sentry-org-token",
+        source: "\\bsntrys_eyJpYXQiO[a-zA-Z0-9+/]{10,200}(?:LCJyZWdpb25fdXJs|InJlZ2lvbl91cmwi|cmVnaW9uX3VybCI6)[a-zA-Z0-9+/]{10,200}={0,2}_[a-zA-Z0-9+/]{43}(?:[^a-zA-Z0-9+/]|$)",
+        flags: "",
+        keywords: [
+          "sntrys_eyjpyxqio"
+        ],
+        entropy: 4.5
+      },
+      {
+        id: "sentry-user-token",
+        source: `\\b(sntryu_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sntryu_"
+        ],
+        entropy: 3.5
+      },
+      {
+        id: "settlemint-application-access-token",
+        source: `\\b(sm_aat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sm_aat"
+        ],
+        entropy: 3
+      },
+      {
+        id: "settlemint-personal-access-token",
+        source: `\\b(sm_pat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sm_pat"
+        ],
+        entropy: 3
+      },
+      {
+        id: "settlemint-service-access-token",
+        source: `\\b(sm_sat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sm_sat"
+        ],
+        entropy: 3
+      },
+      {
+        id: "shippo-api-token",
+        source: `\\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "shippo_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "shopify-access-token",
+        source: "shpat_[a-fA-F0-9]{32}",
+        flags: "",
+        keywords: [
+          "shpat_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "shopify-custom-access-token",
+        source: "shpca_[a-fA-F0-9]{32}",
+        flags: "",
+        keywords: [
+          "shpca_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "shopify-private-app-access-token",
+        source: "shppa_[a-fA-F0-9]{32}",
+        flags: "",
+        keywords: [
+          "shppa_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "shopify-shared-secret",
+        source: "shpss_[a-fA-F0-9]{32}",
+        flags: "",
+        keywords: [
+          "shpss_"
+        ],
+        entropy: 2
+      },
+      {
+        id: "sidekiq-secret",
+        source: `(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "bundle_enterprise__contribsys__com",
+          "bundle_gems__contribsys__com"
+        ]
+      },
+      {
+        id: "sidekiq-sensitive-url",
+        source: "\\bhttps?://([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\\/|\\#|\\?|:]|$)",
+        flags: "i",
+        keywords: [
+          "gems.contribsys.com",
+          "enterprise.contribsys.com"
+        ]
+      },
+      {
+        id: "slack-app-token",
+        source: "xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+",
+        flags: "i",
+        keywords: [
+          "xapp"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-bot-token",
+        source: "xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*",
+        flags: "",
+        keywords: [
+          "xoxb"
+        ],
+        entropy: 3
+      },
+      {
+        id: "slack-config-access-token",
+        source: "xoxe.xox[bp]-\\d-[A-Z0-9]{163,166}",
+        flags: "i",
+        keywords: [
+          "xoxe.xoxb-",
+          "xoxe.xoxp-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-config-refresh-token",
+        source: "xoxe-\\d-[A-Z0-9]{146}",
+        flags: "i",
+        keywords: [
+          "xoxe-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-legacy-bot-token",
+        source: "xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}",
+        flags: "",
+        keywords: [
+          "xoxb"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-legacy-token",
+        source: "xox[os]-\\d+-\\d+-\\d+-[a-fA-F\\d]+",
+        flags: "",
+        keywords: [
+          "xoxo",
+          "xoxs"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-legacy-workspace-token",
+        source: "xox[ar]-(?:\\d-)?[0-9a-zA-Z]{8,48}",
+        flags: "",
+        keywords: [
+          "xoxa",
+          "xoxr"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-user-token",
+        source: "xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}",
+        flags: "",
+        keywords: [
+          "xoxp-",
+          "xoxe-"
+        ],
+        entropy: 2
+      },
+      {
+        id: "slack-webhook-url",
+        source: "(?:https?://)?hooks.slack.com/(?:services|workflows|triggers)/[A-Za-z0-9+/]{43,56}",
+        flags: "",
+        keywords: [
+          "hooks.slack.com"
+        ]
+      },
+      {
+        id: "snyk-api-token",
+        source: `(?:snyk[_.-]?(?:(?:api|oauth)[_.-]?)?(?:key|token))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "snyk"
+        ]
+      },
+      {
+        id: "sonar-api-token",
+        source: `(?:sonar[_.-]?(login|token))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((?:squ_|sqp_|sqa_)?[a-z0-9=_\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sonar"
+        ],
+        secretGroup: 2
+      },
+      {
+        id: "sourcegraph-access-token",
+        source: `\\b(\\b(sgp_(?:[a-fA-F0-9]{16}|local)_[a-fA-F0-9]{40}|sgp_[a-fA-F0-9]{40})\\b)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sgp_",
+          "sourcegraph"
+        ],
+        entropy: 3
+      },
+      {
+        id: "square-access-token",
+        source: `\\b((?:EAAA|sq0atp-)[\\w-]{22,60})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sq0atp-",
+          "eaaa"
+        ],
+        entropy: 2
+      },
+      {
+        id: "squarespace-access-token",
+        source: `(?:squarespace)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "squarespace"
+        ]
+      },
+      {
+        id: "stripe-access-token",
+        source: `\\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sk_test",
+          "sk_live",
+          "sk_prod",
+          "rk_test",
+          "rk_live",
+          "rk_prod"
+        ],
+        entropy: 2
+      },
+      {
+        id: "sumologic-access-id",
+        source: `(?i:(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(su[a-zA-Z0-9]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "sumo"
+        ],
+        entropy: 3
+      },
+      {
+        id: "sumologic-access-token",
+        source: `(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "sumo"
+        ],
+        entropy: 3
+      },
+      {
+        id: "telegram-bot-api-token",
+        source: `(?:telegr)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{5,16}:(?-i:A)[a-z0-9_\\-]{34})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "telegr"
+        ]
+      },
+      {
+        id: "travisci-access-token",
+        source: `(?:travis)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{22})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "travis"
+        ]
+      },
+      {
+        id: "twilio-api-key",
+        source: "SK[0-9a-fA-F]{32}",
+        flags: "",
+        keywords: [
+          "sk"
+        ],
+        entropy: 3
+      },
+      {
+        id: "twitch-api-token",
+        source: `(?:twitch)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitch"
+        ]
+      },
+      {
+        id: "twitter-access-secret",
+        source: `(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{45})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitter"
+        ]
+      },
+      {
+        id: "twitter-access-token",
+        source: `(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitter"
+        ]
+      },
+      {
+        id: "twitter-api-key",
+        source: `(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitter"
+        ]
+      },
+      {
+        id: "twitter-api-secret",
+        source: `(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{50})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitter"
+        ]
+      },
+      {
+        id: "twitter-bearer-token",
+        source: `(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "twitter"
+        ]
+      },
+      {
+        id: "typeform-api-token",
+        source: `(?:typeform)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(tfp_[a-z0-9\\-_\\.=]{59})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "tfp_"
+        ]
+      },
+      {
+        id: "vault-batch-token",
+        source: `\\b(hvb\\.[\\w-]{138,300})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "hvb."
+        ],
+        entropy: 4
+      },
+      {
+        id: "vault-service-token",
+        source: `\\b((?:hvs\\.[\\w-]{90,120}|s\\.(?i:[a-z0-9]{24})))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "",
+        keywords: [
+          "hvs.",
+          "s."
+        ],
+        entropy: 3.5,
+        allowlists: [
+          {
+            target: "secret",
+            regexes: [
+              {
+                source: "^(?:s\\.[A-Za-z]{24})$",
+                flags: ""
+              }
+            ],
+            stopwords: []
+          }
+        ]
+      },
+      {
+        id: "yandex-access-token",
+        source: `(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(t1\\.[A-Z0-9a-z_-]+[=]{0,2}\\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "yandex"
+        ]
+      },
+      {
+        id: "yandex-api-key",
+        source: `(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(AQVN[A-Za-z0-9_\\-]{35,38})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "yandex"
+        ]
+      },
+      {
+        id: "yandex-aws-access-token",
+        source: `(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(YC[a-zA-Z0-9_\\-]{38})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "yandex"
+        ]
+      },
+      {
+        id: "zendesk-secret-key",
+        source: `(?:zendesk)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+        flags: "i",
+        keywords: [
+          "zendesk"
+        ]
+      }
+    ],
+    excluded: [
+      {
+        id: "curl-auth-header",
+        reason: "the key-context pass already redacts auth headers; its unbounded multi-line `.*?` backtracks in JS"
+      },
+      {
+        id: "curl-auth-user",
+        reason: "the key-context pass already redacts curl -u/--user; its unbounded multi-line `.*` backtracks in JS"
+      },
+      {
+        id: "freemius-secret-key",
+        reason: "path-scoped: gitleaks applies it to matching file names only"
+      },
+      {
+        id: "generic-api-key",
+        reason: "entropy on any key-like word; noisy on agent prose, and the scrubber's key-context pass covers sensitive keys"
+      },
+      {
+        id: "hashicorp-tf-password",
+        reason: "path-scoped: gitleaks applies it to matching file names only"
+      },
+      {
+        id: "kubernetes-secret-yaml",
+        reason: "path-scoped: gitleaks applies it to matching file names only"
+      },
+      {
+        id: "nuget-config-password",
+        reason: "path-scoped: gitleaks applies it to matching file names only"
+      },
+      {
+        id: "pkcs12-file",
+        reason: "path-scoped: gitleaks applies it to matching file names only"
+      },
+      {
+        id: "private-key",
+        reason: "the key-context pass already redacts PEM private-key blocks"
+      }
+    ]
+  };
+});
+
+// src/utils/secret-scrubber.ts
+function normalizeKey(key) {
+  if (!/[a-z.-]/.test(key))
+    return key;
+  let out = key;
+  if (/[a-z]/.test(out) && /[A-Z]/.test(out)) {
+    out = out.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2");
+  }
+  return out.replace(/[.-]/g, "_").toUpperCase();
+}
+function escapedForms(value) {
+  const forms = new Set([value, value.replace(/[\\$"`]/g, "\\$&"), value.replaceAll("'", "'\\''")]);
+  for (const form of [...forms])
+    forms.add(JSON.stringify(form).slice(1, -1));
+  return [...forms];
+}
+function quoted(open, close, item, lineItem) {
+  return `${open}(?:(?:${lineItem})*${close}|(?:${item})*${close}${QUOTE_EOL}|(?:${lineItem})*)`;
+}
+function isSensitiveKeyPath(key) {
+  if (isSensitiveKey(key))
+    return true;
+  const dot = key.lastIndexOf(".");
+  return dot >= 0 && isSensitiveKey(key.slice(dot + 1));
+}
+function redactAssignment(match, key, value) {
+  if (!isSensitiveKeyPath(key))
+    return match;
+  let open = "";
+  let close = "";
+  for (const quote of ["\\\"", '"', "'"]) {
+    if (!value.startsWith(quote))
+      continue;
+    open = quote;
+    if (value.length >= quote.length * 2 && value.endsWith(quote))
+      close = quote;
+    break;
+  }
+  const inner = value.slice(open.length, value.length - close.length);
+  if (inner === "" || /^\[REDACTED:[^\]]*\]$/.test(inner))
+    return match;
+  return `${key}=${open}[REDACTED:${key}]${close}`;
+}
+function isPlaceholderValue(value) {
+  return value === "" || value.includes("[REDACTED") || /^[$<*%{]/.test(value) || /^(?:null|none|nil|true|false|yes|no|undefined|~)$/i.test(value) || /^[+-]?\d+(?:\.\d+)?$/.test(value);
+}
+function looksLikeCode(value) {
+  return /[()[\]{};,]/.test(value) || /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) || /^[A-Za-z_]+$/.test(value) && value.length < 16;
+}
+function redactLineValue(match, lead, key, sep, value) {
+  if (!isSensitiveKeyPath(key))
+    return match;
+  const quote = /^(?:\\"|"|')/.exec(value)?.[0] ?? "";
+  const inner = quote ? value.slice(quote.length, -quote.length) : value;
+  if (isPlaceholderValue(inner) || !quote && looksLikeCode(inner))
+    return match;
+  return `${lead}${key}${sep}${quote}[REDACTED:${key}]${quote}`;
+}
+function jsonStringEnd(text, start, escaped) {
+  let innerEscape = false;
+  for (let i = start;i < text.length; i++) {
+    let ch = text[i];
+    if (ch === "\r" || ch === `
+`)
+      return -(i + 1);
+    const at = i;
+    if (escaped) {
+      if (ch === '"')
+        return -(i + 1);
+      if (ch === "\\") {
+        ch = text[++i];
+        if (ch === undefined || ch === "\r" || ch === `
+`)
+          return -(i + 1);
+        if (ch !== "\\" && ch !== '"')
+          ch = "x";
+      }
+    }
+    if (innerEscape)
+      innerEscape = false;
+    else if (ch === "\\")
+      innerEscape = true;
+    else if (ch === '"')
+      return at;
+  }
+  return -(text.length + 1);
+}
+function redactJsonValues(text, re, escaped) {
+  let out = "";
+  let last = 0;
+  re.lastIndex = 0;
+  for (let m = re.exec(text);m; m = re.exec(text)) {
+    const key = m[1] ?? "";
+    if (!isSensitiveKeyPath(key))
+      continue;
+    const valueStart = m.index + m[0].length;
+    const end = jsonStringEnd(text, valueStart, escaped);
+    if (end < 0) {
+      re.lastIndex = Math.max(re.lastIndex, -end - 2);
+      continue;
+    }
+    re.lastIndex = end + 1;
+    if (isPlaceholderValue(text.slice(valueStart, end)))
+      continue;
+    out += `${text.slice(last, valueStart)}[REDACTED:${key}]`;
+    last = end;
+  }
+  return last === 0 ? text : out + text.slice(last);
+}
+function redactHeader(match, name, sep, value) {
+  if (/^[A-Za-z_]+$/.test(value) && value.length < 16)
+    return match;
+  return `${name}${sep}[REDACTED:${name.toLowerCase().replace(/-/g, "_")}]`;
+}
+function scrubKeyContext(text) {
+  let out = text;
+  if (out.includes("PRIVATE KEY")) {
+    out = out.replace(PEM_RE, (match, begin, body, end) => body === PEM_MARKER ? match : `${begin}${PEM_MARKER}${end}`);
+  }
+  if (/authorization|x-api-key/i.test(out)) {
+    out = out.replace(AUTH_HEADER_RE, redactHeader).replace(API_KEY_HEADER_RE, redactHeader);
+  }
+  if (out.includes("--password")) {
+    out = out.replace(CURL_PASSWORD_RE, (match, flag, pw) => isPlaceholderValue(pw) ? match : `${flag}[REDACTED:curl_password]`);
+  }
+  if (/(?:^|\s)-(?:u|U|-user|-proxy-user)\b/.test(out)) {
+    out = out.replace(CURL_USER_RE, (match, prefix, user, pw) => isPlaceholderValue(pw) || pw === user ? match : `${prefix}[REDACTED:curl_password]`);
+  }
+  if (out.includes("://")) {
+    out = out.replace(URL_USERINFO_RE, (match, prefix, pw) => isPlaceholderValue(pw) ? match : `${prefix}[REDACTED:url_password]`);
+  }
+  if (out.includes('"')) {
+    out = redactJsonValues(out, JSON_KEY_RE, false);
+    if (out.includes("\\\""))
+      out = redactJsonValues(out, ESCAPED_JSON_KEY_RE, true);
+  }
+  if (out.includes(":"))
+    out = out.replace(YAML_KEY_RE, redactLineValue);
+  return out;
+}
+function getGitleaks() {
+  if (gitleaks)
+    return gitleaks;
+  const compile = (r) => new RegExp(r.source, r.flags);
+  const rules = GITLEAKS_RULES.rules.map((rule) => ({
+    id: rule.id,
+    re: new RegExp(rule.source, `${rule.flags}gd`),
+    keywords: rule.keywords,
+    entropy: rule.entropy,
+    secretGroup: rule.secretGroup,
+    redactWholeMatch: rule.redactWholeMatch,
+    allowlists: (rule.allowlists ?? []).map((list) => ({
+      target: list.target,
+      res: list.regexes.map(compile),
+      stopwords: list.stopwords
+    }))
+  }));
+  const keywords = [...new Set(rules.flatMap((rule) => rule.keywords))].sort((a, b) => b.length - a.length);
+  gitleaks = {
+    keywordRe: new RegExp(keywords.map(escapeRegExp).join("|"), "gi"),
+    implied: new Map(keywords.map((k) => [k, keywords.filter((other) => k.includes(other))])),
+    rules,
+    global: {
+      target: "secret",
+      res: GITLEAKS_RULES.globalAllowlist.regexes.map(compile),
+      stopwords: GITLEAKS_RULES.globalAllowlist.stopwords
+    }
+  };
+  return gitleaks;
+}
+function shannonEntropy(value) {
+  if (value.length === 0)
+    return 0;
+  const counts = new Map;
+  for (const ch of value)
+    counts.set(ch, (counts.get(ch) ?? 0) + 1);
+  let entropy = 0;
+  for (const count of counts.values()) {
+    const p = count / value.length;
+    entropy -= p * Math.log2(p);
+  }
+  return entropy;
+}
+function allowedBy(list, secret, match) {
+  const target = list.target === "match" ? match : secret;
+  if (list.res.some((re) => re.test(target)))
+    return true;
+  if (list.stopwords.length === 0)
+    return false;
+  const lower = secret.toLowerCase();
+  return list.stopwords.some((word) => lower.includes(word));
+}
+function applyGitleaksRule(text, rule, global) {
+  const { re } = rule;
+  re.lastIndex = 0;
+  let out = "";
+  let last = 0;
+  let changed = false;
+  for (let m = re.exec(text);m !== null; m = re.exec(text)) {
+    if (m[0].length === 0) {
+      re.lastIndex++;
+      continue;
+    }
+    let group = 0;
+    if (rule.secretGroup && m[rule.secretGroup])
+      group = rule.secretGroup;
+    else if (!rule.redactWholeMatch && !rule.secretGroup) {
+      group = m.findIndex((g, i) => i > 0 && !!g);
+      if (group === -1)
+        group = 0;
+    }
+    const secret = m[group];
+    const span = m.indices?.[group];
+    if (!span)
+      continue;
+    re.lastIndex = Math.max(span[1], m.index + 1);
+    if (rule.entropy && shannonEntropy(secret) <= rule.entropy)
+      continue;
+    if (allowedBy(global, secret, m[0]))
+      continue;
+    if (rule.allowlists.some((list) => allowedBy(list, secret, m[0])))
+      continue;
+    out += `${text.slice(last, span[0])}[REDACTED:gitleaks:${rule.id}]`;
+    last = span[1];
+    changed = true;
+  }
+  return changed ? out + text.slice(last) : text;
+}
+function scrubGitleaks(text) {
+  if (!gitleaksPassEnabled)
+    return text;
+  const { keywordRe, implied, rules, global } = getGitleaks();
+  const present = new Set;
+  keywordRe.lastIndex = 0;
+  for (let m = keywordRe.exec(text);m !== null; m = keywordRe.exec(text)) {
+    for (const keyword of implied.get(m[0].toLowerCase()) ?? [])
+      present.add(keyword);
+    keywordRe.lastIndex = m.index + 1;
+  }
+  if (present.size === 0)
+    return text;
+  let out = text;
+  for (const rule of rules) {
+    if (rule.keywords.some((keyword) => present.has(keyword))) {
+      out = applyGitleaksRule(out, rule, global);
+    }
+  }
+  return out;
+}
+function snapshotEnv() {
+  const parts = [];
+  for (const key of Object.keys(process.env).sort()) {
+    if (!isSensitiveKey(key))
+      continue;
+    const v = process.env[key];
+    if (!v)
+      continue;
+    parts.push(`${key}=${v.length}`);
+  }
+  return parts.join("|");
+}
+function isSensitiveKey(key) {
+  const cached = sensitiveKeyVerdicts.get(key);
+  if (cached !== undefined)
+    return cached;
+  const verdict = computeIsSensitiveKey(key);
+  if (sensitiveKeyVerdicts.size >= MAX_KEY_VERDICTS)
+    sensitiveKeyVerdicts.clear();
+  sensitiveKeyVerdicts.set(key, verdict);
+  return verdict;
+}
+function computeIsSensitiveKey(key) {
+  const normalized = normalizeKey(key);
+  if (NON_SECRET_EXCEPTIONS.has(normalized))
+    return false;
+  if (SENSITIVE_KEY_EXACT.has(normalized))
+    return true;
+  if (registeredSensitiveKeys.has(key) || registeredSensitiveKeys.has(normalized))
+    return true;
+  for (const suffix of SENSITIVE_KEY_SUFFIXES) {
+    if (normalized.endsWith(suffix))
+      return true;
+  }
+  if (/^codex_oauth(_\d+)?$/.test(key))
+    return true;
+  return false;
+}
+function buildCache() {
+  const entries = [];
+  const seen = new Set;
+  for (const [key, rawValue] of Object.entries(process.env)) {
+    if (!rawValue)
+      continue;
+    if (!isSensitiveKey(key))
+      continue;
+    const candidates = rawValue.includes(",") ? [rawValue, ...rawValue.split(",").map((s) => s.trim())] : [rawValue];
+    for (const candidate of candidates) {
+      if (!candidate)
+        continue;
+      if (candidate.length < MIN_VALUE_LENGTH)
+        continue;
+      for (const form of escapedForms(candidate)) {
+        if (seen.has(form))
+          continue;
+        seen.add(form);
+        entries.push({ value: form, name: key });
+      }
+    }
+  }
+  entries.sort((a, b) => b.value.length - a.value.length);
+  return { entries, snapshotKey: snapshotEnv() };
+}
+function getCache() {
+  const current = snapshotEnv();
+  if (!cache || cache.snapshotKey !== current) {
+    cache = buildCache();
+  }
+  return cache;
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function buildMatcher(envCache) {
+  const names = new Map(volatileSecrets);
+  for (const { value, name } of envCache.entries)
+    names.set(value, name);
+  const values = [...names.keys()].sort((a, b) => b.length - a.length);
+  let re = null;
+  if (values.length > 0) {
+    try {
+      re = new RegExp(values.map(escapeRegExp).join("|"), "g");
+    } catch {
+      re = null;
+    }
+  }
+  return {
+    re,
+    names,
+    fallback: re ? [] : values,
+    builtFor: envCache,
+    builtAtGeneration: volatileGeneration
+  };
+}
+function getMatcher() {
+  const envCache = getCache();
+  if (!matcher || matcher.builtFor !== envCache || matcher.builtAtGeneration !== volatileGeneration) {
+    matcher = buildMatcher(envCache);
+  }
+  return matcher;
+}
+function scrubSecrets(text) {
+  if (text == null)
+    return "";
+  if (text.length === 0)
+    return text;
+  let out = text;
+  const { re, names, fallback } = getMatcher();
+  if (re) {
+    re.lastIndex = 0;
+    out = out.replace(re, (match) => `[REDACTED:${names.get(match) ?? "secret"}]`);
+  } else {
+    for (const value of fallback) {
+      if (out.includes(value))
+        out = out.split(value).join(`[REDACTED:${names.get(value)}]`);
+    }
+  }
+  for (const { name, re: re2 } of TOKEN_REGEXES) {
+    out = out.replace(re2, `[REDACTED:${name}]`);
+  }
+  out = out.replace(ASSIGNMENT_RE, redactAssignment);
+  if (out.includes("="))
+    out = out.replace(INI_ASSIGNMENT_RE, redactLineValue);
+  out = scrubKeyContext(out);
+  return scrubGitleaks(out);
+}
+function findSecretsIn(text) {
+  const knownValues = new Set;
+  const gitleaksRules = new Set;
+  if (text.length === 0)
+    return { knownValues: [], gitleaksRules: [] };
+  const { re, names, fallback } = getMatcher();
+  if (re) {
+    re.lastIndex = 0;
+    for (let m = re.exec(text);m !== null; m = re.exec(text)) {
+      knownValues.add(names.get(m[0]) ?? "secret");
+    }
+  } else {
+    for (const value of fallback) {
+      if (text.includes(value))
+        knownValues.add(names.get(value) ?? "secret");
+    }
+  }
+  if (gitleaksPassEnabled) {
+    const { keywordRe, implied, rules, global } = getGitleaks();
+    const present = new Set;
+    keywordRe.lastIndex = 0;
+    for (let m = keywordRe.exec(text);m !== null; m = keywordRe.exec(text)) {
+      for (const keyword of implied.get(m[0].toLowerCase()) ?? [])
+        present.add(keyword);
+      keywordRe.lastIndex = m.index + 1;
+    }
+    for (const rule of rules) {
+      if (!rule.keywords.some((keyword) => present.has(keyword)))
+        continue;
+      if (applyGitleaksRule(text, rule, global) !== text)
+        gitleaksRules.add(rule.id);
+    }
+  }
+  return { knownValues: [...knownValues].sort(), gitleaksRules: [...gitleaksRules].sort() };
+}
+function scrubObject(value, seen = new WeakSet) {
+  if (value === null || value === undefined)
+    return value;
+  if (typeof value === "string")
+    return scrubSecrets(value);
+  if (typeof value !== "object")
+    return value;
+  if (seen.has(value)) {
+    return "[Circular]";
+  }
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map((item) => scrubObject(item, seen));
+  }
+  const out = {};
+  for (const [key, child] of Object.entries(value)) {
+    out[key] = scrubObject(child, seen);
+  }
+  return out;
+}
+function refreshSecretScrubberCache() {
+  cache = null;
+}
+function registerVolatileSecret(value, name) {
+  if (value.length < MIN_VALUE_LENGTH)
+    return;
+  for (const form of escapedForms(value)) {
+    if (volatileSecrets.get(form) === name)
+      continue;
+    volatileSecrets.set(form, name);
+    volatileGeneration++;
+  }
+}
+function registerSensitiveKeyName(key) {
+  if (registeredSensitiveKeys.has(key))
+    return;
+  registeredSensitiveKeys.add(key);
+  sensitiveKeyVerdicts.clear();
+  cache = null;
+}
+var SCRUBBER_RULES_VERSION = 6, SENSITIVE_KEY_EXACT, SENSITIVE_KEY_SUFFIXES, NON_SECRET_EXCEPTIONS, MIN_VALUE_LENGTH = 12, QUOTE_EOL, JSON_DQ, RAW_DQ, SQ, BARE, ASSIGNMENT_RE, LINE_START, LINE_END, LINE_VALUE, INI_ASSIGNMENT_RE, YAML_KEY_RE, JSON_KEY, JSON_KEY_RE, ESCAPED_JSON_KEY_RE, TOKEN68, HEADER_SEP, AUTH_HEADER_RE, API_KEY_HEADER_RE, CURL_PASSWORD_RE, CURL_USER_RE, URL_USERINFO_RE, PEM_RE, PEM_MARKER = "[REDACTED:private_key]", TB, TOKEN_REGEXES, gitleaks = null, gitleaksPassEnabled = true, cache = null, matcher = null, volatileSecrets, volatileGeneration = 0, registeredSensitiveKeys, sensitiveKeyVerdicts, MAX_KEY_VERDICTS = 4096;
+var init_secret_scrubber = __esm(() => {
+  init_secret_rules_generated();
+  SENSITIVE_KEY_EXACT = new Set([
+    "API_KEY",
+    "SECRETS_ENCRYPTION_KEY",
+    "GITHUB_TOKEN",
+    "GITLAB_TOKEN",
+    "AZURE_DEVOPS_TOKEN",
+    "AZURE_DEVOPS_EXT_PAT",
+    "CLAUDE_CODE_OAUTH_TOKEN",
+    "ANTHROPIC_API_KEY",
+    "OPENAI_API_KEY",
+    "OPENROUTER_API_KEY",
+    "SLACK_BOT_TOKEN",
+    "SLACK_SIGNING_SECRET",
+    "SLACK_CLIENT_SECRET",
+    "SLACK_USER_TOKEN",
+    "SLACK_APP_TOKEN",
+    "SENTRY_AUTH_TOKEN",
+    "VERCEL_TOKEN",
+    "RESEND_API_KEY",
+    "AGENTMAIL_API_KEY",
+    "API_AGENT_FS_API_KEY",
+    "AGENT_FS_API_KEY",
+    "BUSINESS_USE_API_KEY",
+    "QA_USE_API_KEY",
+    "DOCS_API_KEY",
+    "DOKPLOY_API_KEY",
+    "DEVTO_API_KEY",
+    "ELEVENLABS_API_KEY",
+    "ENGINY_API_KEY",
+    "OPENFORT_API_KEY",
+    "OPENFORT_TEST_SECRET_KEY",
+    "OPENFORT_TEST_WALLET_PRIVATE_KEY",
+    "OPENFORT_WALLET_SECRET",
+    "TURSO_API_TOKEN",
+    "TURSO_DB_TOKEN",
+    "TURSO_X_POSTS_DB_TOKEN",
+    "BROWSER_USE_API_KEY",
+    "PLAUSIBLE_API_KEY",
+    "IMGFLIP_PASSWORD",
+    "GSC_SERVICE_ACCOUNT_BASE64",
+    "LINEAR_API_KEY",
+    "LINEAR_OAUTH_CLIENT_SECRET",
+    "OTEL_EXPORTER_OTLP_HEADERS",
+    "SIGNOZ_INGESTION_KEY",
+    "SECRET",
+    "PASSWORD",
+    "PASSWD",
+    "TOKEN",
+    "PRIVATE_KEY",
+    "APIKEY",
+    "ACCESS_TOKEN",
+    "REFRESH_TOKEN",
+    "CLIENT_SECRET",
+    "AUTHORIZATION",
+    "CREDENTIALS"
+  ]);
+  SENSITIVE_KEY_SUFFIXES = [
+    "_API_KEY",
+    "_TOKEN",
+    "_SECRET",
+    "_PASSWORD",
+    "_PASS",
+    "_PRIVATE_KEY",
+    "_ACCESS_KEY",
+    "_SECRET_KEY",
+    "_APIKEY",
+    "_AUTH_HEADER",
+    "_CREDENTIALS",
+    "_DSN",
+    "_DEPLOY_KEY"
+  ];
+  NON_SECRET_EXCEPTIONS = new Set([
+    "MCP_BASE_URL",
+    "APP_URL",
+    "API_URL",
+    "TEMPLATE_REGISTRY_URL",
+    "GOOGLE_APPLICATION_CREDENTIALS",
+    "PAGE_TOKEN",
+    "NEXT_PAGE_TOKEN",
+    "PREV_PAGE_TOKEN",
+    "NEXT_TOKEN",
+    "CONTINUATION_TOKEN",
+    "SYNC_TOKEN",
+    "NEXT_SYNC_TOKEN"
+  ]);
+  QUOTE_EOL = String.raw`(?=$|[\r\n]|\\[rn]|")`;
+  JSON_DQ = quoted(String.raw`\\"(?!\$)`, String.raw`\\"`, String.raw`\\\\(?:\\\\|\\"|[^\\"])|\\[^\\"]|[^"\\]`, String.raw`\\\\(?:\\\\|\\"|[^\\"\r\n])|\\[^\\"nr\r\n]|[^"\\\r\n]`);
+  RAW_DQ = quoted(`"(?!\\$)`, `"`, String.raw`\\[\s\S]|[^"\\]`, String.raw`\\[^\r\n]|[^"\\\r\n]`);
+  SQ = quoted(`'`, `'`, String.raw`[^'\\]|'\\\\?''|\\[\s\S]`, String.raw`[^'\\\r\n]|'\\\\?''|\\[^nr\r\n]`);
+  BARE = String.raw`(?!\$)(?:\\[^nrtu"\s]|[^\s"'\\])+`;
+  ASSIGNMENT_RE = new RegExp(String.raw`(?:(?<=\\[nrt])|(?<![\w\\.]))([A-Za-z_][A-Za-z0-9_.]*)=(?!=)(${JSON_DQ}|${RAW_DQ}|${SQ}|${BARE})`, "g");
+  LINE_START = String.raw`(?:^|(?<=\\[nr]))`;
+  LINE_END = String.raw`(?=[ \t]*(?:$|\r|\\[nr]|"))`;
+  LINE_VALUE = String.raw`"[^"\\\r\n]*"|'[^'\\\r\n]*'|\\"[^"\\\r\n]*\\"|[^\s"'\\]+`;
+  INI_ASSIGNMENT_RE = new RegExp(String.raw`${LINE_START}([ \t]*)([A-Za-z_][\w.]*)([ \t]*=[ \t]*)(${LINE_VALUE})${LINE_END}`, "gm");
+  YAML_KEY_RE = new RegExp(String.raw`${LINE_START}([ \t]*(?:-[ \t]+)?)([A-Za-z_][\w.-]*)([ \t]*:[ \t]+)(${LINE_VALUE})${LINE_END}`, "gm");
+  JSON_KEY = String.raw`[A-Za-z_][\w.-]{0,63}`;
+  JSON_KEY_RE = new RegExp(String.raw`"(${JSON_KEY})"[ \t]*:[ \t]*"`, "g");
+  ESCAPED_JSON_KEY_RE = new RegExp(String.raw`\\"(${JSON_KEY})\\"[ \t]*:[ \t]*\\"`, "g");
+  TOKEN68 = String.raw`[A-Za-z0-9._~+/=-]{8,}(?![A-Za-z0-9._~+/=\[-])`;
+  HEADER_SEP = String.raw`\\?["']?[ \t]*:[ \t]*\\?["']?`;
+  AUTH_HEADER_RE = new RegExp(String.raw`(?<![\w-])((?:proxy-)?authorization)(${HEADER_SEP}(?:bearer|basic|token|bot)[ \t]+)(${TOKEN68})`, "gi");
+  API_KEY_HEADER_RE = new RegExp(String.raw`(?<![\w-])(x-api-key)(${HEADER_SEP})(${TOKEN68})`, "gi");
+  CURL_PASSWORD_RE = /(?<=^|[\s'"])(--password(?:[ \t]+|=)\\?["']?)([^\s"'\\]+)/g;
+  CURL_USER_RE = /(?<=^|[\s'"])((?:-u|-U|--user|--proxy-user)(?:[ \t]+|=)\\?["']?([^\s"'\\:@]+):)([^\s"'\\@]+)/g;
+  URL_USERINFO_RE = /(?<![a-z0-9+.-])([a-z][a-z0-9+.-]{0,31}:\/\/[^\s/:@?#"'\\]+:)([^\s/@?#"'\\]+)(?=@)/gi;
+  PEM_RE = /(-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY(?: BLOCK)?-----)((?:(?!-----)[\s\S]){1,16384})(-----END [A-Z0-9 ]{0,32}PRIVATE KEY(?: BLOCK)?-----)/g;
+  TB = String.raw`(?:(?<=\\[nrtbfu0])|(?<!\w))`;
+  TOKEN_REGEXES = [
+    { name: "github_pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
+    { name: "github_token", re: new RegExp(String.raw`${TB}gh[pousr]_[A-Za-z0-9]{20,}\b`, "g") },
+    { name: "acp_session_token", re: new RegExp(String.raw`${TB}aseph_[A-Za-z0-9]{20,}\b`, "g") },
+    { name: "gitlab_pat", re: new RegExp(String.raw`${TB}glpat-[A-Za-z0-9_-]{20,}(?!\w)`, "g") },
+    {
+      name: "azure_devops_pat",
+      re: new RegExp(String.raw`${TB}[A-Za-z0-9]{76}AZDO[A-Za-z0-9]{4}\b`, "g")
+    },
+    { name: "anthropic_key", re: new RegExp(String.raw`${TB}sk-ant-[A-Za-z0-9_-]{20,}(?!\w)`, "g") },
+    {
+      name: "openai_proj_key",
+      re: new RegExp(String.raw`${TB}sk-proj-[A-Za-z0-9_-]{20,}(?!\w)`, "g")
+    },
+    {
+      name: "openrouter_key",
+      re: new RegExp(String.raw`${TB}sk-or-(?:v1-)?[A-Za-z0-9_-]{20,}(?!\w)`, "g")
+    },
+    { name: "sk_key", re: new RegExp(String.raw`${TB}sk-[A-Za-z0-9]{20,}\b`, "g") },
+    {
+      name: "slack_token",
+      re: new RegExp(String.raw`${TB}xox[baprseo]-[A-Za-z0-9-]{10,}(?!\w)`, "g")
+    },
+    { name: "aws_access_key", re: new RegExp(String.raw`${TB}AKIA[0-9A-Z]{16}\b`, "g") },
+    { name: "google_api_key", re: new RegExp(String.raw`${TB}AIza[A-Za-z0-9_-]{35}(?!\w)`, "g") },
+    {
+      name: "jwt",
+      re: new RegExp(String.raw`${TB}eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?!\w)`, "g")
+    },
+    {
+      name: "signoz_ingestion_key",
+      re: new RegExp(String.raw`${TB}signoz-ingestion-key=[A-Za-z0-9._~+/-]{20,}={0,2}\b`, "g")
+    },
+    {
+      name: "linear_oauth",
+      re: new RegExp(String.raw`${TB}lin_oauth_[A-Za-z0-9_-]{10,}(?!\w)`, "g")
+    },
+    { name: "linear_api", re: new RegExp(String.raw`${TB}lin_api_[A-Za-z0-9_-]{10,}(?!\w)`, "g") },
+    { name: "npm_token", re: new RegExp(String.raw`${TB}npm_[A-Za-z0-9_-]{20,}(?!\w)`, "g") },
+    {
+      name: "atlassian_token",
+      re: new RegExp(String.raw`${TB}ATATT[A-Za-z0-9_=-]{20,}(?![\w=])`, "g")
+    },
+    { name: "mcp_token", re: new RegExp(String.raw`${TB}aswt_[A-Za-z0-9]{20,}\b`, "g") },
+    {
+      name: "resend_key",
+      re: new RegExp(String.raw`${TB}re_(?=[A-Za-z0-9_]*[0-9])(?=[A-Za-z0-9_]*[A-Z])[A-Za-z0-9]{8}_[A-Za-z0-9]{24}\b`, "g")
+    },
+    { name: "google_oauth_token", re: new RegExp(String.raw`${TB}ya29\.[A-Za-z0-9_-]{20,}`, "g") },
+    { name: "google_refresh_token", re: /(?<![\w/])1\/\/0[A-Za-z0-9_-]{30,}/g },
+    {
+      name: "discord_webhook",
+      re: /https?:\/\/(?:ptb\.|canary\.)?discord(?:app)?\.com\/api\/webhooks\/\d+\/[A-Za-z0-9_-]{50,}/g
+    },
+    { name: "xai_key", re: new RegExp(String.raw`${TB}xai-[A-Za-z0-9]{40,}\b`, "g") },
+    {
+      name: "telegram_bot_token",
+      re: new RegExp(String.raw`${TB}\d{8,10}:AA[A-Za-z0-9_-]{33}(?![A-Za-z0-9_-])`, "g")
+    }
+  ];
+  volatileSecrets = new Map;
+  registeredSensitiveKeys = new Set;
+  sensitiveKeyVerdicts = new Map;
+});
+
+export { SCRUBBER_RULES_VERSION, isSensitiveKey, scrubSecrets, findSecretsIn, scrubObject, refreshSecretScrubberCache, registerVolatileSecret, registerSensitiveKeyName, init_secret_scrubber };