@link-foundation/sensitive-data-sanitizer 0.0.0-stage → 0.11.31

package/src/vendor/gitleaks/rules-0.json

@@ -0,0 +1,268 @@
+[
+  {
+    "id": "1password-secret-key",
+    "description": "Uncovered a possible 1Password secret key, potentially compromising access to secrets in vaults.",
+    "regex": "\\bA3-[A-Z0-9]{6}-(?:(?:[A-Z0-9]{11})|(?:[A-Z0-9]{6}-[A-Z0-9]{5}))-[A-Z0-9]{5}-[A-Z0-9]{5}-[A-Z0-9]{5}\\b",
+    "entropy": 3.8,
+    "keywords": ["a3-"]
+  },
+  {
+    "id": "1password-service-account-token",
+    "description": "Uncovered a possible 1Password service account token, potentially compromising access to secrets in vaults.",
+    "regex": "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}",
+    "entropy": 4,
+    "keywords": ["ops_"]
+  },
+  {
+    "id": "adafruit-api-key",
+    "description": "Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:adafruit)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["adafruit"]
+  },
+  {
+    "id": "adobe-client-id",
+    "description": "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:adobe)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["adobe"]
+  },
+  {
+    "id": "adobe-client-secret",
+    "description": "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation.",
+    "regex": "\\b(p8e-(?i)[a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["p8e-"]
+  },
+  {
+    "id": "age-secret-key",
+    "description": "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information.",
+    "regex": "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}",
+    "keywords": ["age-secret-key-1"]
+  },
+  {
+    "id": "airtable-api-key",
+    "description": "Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:airtable)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{17})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["airtable"]
+  },
+  {
+    "id": "airtable-personnal-access-token",
+    "description": "Uncovered a possible Airtable Personal AccessToken, potentially compromising database access and leading to data leakage or alteration.",
+    "regex": "\\b(pat[[:alnum:]]{14}\\.[a-f0-9]{64})\\b",
+    "keywords": ["airtable"]
+  },
+  {
+    "id": "algolia-api-key",
+    "description": "Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:algolia)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["algolia"]
+  },
+  {
+    "id": "alibaba-access-key-id",
+    "description": "Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise.",
+    "regex": "\\b(LTAI(?i)[a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["ltai"]
+  },
+  {
+    "id": "alibaba-secret-key",
+    "description": "Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:alibaba)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["alibaba"]
+  },
+  {
+    "id": "anthropic-admin-api-key",
+    "description": "Detected an Anthropic Admin API Key, risking unauthorized access to administrative functions and sensitive AI model configurations.",
+    "regex": "\\b(sk-ant-admin01-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["sk-ant-admin01"]
+  },
+  {
+    "id": "anthropic-api-key",
+    "description": "Identified an Anthropic API Key, which may compromise AI assistant integrations and expose sensitive data to unauthorized access.",
+    "regex": "\\b(sk-ant-api03-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["sk-ant-api03"]
+  },
+  {
+    "id": "artifactory-api-key",
+    "description": "Detected an Artifactory api key, posing a risk unauthorized access to the central repository.",
+    "regex": "\\bAKCp[A-Za-z0-9]{69}\\b",
+    "entropy": 4.5,
+    "keywords": ["akcp"]
+  },
+  {
+    "id": "artifactory-reference-token",
+    "description": "Detected an Artifactory reference token, posing a risk of impersonation and unauthorized access to the central repository.",
+    "regex": "\\bcmVmd[A-Za-z0-9]{59}\\b",
+    "entropy": 4.5,
+    "keywords": ["cmvmd"]
+  },
+  {
+    "id": "asana-client-id",
+    "description": "Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["asana"]
+  },
+  {
+    "id": "asana-client-secret",
+    "description": "Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["asana"]
+  },
+  {
+    "id": "atlassian-api-token",
+    "description": "Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:(?-i:ATLASSIAN|[Aa]tlassian)|(?-i:CONFLUENCE|[Cc]onfluence)|(?-i:JIRA|[Jj]ira))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20}[a-f0-9]{4})(?:[\\x60'\"\\s;]|\\\\[nr]|$)|\\b(ATATT3[A-Za-z0-9_\\-=]{186})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 3.5,
+    "keywords": ["atlassian", "confluence", "jira", "atatt3"]
+  },
+  {
+    "id": "authress-service-client-access-key",
+    "description": "Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data.",
+    "regex": "\\b((?:sc|ext|scauth|authress)_(?i)[a-z0-9]{5,30}\\.[a-z0-9]{4,6}\\.(?-i:acc)[_-][a-z0-9-]{10,32}\\.[a-z0-9+/_=-]{30,120})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["sc_", "ext_", "scauth_", "authress_"]
+  },
+  {
+    "id": "aws-access-token",
+    "description": "Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms.",
+    "regex": "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z2-7]{16})\\b",
+    "entropy": 3,
+    "keywords": ["a3t", "akia", "asia", "abia", "acca"],
+    "allowlists": [
+      {
+        "regexes": [".+EXAMPLE$"]
+      }
+    ]
+  },
+  {
+    "id": "aws-amazon-bedrock-api-key-long-lived",
+    "description": "Identified a pattern that may indicate long-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage",
+    "regex": "\\b(ABSK[A-Za-z0-9+/]{109,269}={0,2})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 3,
+    "keywords": ["absk"]
+  },
+  {
+    "id": "aws-amazon-bedrock-api-key-short-lived",
+    "description": "Identified a pattern that may indicate short-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage",
+    "regex": "bedrock-api-key-YmVkcm9jay5hbWF6b25hd3MuY29t",
+    "entropy": 3,
+    "keywords": ["bedrock-api-key-"]
+  },
+  {
+    "id": "azure-ad-client-secret",
+    "description": "Azure AD Client Secret",
+    "regex": "(?:^|[\\\\'\"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'\"\\x60\\s<),])",
+    "entropy": 3,
+    "keywords": ["q~"]
+  },
+  {
+    "id": "beamer-api-token",
+    "description": "Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:beamer)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(b_[a-z0-9=_\\-]{44})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["beamer"]
+  },
+  {
+    "id": "bitbucket-client-id",
+    "description": "Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["bitbucket"]
+  },
+  {
+    "id": "bitbucket-client-secret",
+    "description": "Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["bitbucket"]
+  },
+  {
+    "id": "bittrex-access-key",
+    "description": "Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["bittrex"]
+  },
+  {
+    "id": "bittrex-secret-key",
+    "description": "Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["bittrex"]
+  },
+  {
+    "id": "cisco-meraki-api-key",
+    "description": "Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface.",
+    "regex": "[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:(?-i:[Mm]eraki|MERAKI))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9a-f]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 3,
+    "keywords": ["meraki"]
+  },
+  {
+    "id": "clickhouse-cloud-api-secret-key",
+    "description": "Identified a pattern that may indicate clickhouse cloud API secret key, risking unauthorized clickhouse cloud api access and data breaches on ClickHouse Cloud platforms.",
+    "regex": "\\b(4b1d[A-Za-z0-9]{38})\\b",
+    "entropy": 3,
+    "keywords": ["4b1d"]
+  },
+  {
+    "id": "clojars-api-token",
+    "description": "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation.",
+    "regex": "(?i)CLOJARS_[a-z0-9]{60}",
+    "entropy": 2,
+    "keywords": ["clojars_"]
+  },
+  {
+    "id": "cloudflare-api-key",
+    "description": "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["cloudflare"]
+  },
+  {
+    "id": "cloudflare-global-api-key",
+    "description": "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{37})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["cloudflare"]
+  },
+  {
+    "id": "cloudflare-origin-ca-key",
+    "description": "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security.",
+    "regex": "\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 2,
+    "keywords": ["cloudflare", "v1.0-"]
+  },
+  {
+    "id": "codecov-access-token",
+    "description": "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:codecov)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["codecov"]
+  },
+  {
+    "id": "cohere-api-token",
+    "description": "Identified a Cohere Token, posing a risk of unauthorized access to AI services and data manipulation.",
+    "regex": "[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:cohere|CO_API_KEY)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-zA-Z0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "entropy": 4,
+    "keywords": ["cohere", "co_api_key"]
+  },
+  {
+    "id": "coinbase-access-token",
+    "description": "Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:coinbase)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9_-]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["coinbase"]
+  },
+  {
+    "id": "confluent-access-token",
+    "description": "Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["confluent"]
+  },
+  {
+    "id": "confluent-secret-key",
+    "description": "Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["confluent"]
+  },
+  {
+    "id": "contentful-delivery-api-token",
+    "description": "Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity.",
+    "regex": "(?i)[\\w.-]{0,50}?(?:contentful)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{43})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
+    "keywords": ["contentful"]
+  }
+]