@link-foundation/sensitive-data-sanitizer 0.0.0-stage → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/CHANGELOG.md +578 -0
  2. package/LICENSE +24 -0
  3. package/README.md +184 -2
  4. package/bin/legacy-example-package-name.js +95 -0
  5. package/bin/sensitive-data-sanitizer.js +430 -0
  6. package/bin/stream.js +56 -0
  7. package/docs/API.md +336 -0
  8. package/docs/COVERAGE.md +136 -0
  9. package/docs/HISTORY-REMEDIATION.md +41 -0
  10. package/examples/combined-scanners.mjs +23 -0
  11. package/examples/presidio-bridge.py +32 -0
  12. package/examples/realistic-fakes.mjs +18 -0
  13. package/examples/sanitize-session.mjs +27 -0
  14. package/examples/shared-tool-logs.mjs +21 -0
  15. package/examples/stream-jsonl.mjs +17 -0
  16. package/package.json +124 -4
  17. package/src/adapters.js +204 -0
  18. package/src/arithmetic.js +11 -0
  19. package/src/confidence.js +65 -0
  20. package/src/context.js +424 -0
  21. package/src/credentials.js +54 -0
  22. package/src/detection.js +293 -0
  23. package/src/encoded.js +233 -0
  24. package/src/engines.js +348 -0
  25. package/src/entities.js +166 -0
  26. package/src/escape-spans.js +20 -0
  27. package/src/eslint-plugin.d.ts +10 -0
  28. package/src/eslint-plugin.js +193 -0
  29. package/src/external.js +169 -0
  30. package/src/fake-names.js +222 -0
  31. package/src/fake.js +524 -0
  32. package/src/files.js +131 -0
  33. package/src/gitleaks.js +194 -0
  34. package/src/history-rewrite.js +339 -0
  35. package/src/history.js +103 -0
  36. package/src/identity.js +274 -0
  37. package/src/index.d.ts +321 -0
  38. package/src/index.js +40 -0
  39. package/src/jsonl-stream.js +198 -0
  40. package/src/keywords.js +45 -0
  41. package/src/known.js +164 -0
  42. package/src/legacy.d.ts +3 -0
  43. package/src/legacy.js +2 -0
  44. package/src/locales.js +217 -0
  45. package/src/log-bytes.js +85 -0
  46. package/src/names.js +65 -0
  47. package/src/national-checks.js +129 -0
  48. package/src/national.js +128 -0
  49. package/src/outbound.js +28 -0
  50. package/src/personal-context.js +85 -0
  51. package/src/personal.js +248 -0
  52. package/src/projection.js +126 -0
  53. package/src/propagation.js +163 -0
  54. package/src/public-verifier.js +77 -0
  55. package/src/public.js +153 -0
  56. package/src/record-worker.js +20 -0
  57. package/src/rules.js +210 -0
  58. package/src/sanitizer.js +794 -0
  59. package/src/specimens.js +34 -0
  60. package/src/stream-identity.js +129 -0
  61. package/src/stream-worker.js +18 -0
  62. package/src/stream.js +449 -0
  63. package/src/structured.js +278 -0
  64. package/src/transforms.js +192 -0
  65. package/src/transliteration.js +75 -0
  66. package/src/utf8.js +60 -0
  67. package/src/vendor/entities/aws.json +42 -0
  68. package/src/vendor/entities/azure.json +182 -0
  69. package/src/vendor/entities/google.json +219 -0
  70. package/src/vendor/gitleaks/LICENSE +21 -0
  71. package/src/vendor/gitleaks/provenance.json +8 -0
  72. package/src/vendor/gitleaks/rules-0.json +268 -0
  73. package/src/vendor/gitleaks/rules-1.json +1794 -0
  74. package/src/vendor/gitleaks/rules-2.json +292 -0
  75. package/src/vendor/gitleaks/rules-3.json +263 -0
  76. package/src/vendor/gitleaks/rules-4.json +277 -0
  77. package/src/vendor/gitleaks/rules-5.json +154 -0
  78. package/src/worker-options.js +27 -0
@@ -0,0 +1,1794 @@
1
+ [
2
+ {
3
+ "id": "curl-auth-header",
4
+ "description": "Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.",
5
+ "regex": "\\bcurl\\b(?:.*?|.*?(?:[\\r\\n]{1,2}.*?){1,5})[ \\t\\n\\r](?:-H|--header)(?:=|[ \\t]{0,5})(?:\"(?i)(?:Authorization:[ \\t]{0,5}(?:Basic[ \\t]([a-z0-9+/]{8,}={0,3})|(?:Bearer|(?:Api-)?Token)[ \\t]([\\w=~@.+/-]{8,})|([\\w=~@.+/-]{8,}))|(?:(?:X-(?:[a-z]+-)?)?(?:Api-?)?(?:Key|Token)):[ \\t]{0,5}([\\w=~@.+/-]{8,}))\"|'(?i)(?:Authorization:[ \\t]{0,5}(?:Basic[ \\t]([a-z0-9+/]{8,}={0,3})|(?:Bearer|(?:Api-)?Token)[ \\t]([\\w=~@.+/-]{8,})|([\\w=~@.+/-]{8,}))|(?:(?:X-(?:[a-z]+-)?)?(?:Api-?)?(?:Key|Token)):[ \\t]{0,5}([\\w=~@.+/-]{8,}))')(?:\\B|\\s|\\z)",
6
+ "entropy": 2.75,
7
+ "keywords": ["curl"]
8
+ },
9
+ {
10
+ "id": "curl-auth-user",
11
+ "description": "Discovered a potential basic authorization token provided in a curl command, which could compromise the curl accessed resource.",
12
+ "regex": "\\bcurl\\b(?:.*|.*(?:[\\r\\n]{1,2}.*){1,5})[ \\t\\n\\r](?:-u|--user)(?:=|[ \\t]{0,5})(\"(:[^\"]{3,}|[^:\"]{3,}:|[^:\"]{3,}:[^\"]{3,})\"|'([^:']{3,}:[^']{3,})'|((?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w$@.-]+):(?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w${}@.-]+)))(?:\\s|\\z)",
13
+ "entropy": 2,
14
+ "keywords": ["curl"],
15
+ "allowlists": [
16
+ {
17
+ "regexes": [
18
+ "[^:]+:(?:change(?:it|me)|pass(?:word)?|pwd|test|token|\\*+|x+)",
19
+ "['\"]?<[^>]+>['\"]?:['\"]?<[^>]+>|<[^:]+:[^>]+>['\"]?",
20
+ "[^:]+:\\[[^]]+]",
21
+ "['\"]?[^:]+['\"]?:['\"]?\\$(?:\\d|\\w+|\\{(?:\\d|\\w+)})['\"]?",
22
+ "\\$\\([^)]+\\):\\$\\([^)]+\\)",
23
+ "['\"]?\\$?{{[^}]+}}['\"]?:['\"]?\\$?{{[^}]+}}['\"]?"
24
+ ]
25
+ }
26
+ ]
27
+ },
28
+ {
29
+ "id": "databricks-api-token",
30
+ "description": "Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing.",
31
+ "regex": "\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
32
+ "entropy": 3,
33
+ "keywords": ["dapi"]
34
+ },
35
+ {
36
+ "id": "datadog-access-token",
37
+ "description": "Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation.",
38
+ "regex": "(?i)[\\w.-]{0,50}?(?:datadog)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
39
+ "keywords": ["datadog"]
40
+ },
41
+ {
42
+ "id": "defined-networking-api-token",
43
+ "description": "Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches.",
44
+ "regex": "(?i)[\\w.-]{0,50}?(?:dnkey)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
45
+ "keywords": ["dnkey"]
46
+ },
47
+ {
48
+ "id": "digitalocean-access-token",
49
+ "description": "Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise.",
50
+ "regex": "\\b(doo_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
51
+ "entropy": 3,
52
+ "keywords": ["doo_v1_"]
53
+ },
54
+ {
55
+ "id": "digitalocean-pat",
56
+ "description": "Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy.",
57
+ "regex": "\\b(dop_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
58
+ "entropy": 3,
59
+ "keywords": ["dop_v1_"]
60
+ },
61
+ {
62
+ "id": "digitalocean-refresh-token",
63
+ "description": "Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation.",
64
+ "regex": "(?i)\\b(dor_v1_[a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
65
+ "keywords": ["dor_v1_"]
66
+ },
67
+ {
68
+ "id": "discord-api-token",
69
+ "description": "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord.",
70
+ "regex": "(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
71
+ "keywords": ["discord"]
72
+ },
73
+ {
74
+ "id": "discord-client-id",
75
+ "description": "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications.",
76
+ "regex": "(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([0-9]{18})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
77
+ "entropy": 2,
78
+ "keywords": ["discord"]
79
+ },
80
+ {
81
+ "id": "discord-client-secret",
82
+ "description": "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.",
83
+ "regex": "(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
84
+ "entropy": 2,
85
+ "keywords": ["discord"]
86
+ },
87
+ {
88
+ "id": "doppler-api-token",
89
+ "description": "Discovered a Doppler API token, posing a risk to environment and secrets management security.",
90
+ "regex": "dp\\.pt\\.(?i)[a-z0-9]{43}",
91
+ "entropy": 2,
92
+ "keywords": ["dp.pt."]
93
+ },
94
+ {
95
+ "id": "droneci-access-token",
96
+ "description": "Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows.",
97
+ "regex": "(?i)[\\w.-]{0,50}?(?:droneci)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
98
+ "keywords": ["droneci"]
99
+ },
100
+ {
101
+ "id": "dropbox-api-token",
102
+ "description": "Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage.",
103
+ "regex": "(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{15})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
104
+ "keywords": ["dropbox"]
105
+ },
106
+ {
107
+ "id": "dropbox-long-lived-api-token",
108
+ "description": "Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data.",
109
+ "regex": "(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
110
+ "keywords": ["dropbox"]
111
+ },
112
+ {
113
+ "id": "dropbox-short-lived-api-token",
114
+ "description": "Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation.",
115
+ "regex": "(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}(sl\\.[a-z0-9\\-=_]{135})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
116
+ "keywords": ["dropbox"]
117
+ },
118
+ {
119
+ "id": "duffel-api-token",
120
+ "description": "Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data.",
121
+ "regex": "duffel_(?:test|live)_(?i)[a-z0-9_\\-=]{43}",
122
+ "entropy": 2,
123
+ "keywords": ["duffel_"]
124
+ },
125
+ {
126
+ "id": "dynatrace-api-token",
127
+ "description": "Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure.",
128
+ "regex": "dt0c01\\.(?i)[a-z0-9]{24}\\.[a-z0-9]{64}",
129
+ "entropy": 4,
130
+ "keywords": ["dt0c01."]
131
+ },
132
+ {
133
+ "id": "easypost-api-token",
134
+ "description": "Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure.",
135
+ "regex": "\\bEZAK(?i)[a-z0-9]{54}\\b",
136
+ "entropy": 2,
137
+ "keywords": ["ezak"]
138
+ },
139
+ {
140
+ "id": "easypost-test-api-token",
141
+ "description": "Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data.",
142
+ "regex": "\\bEZTK(?i)[a-z0-9]{54}\\b",
143
+ "entropy": 2,
144
+ "keywords": ["eztk"]
145
+ },
146
+ {
147
+ "id": "etsy-access-token",
148
+ "description": "Found an Etsy Access Token, potentially compromising Etsy shop management and customer data.",
149
+ "regex": "(?i)[\\w.-]{0,50}?(?:(?-i:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
150
+ "entropy": 3,
151
+ "keywords": ["etsy"]
152
+ },
153
+ {
154
+ "id": "facebook-access-token",
155
+ "description": "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.",
156
+ "regex": "(?i)\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
157
+ "entropy": 3,
158
+ "keywords": ["facebook"]
159
+ },
160
+ {
161
+ "id": "facebook-page-access-token",
162
+ "description": "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.",
163
+ "regex": "\\b(EAA[MC](?i)[a-z0-9]{100,})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
164
+ "entropy": 4,
165
+ "keywords": ["eaam", "eaac"]
166
+ },
167
+ {
168
+ "id": "facebook-secret",
169
+ "description": "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure.",
170
+ "regex": "(?i)[\\w.-]{0,50}?(?:facebook)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
171
+ "entropy": 3,
172
+ "keywords": ["facebook"]
173
+ },
174
+ {
175
+ "id": "fastly-api-token",
176
+ "description": "Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues.",
177
+ "regex": "(?i)[\\w.-]{0,50}?(?:fastly)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
178
+ "keywords": ["fastly"]
179
+ },
180
+ {
181
+ "id": "finicity-api-token",
182
+ "description": "Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations.",
183
+ "regex": "(?i)[\\w.-]{0,50}?(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
184
+ "keywords": ["finicity"]
185
+ },
186
+ {
187
+ "id": "finicity-client-secret",
188
+ "description": "Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches.",
189
+ "regex": "(?i)[\\w.-]{0,50}?(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
190
+ "keywords": ["finicity"]
191
+ },
192
+ {
193
+ "id": "finnhub-access-token",
194
+ "description": "Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics.",
195
+ "regex": "(?i)[\\w.-]{0,50}?(?:finnhub)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
196
+ "keywords": ["finnhub"]
197
+ },
198
+ {
199
+ "id": "flickr-access-token",
200
+ "description": "Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage.",
201
+ "regex": "(?i)[\\w.-]{0,50}?(?:flickr)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
202
+ "keywords": ["flickr"]
203
+ },
204
+ {
205
+ "id": "flutterwave-encryption-key",
206
+ "description": "Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information.",
207
+ "regex": "FLWSECK_TEST-(?i)[a-h0-9]{12}",
208
+ "entropy": 2,
209
+ "keywords": ["flwseck_test"]
210
+ },
211
+ {
212
+ "id": "flutterwave-public-key",
213
+ "description": "Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations.",
214
+ "regex": "FLWPUBK_TEST-(?i)[a-h0-9]{32}-X",
215
+ "entropy": 2,
216
+ "keywords": ["flwpubk_test"]
217
+ },
218
+ {
219
+ "id": "flutterwave-secret-key",
220
+ "description": "Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches.",
221
+ "regex": "FLWSECK_TEST-(?i)[a-h0-9]{32}-X",
222
+ "entropy": 2,
223
+ "keywords": ["flwseck_test"]
224
+ },
225
+ {
226
+ "id": "flyio-access-token",
227
+ "description": "Uncovered a Fly.io API key",
228
+ "regex": "\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
229
+ "entropy": 4,
230
+ "keywords": ["fo1_", "fm1", "fm2_"]
231
+ },
232
+ {
233
+ "id": "frameio-api-token",
234
+ "description": "Found a Frame.io API token, potentially compromising video collaboration and project management.",
235
+ "regex": "fio-u-(?i)[a-z0-9\\-_=]{64}",
236
+ "keywords": ["fio-u-"]
237
+ },
238
+ {
239
+ "id": "freemius-secret-key",
240
+ "description": "Detected a Freemius secret key, potentially exposing sensitive information.",
241
+ "regex": "(?i)[\"']secret_key[\"']\\s*=>\\s*[\"'](sk_[\\S]{29})[\"']",
242
+ "path": "(?i)\\.php$",
243
+ "keywords": ["secret_key"]
244
+ },
245
+ {
246
+ "id": "freshbooks-access-token",
247
+ "description": "Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure.",
248
+ "regex": "(?i)[\\w.-]{0,50}?(?:freshbooks)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
249
+ "keywords": ["freshbooks"]
250
+ },
251
+ {
252
+ "id": "gcp-api-key",
253
+ "description": "Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches.",
254
+ "regex": "\\b(AIza[\\w-]{35})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
255
+ "entropy": 4,
256
+ "keywords": ["aiza"],
257
+ "allowlists": [
258
+ {
259
+ "regexes": [
260
+ "AIzaSyabcdefghijklmnopqrstuvwxyz1234567",
261
+ "AIzaSyAnLA7NfeLquW1tJFpx_eQCxoX-oo6YyIs",
262
+ "AIzaSyCkEhVjf3pduRDt6d1yKOMitrUEke8agEM",
263
+ "AIzaSyDMAScliyLx7F0NPDEJi1QmyCgHIAODrlU",
264
+ "AIzaSyD3asb-2pEZVqMkmL6M9N6nHZRR_znhrh0",
265
+ "AIzayDNSXIbFmlXbIE6mCzDLQAqITYefhixbX4A",
266
+ "AIzaSyAdOS2zB6NCsk1pCdZ4-P6GBdi_UUPwX7c",
267
+ "AIzaSyASWm6HmTMdYWpgMnjRBjxcQ9CKctWmLd4",
268
+ "AIzaSyANUvH9H9BsUccjsu2pCmEkOPjjaXeDQgY",
269
+ "AIzaSyA5_iVawFQ8ABuTZNUdcwERLJv_a_p4wtM",
270
+ "AIzaSyA4UrcGxgwQFTfaI3no3t7Lt1sjmdnP5sQ",
271
+ "AIzaSyDSb51JiIcB6OJpwwMicseKRhhrOq1cS7g",
272
+ "AIzaSyBF2RrAIm4a0mO64EShQfqfd2AFnzAvvuU",
273
+ "AIzaSyBcE-OOIbhjyR83gm4r2MFCu4MJmprNXsw",
274
+ "AIzaSyB8qGxt4ec15vitgn44duC5ucxaOi4FmqE",
275
+ "AIzaSyA8vmApnrHNFE0bApF4hoZ11srVL_n0nvY"
276
+ ]
277
+ }
278
+ ]
279
+ },
280
+ {
281
+ "id": "generic-api-key",
282
+ "description": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.",
283
+ "regex": "(?i)[\\w.-]{0,50}?(?:access|auth|(?-i:[Aa]pi|API)|credential|creds|key|passw(?:or)?d|secret|token)(?:[ \\t\\w.-]{0,20})[\\s'\"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'\"\\s=]{0,5}([\\w.=-]{10,150}|[a-z0-9][a-z0-9+/]{11,}={0,3})(?:[\\x60'\"\\s;]|\\\\[nr]|$)",
284
+ "entropy": 3.5,
285
+ "keywords": [
286
+ "access",
287
+ "api",
288
+ "auth",
289
+ "key",
290
+ "credential",
291
+ "creds",
292
+ "passwd",
293
+ "password",
294
+ "secret",
295
+ "token"
296
+ ],
297
+ "allowlists": [
298
+ {
299
+ "regexes": ["^[a-zA-Z_.-]+$"]
300
+ },
301
+ {
302
+ "description": "Allowlist for Generic API Keys",
303
+ "regexTarget": "match",
304
+ "regexes": [
305
+ "(?i)(?:access(?:ibility|or)|access[_.-]?id|random[_.-]?access|api[_.-]?(?:id|name|version)|rapid|capital|[a-z0-9-]*?api[a-z0-9-]*?:jar:|author|X-MS-Exchange-Organization-Auth|Authentication-Results|(?:credentials?[_.-]?id|withCredentials)|(?:bucket|foreign|hot|idx|natural|primary|pub(?:lic)?|schema|sequence)[_.-]?key|(?:turkey)|key[_.-]?(?:alias|board|code|frame|id|length|mesh|name|pair|press(?:ed)?|ring|selector|signature|size|stone|storetype|word|up|down|left|right)|key[_.-]?vault[_.-]?(?:id|name)|keyVaultToStoreSecrets|key(?:store|tab)[_.-]?(?:file|path)|issuerkeyhash|(?-i:[DdMm]onkey|[DM]ONKEY)|keying|(?:secret)[_.-]?(?:length|name|size)|UserSecretsId|(?:csrf)[_.-]?token|(?:io\\.jsonwebtoken[ \\t]?:[ \\t]?[\\w-]+)|(?:api|credentials|token)[_.-]?(?:endpoint|ur[il])|public[_.-]?token|(?:key|token)[_.-]?file|(?-i:(?:[A-Z_]+=\\n[A-Z_]+=|[a-z_]+=\\n[a-z_]+=)(?:\\n|\\z))|(?-i:(?:[A-Z.]+=\\n[A-Z.]+=|[a-z.]+=\\n[a-z.]+=)(?:\\n|\\z)))"
306
+ ],
307
+ "stopwords": [
308
+ "000000",
309
+ "6fe4476ee5a1832882e326b506d14126",
310
+ "_ec2_",
311
+ "aaaaaa",
312
+ "about",
313
+ "abstract",
314
+ "academy",
315
+ "acces",
316
+ "account",
317
+ "act-",
318
+ "act.",
319
+ "act_",
320
+ "action",
321
+ "active",
322
+ "actively",
323
+ "activity",
324
+ "adapter",
325
+ "add-",
326
+ "add-on",
327
+ "add.",
328
+ "add_",
329
+ "addon",
330
+ "addres",
331
+ "admin",
332
+ "adobe",
333
+ "advanced",
334
+ "adventure",
335
+ "agent",
336
+ "agile",
337
+ "air-",
338
+ "air.",
339
+ "air_",
340
+ "ajax",
341
+ "akka",
342
+ "alert",
343
+ "alfred",
344
+ "algorithm",
345
+ "all-",
346
+ "all.",
347
+ "all_",
348
+ "alloy",
349
+ "alpha",
350
+ "amazon",
351
+ "amqp",
352
+ "analysi",
353
+ "analytic",
354
+ "analyzer",
355
+ "android",
356
+ "angular",
357
+ "angularj",
358
+ "animate",
359
+ "animation",
360
+ "another",
361
+ "ansible",
362
+ "answer",
363
+ "ant-",
364
+ "ant.",
365
+ "ant_",
366
+ "any-",
367
+ "any.",
368
+ "any_",
369
+ "apache",
370
+ "app-",
371
+ "app.",
372
+ "app_",
373
+ "apple",
374
+ "arch",
375
+ "archive",
376
+ "archived",
377
+ "arduino",
378
+ "array",
379
+ "art-",
380
+ "art.",
381
+ "art_",
382
+ "article",
383
+ "asp-",
384
+ "asp.",
385
+ "asp_",
386
+ "asset",
387
+ "async",
388
+ "atom",
389
+ "attention",
390
+ "audio",
391
+ "audit",
392
+ "aura",
393
+ "auth",
394
+ "author",
395
+ "authorize",
396
+ "auto",
397
+ "automated",
398
+ "automatic",
399
+ "awesome",
400
+ "aws_",
401
+ "azure",
402
+ "back",
403
+ "backbone",
404
+ "backend",
405
+ "backup",
406
+ "bar-",
407
+ "bar.",
408
+ "bar_",
409
+ "base",
410
+ "based",
411
+ "bash",
412
+ "basic",
413
+ "batch",
414
+ "been",
415
+ "beer",
416
+ "behavior",
417
+ "being",
418
+ "benchmark",
419
+ "best",
420
+ "beta",
421
+ "better",
422
+ "big-",
423
+ "big.",
424
+ "big_",
425
+ "binary",
426
+ "binding",
427
+ "bit-",
428
+ "bit.",
429
+ "bit_",
430
+ "bitcoin",
431
+ "block",
432
+ "blog",
433
+ "board",
434
+ "book",
435
+ "bookmark",
436
+ "boost",
437
+ "boot",
438
+ "bootstrap",
439
+ "bosh",
440
+ "bot-",
441
+ "bot.",
442
+ "bot_",
443
+ "bower",
444
+ "box-",
445
+ "box.",
446
+ "box_",
447
+ "boxen",
448
+ "bracket",
449
+ "branch",
450
+ "bridge",
451
+ "browser",
452
+ "brunch",
453
+ "buffer",
454
+ "bug-",
455
+ "bug.",
456
+ "bug_",
457
+ "build",
458
+ "builder",
459
+ "building",
460
+ "buildout",
461
+ "buildpack",
462
+ "built",
463
+ "bundle",
464
+ "busines",
465
+ "but-",
466
+ "but.",
467
+ "but_",
468
+ "button",
469
+ "cache",
470
+ "caching",
471
+ "cakephp",
472
+ "calendar",
473
+ "call",
474
+ "camera",
475
+ "campfire",
476
+ "can-",
477
+ "can.",
478
+ "can_",
479
+ "canva",
480
+ "captcha",
481
+ "capture",
482
+ "card",
483
+ "carousel",
484
+ "case",
485
+ "cassandra",
486
+ "cat-",
487
+ "cat.",
488
+ "cat_",
489
+ "category",
490
+ "center",
491
+ "cento",
492
+ "challenge",
493
+ "change",
494
+ "changelog",
495
+ "channel",
496
+ "chart",
497
+ "chat",
498
+ "cheat",
499
+ "check",
500
+ "checker",
501
+ "chef",
502
+ "ches",
503
+ "chinese",
504
+ "chosen",
505
+ "chrome",
506
+ "ckeditor",
507
+ "clas",
508
+ "classe",
509
+ "classic",
510
+ "clean",
511
+ "cli-",
512
+ "cli.",
513
+ "cli_",
514
+ "client",
515
+ "clojure",
516
+ "clone",
517
+ "closure",
518
+ "cloud",
519
+ "club",
520
+ "cluster",
521
+ "cms-",
522
+ "cms_",
523
+ "coco",
524
+ "code",
525
+ "coding",
526
+ "coffee",
527
+ "color",
528
+ "combination",
529
+ "combo",
530
+ "command",
531
+ "commander",
532
+ "comment",
533
+ "commit",
534
+ "common",
535
+ "community",
536
+ "compas",
537
+ "compiler",
538
+ "complete",
539
+ "component",
540
+ "composer",
541
+ "computer",
542
+ "computing",
543
+ "con-",
544
+ "con.",
545
+ "con_",
546
+ "concept",
547
+ "conf",
548
+ "config",
549
+ "connect",
550
+ "connector",
551
+ "console",
552
+ "contact",
553
+ "container",
554
+ "contao",
555
+ "content",
556
+ "contest",
557
+ "context",
558
+ "control",
559
+ "convert",
560
+ "converter",
561
+ "conway'",
562
+ "cookbook",
563
+ "cookie",
564
+ "cool",
565
+ "copy",
566
+ "cordova",
567
+ "core",
568
+ "couchbase",
569
+ "couchdb",
570
+ "countdown",
571
+ "counter",
572
+ "course",
573
+ "craft",
574
+ "crawler",
575
+ "create",
576
+ "creating",
577
+ "creator",
578
+ "credential",
579
+ "crm-",
580
+ "crm.",
581
+ "crm_",
582
+ "cros",
583
+ "crud",
584
+ "csv-",
585
+ "csv.",
586
+ "csv_",
587
+ "cube",
588
+ "cucumber",
589
+ "cuda",
590
+ "current",
591
+ "currently",
592
+ "custom",
593
+ "daemon",
594
+ "dark",
595
+ "dart",
596
+ "dash",
597
+ "dashboard",
598
+ "data",
599
+ "database",
600
+ "date",
601
+ "day-",
602
+ "day.",
603
+ "day_",
604
+ "dead",
605
+ "debian",
606
+ "debug",
607
+ "debugger",
608
+ "deck",
609
+ "define",
610
+ "del-",
611
+ "del.",
612
+ "del_",
613
+ "delete",
614
+ "demo",
615
+ "deploy",
616
+ "design",
617
+ "designer",
618
+ "desktop",
619
+ "detection",
620
+ "detector",
621
+ "dev-",
622
+ "dev.",
623
+ "dev_",
624
+ "develop",
625
+ "developer",
626
+ "device",
627
+ "devise",
628
+ "diff",
629
+ "digital",
630
+ "directive",
631
+ "directory",
632
+ "discovery",
633
+ "display",
634
+ "django",
635
+ "dns-",
636
+ "dns_",
637
+ "doc-",
638
+ "doc.",
639
+ "doc_",
640
+ "docker",
641
+ "docpad",
642
+ "doctrine",
643
+ "document",
644
+ "doe-",
645
+ "doe.",
646
+ "doe_",
647
+ "dojo",
648
+ "dom-",
649
+ "dom.",
650
+ "dom_",
651
+ "domain",
652
+ "don't",
653
+ "done",
654
+ "dot-",
655
+ "dot.",
656
+ "dot_",
657
+ "dotfile",
658
+ "download",
659
+ "draft",
660
+ "drag",
661
+ "drill",
662
+ "drive",
663
+ "driven",
664
+ "driver",
665
+ "drop",
666
+ "dropbox",
667
+ "drupal",
668
+ "dsl-",
669
+ "dsl.",
670
+ "dsl_",
671
+ "dynamic",
672
+ "easy",
673
+ "ecdsa",
674
+ "eclipse",
675
+ "edit",
676
+ "editing",
677
+ "edition",
678
+ "editor",
679
+ "element",
680
+ "emac",
681
+ "email",
682
+ "embed",
683
+ "embedded",
684
+ "ember",
685
+ "emitter",
686
+ "emulator",
687
+ "encoding",
688
+ "endpoint",
689
+ "engine",
690
+ "english",
691
+ "enhanced",
692
+ "entity",
693
+ "entry",
694
+ "env_",
695
+ "episode",
696
+ "erlang",
697
+ "error",
698
+ "espresso",
699
+ "event",
700
+ "evented",
701
+ "example",
702
+ "exchange",
703
+ "exercise",
704
+ "experiment",
705
+ "expire",
706
+ "exploit",
707
+ "explorer",
708
+ "export",
709
+ "exporter",
710
+ "expres",
711
+ "ext-",
712
+ "ext.",
713
+ "ext_",
714
+ "extended",
715
+ "extension",
716
+ "external",
717
+ "extra",
718
+ "extractor",
719
+ "fabric",
720
+ "facebook",
721
+ "factory",
722
+ "fake",
723
+ "fast",
724
+ "feature",
725
+ "feed",
726
+ "fewfwef",
727
+ "ffmpeg",
728
+ "field",
729
+ "file",
730
+ "filter",
731
+ "find",
732
+ "finder",
733
+ "firefox",
734
+ "firmware",
735
+ "first",
736
+ "fish",
737
+ "fix-",
738
+ "fix_",
739
+ "flash",
740
+ "flask",
741
+ "flat",
742
+ "flex",
743
+ "flexible",
744
+ "flickr",
745
+ "flow",
746
+ "fluent",
747
+ "fluentd",
748
+ "fluid",
749
+ "folder",
750
+ "font",
751
+ "force",
752
+ "foreman",
753
+ "fork",
754
+ "form",
755
+ "format",
756
+ "formatter",
757
+ "forum",
758
+ "foundry",
759
+ "framework",
760
+ "free",
761
+ "friend",
762
+ "friendly",
763
+ "front-end",
764
+ "frontend",
765
+ "ftp-",
766
+ "ftp.",
767
+ "ftp_",
768
+ "fuel",
769
+ "full",
770
+ "fun-",
771
+ "fun.",
772
+ "fun_",
773
+ "func",
774
+ "future",
775
+ "gaia",
776
+ "gallery",
777
+ "game",
778
+ "gateway",
779
+ "gem-",
780
+ "gem.",
781
+ "gem_",
782
+ "gen-",
783
+ "gen.",
784
+ "gen_",
785
+ "general",
786
+ "generator",
787
+ "generic",
788
+ "genetic",
789
+ "get-",
790
+ "get.",
791
+ "get_",
792
+ "getenv",
793
+ "getting",
794
+ "ghost",
795
+ "gist",
796
+ "git-",
797
+ "git.",
798
+ "git_",
799
+ "github",
800
+ "gitignore",
801
+ "gitlab",
802
+ "glas",
803
+ "gmail",
804
+ "gnome",
805
+ "gnu-",
806
+ "gnu.",
807
+ "gnu_",
808
+ "goal",
809
+ "golang",
810
+ "gollum",
811
+ "good",
812
+ "google",
813
+ "gpu-",
814
+ "gpu.",
815
+ "gpu_",
816
+ "gradle",
817
+ "grail",
818
+ "graph",
819
+ "graphic",
820
+ "great",
821
+ "grid",
822
+ "groovy",
823
+ "group",
824
+ "grunt",
825
+ "guard",
826
+ "gui-",
827
+ "gui.",
828
+ "gui_",
829
+ "guide",
830
+ "guideline",
831
+ "gulp",
832
+ "gwt-",
833
+ "gwt.",
834
+ "gwt_",
835
+ "hack",
836
+ "hackathon",
837
+ "hacker",
838
+ "hacking",
839
+ "hadoop",
840
+ "haml",
841
+ "handler",
842
+ "hardware",
843
+ "has-",
844
+ "has_",
845
+ "hash",
846
+ "haskell",
847
+ "have",
848
+ "haxe",
849
+ "hello",
850
+ "help",
851
+ "helper",
852
+ "here",
853
+ "hero",
854
+ "heroku",
855
+ "high",
856
+ "hipchat",
857
+ "history",
858
+ "home",
859
+ "homebrew",
860
+ "homepage",
861
+ "hook",
862
+ "host",
863
+ "hosting",
864
+ "hot-",
865
+ "hot.",
866
+ "hot_",
867
+ "house",
868
+ "how-",
869
+ "how.",
870
+ "how_",
871
+ "html",
872
+ "http",
873
+ "hub-",
874
+ "hub.",
875
+ "hub_",
876
+ "hubot",
877
+ "human",
878
+ "icon",
879
+ "ide-",
880
+ "ide.",
881
+ "ide_",
882
+ "idea",
883
+ "identity",
884
+ "idiomatic",
885
+ "image",
886
+ "impact",
887
+ "import",
888
+ "important",
889
+ "importer",
890
+ "impres",
891
+ "index",
892
+ "infinite",
893
+ "info",
894
+ "injection",
895
+ "inline",
896
+ "input",
897
+ "inside",
898
+ "inspector",
899
+ "instagram",
900
+ "install",
901
+ "installer",
902
+ "instant",
903
+ "intellij",
904
+ "interface",
905
+ "internet",
906
+ "interview",
907
+ "into",
908
+ "intro",
909
+ "ionic",
910
+ "iphone",
911
+ "ipython",
912
+ "irc-",
913
+ "irc_",
914
+ "iso-",
915
+ "iso.",
916
+ "iso_",
917
+ "issue",
918
+ "jade",
919
+ "jasmine",
920
+ "java",
921
+ "jbos",
922
+ "jekyll",
923
+ "jenkin",
924
+ "jetbrains",
925
+ "job-",
926
+ "job.",
927
+ "job_",
928
+ "joomla",
929
+ "jpa-",
930
+ "jpa.",
931
+ "jpa_",
932
+ "jquery",
933
+ "json",
934
+ "just",
935
+ "kafka",
936
+ "karma",
937
+ "kata",
938
+ "kernel",
939
+ "keyboard",
940
+ "kindle",
941
+ "kit-",
942
+ "kit.",
943
+ "kit_",
944
+ "kitchen",
945
+ "knife",
946
+ "koan",
947
+ "kohana",
948
+ "lab-",
949
+ "lab.",
950
+ "lab_",
951
+ "lambda",
952
+ "lamp",
953
+ "language",
954
+ "laravel",
955
+ "last",
956
+ "latest",
957
+ "latex",
958
+ "launcher",
959
+ "layer",
960
+ "layout",
961
+ "lazy",
962
+ "ldap",
963
+ "leaflet",
964
+ "league",
965
+ "learn",
966
+ "learning",
967
+ "led-",
968
+ "led.",
969
+ "led_",
970
+ "leetcode",
971
+ "les-",
972
+ "les.",
973
+ "les_",
974
+ "level",
975
+ "leveldb",
976
+ "lib-",
977
+ "lib.",
978
+ "lib_",
979
+ "librarie",
980
+ "library",
981
+ "license",
982
+ "life",
983
+ "liferay",
984
+ "light",
985
+ "lightbox",
986
+ "like",
987
+ "line",
988
+ "link",
989
+ "linked",
990
+ "linkedin",
991
+ "linux",
992
+ "lisp",
993
+ "list",
994
+ "lite",
995
+ "little",
996
+ "load",
997
+ "loader",
998
+ "local",
999
+ "location",
1000
+ "lock",
1001
+ "log-",
1002
+ "log.",
1003
+ "log_",
1004
+ "logger",
1005
+ "logging",
1006
+ "logic",
1007
+ "login",
1008
+ "logstash",
1009
+ "longer",
1010
+ "look",
1011
+ "love",
1012
+ "lua-",
1013
+ "lua.",
1014
+ "lua_",
1015
+ "mac-",
1016
+ "mac.",
1017
+ "mac_",
1018
+ "machine",
1019
+ "made",
1020
+ "magento",
1021
+ "magic",
1022
+ "mail",
1023
+ "make",
1024
+ "maker",
1025
+ "making",
1026
+ "man-",
1027
+ "man.",
1028
+ "man_",
1029
+ "manage",
1030
+ "manager",
1031
+ "manifest",
1032
+ "manual",
1033
+ "map-",
1034
+ "map.",
1035
+ "map_",
1036
+ "mapper",
1037
+ "mapping",
1038
+ "markdown",
1039
+ "markup",
1040
+ "master",
1041
+ "math",
1042
+ "matrix",
1043
+ "maven",
1044
+ "md5",
1045
+ "mean",
1046
+ "media",
1047
+ "mediawiki",
1048
+ "meetup",
1049
+ "memcached",
1050
+ "memory",
1051
+ "menu",
1052
+ "merchant",
1053
+ "message",
1054
+ "messaging",
1055
+ "meta",
1056
+ "metadata",
1057
+ "meteor",
1058
+ "method",
1059
+ "metric",
1060
+ "micro",
1061
+ "middleman",
1062
+ "migration",
1063
+ "minecraft",
1064
+ "miner",
1065
+ "mini",
1066
+ "minimal",
1067
+ "mirror",
1068
+ "mit-",
1069
+ "mit.",
1070
+ "mit_",
1071
+ "mobile",
1072
+ "mocha",
1073
+ "mock",
1074
+ "mod-",
1075
+ "mod.",
1076
+ "mod_",
1077
+ "mode",
1078
+ "model",
1079
+ "modern",
1080
+ "modular",
1081
+ "module",
1082
+ "modx",
1083
+ "money",
1084
+ "mongo",
1085
+ "mongodb",
1086
+ "mongoid",
1087
+ "mongoose",
1088
+ "monitor",
1089
+ "monkey",
1090
+ "more",
1091
+ "motion",
1092
+ "moved",
1093
+ "movie",
1094
+ "mozilla",
1095
+ "mqtt",
1096
+ "mule",
1097
+ "multi",
1098
+ "multiple",
1099
+ "music",
1100
+ "mustache",
1101
+ "mvc-",
1102
+ "mvc.",
1103
+ "mvc_",
1104
+ "mysql",
1105
+ "nagio",
1106
+ "name",
1107
+ "native",
1108
+ "need",
1109
+ "neo-",
1110
+ "neo.",
1111
+ "neo_",
1112
+ "nest",
1113
+ "nested",
1114
+ "net-",
1115
+ "net.",
1116
+ "net_",
1117
+ "nette",
1118
+ "network",
1119
+ "new-",
1120
+ "new.",
1121
+ "new_",
1122
+ "next",
1123
+ "nginx",
1124
+ "ninja",
1125
+ "nlp-",
1126
+ "nlp.",
1127
+ "nlp_",
1128
+ "node",
1129
+ "nodej",
1130
+ "nosql",
1131
+ "not-",
1132
+ "not.",
1133
+ "not_",
1134
+ "note",
1135
+ "notebook",
1136
+ "notepad",
1137
+ "notice",
1138
+ "notifier",
1139
+ "now-",
1140
+ "now.",
1141
+ "now_",
1142
+ "number",
1143
+ "oauth",
1144
+ "object",
1145
+ "objective",
1146
+ "obsolete",
1147
+ "ocaml",
1148
+ "octopres",
1149
+ "official",
1150
+ "old-",
1151
+ "old.",
1152
+ "old_",
1153
+ "onboard",
1154
+ "online",
1155
+ "only",
1156
+ "open",
1157
+ "opencv",
1158
+ "opengl",
1159
+ "openshift",
1160
+ "openwrt",
1161
+ "option",
1162
+ "oracle",
1163
+ "org-",
1164
+ "org.",
1165
+ "org_",
1166
+ "origin",
1167
+ "original",
1168
+ "orm-",
1169
+ "orm.",
1170
+ "orm_",
1171
+ "osx-",
1172
+ "osx_",
1173
+ "our-",
1174
+ "our.",
1175
+ "our_",
1176
+ "out-",
1177
+ "out.",
1178
+ "out_",
1179
+ "output",
1180
+ "over",
1181
+ "overview",
1182
+ "own-",
1183
+ "own.",
1184
+ "own_",
1185
+ "pack",
1186
+ "package",
1187
+ "packet",
1188
+ "page",
1189
+ "panel",
1190
+ "paper",
1191
+ "paperclip",
1192
+ "para",
1193
+ "parallax",
1194
+ "parallel",
1195
+ "parse",
1196
+ "parser",
1197
+ "parsing",
1198
+ "particle",
1199
+ "party",
1200
+ "password",
1201
+ "patch",
1202
+ "path",
1203
+ "pattern",
1204
+ "payment",
1205
+ "paypal",
1206
+ "pdf-",
1207
+ "pdf.",
1208
+ "pdf_",
1209
+ "pebble",
1210
+ "people",
1211
+ "perl",
1212
+ "personal",
1213
+ "phalcon",
1214
+ "phoenix",
1215
+ "phone",
1216
+ "phonegap",
1217
+ "photo",
1218
+ "php-",
1219
+ "php.",
1220
+ "php_",
1221
+ "physic",
1222
+ "picker",
1223
+ "pipeline",
1224
+ "platform",
1225
+ "play",
1226
+ "player",
1227
+ "please",
1228
+ "plu-",
1229
+ "plu.",
1230
+ "plu_",
1231
+ "plug-in",
1232
+ "plugin",
1233
+ "plupload",
1234
+ "png-",
1235
+ "png.",
1236
+ "png_",
1237
+ "poker",
1238
+ "polyfill",
1239
+ "polymer",
1240
+ "pool",
1241
+ "pop-",
1242
+ "pop.",
1243
+ "pop_",
1244
+ "popcorn",
1245
+ "popup",
1246
+ "port",
1247
+ "portable",
1248
+ "portal",
1249
+ "portfolio",
1250
+ "post",
1251
+ "power",
1252
+ "powered",
1253
+ "powerful",
1254
+ "prelude",
1255
+ "pretty",
1256
+ "preview",
1257
+ "principle",
1258
+ "print",
1259
+ "pro-",
1260
+ "pro.",
1261
+ "pro_",
1262
+ "problem",
1263
+ "proc",
1264
+ "product",
1265
+ "profile",
1266
+ "profiler",
1267
+ "program",
1268
+ "progres",
1269
+ "project",
1270
+ "protocol",
1271
+ "prototype",
1272
+ "provider",
1273
+ "proxy",
1274
+ "public",
1275
+ "pull",
1276
+ "puppet",
1277
+ "pure",
1278
+ "purpose",
1279
+ "push",
1280
+ "pusher",
1281
+ "pyramid",
1282
+ "python",
1283
+ "quality",
1284
+ "query",
1285
+ "queue",
1286
+ "quick",
1287
+ "rabbitmq",
1288
+ "rack",
1289
+ "radio",
1290
+ "rail",
1291
+ "railscast",
1292
+ "random",
1293
+ "range",
1294
+ "raspberry",
1295
+ "rdf-",
1296
+ "rdf.",
1297
+ "rdf_",
1298
+ "react",
1299
+ "reactive",
1300
+ "read",
1301
+ "reader",
1302
+ "readme",
1303
+ "ready",
1304
+ "real",
1305
+ "real-time",
1306
+ "reality",
1307
+ "realtime",
1308
+ "recipe",
1309
+ "recorder",
1310
+ "red-",
1311
+ "red.",
1312
+ "red_",
1313
+ "reddit",
1314
+ "redi",
1315
+ "redmine",
1316
+ "reference",
1317
+ "refinery",
1318
+ "refresh",
1319
+ "registry",
1320
+ "related",
1321
+ "release",
1322
+ "remote",
1323
+ "rendering",
1324
+ "repo",
1325
+ "report",
1326
+ "request",
1327
+ "require",
1328
+ "required",
1329
+ "requirej",
1330
+ "research",
1331
+ "resource",
1332
+ "response",
1333
+ "resque",
1334
+ "rest",
1335
+ "restful",
1336
+ "resume",
1337
+ "reveal",
1338
+ "reverse",
1339
+ "review",
1340
+ "riak",
1341
+ "rich",
1342
+ "right",
1343
+ "ring",
1344
+ "robot",
1345
+ "role",
1346
+ "room",
1347
+ "router",
1348
+ "routing",
1349
+ "rpc-",
1350
+ "rpc.",
1351
+ "rpc_",
1352
+ "rpg-",
1353
+ "rpg.",
1354
+ "rpg_",
1355
+ "rspec",
1356
+ "ruby-",
1357
+ "ruby.",
1358
+ "ruby_",
1359
+ "rule",
1360
+ "run-",
1361
+ "run.",
1362
+ "run_",
1363
+ "runner",
1364
+ "running",
1365
+ "runtime",
1366
+ "rust",
1367
+ "rvm-",
1368
+ "rvm.",
1369
+ "rvm_",
1370
+ "salt",
1371
+ "sample",
1372
+ "sandbox",
1373
+ "sas-",
1374
+ "sas.",
1375
+ "sas_",
1376
+ "sbt-",
1377
+ "sbt.",
1378
+ "sbt_",
1379
+ "scala",
1380
+ "scalable",
1381
+ "scanner",
1382
+ "schema",
1383
+ "scheme",
1384
+ "school",
1385
+ "science",
1386
+ "scraper",
1387
+ "scratch",
1388
+ "screen",
1389
+ "script",
1390
+ "scroll",
1391
+ "scs-",
1392
+ "scs.",
1393
+ "scs_",
1394
+ "sdk-",
1395
+ "sdk.",
1396
+ "sdk_",
1397
+ "sdl-",
1398
+ "sdl.",
1399
+ "sdl_",
1400
+ "search",
1401
+ "secure",
1402
+ "security",
1403
+ "see-",
1404
+ "see.",
1405
+ "see_",
1406
+ "seed",
1407
+ "select",
1408
+ "selector",
1409
+ "selenium",
1410
+ "semantic",
1411
+ "sencha",
1412
+ "send",
1413
+ "sentiment",
1414
+ "serie",
1415
+ "server",
1416
+ "service",
1417
+ "session",
1418
+ "set-",
1419
+ "set.",
1420
+ "set_",
1421
+ "setting",
1422
+ "setup",
1423
+ "sha1",
1424
+ "sha2",
1425
+ "sha256",
1426
+ "share",
1427
+ "shared",
1428
+ "sharing",
1429
+ "sheet",
1430
+ "shell",
1431
+ "shield",
1432
+ "shipping",
1433
+ "shop",
1434
+ "shopify",
1435
+ "shortener",
1436
+ "should",
1437
+ "show",
1438
+ "showcase",
1439
+ "side",
1440
+ "silex",
1441
+ "simple",
1442
+ "simulator",
1443
+ "single",
1444
+ "site",
1445
+ "skeleton",
1446
+ "sketch",
1447
+ "skin",
1448
+ "slack",
1449
+ "slide",
1450
+ "slider",
1451
+ "slim",
1452
+ "small",
1453
+ "smart",
1454
+ "smtp",
1455
+ "snake",
1456
+ "snapshot",
1457
+ "snippet",
1458
+ "soap",
1459
+ "social",
1460
+ "socket",
1461
+ "software",
1462
+ "solarized",
1463
+ "solr",
1464
+ "solution",
1465
+ "solver",
1466
+ "some",
1467
+ "soon",
1468
+ "source",
1469
+ "space",
1470
+ "spark",
1471
+ "spatial",
1472
+ "spec",
1473
+ "sphinx",
1474
+ "spine",
1475
+ "spotify",
1476
+ "spree",
1477
+ "spring",
1478
+ "sprite",
1479
+ "sql-",
1480
+ "sql.",
1481
+ "sql_",
1482
+ "sqlite",
1483
+ "ssh-",
1484
+ "ssh.",
1485
+ "ssh_",
1486
+ "stack",
1487
+ "staging",
1488
+ "standard",
1489
+ "stanford",
1490
+ "start",
1491
+ "started",
1492
+ "starter",
1493
+ "startup",
1494
+ "stat",
1495
+ "statamic",
1496
+ "state",
1497
+ "static",
1498
+ "statistic",
1499
+ "statsd",
1500
+ "statu",
1501
+ "steam",
1502
+ "step",
1503
+ "still",
1504
+ "stm-",
1505
+ "stm.",
1506
+ "stm_",
1507
+ "storage",
1508
+ "store",
1509
+ "storm",
1510
+ "story",
1511
+ "strategy",
1512
+ "stream",
1513
+ "streaming",
1514
+ "string",
1515
+ "stripe",
1516
+ "structure",
1517
+ "studio",
1518
+ "study",
1519
+ "stuff",
1520
+ "style",
1521
+ "sublime",
1522
+ "sugar",
1523
+ "suite",
1524
+ "summary",
1525
+ "super",
1526
+ "support",
1527
+ "supported",
1528
+ "svg-",
1529
+ "svg.",
1530
+ "svg_",
1531
+ "svn-",
1532
+ "svn.",
1533
+ "svn_",
1534
+ "swagger",
1535
+ "swift",
1536
+ "switch",
1537
+ "switcher",
1538
+ "symfony",
1539
+ "symphony",
1540
+ "sync",
1541
+ "synopsi",
1542
+ "syntax",
1543
+ "system",
1544
+ "tab-",
1545
+ "tab.",
1546
+ "tab_",
1547
+ "table",
1548
+ "tag-",
1549
+ "tag.",
1550
+ "tag_",
1551
+ "talk",
1552
+ "target",
1553
+ "task",
1554
+ "tcp-",
1555
+ "tcp.",
1556
+ "tcp_",
1557
+ "tdd-",
1558
+ "tdd.",
1559
+ "tdd_",
1560
+ "team",
1561
+ "tech",
1562
+ "template",
1563
+ "term",
1564
+ "terminal",
1565
+ "testing",
1566
+ "tetri",
1567
+ "text",
1568
+ "textmate",
1569
+ "theme",
1570
+ "theory",
1571
+ "three",
1572
+ "thrift",
1573
+ "time",
1574
+ "timeline",
1575
+ "timer",
1576
+ "tiny",
1577
+ "tinymce",
1578
+ "tip-",
1579
+ "tip.",
1580
+ "tip_",
1581
+ "title",
1582
+ "todo",
1583
+ "todomvc",
1584
+ "token",
1585
+ "tool",
1586
+ "toolbox",
1587
+ "toolkit",
1588
+ "top-",
1589
+ "top.",
1590
+ "top_",
1591
+ "tornado",
1592
+ "touch",
1593
+ "tower",
1594
+ "tracker",
1595
+ "tracking",
1596
+ "traffic",
1597
+ "training",
1598
+ "transfer",
1599
+ "translate",
1600
+ "transport",
1601
+ "tree",
1602
+ "trello",
1603
+ "try-",
1604
+ "try.",
1605
+ "try_",
1606
+ "tumblr",
1607
+ "tut-",
1608
+ "tut.",
1609
+ "tut_",
1610
+ "tutorial",
1611
+ "tweet",
1612
+ "twig",
1613
+ "twitter",
1614
+ "type",
1615
+ "typo",
1616
+ "ubuntu",
1617
+ "uiview",
1618
+ "ultimate",
1619
+ "under",
1620
+ "unit",
1621
+ "unity",
1622
+ "universal",
1623
+ "unix",
1624
+ "update",
1625
+ "updated",
1626
+ "upgrade",
1627
+ "upload",
1628
+ "uploader",
1629
+ "uri-",
1630
+ "uri.",
1631
+ "uri_",
1632
+ "url-",
1633
+ "url.",
1634
+ "url_",
1635
+ "usage",
1636
+ "usb-",
1637
+ "usb.",
1638
+ "usb_",
1639
+ "use-",
1640
+ "use.",
1641
+ "use_",
1642
+ "used",
1643
+ "useful",
1644
+ "user",
1645
+ "using",
1646
+ "util",
1647
+ "utilitie",
1648
+ "utility",
1649
+ "vagrant",
1650
+ "validator",
1651
+ "value",
1652
+ "variou",
1653
+ "varnish",
1654
+ "version",
1655
+ "via-",
1656
+ "via.",
1657
+ "via_",
1658
+ "video",
1659
+ "view",
1660
+ "viewer",
1661
+ "vim-",
1662
+ "vim.",
1663
+ "vim_",
1664
+ "vimrc",
1665
+ "virtual",
1666
+ "vision",
1667
+ "visual",
1668
+ "vpn",
1669
+ "want",
1670
+ "warning",
1671
+ "watch",
1672
+ "watcher",
1673
+ "wave",
1674
+ "way-",
1675
+ "way.",
1676
+ "way_",
1677
+ "weather",
1678
+ "web-",
1679
+ "web_",
1680
+ "webapp",
1681
+ "webgl",
1682
+ "webhook",
1683
+ "webkit",
1684
+ "webrtc",
1685
+ "website",
1686
+ "websocket",
1687
+ "welcome",
1688
+ "what",
1689
+ "what'",
1690
+ "when",
1691
+ "where",
1692
+ "which",
1693
+ "why-",
1694
+ "why.",
1695
+ "why_",
1696
+ "widget",
1697
+ "wifi",
1698
+ "wiki",
1699
+ "win-",
1700
+ "win.",
1701
+ "win_",
1702
+ "window",
1703
+ "wip-",
1704
+ "wip.",
1705
+ "wip_",
1706
+ "within",
1707
+ "without",
1708
+ "wizard",
1709
+ "word",
1710
+ "wordpres",
1711
+ "work",
1712
+ "worker",
1713
+ "workflow",
1714
+ "working",
1715
+ "workshop",
1716
+ "world",
1717
+ "wrapper",
1718
+ "write",
1719
+ "writer",
1720
+ "writing",
1721
+ "written",
1722
+ "www-",
1723
+ "www.",
1724
+ "www_",
1725
+ "xamarin",
1726
+ "xcode",
1727
+ "xml-",
1728
+ "xml.",
1729
+ "xml_",
1730
+ "xmpp",
1731
+ "xxxxxx",
1732
+ "yahoo",
1733
+ "yaml",
1734
+ "yandex",
1735
+ "yeoman",
1736
+ "yet-",
1737
+ "yet.",
1738
+ "yet_",
1739
+ "yii-",
1740
+ "yii.",
1741
+ "yii_",
1742
+ "youtube",
1743
+ "yui-",
1744
+ "yui.",
1745
+ "yui_",
1746
+ "zend",
1747
+ "zero",
1748
+ "zip-",
1749
+ "zip.",
1750
+ "zip_",
1751
+ "zsh-",
1752
+ "zsh.",
1753
+ "zsh_"
1754
+ ]
1755
+ },
1756
+ {
1757
+ "regexTarget": "line",
1758
+ "regexes": [
1759
+ "--mount=type=secret,",
1760
+ "import[ \\t]+{[ \\t\\w,]+}[ \\t]+from[ \\t]+['\"][^'\"]+['\"]"
1761
+ ]
1762
+ },
1763
+ {
1764
+ "condition": "AND",
1765
+ "paths": ["\\.bb$", "\\.bbappend$", "\\.bbclass$", "\\.inc$"],
1766
+ "regexTarget": "line",
1767
+ "regexes": [
1768
+ "LICENSE[^=]*=\\s*\"[^\"]+",
1769
+ "LIC_FILES_CHKSUM[^=]*=\\s*\"[^\"]+",
1770
+ "SRC[^=]*=\\s*\"[a-zA-Z0-9]+"
1771
+ ]
1772
+ }
1773
+ ]
1774
+ },
1775
+ {
1776
+ "id": "github-app-token",
1777
+ "description": "Identified a GitHub App Token, which may compromise GitHub application integrations and source code security.",
1778
+ "regex": "(?:ghu|ghs)_[0-9a-zA-Z]{36}",
1779
+ "entropy": 3,
1780
+ "keywords": ["ghu_", "ghs_"],
1781
+ "allowlists": [
1782
+ {
1783
+ "paths": ["(?:^|/)@octokit/auth-token/README\\.md$"]
1784
+ }
1785
+ ]
1786
+ },
1787
+ {
1788
+ "id": "github-fine-grained-pat",
1789
+ "description": "Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation.",
1790
+ "regex": "github_pat_\\w{82}",
1791
+ "entropy": 3,
1792
+ "keywords": ["github_pat_"]
1793
+ }
1794
+ ]