@sakk-dev/sakk 0.0.0-stage → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/marketplace.json +19 -0
- package/.claude-plugin/plugin.json +27 -0
- package/CHANGELOG.md +1421 -0
- package/LICENSE +202 -0
- package/NOTICE +82 -0
- package/README.md +620 -2
- package/README.zh-CN.md +555 -0
- package/bin/sakk.mjs +1460 -0
- package/integrations/litellm/LICENSE +202 -0
- package/integrations/litellm/NOTICE +82 -0
- package/integrations/litellm/README.md +366 -0
- package/integrations/litellm/config.example.yaml +52 -0
- package/integrations/litellm/sakk_gateway.py +823 -0
- package/package.json +88 -4
- package/policies/guard-default.json +161 -0
- package/policies/permissive-dev.json +22 -0
- package/prices/snapshot.json +1404 -0
- package/src/append.mjs +81 -0
- package/src/archive.mjs +489 -0
- package/src/classify.mjs +914 -0
- package/src/console-login.mjs +374 -0
- package/src/console.mjs +1628 -0
- package/src/gateway-status.mjs +203 -0
- package/src/guard-install.mjs +387 -0
- package/src/hook.mjs +730 -0
- package/src/ledger.mjs +1229 -0
- package/src/match.mjs +52 -0
- package/src/mcp.mjs +299 -0
- package/src/policy.mjs +423 -0
- package/src/prices.mjs +152 -0
- package/src/secret-rules.generated.mjs +225 -0
- package/src/secret-scan.mjs +489 -0
- package/src/spend.mjs +443 -0
|
@@ -0,0 +1,225 @@
|
|
|
1
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
|
+
//
|
|
3
|
+
// GENERATED by scripts/gitleaks-port.mjs from config/gitleaks.toml — do not edit by hand.
|
|
4
|
+
// Source: gitleaks (MIT, (c) Zachary Rice), tag v8.21.2 commit a9e1950fe247fbb08817393121691474c55a6cfa.
|
|
5
|
+
// 194 rules ported, 1 refused (listed in REFUSED).
|
|
6
|
+
|
|
7
|
+
export const PINNED = {"tag":"v8.21.2","commit":"a9e1950fe247fbb08817393121691474c55a6cfa"};
|
|
8
|
+
|
|
9
|
+
export const GITLEAKS_RULES = [
|
|
10
|
+
{ id: "1password-service-account-token", re: "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}", flags: "", keywords: ["ops_"], entropy: 4 },
|
|
11
|
+
{ id: "adafruit-api-key", re: "[\\w.-]{0,10}?(?:adafruit)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["adafruit"], entropy: 0 },
|
|
12
|
+
{ id: "adobe-client-id", re: "[\\w.-]{0,10}?(?:adobe)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["adobe"], entropy: 2 },
|
|
13
|
+
{ id: "adobe-client-secret", re: "\\b(p8e-[a-zA-Z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["p8e-"], entropy: 2 },
|
|
14
|
+
{ id: "age-secret-key", re: "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}", flags: "", keywords: ["age-secret-key-1"], entropy: 0 },
|
|
15
|
+
{ id: "airtable-api-key", re: "[\\w.-]{0,10}?(?:airtable)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{17})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["airtable"], entropy: 0 },
|
|
16
|
+
{ id: "algolia-api-key", re: "[\\w.-]{0,10}?(?:algolia)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["algolia"], entropy: 0 },
|
|
17
|
+
{ id: "alibaba-access-key-id", re: "\\b(LTAI[a-zA-Z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ltai"], entropy: 2 },
|
|
18
|
+
{ id: "alibaba-secret-key", re: "[\\w.-]{0,10}?(?:alibaba)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["alibaba"], entropy: 2 },
|
|
19
|
+
{ id: "asana-client-id", re: "[\\w.-]{0,10}?(?:asana)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["asana"], entropy: 0 },
|
|
20
|
+
{ id: "asana-client-secret", re: "[\\w.-]{0,10}?(?:asana)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["asana"], entropy: 0 },
|
|
21
|
+
{ id: "atlassian-api-token", re: "[\\w.-]{0,10}?(?:atlassian|confluence|jira)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["atlassian","confluence","jira"], entropy: 0 },
|
|
22
|
+
{ id: "authress-service-client-access-key", re: "\\b((?:sc|ext|scauth|authress)_[a-zA-Z0-9]{5,30}\\.[a-zA-Z0-9]{4,6}\\.(?:acc)[_-][a-zA-Z0-9-]{10,32}\\.[a-zA-Z0-9+/_=-]{30,120})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sc_","ext_","scauth_","authress_"], entropy: 2 },
|
|
23
|
+
{ id: "aws-access-token", re: "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["a3t","akia","asia","abia","acca"], entropy: 3 },
|
|
24
|
+
{ id: "azure-ad-client-secret", re: "(?:^|[\\\\'\"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'\"\\x60\\s<),])", flags: "", keywords: ["q~"], entropy: 3 },
|
|
25
|
+
{ id: "beamer-api-token", re: "[\\w.-]{0,10}?(?:beamer)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(b_[a-z0-9=_\\-]{44})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["beamer"], entropy: 0 },
|
|
26
|
+
{ id: "bitbucket-client-id", re: "[\\w.-]{0,10}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bitbucket"], entropy: 0 },
|
|
27
|
+
{ id: "bitbucket-client-secret", re: "[\\w.-]{0,10}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bitbucket"], entropy: 0 },
|
|
28
|
+
{ id: "bittrex-access-key", re: "[\\w.-]{0,10}?(?:bittrex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bittrex"], entropy: 0 },
|
|
29
|
+
{ id: "bittrex-secret-key", re: "[\\w.-]{0,10}?(?:bittrex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bittrex"], entropy: 0 },
|
|
30
|
+
{ id: "clojars-api-token", re: "CLOJARS_[a-z0-9]{60}", flags: "i", keywords: ["clojars_"], entropy: 2 },
|
|
31
|
+
{ id: "cloudflare-api-key", re: "[\\w.-]{0,10}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["cloudflare"], entropy: 2 },
|
|
32
|
+
{ id: "cloudflare-global-api-key", re: "[\\w.-]{0,10}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{37})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["cloudflare"], entropy: 2 },
|
|
33
|
+
{ id: "cloudflare-origin-ca-key", re: "\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["cloudflare","v1.0-"], entropy: 2 },
|
|
34
|
+
{ id: "codecov-access-token", re: "[\\w.-]{0,10}?(?:codecov)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["codecov"], entropy: 0 },
|
|
35
|
+
{ id: "cohere-api-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:[cC][oO][hH][eE][rR][eE]|[Cc][Oo]_[Aa][Pp][Ii]_[Kk][Ee][Yy])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["cohere","co_api_key"], entropy: 4 },
|
|
36
|
+
{ id: "coinbase-access-token", re: "[\\w.-]{0,10}?(?:coinbase)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["coinbase"], entropy: 0 },
|
|
37
|
+
{ id: "confluent-access-token", re: "[\\w.-]{0,10}?(?:confluent)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["confluent"], entropy: 0 },
|
|
38
|
+
{ id: "confluent-secret-key", re: "[\\w.-]{0,10}?(?:confluent)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["confluent"], entropy: 0 },
|
|
39
|
+
{ id: "contentful-delivery-api-token", re: "[\\w.-]{0,10}?(?:contentful)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["contentful"], entropy: 0 },
|
|
40
|
+
{ id: "curl-auth-user", re: "\\bcurl\\b(?:.*|.*(?:[\\r\\n]{1,2}.*){1,5})[ \\t\\n\\r](?:-u|--user)(?:=|[ \\t]{0,5})(?:\"([^:\"]{3,}:[^\"]{3,})\"|'([^:']{3,}:[^']{3,})'|((?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w$@.-]+):(?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w${}@.-]+)))(?:\\s|$)", flags: "", keywords: ["curl"], entropy: 2 },
|
|
41
|
+
{ id: "databricks-api-token", re: "\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["dapi"], entropy: 3 },
|
|
42
|
+
{ id: "datadog-access-token", re: "[\\w.-]{0,10}?(?:datadog)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["datadog"], entropy: 0 },
|
|
43
|
+
{ id: "defined-networking-api-token", re: "[\\w.-]{0,10}?(?:dnkey)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dnkey"], entropy: 0 },
|
|
44
|
+
{ id: "digitalocean-access-token", re: "\\b(doo_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["doo_v1_"], entropy: 3 },
|
|
45
|
+
{ id: "digitalocean-pat", re: "\\b(dop_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["dop_v1_"], entropy: 3 },
|
|
46
|
+
{ id: "digitalocean-refresh-token", re: "\\b(dor_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dor_v1_"], entropy: 0 },
|
|
47
|
+
{ id: "discord-api-token", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 0 },
|
|
48
|
+
{ id: "discord-client-id", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{18})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 2 },
|
|
49
|
+
{ id: "discord-client-secret", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 2 },
|
|
50
|
+
{ id: "doppler-api-token", re: "dp\\.pt\\.[a-zA-Z0-9]{43}", flags: "", keywords: ["dp.pt."], entropy: 2 },
|
|
51
|
+
{ id: "droneci-access-token", re: "[\\w.-]{0,10}?(?:droneci)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["droneci"], entropy: 0 },
|
|
52
|
+
{ id: "dropbox-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{15})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
|
|
53
|
+
{ id: "dropbox-long-lived-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
|
|
54
|
+
{ id: "dropbox-short-lived-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(sl\\.[a-z0-9\\-=_]{135})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
|
|
55
|
+
{ id: "duffel-api-token", re: "duffel_(?:test|live)_[a-zA-Z0-9_\\-=]{43}", flags: "", keywords: ["duffel_"], entropy: 2 },
|
|
56
|
+
{ id: "dynatrace-api-token", re: "dt0c01\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{64}", flags: "", keywords: ["dt0c01"], entropy: 4 },
|
|
57
|
+
{ id: "easypost-api-token", re: "\\bEZAK[a-zA-Z0-9]{54}", flags: "", keywords: ["ezak"], entropy: 2 },
|
|
58
|
+
{ id: "easypost-test-api-token", re: "\\bEZTK[a-zA-Z0-9]{54}", flags: "", keywords: ["eztk"], entropy: 2 },
|
|
59
|
+
{ id: "etsy-access-token", re: "[\\w.-]{0,10}?(?:(?:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["etsy"], entropy: 3 },
|
|
60
|
+
{ id: "facebook-access-token", re: "\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: [], entropy: 3 },
|
|
61
|
+
{ id: "facebook-page-access-token", re: "\\b(EAA[MC][a-zA-Z0-9]{20,})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["eaam","eaac"], entropy: 3 },
|
|
62
|
+
{ id: "facebook-secret", re: "[\\w.-]{0,10}?(?:facebook)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["facebook"], entropy: 3 },
|
|
63
|
+
{ id: "fastly-api-token", re: "[\\w.-]{0,10}?(?:fastly)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["fastly"], entropy: 0 },
|
|
64
|
+
{ id: "finicity-api-token", re: "[\\w.-]{0,10}?(?:finicity)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finicity"], entropy: 0 },
|
|
65
|
+
{ id: "finicity-client-secret", re: "[\\w.-]{0,10}?(?:finicity)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finicity"], entropy: 0 },
|
|
66
|
+
{ id: "finnhub-access-token", re: "[\\w.-]{0,10}?(?:finnhub)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finnhub"], entropy: 0 },
|
|
67
|
+
{ id: "flickr-access-token", re: "[\\w.-]{0,10}?(?:flickr)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["flickr"], entropy: 0 },
|
|
68
|
+
{ id: "flutterwave-encryption-key", re: "FLWSECK_TEST-[a-hA-H0-9]{12}", flags: "", keywords: ["flwseck_test"], entropy: 2 },
|
|
69
|
+
{ id: "flutterwave-public-key", re: "FLWPUBK_TEST-[a-hA-H0-9]{32}-[Xx]", flags: "", keywords: ["flwpubk_test"], entropy: 2 },
|
|
70
|
+
{ id: "flutterwave-secret-key", re: "FLWSECK_TEST-[a-hA-H0-9]{32}-[Xx]", flags: "", keywords: ["flwseck_test"], entropy: 2 },
|
|
71
|
+
{ id: "flyio-access-token", re: "\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["fo1_","fm1","fm2_"], entropy: 4 },
|
|
72
|
+
{ id: "frameio-api-token", re: "fio-u-[a-zA-Z0-9\\-_=]{64}", flags: "", keywords: ["fio-u-"], entropy: 0 },
|
|
73
|
+
{ id: "freshbooks-access-token", re: "[\\w.-]{0,10}?(?:freshbooks)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["freshbooks"], entropy: 0 },
|
|
74
|
+
{ id: "gcp-api-key", re: "\\b(AIza[\\w-]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["aiza"], entropy: 3 },
|
|
75
|
+
{ id: "generic-api-key", re: "[\\w.-]{0,10}?(?:[aA][cC][cC][eE][sS][sS]|[aA][uU][tT][hH]|(?:[Aa]pi|API)|[cC][rR][eE][dD][eE][nN][tT][iI][aA][lL]|[cC][rR][eE][dD][sS]|[kK][eE][yY]|[pP][aA][sS][sS][wW][dD]|[pP][aA][sS][sS][wW][oO][rR][dD]|[sS][eE][cC][rR][eE][tT]|[tT][oO][kK][eE][nN])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([\\w.=-]{10,150})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["access","api","auth","key","credential","creds","passwd","password","secret","token"], entropy: 3.5 },
|
|
76
|
+
{ id: "github-app-token", re: "(?:ghu|ghs)_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghu_","ghs_"], entropy: 3 },
|
|
77
|
+
{ id: "github-fine-grained-pat", re: "github_pat_\\w{82}", flags: "", keywords: ["github_pat_"], entropy: 3 },
|
|
78
|
+
{ id: "github-oauth", re: "gho_[0-9a-zA-Z]{36}", flags: "", keywords: ["gho_"], entropy: 3 },
|
|
79
|
+
{ id: "github-pat", re: "ghp_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghp_"], entropy: 3 },
|
|
80
|
+
{ id: "github-refresh-token", re: "ghr_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghr_"], entropy: 3 },
|
|
81
|
+
{ id: "gitlab-cicd-job-token", re: "glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}", flags: "", keywords: ["glcbt-"], entropy: 3 },
|
|
82
|
+
{ id: "gitlab-deploy-token", re: "gldt-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["gldt-"], entropy: 3 },
|
|
83
|
+
{ id: "gitlab-feature-flag-client-token", re: "glffct-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glffct-"], entropy: 3 },
|
|
84
|
+
{ id: "gitlab-feed-token", re: "glft-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glft-"], entropy: 3 },
|
|
85
|
+
{ id: "gitlab-incoming-mail-token", re: "glimt-[0-9a-zA-Z_\\-]{25}", flags: "", keywords: ["glimt-"], entropy: 3 },
|
|
86
|
+
{ id: "gitlab-kubernetes-agent-token", re: "glagent-[0-9a-zA-Z_\\-]{50}", flags: "", keywords: ["glagent-"], entropy: 3 },
|
|
87
|
+
{ id: "gitlab-oauth-app-secret", re: "gloas-[0-9a-zA-Z_\\-]{64}", flags: "", keywords: ["gloas-"], entropy: 3 },
|
|
88
|
+
{ id: "gitlab-pat", re: "glpat-[\\w-]{20}", flags: "", keywords: ["glpat-"], entropy: 3 },
|
|
89
|
+
{ id: "gitlab-ptt", re: "glptt-[0-9a-f]{40}", flags: "", keywords: ["glptt-"], entropy: 3 },
|
|
90
|
+
{ id: "gitlab-rrt", re: "GR1348941[\\w-]{20}", flags: "", keywords: ["gr1348941"], entropy: 3 },
|
|
91
|
+
{ id: "gitlab-runner-authentication-token", re: "glrt-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glrt-"], entropy: 3 },
|
|
92
|
+
{ id: "gitlab-scim-token", re: "glsoat-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glsoat-"], entropy: 3 },
|
|
93
|
+
{ id: "gitlab-session-cookie", re: "_gitlab_session=[0-9a-z]{32}", flags: "", keywords: ["_gitlab_session="], entropy: 3 },
|
|
94
|
+
{ id: "gitter-access-token", re: "[\\w.-]{0,10}?(?:gitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["gitter"], entropy: 0 },
|
|
95
|
+
{ id: "gocardless-api-token", re: "[\\w.-]{0,10}?(?:gocardless)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(live_[a-zA-Z0-9\\-_=]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["live_","gocardless"], entropy: 0 },
|
|
96
|
+
{ id: "grafana-api-key", re: "\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["eyjrijoi"], entropy: 3 },
|
|
97
|
+
{ id: "grafana-cloud-api-token", re: "\\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["glc_"], entropy: 3 },
|
|
98
|
+
{ id: "grafana-service-account-token", re: "\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["glsa_"], entropy: 3 },
|
|
99
|
+
{ id: "harness-api-key", re: "(?:pat|sat)\\.[a-zA-Z0-9_-]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20}", flags: "", keywords: ["pat.","sat."], entropy: 0 },
|
|
100
|
+
{ id: "hashicorp-tf-api-token", re: "[a-zA-Z0-9]{14}\\.(?:atlasv1)\\.[a-zA-Z0-9\\-_=]{60,70}", flags: "", keywords: ["atlasv1"], entropy: 3.5 },
|
|
101
|
+
{ id: "hashicorp-tf-password", re: "[\\w.-]{0,10}?(?:administrator_login_password|password)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(\"[a-z0-9=_\\-]{8,20}\")(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["administrator_login_password","password"], entropy: 2 },
|
|
102
|
+
{ id: "heroku-api-key", re: "[\\w.-]{0,10}?(?:heroku)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["heroku"], entropy: 0 },
|
|
103
|
+
{ id: "hubspot-api-key", re: "[\\w.-]{0,10}?(?:hubspot)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["hubspot"], entropy: 0 },
|
|
104
|
+
{ id: "huggingface-access-token", re: "(?:^|[\\\\'\"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\\\'\"` <])", flags: "", keywords: ["hf_"], entropy: 2 },
|
|
105
|
+
{ id: "huggingface-organization-api-token", re: "(?:^|[\\\\'\"` >=:\\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\\\'\"` <\\),])", flags: "", keywords: ["api_org_"], entropy: 2 },
|
|
106
|
+
{ id: "infracost-api-token", re: "\\b(ico-[a-zA-Z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ico-"], entropy: 3 },
|
|
107
|
+
{ id: "intercom-api-key", re: "[\\w.-]{0,10}?(?:intercom)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{60})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["intercom"], entropy: 0 },
|
|
108
|
+
{ id: "intra42-client-secret", re: "\\b(s-s4t2(?:ud|af)-[aAbBcCdDeEfF0123456789]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["intra","s-s4t2ud-","s-s4t2af-"], entropy: 3 },
|
|
109
|
+
{ id: "jfrog-api-key", re: "[\\w.-]{0,10}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{73})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["jfrog","artifactory","bintray","xray"], entropy: 0 },
|
|
110
|
+
{ id: "jfrog-identity-token", re: "[\\w.-]{0,10}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["jfrog","artifactory","bintray","xray"], entropy: 0 },
|
|
111
|
+
{ id: "jwt", re: "\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ey"], entropy: 3 },
|
|
112
|
+
{ id: "jwt-base64", re: "\\bZXlK(?:(?<alg>aGJHY2lPaU)|(?<apu>aGNIVWlPaU)|(?<apv>aGNIWWlPaU)|(?<aud>aGRXUWlPaU)|(?<b64>aU5qUWlP)|(?<crit>amNtbDBJanBi)|(?<cty>amRIa2lPaU)|(?<epk>bGNHc2lPbn)|(?<enc>bGJtTWlPaU)|(?<jku>cWEzVWlPaU)|(?<jwk>cWQyc2lPb)|(?<iss>cGMzTWlPaU)|(?<iv>cGRpSTZJ)|(?<kid>cmFXUWlP)|(?<key_ops>clpYbGZiM0J6SWpwY)|(?<kty>cmRIa2lPaUp)|(?<nonce>dWIyNWpaU0k2)|(?<p2c>d01tTWlP)|(?<p2s>d01uTWlPaU)|(?<ppt>d2NIUWlPaU)|(?<sub>emRXSWlPaU)|(?<svt>emRuUWlP)|(?<tag>MFlXY2lPaU)|(?<typ>MGVYQWlPaUp)|(?<url>MWNtd2l)|(?<use>MWMyVWlPaUp)|(?<ver>MlpYSWlPaU)|(?<version>MlpYSnphVzl1SWpv)|(?<x>NElqb2)|(?<x5c>NE5XTWlP)|(?<x5t>NE5YUWlPaU)|(?<x5ts256>NE5YUWpVekkxTmlJNkl)|(?<x5u>NE5YVWlPaU)|(?<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}", flags: "", keywords: ["zxlk"], entropy: 2 },
|
|
113
|
+
{ id: "kraken-access-token", re: "[\\w.-]{0,10}?(?:kraken)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kraken"], entropy: 0 },
|
|
114
|
+
{ id: "kubernetes-secret-yaml", re: "(?:\\bkind:[ \\t]*[\"']?secret[\"']?[\\s\\S]{0,200}?\\bdata:[\\s\\S]{0,100}?\\s+([\\w.-]+:(?:[ \\t]*(?:\\||>[-+]?)\\s+)?[ \\t]*(?:[\"']?[a-z0-9+/]{10,}={0,3}[\"']?|\\{\\{[ \\t\\w\"|$:=,.-]+}}|\"\"|''))|\\bdata:[\\s\\S]{0,100}?\\s+([\\w.-]+:(?:[ \\t]*(?:\\||>[-+]?)\\s+)?[ \\t]*(?:[\"']?[a-z0-9+/]{10,}={0,3}[\"']?|\\{\\{[ \\t\\w\"|$:=,.-]+}}|\"\"|''))[\\s\\S]{0,200}?\\bkind:[ \\t]*[\"']?secret[\"']?)", flags: "i", keywords: ["secret"], entropy: 0 },
|
|
115
|
+
{ id: "kucoin-access-token", re: "[\\w.-]{0,10}?(?:kucoin)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kucoin"], entropy: 0 },
|
|
116
|
+
{ id: "kucoin-secret-key", re: "[\\w.-]{0,10}?(?:kucoin)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kucoin"], entropy: 0 },
|
|
117
|
+
{ id: "launchdarkly-access-token", re: "[\\w.-]{0,10}?(?:launchdarkly)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["launchdarkly"], entropy: 0 },
|
|
118
|
+
{ id: "linear-api-key", re: "lin_api_[a-zA-Z0-9]{40}", flags: "", keywords: ["lin_api_"], entropy: 2 },
|
|
119
|
+
{ id: "linear-client-secret", re: "[\\w.-]{0,10}?(?:linear)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linear"], entropy: 2 },
|
|
120
|
+
{ id: "linkedin-client-id", re: "[\\w.-]{0,10}?(?:linkedin|linked-in)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{14})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linkedin","linked-in"], entropy: 0 },
|
|
121
|
+
{ id: "linkedin-client-secret", re: "[\\w.-]{0,10}?(?:linkedin|linked-in)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linkedin","linked-in"], entropy: 0 },
|
|
122
|
+
{ id: "lob-api-key", re: "[\\w.-]{0,10}?(?:lob)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["test_","live_"], entropy: 0 },
|
|
123
|
+
{ id: "lob-pub-api-key", re: "[\\w.-]{0,10}?(?:lob)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["test_pub","live_pub","_pub"], entropy: 0 },
|
|
124
|
+
{ id: "mailchimp-api-key", re: "[\\w.-]{0,10}?(?:MailchimpSDK.initialize|mailchimp)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32}-us\\d\\d)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailchimp"], entropy: 0 },
|
|
125
|
+
{ id: "mailgun-private-api-token", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(key-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
|
|
126
|
+
{ id: "mailgun-pub-key", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
|
|
127
|
+
{ id: "mailgun-signing-key", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
|
|
128
|
+
{ id: "mapbox-api-token", re: "[\\w.-]{0,10}?(?:mapbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mapbox"], entropy: 0 },
|
|
129
|
+
{ id: "mattermost-access-token", re: "[\\w.-]{0,10}?(?:mattermost)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{26})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mattermost"], entropy: 0 },
|
|
130
|
+
{ id: "messagebird-api-token", re: "[\\w.-]{0,10}?(?:messagebird|message-bird|message_bird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{25})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["messagebird","message-bird","message_bird"], entropy: 0 },
|
|
131
|
+
{ id: "messagebird-client-id", re: "[\\w.-]{0,10}?(?:messagebird|message-bird|message_bird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["messagebird","message-bird","message_bird"], entropy: 0 },
|
|
132
|
+
{ id: "microsoft-teams-webhook", re: "https://[a-z0-9]+\\.webhook\\.office\\.com/webhookb2/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/IncomingWebhook/[a-z0-9]{32}/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}", flags: "", keywords: ["webhook.office.com","webhookb2","incomingwebhook"], entropy: 0 },
|
|
133
|
+
{ id: "netlify-access-token", re: "[\\w.-]{0,10}?(?:netlify)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{40,46})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["netlify"], entropy: 0 },
|
|
134
|
+
{ id: "new-relic-browser-api-token", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrjs-"], entropy: 0 },
|
|
135
|
+
{ id: "new-relic-insert-key", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrii-"], entropy: 0 },
|
|
136
|
+
{ id: "new-relic-user-api-id", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["new-relic","newrelic","new_relic"], entropy: 0 },
|
|
137
|
+
{ id: "new-relic-user-api-key", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrak"], entropy: 0 },
|
|
138
|
+
{ id: "npm-access-token", re: "\\b(npm_[a-z0-9]{36})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["npm_"], entropy: 2 },
|
|
139
|
+
{ id: "nuget-config-password", re: "<add key=\\\"(?:(?:ClearText)?Password)\\\"\\s*value=\\\"(.{8,})\\\"\\s*/>", flags: "i", keywords: ["<add key="], entropy: 1 },
|
|
140
|
+
{ id: "nytimes-access-token", re: "[\\w.-]{0,10}?(?:nytimes|new-york-times,|newyorktimes)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nytimes","new-york-times","newyorktimes"], entropy: 0 },
|
|
141
|
+
{ id: "octopus-deploy-api-key", re: "\\b(API-[A-Z0-9]{26})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["api-"], entropy: 3 },
|
|
142
|
+
{ id: "okta-access-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:(?:[Oo]kta|OKTA))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(00[\\w=\\-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["okta"], entropy: 4 },
|
|
143
|
+
{ id: "openai-api-key", re: "\\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["t3blbkfj"], entropy: 3 },
|
|
144
|
+
{ id: "openshift-user-token", re: "\\b(sha256~[\\w-]{43})(?:[^\\w-]|$)", flags: "", keywords: ["sha256~"], entropy: 3.5 },
|
|
145
|
+
{ id: "plaid-api-token", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 0 },
|
|
146
|
+
{ id: "plaid-client-id", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 3.5 },
|
|
147
|
+
{ id: "plaid-secret-key", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 3.5 },
|
|
148
|
+
{ id: "planetscale-api-token", re: "\\b(pscale_tkn_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pscale_tkn_"], entropy: 3 },
|
|
149
|
+
{ id: "planetscale-oauth-token", re: "\\b(pscale_oauth_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pscale_oauth_"], entropy: 3 },
|
|
150
|
+
{ id: "planetscale-password", re: "\\b(pscale_pw_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["pscale_pw_"], entropy: 3 },
|
|
151
|
+
{ id: "postman-api-token", re: "\\b(PMAK-[a-fA-F0-9]{24}\\-[a-fA-F0-9]{34})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pmak-"], entropy: 3 },
|
|
152
|
+
{ id: "prefect-api-token", re: "\\b(pnu_[a-zA-Z0-9]{36})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pnu_"], entropy: 2 },
|
|
153
|
+
{ id: "private-key", re: "-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\\s\\S-]*?KEY(?: BLOCK)?-----", flags: "i", keywords: ["-----begin"], entropy: 0 },
|
|
154
|
+
{ id: "privateai-api-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:[pP][rR][iI][vV][aA][tT][eE][_-]?[aA][iI])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["privateai","private_ai","private-ai"], entropy: 3 },
|
|
155
|
+
{ id: "pulumi-api-token", re: "\\b(pul-[a-f0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pul-"], entropy: 2 },
|
|
156
|
+
{ id: "pypi-upload-token", re: "pypi-AgEIcHlwaS5vcmc[\\w-]{50,1000}", flags: "", keywords: ["pypi-ageichlwas5vcmc"], entropy: 3 },
|
|
157
|
+
{ id: "rapidapi-access-token", re: "[\\w.-]{0,10}?(?:rapidapi)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{50})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["rapidapi"], entropy: 0 },
|
|
158
|
+
{ id: "readme-api-token", re: "\\b(rdme_[a-z0-9]{70})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["rdme_"], entropy: 2 },
|
|
159
|
+
{ id: "rubygems-api-token", re: "\\b(rubygems_[a-f0-9]{48})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["rubygems_"], entropy: 2 },
|
|
160
|
+
{ id: "scalingo-api-token", re: "\\b(tk-us-[\\w-]{48})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["tk-us-"], entropy: 2 },
|
|
161
|
+
{ id: "sendbird-access-id", re: "[\\w.-]{0,10}?(?:sendbird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sendbird"], entropy: 0 },
|
|
162
|
+
{ id: "sendbird-access-token", re: "[\\w.-]{0,10}?(?:sendbird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sendbird"], entropy: 0 },
|
|
163
|
+
{ id: "sendgrid-api-token", re: "\\b(SG\\.[a-zA-Z0-9=_\\-\\.]{66})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sg."], entropy: 2 },
|
|
164
|
+
{ id: "sendinblue-api-token", re: "\\b(xkeysib-[a-f0-9]{64}\\-[a-zA-Z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["xkeysib-"], entropy: 2 },
|
|
165
|
+
{ id: "sentry-access-token", re: "[\\w.-]{0,10}?(?:sentry)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sentry"], entropy: 0 },
|
|
166
|
+
{ id: "shippo-api-token", re: "\\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["shippo_"], entropy: 2 },
|
|
167
|
+
{ id: "shopify-access-token", re: "shpat_[a-fA-F0-9]{32}", flags: "", keywords: ["shpat_"], entropy: 2 },
|
|
168
|
+
{ id: "shopify-custom-access-token", re: "shpca_[a-fA-F0-9]{32}", flags: "", keywords: ["shpca_"], entropy: 2 },
|
|
169
|
+
{ id: "shopify-private-app-access-token", re: "shppa_[a-fA-F0-9]{32}", flags: "", keywords: ["shppa_"], entropy: 2 },
|
|
170
|
+
{ id: "shopify-shared-secret", re: "shpss_[a-fA-F0-9]{32}", flags: "", keywords: ["shpss_"], entropy: 2 },
|
|
171
|
+
{ id: "sidekiq-secret", re: "[\\w.-]{0,10}?(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bundle_enterprise__contribsys__com","bundle_gems__contribsys__com"], entropy: 0 },
|
|
172
|
+
{ id: "sidekiq-sensitive-url", re: "\\bhttps?://([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\\/|\\#|\\?|:]|$)", flags: "i", keywords: ["gems.contribsys.com","enterprise.contribsys.com"], entropy: 0 },
|
|
173
|
+
{ id: "slack-app-token", re: "xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+", flags: "i", keywords: ["xapp"], entropy: 2 },
|
|
174
|
+
{ id: "slack-bot-token", re: "xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*", flags: "", keywords: ["xoxb"], entropy: 3 },
|
|
175
|
+
{ id: "slack-config-access-token", re: "xoxe.xox[bp]-\\d-[A-Z0-9]{163,166}", flags: "i", keywords: ["xoxe.xoxb-","xoxe.xoxp-"], entropy: 2 },
|
|
176
|
+
{ id: "slack-config-refresh-token", re: "xoxe-\\d-[A-Z0-9]{146}", flags: "i", keywords: ["xoxe-"], entropy: 2 },
|
|
177
|
+
{ id: "slack-legacy-bot-token", re: "xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}", flags: "", keywords: ["xoxb"], entropy: 2 },
|
|
178
|
+
{ id: "slack-legacy-token", re: "xox[os]-\\d+-\\d+-\\d+-[a-fA-F\\d]+", flags: "", keywords: ["xoxo","xoxs"], entropy: 2 },
|
|
179
|
+
{ id: "slack-legacy-workspace-token", re: "xox[ar]-(?:\\d-)?[0-9a-zA-Z]{8,48}", flags: "", keywords: ["xoxa","xoxr"], entropy: 2 },
|
|
180
|
+
{ id: "slack-user-token", re: "xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}", flags: "", keywords: ["xoxp-","xoxe-"], entropy: 2 },
|
|
181
|
+
{ id: "slack-webhook-url", re: "(?:https?://)?hooks.slack.com/(?:services|workflows)/[A-Za-z0-9+/]{43,46}", flags: "", keywords: ["hooks.slack.com"], entropy: 0 },
|
|
182
|
+
{ id: "snyk-api-token", re: "[\\w.-]{0,10}?(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token"], entropy: 0 },
|
|
183
|
+
{ id: "square-access-token", re: "\\b((?:EAAA|sq0atp-)[\\w-]{22,60})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sq0atp-","eaaa"], entropy: 2 },
|
|
184
|
+
{ id: "squarespace-access-token", re: "[\\w.-]{0,10}?(?:squarespace)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["squarespace"], entropy: 0 },
|
|
185
|
+
{ id: "stripe-access-token", re: "\\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod"], entropy: 2 },
|
|
186
|
+
{ id: "sumologic-access-id", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:(?:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sumo"], entropy: 3 },
|
|
187
|
+
{ id: "sumologic-access-token", re: "[\\w.-]{0,10}?(?:(?:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sumo"], entropy: 3 },
|
|
188
|
+
{ id: "telegram-bot-api-token", re: "(?:[tT][eE][lL][eE][gG][rR](?:[0-9a-zA-Z\\(-_\\t .\\\\]{0,40})(?:[\\s|']|[\\s|\"]){0,3})(?:=|\\|\\|:|<=|=>|:|\\?=|\\()(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{5,16}:A[a-z0-9_\\-]{34})(?:['|\\\"|\\n|\\r|\\s|\\x60|;|\\\\]|$)", flags: "", keywords: ["telegr"], entropy: 0 },
|
|
189
|
+
{ id: "travisci-access-token", re: "[\\w.-]{0,10}?(?:travis)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{22})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["travis"], entropy: 0 },
|
|
190
|
+
{ id: "twilio-api-key", re: "SK[0-9a-fA-F]{32}", flags: "", keywords: ["sk"], entropy: 3 },
|
|
191
|
+
{ id: "twitch-api-token", re: "[\\w.-]{0,10}?(?:twitch)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitch"], entropy: 0 },
|
|
192
|
+
{ id: "twitter-access-secret", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{45})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
|
|
193
|
+
{ id: "twitter-access-token", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
|
|
194
|
+
{ id: "twitter-api-key", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{25})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
|
|
195
|
+
{ id: "twitter-api-secret", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{50})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
|
|
196
|
+
{ id: "twitter-bearer-token", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
|
|
197
|
+
{ id: "typeform-api-token", re: "[\\w.-]{0,10}?(?:typeform)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(tfp_[a-z0-9\\-_\\.=]{59})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["tfp_"], entropy: 0 },
|
|
198
|
+
{ id: "vault-batch-token", re: "\\b(hvb\\.[\\w-]{138,300})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["hvb."], entropy: 4 },
|
|
199
|
+
{ id: "vault-service-token", re: "\\b((?:hvs\\.[\\w-]{90,120}|s\\.(?:[a-zA-Z0-9]{24})))(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["hvs.","s."], entropy: 3.5 },
|
|
200
|
+
{ id: "yandex-access-token", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(t1\\.[A-Z0-9a-z_-]+[=]{0,2}\\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
|
|
201
|
+
{ id: "yandex-api-key", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(AQVN[A-Za-z0-9_\\-]{35,38})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
|
|
202
|
+
{ id: "yandex-aws-access-token", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(YC[a-zA-Z0-9_\\-]{38})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
|
|
203
|
+
{ id: "zendesk-secret-key", re: "[\\w.-]{0,10}?(?:zendesk)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["zendesk"], entropy: 0 },
|
|
204
|
+
];
|
|
205
|
+
|
|
206
|
+
export const GITLEAKS_ALLOWLIST = [
|
|
207
|
+
{ re: "^true|false|null$", flags: "i" },
|
|
208
|
+
{ re: "^(?:[aA]+|[bB]+|[cC]+|[dD]+|[eE]+|[fF]+|[gG]+|[hH]+|[iI]+|[jJ]+|[kK]+|[lL]+|[mM]+|[nN]+|[oO]+|[pP]+|[qQ]+|[rR]+|[sS]+|[tT]+|[uU]+|[vV]+|[wW]+|[xX]+|[yY]+|[zZ]+|\\*+|\\.+)$", flags: "" },
|
|
209
|
+
{ re: "^\\$(\\d+|{\\d+})$", flags: "" },
|
|
210
|
+
{ re: "^\\$([A-Z_]+|[a-z_]+)$", flags: "" },
|
|
211
|
+
{ re: "^\\${([A-Z_]+|[a-z_]+)}$", flags: "" },
|
|
212
|
+
{ re: "^\\{\\{[ \\t]*[\\w ().|]+[ \\t]*}}$", flags: "" },
|
|
213
|
+
{ re: "^\\$\\{\\{[ \\t]*((env|github|secrets|vars)(\\.[A-Za-z]\\w+)+[\\w \"'&./=|]*)[ \\t]*}}$", flags: "" },
|
|
214
|
+
{ re: "^%([A-Z_]+|[a-z_]+)%$", flags: "" },
|
|
215
|
+
{ re: "^%[+\\-# 0]?[bcdeEfFgGoOpqstTUvxX]$", flags: "" },
|
|
216
|
+
{ re: "^\\{\\d{0,2}}$", flags: "" },
|
|
217
|
+
{ re: "^@([A-Z_]+|[a-z_]+)@$", flags: "" },
|
|
218
|
+
];
|
|
219
|
+
|
|
220
|
+
export const REFUSED = [
|
|
221
|
+
{
|
|
222
|
+
"id": "curl-auth-header",
|
|
223
|
+
"why": "unhandled inline group (?i) while case-folding"
|
|
224
|
+
}
|
|
225
|
+
];
|