@sakk-dev/sakk 0.0.0-stage → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,225 @@
1
+ // SPDX-License-Identifier: Apache-2.0
2
+ //
3
+ // GENERATED by scripts/gitleaks-port.mjs from config/gitleaks.toml — do not edit by hand.
4
+ // Source: gitleaks (MIT, (c) Zachary Rice), tag v8.21.2 commit a9e1950fe247fbb08817393121691474c55a6cfa.
5
+ // 194 rules ported, 1 refused (listed in REFUSED).
6
+
7
+ export const PINNED = {"tag":"v8.21.2","commit":"a9e1950fe247fbb08817393121691474c55a6cfa"};
8
+
9
+ export const GITLEAKS_RULES = [
10
+ { id: "1password-service-account-token", re: "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}", flags: "", keywords: ["ops_"], entropy: 4 },
11
+ { id: "adafruit-api-key", re: "[\\w.-]{0,10}?(?:adafruit)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["adafruit"], entropy: 0 },
12
+ { id: "adobe-client-id", re: "[\\w.-]{0,10}?(?:adobe)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["adobe"], entropy: 2 },
13
+ { id: "adobe-client-secret", re: "\\b(p8e-[a-zA-Z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["p8e-"], entropy: 2 },
14
+ { id: "age-secret-key", re: "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}", flags: "", keywords: ["age-secret-key-1"], entropy: 0 },
15
+ { id: "airtable-api-key", re: "[\\w.-]{0,10}?(?:airtable)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{17})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["airtable"], entropy: 0 },
16
+ { id: "algolia-api-key", re: "[\\w.-]{0,10}?(?:algolia)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["algolia"], entropy: 0 },
17
+ { id: "alibaba-access-key-id", re: "\\b(LTAI[a-zA-Z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ltai"], entropy: 2 },
18
+ { id: "alibaba-secret-key", re: "[\\w.-]{0,10}?(?:alibaba)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["alibaba"], entropy: 2 },
19
+ { id: "asana-client-id", re: "[\\w.-]{0,10}?(?:asana)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["asana"], entropy: 0 },
20
+ { id: "asana-client-secret", re: "[\\w.-]{0,10}?(?:asana)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["asana"], entropy: 0 },
21
+ { id: "atlassian-api-token", re: "[\\w.-]{0,10}?(?:atlassian|confluence|jira)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["atlassian","confluence","jira"], entropy: 0 },
22
+ { id: "authress-service-client-access-key", re: "\\b((?:sc|ext|scauth|authress)_[a-zA-Z0-9]{5,30}\\.[a-zA-Z0-9]{4,6}\\.(?:acc)[_-][a-zA-Z0-9-]{10,32}\\.[a-zA-Z0-9+/_=-]{30,120})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sc_","ext_","scauth_","authress_"], entropy: 2 },
23
+ { id: "aws-access-token", re: "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["a3t","akia","asia","abia","acca"], entropy: 3 },
24
+ { id: "azure-ad-client-secret", re: "(?:^|[\\\\'\"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'\"\\x60\\s<),])", flags: "", keywords: ["q~"], entropy: 3 },
25
+ { id: "beamer-api-token", re: "[\\w.-]{0,10}?(?:beamer)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(b_[a-z0-9=_\\-]{44})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["beamer"], entropy: 0 },
26
+ { id: "bitbucket-client-id", re: "[\\w.-]{0,10}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bitbucket"], entropy: 0 },
27
+ { id: "bitbucket-client-secret", re: "[\\w.-]{0,10}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bitbucket"], entropy: 0 },
28
+ { id: "bittrex-access-key", re: "[\\w.-]{0,10}?(?:bittrex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bittrex"], entropy: 0 },
29
+ { id: "bittrex-secret-key", re: "[\\w.-]{0,10}?(?:bittrex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bittrex"], entropy: 0 },
30
+ { id: "clojars-api-token", re: "CLOJARS_[a-z0-9]{60}", flags: "i", keywords: ["clojars_"], entropy: 2 },
31
+ { id: "cloudflare-api-key", re: "[\\w.-]{0,10}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["cloudflare"], entropy: 2 },
32
+ { id: "cloudflare-global-api-key", re: "[\\w.-]{0,10}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{37})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["cloudflare"], entropy: 2 },
33
+ { id: "cloudflare-origin-ca-key", re: "\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["cloudflare","v1.0-"], entropy: 2 },
34
+ { id: "codecov-access-token", re: "[\\w.-]{0,10}?(?:codecov)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["codecov"], entropy: 0 },
35
+ { id: "cohere-api-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:[cC][oO][hH][eE][rR][eE]|[Cc][Oo]_[Aa][Pp][Ii]_[Kk][Ee][Yy])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["cohere","co_api_key"], entropy: 4 },
36
+ { id: "coinbase-access-token", re: "[\\w.-]{0,10}?(?:coinbase)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["coinbase"], entropy: 0 },
37
+ { id: "confluent-access-token", re: "[\\w.-]{0,10}?(?:confluent)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["confluent"], entropy: 0 },
38
+ { id: "confluent-secret-key", re: "[\\w.-]{0,10}?(?:confluent)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["confluent"], entropy: 0 },
39
+ { id: "contentful-delivery-api-token", re: "[\\w.-]{0,10}?(?:contentful)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["contentful"], entropy: 0 },
40
+ { id: "curl-auth-user", re: "\\bcurl\\b(?:.*|.*(?:[\\r\\n]{1,2}.*){1,5})[ \\t\\n\\r](?:-u|--user)(?:=|[ \\t]{0,5})(?:\"([^:\"]{3,}:[^\"]{3,})\"|'([^:']{3,}:[^']{3,})'|((?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w$@.-]+):(?:\"[^\"]{3,}\"|'[^']{3,}'|[\\w${}@.-]+)))(?:\\s|$)", flags: "", keywords: ["curl"], entropy: 2 },
41
+ { id: "databricks-api-token", re: "\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["dapi"], entropy: 3 },
42
+ { id: "datadog-access-token", re: "[\\w.-]{0,10}?(?:datadog)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["datadog"], entropy: 0 },
43
+ { id: "defined-networking-api-token", re: "[\\w.-]{0,10}?(?:dnkey)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dnkey"], entropy: 0 },
44
+ { id: "digitalocean-access-token", re: "\\b(doo_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["doo_v1_"], entropy: 3 },
45
+ { id: "digitalocean-pat", re: "\\b(dop_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["dop_v1_"], entropy: 3 },
46
+ { id: "digitalocean-refresh-token", re: "\\b(dor_v1_[a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dor_v1_"], entropy: 0 },
47
+ { id: "discord-api-token", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 0 },
48
+ { id: "discord-client-id", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{18})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 2 },
49
+ { id: "discord-client-secret", re: "[\\w.-]{0,10}?(?:discord)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["discord"], entropy: 2 },
50
+ { id: "doppler-api-token", re: "dp\\.pt\\.[a-zA-Z0-9]{43}", flags: "", keywords: ["dp.pt."], entropy: 2 },
51
+ { id: "droneci-access-token", re: "[\\w.-]{0,10}?(?:droneci)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["droneci"], entropy: 0 },
52
+ { id: "dropbox-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{15})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
53
+ { id: "dropbox-long-lived-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
54
+ { id: "dropbox-short-lived-api-token", re: "[\\w.-]{0,10}?(?:dropbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(sl\\.[a-z0-9\\-=_]{135})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["dropbox"], entropy: 0 },
55
+ { id: "duffel-api-token", re: "duffel_(?:test|live)_[a-zA-Z0-9_\\-=]{43}", flags: "", keywords: ["duffel_"], entropy: 2 },
56
+ { id: "dynatrace-api-token", re: "dt0c01\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{64}", flags: "", keywords: ["dt0c01"], entropy: 4 },
57
+ { id: "easypost-api-token", re: "\\bEZAK[a-zA-Z0-9]{54}", flags: "", keywords: ["ezak"], entropy: 2 },
58
+ { id: "easypost-test-api-token", re: "\\bEZTK[a-zA-Z0-9]{54}", flags: "", keywords: ["eztk"], entropy: 2 },
59
+ { id: "etsy-access-token", re: "[\\w.-]{0,10}?(?:(?:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["etsy"], entropy: 3 },
60
+ { id: "facebook-access-token", re: "\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: [], entropy: 3 },
61
+ { id: "facebook-page-access-token", re: "\\b(EAA[MC][a-zA-Z0-9]{20,})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["eaam","eaac"], entropy: 3 },
62
+ { id: "facebook-secret", re: "[\\w.-]{0,10}?(?:facebook)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["facebook"], entropy: 3 },
63
+ { id: "fastly-api-token", re: "[\\w.-]{0,10}?(?:fastly)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["fastly"], entropy: 0 },
64
+ { id: "finicity-api-token", re: "[\\w.-]{0,10}?(?:finicity)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finicity"], entropy: 0 },
65
+ { id: "finicity-client-secret", re: "[\\w.-]{0,10}?(?:finicity)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finicity"], entropy: 0 },
66
+ { id: "finnhub-access-token", re: "[\\w.-]{0,10}?(?:finnhub)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["finnhub"], entropy: 0 },
67
+ { id: "flickr-access-token", re: "[\\w.-]{0,10}?(?:flickr)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["flickr"], entropy: 0 },
68
+ { id: "flutterwave-encryption-key", re: "FLWSECK_TEST-[a-hA-H0-9]{12}", flags: "", keywords: ["flwseck_test"], entropy: 2 },
69
+ { id: "flutterwave-public-key", re: "FLWPUBK_TEST-[a-hA-H0-9]{32}-[Xx]", flags: "", keywords: ["flwpubk_test"], entropy: 2 },
70
+ { id: "flutterwave-secret-key", re: "FLWSECK_TEST-[a-hA-H0-9]{32}-[Xx]", flags: "", keywords: ["flwseck_test"], entropy: 2 },
71
+ { id: "flyio-access-token", re: "\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["fo1_","fm1","fm2_"], entropy: 4 },
72
+ { id: "frameio-api-token", re: "fio-u-[a-zA-Z0-9\\-_=]{64}", flags: "", keywords: ["fio-u-"], entropy: 0 },
73
+ { id: "freshbooks-access-token", re: "[\\w.-]{0,10}?(?:freshbooks)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["freshbooks"], entropy: 0 },
74
+ { id: "gcp-api-key", re: "\\b(AIza[\\w-]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["aiza"], entropy: 3 },
75
+ { id: "generic-api-key", re: "[\\w.-]{0,10}?(?:[aA][cC][cC][eE][sS][sS]|[aA][uU][tT][hH]|(?:[Aa]pi|API)|[cC][rR][eE][dD][eE][nN][tT][iI][aA][lL]|[cC][rR][eE][dD][sS]|[kK][eE][yY]|[pP][aA][sS][sS][wW][dD]|[pP][aA][sS][sS][wW][oO][rR][dD]|[sS][eE][cC][rR][eE][tT]|[tT][oO][kK][eE][nN])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([\\w.=-]{10,150})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["access","api","auth","key","credential","creds","passwd","password","secret","token"], entropy: 3.5 },
76
+ { id: "github-app-token", re: "(?:ghu|ghs)_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghu_","ghs_"], entropy: 3 },
77
+ { id: "github-fine-grained-pat", re: "github_pat_\\w{82}", flags: "", keywords: ["github_pat_"], entropy: 3 },
78
+ { id: "github-oauth", re: "gho_[0-9a-zA-Z]{36}", flags: "", keywords: ["gho_"], entropy: 3 },
79
+ { id: "github-pat", re: "ghp_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghp_"], entropy: 3 },
80
+ { id: "github-refresh-token", re: "ghr_[0-9a-zA-Z]{36}", flags: "", keywords: ["ghr_"], entropy: 3 },
81
+ { id: "gitlab-cicd-job-token", re: "glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}", flags: "", keywords: ["glcbt-"], entropy: 3 },
82
+ { id: "gitlab-deploy-token", re: "gldt-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["gldt-"], entropy: 3 },
83
+ { id: "gitlab-feature-flag-client-token", re: "glffct-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glffct-"], entropy: 3 },
84
+ { id: "gitlab-feed-token", re: "glft-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glft-"], entropy: 3 },
85
+ { id: "gitlab-incoming-mail-token", re: "glimt-[0-9a-zA-Z_\\-]{25}", flags: "", keywords: ["glimt-"], entropy: 3 },
86
+ { id: "gitlab-kubernetes-agent-token", re: "glagent-[0-9a-zA-Z_\\-]{50}", flags: "", keywords: ["glagent-"], entropy: 3 },
87
+ { id: "gitlab-oauth-app-secret", re: "gloas-[0-9a-zA-Z_\\-]{64}", flags: "", keywords: ["gloas-"], entropy: 3 },
88
+ { id: "gitlab-pat", re: "glpat-[\\w-]{20}", flags: "", keywords: ["glpat-"], entropy: 3 },
89
+ { id: "gitlab-ptt", re: "glptt-[0-9a-f]{40}", flags: "", keywords: ["glptt-"], entropy: 3 },
90
+ { id: "gitlab-rrt", re: "GR1348941[\\w-]{20}", flags: "", keywords: ["gr1348941"], entropy: 3 },
91
+ { id: "gitlab-runner-authentication-token", re: "glrt-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glrt-"], entropy: 3 },
92
+ { id: "gitlab-scim-token", re: "glsoat-[0-9a-zA-Z_\\-]{20}", flags: "", keywords: ["glsoat-"], entropy: 3 },
93
+ { id: "gitlab-session-cookie", re: "_gitlab_session=[0-9a-z]{32}", flags: "", keywords: ["_gitlab_session="], entropy: 3 },
94
+ { id: "gitter-access-token", re: "[\\w.-]{0,10}?(?:gitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["gitter"], entropy: 0 },
95
+ { id: "gocardless-api-token", re: "[\\w.-]{0,10}?(?:gocardless)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(live_[a-zA-Z0-9\\-_=]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["live_","gocardless"], entropy: 0 },
96
+ { id: "grafana-api-key", re: "\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["eyjrijoi"], entropy: 3 },
97
+ { id: "grafana-cloud-api-token", re: "\\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["glc_"], entropy: 3 },
98
+ { id: "grafana-service-account-token", re: "\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["glsa_"], entropy: 3 },
99
+ { id: "harness-api-key", re: "(?:pat|sat)\\.[a-zA-Z0-9_-]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20}", flags: "", keywords: ["pat.","sat."], entropy: 0 },
100
+ { id: "hashicorp-tf-api-token", re: "[a-zA-Z0-9]{14}\\.(?:atlasv1)\\.[a-zA-Z0-9\\-_=]{60,70}", flags: "", keywords: ["atlasv1"], entropy: 3.5 },
101
+ { id: "hashicorp-tf-password", re: "[\\w.-]{0,10}?(?:administrator_login_password|password)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(\"[a-z0-9=_\\-]{8,20}\")(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["administrator_login_password","password"], entropy: 2 },
102
+ { id: "heroku-api-key", re: "[\\w.-]{0,10}?(?:heroku)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["heroku"], entropy: 0 },
103
+ { id: "hubspot-api-key", re: "[\\w.-]{0,10}?(?:hubspot)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["hubspot"], entropy: 0 },
104
+ { id: "huggingface-access-token", re: "(?:^|[\\\\'\"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\\\'\"` <])", flags: "", keywords: ["hf_"], entropy: 2 },
105
+ { id: "huggingface-organization-api-token", re: "(?:^|[\\\\'\"` >=:\\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\\\'\"` <\\),])", flags: "", keywords: ["api_org_"], entropy: 2 },
106
+ { id: "infracost-api-token", re: "\\b(ico-[a-zA-Z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ico-"], entropy: 3 },
107
+ { id: "intercom-api-key", re: "[\\w.-]{0,10}?(?:intercom)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{60})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["intercom"], entropy: 0 },
108
+ { id: "intra42-client-secret", re: "\\b(s-s4t2(?:ud|af)-[aAbBcCdDeEfF0123456789]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["intra","s-s4t2ud-","s-s4t2af-"], entropy: 3 },
109
+ { id: "jfrog-api-key", re: "[\\w.-]{0,10}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{73})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["jfrog","artifactory","bintray","xray"], entropy: 0 },
110
+ { id: "jfrog-identity-token", re: "[\\w.-]{0,10}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["jfrog","artifactory","bintray","xray"], entropy: 0 },
111
+ { id: "jwt", re: "\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["ey"], entropy: 3 },
112
+ { id: "jwt-base64", re: "\\bZXlK(?:(?<alg>aGJHY2lPaU)|(?<apu>aGNIVWlPaU)|(?<apv>aGNIWWlPaU)|(?<aud>aGRXUWlPaU)|(?<b64>aU5qUWlP)|(?<crit>amNtbDBJanBi)|(?<cty>amRIa2lPaU)|(?<epk>bGNHc2lPbn)|(?<enc>bGJtTWlPaU)|(?<jku>cWEzVWlPaU)|(?<jwk>cWQyc2lPb)|(?<iss>cGMzTWlPaU)|(?<iv>cGRpSTZJ)|(?<kid>cmFXUWlP)|(?<key_ops>clpYbGZiM0J6SWpwY)|(?<kty>cmRIa2lPaUp)|(?<nonce>dWIyNWpaU0k2)|(?<p2c>d01tTWlP)|(?<p2s>d01uTWlPaU)|(?<ppt>d2NIUWlPaU)|(?<sub>emRXSWlPaU)|(?<svt>emRuUWlP)|(?<tag>MFlXY2lPaU)|(?<typ>MGVYQWlPaUp)|(?<url>MWNtd2l)|(?<use>MWMyVWlPaUp)|(?<ver>MlpYSWlPaU)|(?<version>MlpYSnphVzl1SWpv)|(?<x>NElqb2)|(?<x5c>NE5XTWlP)|(?<x5t>NE5YUWlPaU)|(?<x5ts256>NE5YUWpVekkxTmlJNkl)|(?<x5u>NE5YVWlPaU)|(?<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}", flags: "", keywords: ["zxlk"], entropy: 2 },
113
+ { id: "kraken-access-token", re: "[\\w.-]{0,10}?(?:kraken)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kraken"], entropy: 0 },
114
+ { id: "kubernetes-secret-yaml", re: "(?:\\bkind:[ \\t]*[\"']?secret[\"']?[\\s\\S]{0,200}?\\bdata:[\\s\\S]{0,100}?\\s+([\\w.-]+:(?:[ \\t]*(?:\\||>[-+]?)\\s+)?[ \\t]*(?:[\"']?[a-z0-9+/]{10,}={0,3}[\"']?|\\{\\{[ \\t\\w\"|$:=,.-]+}}|\"\"|''))|\\bdata:[\\s\\S]{0,100}?\\s+([\\w.-]+:(?:[ \\t]*(?:\\||>[-+]?)\\s+)?[ \\t]*(?:[\"']?[a-z0-9+/]{10,}={0,3}[\"']?|\\{\\{[ \\t\\w\"|$:=,.-]+}}|\"\"|''))[\\s\\S]{0,200}?\\bkind:[ \\t]*[\"']?secret[\"']?)", flags: "i", keywords: ["secret"], entropy: 0 },
115
+ { id: "kucoin-access-token", re: "[\\w.-]{0,10}?(?:kucoin)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kucoin"], entropy: 0 },
116
+ { id: "kucoin-secret-key", re: "[\\w.-]{0,10}?(?:kucoin)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["kucoin"], entropy: 0 },
117
+ { id: "launchdarkly-access-token", re: "[\\w.-]{0,10}?(?:launchdarkly)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["launchdarkly"], entropy: 0 },
118
+ { id: "linear-api-key", re: "lin_api_[a-zA-Z0-9]{40}", flags: "", keywords: ["lin_api_"], entropy: 2 },
119
+ { id: "linear-client-secret", re: "[\\w.-]{0,10}?(?:linear)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linear"], entropy: 2 },
120
+ { id: "linkedin-client-id", re: "[\\w.-]{0,10}?(?:linkedin|linked-in)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{14})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linkedin","linked-in"], entropy: 0 },
121
+ { id: "linkedin-client-secret", re: "[\\w.-]{0,10}?(?:linkedin|linked-in)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["linkedin","linked-in"], entropy: 0 },
122
+ { id: "lob-api-key", re: "[\\w.-]{0,10}?(?:lob)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["test_","live_"], entropy: 0 },
123
+ { id: "lob-pub-api-key", re: "[\\w.-]{0,10}?(?:lob)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["test_pub","live_pub","_pub"], entropy: 0 },
124
+ { id: "mailchimp-api-key", re: "[\\w.-]{0,10}?(?:MailchimpSDK.initialize|mailchimp)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{32}-us\\d\\d)(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailchimp"], entropy: 0 },
125
+ { id: "mailgun-private-api-token", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(key-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
126
+ { id: "mailgun-pub-key", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
127
+ { id: "mailgun-signing-key", re: "[\\w.-]{0,10}?(?:mailgun)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mailgun"], entropy: 0 },
128
+ { id: "mapbox-api-token", re: "[\\w.-]{0,10}?(?:mapbox)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mapbox"], entropy: 0 },
129
+ { id: "mattermost-access-token", re: "[\\w.-]{0,10}?(?:mattermost)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{26})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["mattermost"], entropy: 0 },
130
+ { id: "messagebird-api-token", re: "[\\w.-]{0,10}?(?:messagebird|message-bird|message_bird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{25})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["messagebird","message-bird","message_bird"], entropy: 0 },
131
+ { id: "messagebird-client-id", re: "[\\w.-]{0,10}?(?:messagebird|message-bird|message_bird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["messagebird","message-bird","message_bird"], entropy: 0 },
132
+ { id: "microsoft-teams-webhook", re: "https://[a-z0-9]+\\.webhook\\.office\\.com/webhookb2/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/IncomingWebhook/[a-z0-9]{32}/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}", flags: "", keywords: ["webhook.office.com","webhookb2","incomingwebhook"], entropy: 0 },
133
+ { id: "netlify-access-token", re: "[\\w.-]{0,10}?(?:netlify)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{40,46})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["netlify"], entropy: 0 },
134
+ { id: "new-relic-browser-api-token", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrjs-"], entropy: 0 },
135
+ { id: "new-relic-insert-key", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrii-"], entropy: 0 },
136
+ { id: "new-relic-user-api-id", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["new-relic","newrelic","new_relic"], entropy: 0 },
137
+ { id: "new-relic-user-api-key", re: "[\\w.-]{0,10}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nrak"], entropy: 0 },
138
+ { id: "npm-access-token", re: "\\b(npm_[a-z0-9]{36})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["npm_"], entropy: 2 },
139
+ { id: "nuget-config-password", re: "<add key=\\\"(?:(?:ClearText)?Password)\\\"\\s*value=\\\"(.{8,})\\\"\\s*/>", flags: "i", keywords: ["<add key="], entropy: 1 },
140
+ { id: "nytimes-access-token", re: "[\\w.-]{0,10}?(?:nytimes|new-york-times,|newyorktimes)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9=_\\-]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["nytimes","new-york-times","newyorktimes"], entropy: 0 },
141
+ { id: "octopus-deploy-api-key", re: "\\b(API-[A-Z0-9]{26})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["api-"], entropy: 3 },
142
+ { id: "okta-access-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:(?:[Oo]kta|OKTA))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(00[\\w=\\-]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["okta"], entropy: 4 },
143
+ { id: "openai-api-key", re: "\\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["t3blbkfj"], entropy: 3 },
144
+ { id: "openshift-user-token", re: "\\b(sha256~[\\w-]{43})(?:[^\\w-]|$)", flags: "", keywords: ["sha256~"], entropy: 3.5 },
145
+ { id: "plaid-api-token", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 0 },
146
+ { id: "plaid-client-id", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{24})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 3.5 },
147
+ { id: "plaid-secret-key", re: "[\\w.-]{0,10}?(?:plaid)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["plaid"], entropy: 3.5 },
148
+ { id: "planetscale-api-token", re: "\\b(pscale_tkn_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pscale_tkn_"], entropy: 3 },
149
+ { id: "planetscale-oauth-token", re: "\\b(pscale_oauth_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pscale_oauth_"], entropy: 3 },
150
+ { id: "planetscale-password", re: "\\b(pscale_pw_[\\w=\\.-]{32,64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["pscale_pw_"], entropy: 3 },
151
+ { id: "postman-api-token", re: "\\b(PMAK-[a-fA-F0-9]{24}\\-[a-fA-F0-9]{34})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pmak-"], entropy: 3 },
152
+ { id: "prefect-api-token", re: "\\b(pnu_[a-zA-Z0-9]{36})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pnu_"], entropy: 2 },
153
+ { id: "private-key", re: "-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\\s\\S-]*?KEY(?: BLOCK)?-----", flags: "i", keywords: ["-----begin"], entropy: 0 },
154
+ { id: "privateai-api-token", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:[pP][rR][iI][vV][aA][tT][eE][_-]?[aA][iI])(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{32})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["privateai","private_ai","private-ai"], entropy: 3 },
155
+ { id: "pulumi-api-token", re: "\\b(pul-[a-f0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["pul-"], entropy: 2 },
156
+ { id: "pypi-upload-token", re: "pypi-AgEIcHlwaS5vcmc[\\w-]{50,1000}", flags: "", keywords: ["pypi-ageichlwas5vcmc"], entropy: 3 },
157
+ { id: "rapidapi-access-token", re: "[\\w.-]{0,10}?(?:rapidapi)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9_-]{50})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["rapidapi"], entropy: 0 },
158
+ { id: "readme-api-token", re: "\\b(rdme_[a-z0-9]{70})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["rdme_"], entropy: 2 },
159
+ { id: "rubygems-api-token", re: "\\b(rubygems_[a-f0-9]{48})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["rubygems_"], entropy: 2 },
160
+ { id: "scalingo-api-token", re: "\\b(tk-us-[\\w-]{48})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["tk-us-"], entropy: 2 },
161
+ { id: "sendbird-access-id", re: "[\\w.-]{0,10}?(?:sendbird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sendbird"], entropy: 0 },
162
+ { id: "sendbird-access-token", re: "[\\w.-]{0,10}?(?:sendbird)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sendbird"], entropy: 0 },
163
+ { id: "sendgrid-api-token", re: "\\b(SG\\.[a-zA-Z0-9=_\\-\\.]{66})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sg."], entropy: 2 },
164
+ { id: "sendinblue-api-token", re: "\\b(xkeysib-[a-f0-9]{64}\\-[a-zA-Z0-9]{16})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["xkeysib-"], entropy: 2 },
165
+ { id: "sentry-access-token", re: "[\\w.-]{0,10}?(?:sentry)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["sentry"], entropy: 0 },
166
+ { id: "shippo-api-token", re: "\\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["shippo_"], entropy: 2 },
167
+ { id: "shopify-access-token", re: "shpat_[a-fA-F0-9]{32}", flags: "", keywords: ["shpat_"], entropy: 2 },
168
+ { id: "shopify-custom-access-token", re: "shpca_[a-fA-F0-9]{32}", flags: "", keywords: ["shpca_"], entropy: 2 },
169
+ { id: "shopify-private-app-access-token", re: "shppa_[a-fA-F0-9]{32}", flags: "", keywords: ["shppa_"], entropy: 2 },
170
+ { id: "shopify-shared-secret", re: "shpss_[a-fA-F0-9]{32}", flags: "", keywords: ["shpss_"], entropy: 2 },
171
+ { id: "sidekiq-secret", re: "[\\w.-]{0,10}?(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["bundle_enterprise__contribsys__com","bundle_gems__contribsys__com"], entropy: 0 },
172
+ { id: "sidekiq-sensitive-url", re: "\\bhttps?://([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\\/|\\#|\\?|:]|$)", flags: "i", keywords: ["gems.contribsys.com","enterprise.contribsys.com"], entropy: 0 },
173
+ { id: "slack-app-token", re: "xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+", flags: "i", keywords: ["xapp"], entropy: 2 },
174
+ { id: "slack-bot-token", re: "xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*", flags: "", keywords: ["xoxb"], entropy: 3 },
175
+ { id: "slack-config-access-token", re: "xoxe.xox[bp]-\\d-[A-Z0-9]{163,166}", flags: "i", keywords: ["xoxe.xoxb-","xoxe.xoxp-"], entropy: 2 },
176
+ { id: "slack-config-refresh-token", re: "xoxe-\\d-[A-Z0-9]{146}", flags: "i", keywords: ["xoxe-"], entropy: 2 },
177
+ { id: "slack-legacy-bot-token", re: "xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}", flags: "", keywords: ["xoxb"], entropy: 2 },
178
+ { id: "slack-legacy-token", re: "xox[os]-\\d+-\\d+-\\d+-[a-fA-F\\d]+", flags: "", keywords: ["xoxo","xoxs"], entropy: 2 },
179
+ { id: "slack-legacy-workspace-token", re: "xox[ar]-(?:\\d-)?[0-9a-zA-Z]{8,48}", flags: "", keywords: ["xoxa","xoxr"], entropy: 2 },
180
+ { id: "slack-user-token", re: "xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}", flags: "", keywords: ["xoxp-","xoxe-"], entropy: 2 },
181
+ { id: "slack-webhook-url", re: "(?:https?://)?hooks.slack.com/(?:services|workflows)/[A-Za-z0-9+/]{43,46}", flags: "", keywords: ["hooks.slack.com"], entropy: 0 },
182
+ { id: "snyk-api-token", re: "[\\w.-]{0,10}?(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token"], entropy: 0 },
183
+ { id: "square-access-token", re: "\\b((?:EAAA|sq0atp-)[\\w-]{22,60})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sq0atp-","eaaa"], entropy: 2 },
184
+ { id: "squarespace-access-token", re: "[\\w.-]{0,10}?(?:squarespace)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["squarespace"], entropy: 0 },
185
+ { id: "stripe-access-token", re: "\\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod"], entropy: 2 },
186
+ { id: "sumologic-access-id", re: "[\\w.-]{0,10}?(?:[\\w.-]{0,10}?(?:(?:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3})(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sumo"], entropy: 3 },
187
+ { id: "sumologic-access-token", re: "[\\w.-]{0,10}?(?:(?:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-zA-Z0-9]{64})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["sumo"], entropy: 3 },
188
+ { id: "telegram-bot-api-token", re: "(?:[tT][eE][lL][eE][gG][rR](?:[0-9a-zA-Z\\(-_\\t .\\\\]{0,40})(?:[\\s|']|[\\s|\"]){0,3})(?:=|\\|\\|:|<=|=>|:|\\?=|\\()(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{5,16}:A[a-z0-9_\\-]{34})(?:['|\\\"|\\n|\\r|\\s|\\x60|;|\\\\]|$)", flags: "", keywords: ["telegr"], entropy: 0 },
189
+ { id: "travisci-access-token", re: "[\\w.-]{0,10}?(?:travis)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{22})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["travis"], entropy: 0 },
190
+ { id: "twilio-api-key", re: "SK[0-9a-fA-F]{32}", flags: "", keywords: ["sk"], entropy: 3 },
191
+ { id: "twitch-api-token", re: "[\\w.-]{0,10}?(?:twitch)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{30})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitch"], entropy: 0 },
192
+ { id: "twitter-access-secret", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{45})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
193
+ { id: "twitter-access-token", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
194
+ { id: "twitter-api-key", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{25})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
195
+ { id: "twitter-api-secret", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{50})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
196
+ { id: "twitter-bearer-token", re: "[\\w.-]{0,10}?(?:twitter)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["twitter"], entropy: 0 },
197
+ { id: "typeform-api-token", re: "[\\w.-]{0,10}?(?:typeform)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(tfp_[a-z0-9\\-_\\.=]{59})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["tfp_"], entropy: 0 },
198
+ { id: "vault-batch-token", re: "\\b(hvb\\.[\\w-]{138,300})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["hvb."], entropy: 4 },
199
+ { id: "vault-service-token", re: "\\b((?:hvs\\.[\\w-]{90,120}|s\\.(?:[a-zA-Z0-9]{24})))(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "", keywords: ["hvs.","s."], entropy: 3.5 },
200
+ { id: "yandex-access-token", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(t1\\.[A-Z0-9a-z_-]+[=]{0,2}\\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
201
+ { id: "yandex-api-key", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(AQVN[A-Za-z0-9_\\-]{35,38})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
202
+ { id: "yandex-aws-access-token", re: "[\\w.-]{0,10}?(?:yandex)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}(YC[a-zA-Z0-9_\\-]{38})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["yandex"], entropy: 0 },
203
+ { id: "zendesk-secret-key", re: "[\\w.-]{0,10}?(?:zendesk)(?:[ \\t\\w.-]{0,20})(?:[\\s|']|[\\s|\"]){0,3}(?:=|>|:{1,3}=|\\|\\|:|<=|=>|:|\\?=)(?:'|\\\"|\\s|=|\\x60){0,5}([a-z0-9]{40})(?:['|\\\"|\\n|\\r|\\s|\\x60|;]|$)", flags: "i", keywords: ["zendesk"], entropy: 0 },
204
+ ];
205
+
206
+ export const GITLEAKS_ALLOWLIST = [
207
+ { re: "^true|false|null$", flags: "i" },
208
+ { re: "^(?:[aA]+|[bB]+|[cC]+|[dD]+|[eE]+|[fF]+|[gG]+|[hH]+|[iI]+|[jJ]+|[kK]+|[lL]+|[mM]+|[nN]+|[oO]+|[pP]+|[qQ]+|[rR]+|[sS]+|[tT]+|[uU]+|[vV]+|[wW]+|[xX]+|[yY]+|[zZ]+|\\*+|\\.+)$", flags: "" },
209
+ { re: "^\\$(\\d+|{\\d+})$", flags: "" },
210
+ { re: "^\\$([A-Z_]+|[a-z_]+)$", flags: "" },
211
+ { re: "^\\${([A-Z_]+|[a-z_]+)}$", flags: "" },
212
+ { re: "^\\{\\{[ \\t]*[\\w ().|]+[ \\t]*}}$", flags: "" },
213
+ { re: "^\\$\\{\\{[ \\t]*((env|github|secrets|vars)(\\.[A-Za-z]\\w+)+[\\w \"'&./=|]*)[ \\t]*}}$", flags: "" },
214
+ { re: "^%([A-Z_]+|[a-z_]+)%$", flags: "" },
215
+ { re: "^%[+\\-# 0]?[bcdeEfFgGoOpqstTUvxX]$", flags: "" },
216
+ { re: "^\\{\\d{0,2}}$", flags: "" },
217
+ { re: "^@([A-Z_]+|[a-z_]+)@$", flags: "" },
218
+ ];
219
+
220
+ export const REFUSED = [
221
+ {
222
+ "id": "curl-auth-header",
223
+ "why": "unhandled inline group (?i) while case-folding"
224
+ }
225
+ ];