@theoremjs/agents 0.3.0 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (570) hide show
  1. package/README.md +277 -995
  2. package/esm/mod.d.ts +34 -20
  3. package/esm/mod.js +19 -12
  4. package/esm/src/cli/commands/bench.js +36 -14
  5. package/esm/src/cli/commands/detect-compile.d.ts +17 -0
  6. package/esm/src/cli/commands/detect-compile.js +22 -0
  7. package/esm/src/cli/commands/eval.d.ts +3 -3
  8. package/esm/src/cli/commands/fuzz-canary.js +55 -16
  9. package/esm/src/cli/commands/profile.js +4 -4
  10. package/esm/src/cli/commands/run.d.ts +2 -2
  11. package/esm/src/cli/commands/run.js +1 -1
  12. package/esm/src/cli/commands/test.d.ts +4 -3
  13. package/esm/src/cli/commands/test.js +2 -2
  14. package/esm/src/cli/index.js +9 -9
  15. package/esm/src/cli/matrix/fixtures.js +25 -30
  16. package/esm/src/evals/attachments.d.ts +1 -0
  17. package/esm/src/evals/attachments.js +4 -2
  18. package/esm/src/evals/breakdown.d.ts +2 -0
  19. package/esm/src/evals/breakdown.js +1 -0
  20. package/esm/src/evals/graders/answer.d.ts +3 -0
  21. package/esm/src/evals/graders/answer.js +1 -0
  22. package/esm/src/evals/graders/code.d.ts +7 -31
  23. package/esm/src/evals/graders/code.js +4 -25
  24. package/esm/src/evals/graders/judge.d.ts +4 -0
  25. package/esm/src/evals/graders/judge.js +7 -5
  26. package/esm/src/evals/graders/latency.d.ts +1 -0
  27. package/esm/src/evals/graders/latency.js +3 -2
  28. package/esm/src/evals/graders/live.d.ts +3 -0
  29. package/esm/src/evals/graders/live.js +2 -0
  30. package/esm/src/evals/graders/media.js +1 -2
  31. package/esm/src/evals/graders/shared.js +1 -1
  32. package/esm/src/evals/graders/transcript.d.ts +2 -0
  33. package/esm/src/evals/graders/transcript.js +5 -3
  34. package/esm/src/evals/mod.d.ts +1 -9
  35. package/esm/src/evals/mod.js +1 -9
  36. package/esm/src/evals/record.d.ts +6 -0
  37. package/esm/src/evals/record.js +4 -2
  38. package/esm/src/evals/rubrics/mod.d.ts +1 -1
  39. package/esm/src/evals/rubrics/mod.js +1 -1
  40. package/esm/src/evals/rubrics/mustache.js +1 -1
  41. package/esm/src/evals/rubrics/types.js +1 -1
  42. package/esm/src/evals/run.d.ts +9 -52
  43. package/esm/src/evals/run.js +12 -46
  44. package/esm/src/evals/suite.d.ts +12 -3
  45. package/esm/src/evals/suite.js +9 -4
  46. package/esm/src/evals/summary.d.ts +3 -0
  47. package/esm/src/evals/summary.js +1 -0
  48. package/esm/src/evals/trial.d.ts +3 -16
  49. package/esm/src/evals/trial.js +7 -30
  50. package/esm/src/evals/types.d.ts +30 -121
  51. package/esm/src/evals/types.js +3 -16
  52. package/esm/src/evals/verdict.d.ts +5 -0
  53. package/esm/src/evals/verdict.js +4 -1
  54. package/esm/src/guardrails/boundaries.d.ts +41 -0
  55. package/esm/src/guardrails/boundaries.js +103 -0
  56. package/esm/src/guardrails/canary-gate.d.ts +1 -0
  57. package/esm/src/guardrails/canary.d.ts +49 -15
  58. package/esm/src/guardrails/canary.js +103 -30
  59. package/esm/src/guardrails/compile-egress.d.ts +6 -5
  60. package/esm/src/guardrails/compile-egress.js +6 -5
  61. package/esm/src/guardrails/corpus/canary-egress-attacks.d.ts +3 -1
  62. package/esm/src/guardrails/corpus/canary-egress-attacks.js +4 -2
  63. package/esm/src/guardrails/corpus/fuzz-inbound.js +14 -17
  64. package/esm/src/guardrails/corpus/inbound-payloads.d.ts +2 -0
  65. package/esm/src/guardrails/corpus/inbound-payloads.js +4 -2
  66. package/esm/src/guardrails/corpus/live-attacks.d.ts +2 -0
  67. package/esm/src/guardrails/corpus/live-attacks.js +6 -1
  68. package/esm/src/guardrails/corpus/mod.d.ts +1 -1
  69. package/esm/src/guardrails/corpus/secrets.d.ts +3 -3
  70. package/esm/src/guardrails/corpus/secrets.js +2 -2
  71. package/esm/src/guardrails/corpus/strings.d.ts +1 -1
  72. package/esm/src/guardrails/corpus/strings.js +1 -1
  73. package/esm/src/guardrails/corpus/types.d.ts +5 -1
  74. package/esm/src/guardrails/credential-rules.d.ts +36 -0
  75. package/esm/src/guardrails/credential-rules.js +3001 -0
  76. package/esm/src/guardrails/credential-scan.d.ts +45 -0
  77. package/esm/src/guardrails/credential-scan.js +172 -0
  78. package/esm/src/guardrails/destinations.d.ts +45 -0
  79. package/esm/src/guardrails/destinations.js +234 -0
  80. package/esm/src/guardrails/detect-at.d.ts +107 -0
  81. package/esm/src/guardrails/detect-at.js +434 -0
  82. package/esm/src/guardrails/detect-reply.d.ts +61 -0
  83. package/esm/src/guardrails/detect-reply.js +95 -0
  84. package/esm/src/guardrails/detect-stream.d.ts +33 -0
  85. package/esm/src/guardrails/detect-stream.js +77 -0
  86. package/esm/src/guardrails/detectors.d.ts +216 -0
  87. package/esm/src/guardrails/detectors.js +503 -0
  88. package/esm/src/guardrails/egress-automata.d.ts +4 -6
  89. package/esm/src/guardrails/egress-automata.js +24095 -4572
  90. package/esm/src/guardrails/egress-compiler.d.ts +38 -16
  91. package/esm/src/guardrails/egress-compiler.js +254 -60
  92. package/esm/src/guardrails/egress-patterns.d.ts +4 -2
  93. package/esm/src/guardrails/egress-patterns.js +6 -2
  94. package/esm/src/guardrails/egress-stream.d.ts +54 -36
  95. package/esm/src/guardrails/egress-stream.js +253 -124
  96. package/esm/src/guardrails/egress-urls.d.ts +6 -3
  97. package/esm/src/guardrails/egress-urls.js +14 -22
  98. package/esm/src/guardrails/egress.d.ts +26 -86
  99. package/esm/src/guardrails/egress.js +59 -309
  100. package/esm/src/guardrails/error.d.ts +13 -8
  101. package/esm/src/guardrails/error.js +25 -18
  102. package/esm/src/guardrails/event-schemas.d.ts +46 -3
  103. package/esm/src/guardrails/event-schemas.js +12 -5
  104. package/esm/src/guardrails/events.d.ts +5 -1
  105. package/esm/src/guardrails/events.js +4 -1
  106. package/esm/src/guardrails/hints.d.ts +14 -0
  107. package/esm/src/guardrails/hints.js +57 -0
  108. package/esm/src/guardrails/hits.d.ts +7 -1
  109. package/esm/src/guardrails/hits.js +12 -1
  110. package/esm/src/guardrails/host-patterns.d.ts +85 -0
  111. package/esm/src/guardrails/host-patterns.js +173 -0
  112. package/esm/src/guardrails/injection-patterns.d.ts +6 -1
  113. package/esm/src/guardrails/injection-patterns.js +33 -1
  114. package/esm/src/guardrails/injection-reversed.d.ts +9 -0
  115. package/esm/src/guardrails/injection-reversed.js +49 -0
  116. package/esm/src/guardrails/injection.d.ts +17 -1
  117. package/esm/src/guardrails/injection.js +259 -36
  118. package/esm/src/guardrails/labels.d.ts +40 -0
  119. package/esm/src/guardrails/labels.js +881 -0
  120. package/esm/src/guardrails/live-outbound-gate.d.ts +9 -8
  121. package/esm/src/guardrails/live-outbound-gate.js +100 -107
  122. package/esm/src/guardrails/mod.d.ts +30 -22
  123. package/esm/src/guardrails/mod.js +19 -14
  124. package/esm/src/guardrails/network.d.ts +4 -0
  125. package/esm/src/guardrails/network.js +21 -19
  126. package/esm/src/guardrails/normalize.d.ts +15 -1
  127. package/esm/src/guardrails/normalize.js +34 -1
  128. package/esm/src/guardrails/policy.d.ts +2 -17
  129. package/esm/src/guardrails/policy.js +12 -41
  130. package/esm/src/guardrails/progressive-yield.d.ts +65 -24
  131. package/esm/src/guardrails/progressive-yield.js +191 -147
  132. package/esm/src/guardrails/prompt-echo.d.ts +4 -2
  133. package/esm/src/guardrails/prompt-echo.js +87 -6
  134. package/esm/src/guardrails/quota.d.ts +4 -1
  135. package/esm/src/guardrails/quota.js +7 -2
  136. package/esm/src/guardrails/rules.d.ts +20 -29
  137. package/esm/src/guardrails/rules.js +23 -30
  138. package/esm/src/guardrails/sanitize.d.ts +32 -15
  139. package/esm/src/guardrails/sanitize.js +100 -124
  140. package/esm/src/guardrails/sensitive-groups.d.ts +21 -0
  141. package/esm/src/guardrails/sensitive-groups.js +12 -0
  142. package/esm/src/guardrails/sensitive.d.ts +16 -23
  143. package/esm/src/guardrails/sensitive.js +168 -47
  144. package/esm/src/guardrails/serialize.d.ts +1 -0
  145. package/esm/src/guardrails/testing.d.ts +4 -2
  146. package/esm/src/guardrails/testing.js +4 -2
  147. package/esm/src/guardrails/theorem-error.d.ts +5 -2
  148. package/esm/src/guardrails/theorem-error.js +6 -3
  149. package/esm/src/guardrails/thought-guard.d.ts +34 -13
  150. package/esm/src/guardrails/thought-guard.js +264 -64
  151. package/esm/src/guardrails/tool-directives.d.ts +29 -10
  152. package/esm/src/guardrails/tool-directives.js +133 -47
  153. package/esm/src/guardrails/tool-leak.d.ts +26 -0
  154. package/esm/src/guardrails/tool-leak.js +45 -0
  155. package/esm/src/guardrails/tool-result.d.ts +45 -14
  156. package/esm/src/guardrails/tool-result.js +94 -70
  157. package/esm/src/guardrails/types.d.ts +79 -71
  158. package/esm/src/guardrails/types.js +11 -7
  159. package/esm/src/host/client-turn.d.ts +29 -2
  160. package/esm/src/host/client-turn.js +46 -4
  161. package/esm/src/host/mint-trace.d.ts +1 -0
  162. package/esm/src/host/mint-trace.js +3 -2
  163. package/esm/src/host/mod.d.ts +2 -2
  164. package/esm/src/host/mod.js +1 -1
  165. package/esm/src/host/readStreamingJsonStringField.js +2 -43
  166. package/esm/src/host/reply.d.ts +6 -0
  167. package/esm/src/host/reply.js +8 -1
  168. package/esm/src/interface/blocks.d.ts +3 -0
  169. package/esm/src/interface/blocks.js +84 -14
  170. package/esm/src/interface/composer-actions.d.ts +4 -0
  171. package/esm/src/interface/composer-actions.js +5 -3
  172. package/esm/src/interface/draft.d.ts +6 -0
  173. package/esm/src/interface/draft.js +22 -11
  174. package/esm/src/interface/from-profile.d.ts +13 -1
  175. package/esm/src/interface/from-profile.js +66 -31
  176. package/esm/src/interface/history.d.ts +9 -3
  177. package/esm/src/interface/history.js +33 -24
  178. package/esm/src/interface/inputs.d.ts +1 -0
  179. package/esm/src/interface/inputs.js +3 -0
  180. package/esm/src/interface/mod.d.ts +4 -2
  181. package/esm/src/interface/mod.js +3 -2
  182. package/esm/src/interface/models.d.ts +7 -0
  183. package/esm/src/interface/models.js +5 -0
  184. package/esm/src/interface/pending.d.ts +9 -0
  185. package/esm/src/interface/pending.js +9 -3
  186. package/esm/src/interface/profile-interface.js +54 -40
  187. package/esm/src/interface/session.d.ts +12 -5
  188. package/esm/src/interface/session.js +17 -10
  189. package/esm/src/interface/stop.d.ts +13 -0
  190. package/esm/src/interface/stop.js +28 -0
  191. package/esm/src/interface/tool-calls.d.ts +14 -2
  192. package/esm/src/interface/tool-calls.js +64 -10
  193. package/esm/src/interface/tool-invoke.d.ts +2 -0
  194. package/esm/src/interface/tool-invoke.js +3 -1
  195. package/esm/src/interface/tool-media.d.ts +2 -0
  196. package/esm/src/interface/tool-media.js +2 -1
  197. package/esm/src/interface/types.d.ts +105 -40
  198. package/esm/src/interface/types.js +1 -0
  199. package/esm/src/kernel/api-catalog.d.ts +85 -0
  200. package/esm/src/kernel/api-catalog.js +229 -0
  201. package/esm/src/kernel/auth/crypto.d.ts +7 -2
  202. package/esm/src/kernel/auth/crypto.js +12 -10
  203. package/esm/src/kernel/auth/oauth.d.ts +2 -1
  204. package/esm/src/kernel/auth/oauth.js +23 -22
  205. package/esm/src/kernel/auth/typed-secret.js +2 -2
  206. package/esm/src/kernel/auth/types.d.ts +13 -0
  207. package/esm/src/kernel/checkpoint.d.ts +43 -0
  208. package/esm/src/kernel/checkpoint.js +58 -0
  209. package/esm/src/kernel/default-scope.d.ts +43 -5
  210. package/esm/src/kernel/default-scope.js +54 -5
  211. package/esm/src/kernel/engine/call-trace.d.ts +19 -0
  212. package/esm/src/kernel/engine/call-trace.js +29 -0
  213. package/esm/src/kernel/engine/compaction.d.ts +6 -5
  214. package/esm/src/kernel/engine/compaction.js +12 -11
  215. package/esm/src/kernel/engine/decision.d.ts +10 -8
  216. package/esm/src/kernel/engine/decision.js +174 -146
  217. package/esm/src/kernel/engine/embedding.d.ts +8 -0
  218. package/esm/src/kernel/engine/embedding.js +118 -0
  219. package/esm/src/kernel/engine/live-inbound.d.ts +14 -4
  220. package/esm/src/kernel/engine/live-inbound.js +36 -11
  221. package/esm/src/kernel/engine/live-ingress.d.ts +6 -0
  222. package/esm/src/kernel/engine/live-ingress.js +6 -1
  223. package/esm/src/kernel/engine/repair.js +12 -12
  224. package/esm/src/kernel/engine/runner/gates.d.ts +2 -2
  225. package/esm/src/kernel/engine/runner/gates.js +287 -101
  226. package/esm/src/kernel/engine/runner/mod.d.ts +19 -5
  227. package/esm/src/kernel/engine/runner/mod.js +107 -56
  228. package/esm/src/kernel/engine/runner/nested.d.ts +32 -0
  229. package/esm/src/kernel/engine/runner/nested.js +134 -0
  230. package/esm/src/kernel/engine/runner/schema-validation.d.ts +24 -3
  231. package/esm/src/kernel/engine/runner/schema-validation.js +78 -4
  232. package/esm/src/kernel/engine/runner/stages.d.ts +1 -1
  233. package/esm/src/kernel/engine/runner/stages.js +1 -8
  234. package/esm/src/kernel/engine/runner/state.d.ts +33 -12
  235. package/esm/src/kernel/engine/runner/state.js +11 -1
  236. package/esm/src/kernel/engine/runner/step-order.d.ts +27 -0
  237. package/esm/src/kernel/engine/runner/step-order.js +165 -0
  238. package/esm/src/kernel/engine/runner/steps.d.ts +2 -2
  239. package/esm/src/kernel/engine/runner/steps.js +329 -169
  240. package/esm/src/kernel/engine/runner/stream.d.ts +42 -11
  241. package/esm/src/kernel/engine/runner/stream.js +197 -46
  242. package/esm/src/kernel/engine/runner/usage.d.ts +5 -5
  243. package/esm/src/kernel/engine/runner/usage.js +12 -14
  244. package/esm/src/kernel/engine/session/mod.d.ts +8 -6
  245. package/esm/src/kernel/engine/session/mod.js +360 -129
  246. package/esm/src/kernel/engine/session/session-trace.d.ts +10 -10
  247. package/esm/src/kernel/engine/session/session-trace.js +41 -30
  248. package/esm/src/kernel/engine/token-estimate.d.ts +10 -64
  249. package/esm/src/kernel/engine/token-estimate.js +14 -194
  250. package/esm/src/kernel/engine/tool-trace.d.ts +3 -3
  251. package/esm/src/kernel/engine/tool-trace.js +2 -1
  252. package/esm/src/kernel/engine/turn-trace.d.ts +8 -7
  253. package/esm/src/kernel/engine/turn-trace.js +28 -36
  254. package/esm/src/kernel/engine/usage.d.ts +6 -0
  255. package/esm/src/kernel/engine/usage.js +17 -0
  256. package/esm/src/kernel/interaction-parts.d.ts +3 -0
  257. package/esm/src/kernel/interaction-parts.js +18 -0
  258. package/esm/src/kernel/json.d.ts +10 -0
  259. package/esm/src/kernel/json.js +3 -0
  260. package/esm/src/kernel/mod.d.ts +38 -11
  261. package/esm/src/kernel/mod.js +22 -7
  262. package/esm/src/kernel/profile-graph.d.ts +11 -6
  263. package/esm/src/kernel/profile-graph.js +14 -7
  264. package/esm/src/kernel/profile-presence.d.ts +10 -1
  265. package/esm/src/kernel/profile-presence.js +90 -75
  266. package/esm/src/kernel/profile-scope.d.ts +7 -3
  267. package/esm/src/kernel/profile-scope.js +67 -55
  268. package/esm/src/kernel/protocols/binding.d.ts +65 -0
  269. package/esm/src/kernel/protocols/binding.js +125 -0
  270. package/esm/src/kernel/protocols/limits.d.ts +15 -0
  271. package/esm/src/kernel/protocols/limits.js +28 -0
  272. package/esm/src/kernel/protocols/mod.d.ts +5 -0
  273. package/esm/src/kernel/protocols/mod.js +5 -0
  274. package/esm/src/kernel/protocols/prices.d.ts +36 -0
  275. package/esm/src/kernel/protocols/prices.js +37 -0
  276. package/esm/src/kernel/protocols/protocol.d.ts +253 -0
  277. package/esm/src/kernel/protocols/protocol.js +253 -0
  278. package/esm/src/kernel/protocols/provider.d.ts +108 -0
  279. package/esm/src/kernel/protocols/provider.js +143 -0
  280. package/esm/src/kernel/protocols/runtime.d.ts +55 -0
  281. package/esm/src/kernel/protocols/runtime.js +534 -0
  282. package/esm/src/kernel/provider-budget.d.ts +32 -0
  283. package/esm/src/kernel/provider-budget.js +262 -0
  284. package/esm/src/kernel/provider-dispatch.d.ts +13 -0
  285. package/esm/src/kernel/provider-dispatch.js +36 -0
  286. package/esm/src/kernel/provider-live.d.ts +7 -0
  287. package/esm/src/kernel/provider-live.js +189 -0
  288. package/esm/src/kernel/provider-runtime.d.ts +57 -0
  289. package/esm/src/kernel/provider-runtime.js +524 -0
  290. package/esm/src/kernel/registry/attachments.d.ts +15 -4
  291. package/esm/src/kernel/registry/attachments.js +31 -22
  292. package/esm/src/kernel/registry/catalog.d.ts +6 -0
  293. package/esm/src/kernel/registry/catalog.js +9 -2
  294. package/esm/src/kernel/registry/embedding-rules.d.ts +28 -0
  295. package/esm/src/kernel/registry/embedding-rules.js +66 -0
  296. package/esm/src/kernel/registry/ingress.d.ts +6 -2
  297. package/esm/src/kernel/registry/ingress.js +55 -10
  298. package/esm/src/kernel/registry/kernel-registry.d.ts +3 -0
  299. package/esm/src/kernel/registry/kernel-registry.js +9 -2
  300. package/esm/src/kernel/registry/profile-outputs.js +4 -1
  301. package/esm/src/kernel/registry/profiles.d.ts +38 -14
  302. package/esm/src/kernel/registry/profiles.js +280 -205
  303. package/esm/src/kernel/registry/provider-request.d.ts +3 -3
  304. package/esm/src/kernel/registry/provider-request.js +5 -13
  305. package/esm/src/kernel/registry/resolve.d.ts +4 -1
  306. package/esm/src/kernel/registry/resolve.js +59 -58
  307. package/esm/src/kernel/registry/schemas.d.ts +3 -0
  308. package/esm/src/kernel/registry/schemas.js +3 -1
  309. package/esm/src/kernel/registry/slot-fill.d.ts +7 -0
  310. package/esm/src/kernel/registry/slot-fill.js +22 -0
  311. package/esm/src/kernel/registry/system-prompt.js +7 -8
  312. package/esm/src/kernel/registry/vault.d.ts +14 -13
  313. package/esm/src/kernel/registry/vault.js +1 -14
  314. package/esm/src/kernel/schema.d.ts +100 -46
  315. package/esm/src/kernel/schema.js +499 -257
  316. package/esm/src/kernel/scope.d.ts +12 -5
  317. package/esm/src/kernel/scope.js +23 -3
  318. package/esm/src/kernel/stages.d.ts +38 -3
  319. package/esm/src/kernel/stages.js +82 -39
  320. package/esm/src/kernel/stop.d.ts +29 -6
  321. package/esm/src/kernel/stop.js +16 -4
  322. package/esm/src/kernel/system-parts.js +6 -6
  323. package/esm/src/kernel/tools/activity-label.d.ts +12 -6
  324. package/esm/src/kernel/tools/activity-label.js +258 -32
  325. package/esm/src/kernel/tools/agent.d.ts +66 -0
  326. package/esm/src/kernel/tools/agent.js +212 -0
  327. package/esm/src/kernel/tools/coordinate.d.ts +4 -0
  328. package/esm/src/kernel/tools/coordinate.js +165 -0
  329. package/esm/src/kernel/tools/events.d.ts +21 -6
  330. package/esm/src/kernel/tools/events.js +53 -18
  331. package/esm/src/kernel/tools/execute.d.ts +47 -11
  332. package/esm/src/kernel/tools/execute.js +508 -136
  333. package/esm/src/kernel/tools/gate-answer.d.ts +12 -2
  334. package/esm/src/kernel/tools/gate-answer.js +17 -6
  335. package/esm/src/kernel/tools/handler-events.d.ts +45 -0
  336. package/esm/src/kernel/tools/handler-events.js +106 -0
  337. package/esm/src/kernel/tools/harness.d.ts +1 -0
  338. package/esm/src/kernel/tools/harness.js +2 -1
  339. package/esm/src/kernel/tools/http-limit.d.ts +27 -0
  340. package/esm/src/kernel/tools/http-limit.js +85 -0
  341. package/esm/src/kernel/tools/invoke.d.ts +27 -5
  342. package/esm/src/kernel/tools/invoke.js +223 -70
  343. package/esm/src/kernel/tools/mcp-sessions.d.ts +4 -1
  344. package/esm/src/kernel/tools/mcp-sessions.js +13 -8
  345. package/esm/src/kernel/tools/mod.d.ts +4 -3
  346. package/esm/src/kernel/tools/mod.js +3 -2
  347. package/esm/src/kernel/tools/model-text.d.ts +10 -5
  348. package/esm/src/kernel/tools/model-text.js +18 -12
  349. package/esm/src/kernel/tools/operation.d.ts +76 -0
  350. package/esm/src/kernel/tools/operation.js +100 -0
  351. package/esm/src/kernel/tools/page-answer.d.ts +8 -0
  352. package/esm/src/kernel/tools/page-answer.js +19 -0
  353. package/esm/src/kernel/tools/permission.d.ts +11 -2
  354. package/esm/src/kernel/tools/permission.js +12 -12
  355. package/esm/src/kernel/tools/project.d.ts +4 -1
  356. package/esm/src/kernel/tools/project.js +32 -2
  357. package/esm/src/kernel/tools/registry.d.ts +9 -2
  358. package/esm/src/kernel/tools/registry.js +69 -10
  359. package/esm/src/kernel/tools/remote.d.ts +40 -6
  360. package/esm/src/kernel/tools/remote.js +219 -92
  361. package/esm/src/kernel/tools/resolve.d.ts +3 -0
  362. package/esm/src/kernel/tools/resolve.js +12 -4
  363. package/esm/src/kernel/tools/run.d.ts +28 -0
  364. package/esm/src/kernel/tools/run.js +86 -0
  365. package/esm/src/kernel/tools/schema.d.ts +3 -3
  366. package/esm/src/kernel/tools/schema.js +21 -100
  367. package/esm/src/kernel/tools/signed-in-fetch.d.ts +2 -1
  368. package/esm/src/kernel/tools/signed-in-fetch.js +3 -3
  369. package/esm/src/kernel/tools/stage-run.d.ts +27 -4
  370. package/esm/src/kernel/tools/stage-run.js +75 -17
  371. package/esm/src/kernel/tools/types.d.ts +235 -25
  372. package/esm/src/kernel/tools/unchecked-output.d.ts +14 -0
  373. package/esm/src/kernel/tools/unchecked-output.js +18 -0
  374. package/esm/src/kernel/turn-events.d.ts +208 -31
  375. package/esm/src/kernel/turn-events.js +127 -9
  376. package/esm/src/kernel/types.d.ts +302 -161
  377. package/esm/src/kernel/util/base64.d.ts +2 -0
  378. package/esm/src/kernel/util/base64.js +2 -0
  379. package/esm/src/kernel/util/partial-json.d.ts +23 -0
  380. package/esm/src/kernel/util/partial-json.js +128 -0
  381. package/esm/src/kernel/util/record.d.ts +1 -0
  382. package/esm/src/kernel/util/record.js +1 -0
  383. package/esm/src/observability/destinations.d.ts +5 -0
  384. package/esm/src/observability/destinations.js +7 -2
  385. package/esm/src/observability/jsonl.d.ts +2 -2
  386. package/esm/src/observability/jsonl.js +15 -22
  387. package/esm/src/observability/mod.d.ts +3 -3
  388. package/esm/src/observability/mod.js +2 -2
  389. package/esm/src/observability/openinference.d.ts +1 -1
  390. package/esm/src/observability/openinference.js +3 -3
  391. package/esm/src/observability/otlp.d.ts +3 -0
  392. package/esm/src/observability/otlp.js +3 -3
  393. package/esm/src/observability/phoenix.d.ts +1 -0
  394. package/esm/src/observability/policy.d.ts +3 -0
  395. package/esm/src/observability/policy.js +5 -1
  396. package/esm/src/observability/resolve-policy.js +11 -5
  397. package/esm/src/observability/spans.d.ts +8 -2
  398. package/esm/src/observability/spans.js +21 -5
  399. package/esm/src/observability/trace-catalog.d.ts +19 -2
  400. package/esm/src/observability/trace-catalog.js +130 -88
  401. package/esm/src/observability/trace-record.js +22 -17
  402. package/esm/src/observability/trace-schema.d.ts +3 -0
  403. package/esm/src/observability/trace-schema.js +1 -1
  404. package/esm/src/observability/trace-sink.d.ts +1 -0
  405. package/esm/src/observability/trace-sink.js +1 -1
  406. package/esm/src/observability/trace-span.d.ts +7 -1
  407. package/esm/src/observability/trace-span.js +3 -1
  408. package/esm/src/observability/trace.d.ts +2 -0
  409. package/esm/src/observability/trace.js +4 -2
  410. package/esm/src/observability/types.d.ts +35 -11
  411. package/esm/src/observability/types.js +1 -1
  412. package/esm/src/presets/google/speech-voices.d.ts +1 -0
  413. package/esm/src/presets/google-limits.d.ts +1 -0
  414. package/esm/src/presets/google.d.ts +27 -12
  415. package/esm/src/presets/google.js +34 -25
  416. package/esm/src/presets/local.d.ts +26 -0
  417. package/esm/src/presets/local.js +30 -0
  418. package/esm/src/presets/mod.d.ts +5 -4
  419. package/esm/src/presets/mod.js +4 -4
  420. package/esm/src/presets/openrouter.d.ts +14 -1
  421. package/esm/src/presets/openrouter.js +19 -1
  422. package/esm/src/providers/embedding-limits.d.ts +7 -0
  423. package/esm/src/providers/embedding-limits.js +12 -0
  424. package/esm/src/providers/gemini/embedding-protocol.d.ts +8 -0
  425. package/esm/src/providers/gemini/embedding-protocol.js +125 -0
  426. package/esm/src/providers/gemini/interactions-protocol.d.ts +8 -0
  427. package/esm/src/providers/gemini/interactions-protocol.js +102 -0
  428. package/esm/src/providers/gemini/live-protocol.d.ts +3 -0
  429. package/esm/src/providers/gemini/live-protocol.js +191 -0
  430. package/esm/src/providers/gemini/prices.d.ts +3 -0
  431. package/esm/src/providers/gemini/prices.js +63 -0
  432. package/esm/src/providers/gemini/provider.d.ts +7 -0
  433. package/esm/src/providers/gemini/provider.js +39 -0
  434. package/esm/src/providers/google/api-error.d.ts +2 -0
  435. package/esm/src/providers/google/api-error.js +26 -18
  436. package/esm/src/providers/google/builtins.d.ts +14 -0
  437. package/esm/src/providers/google/builtins.js +57 -0
  438. package/esm/src/providers/google/grounding.d.ts +4 -4
  439. package/esm/src/providers/google/interactions/framing.d.ts +20 -8
  440. package/esm/src/providers/google/interactions/framing.js +85 -44
  441. package/esm/src/providers/google/interactions/steps.d.ts +5 -5
  442. package/esm/src/providers/google/interactions/steps.js +4 -4
  443. package/esm/src/providers/google/interactions/stream.d.ts +10 -11
  444. package/esm/src/providers/google/interactions/stream.js +33 -100
  445. package/esm/src/providers/google/live/framing.d.ts +15 -5
  446. package/esm/src/providers/google/live/framing.js +25 -25
  447. package/esm/src/providers/google/live/stream.d.ts +6 -44
  448. package/esm/src/providers/google/live/stream.js +4 -210
  449. package/esm/src/providers/google/urls.d.ts +1 -3
  450. package/esm/src/providers/google/urls.js +1 -3
  451. package/esm/src/providers/google/usage.js +2 -2
  452. package/esm/src/providers/live.d.ts +6 -0
  453. package/esm/src/providers/live.js +6 -0
  454. package/esm/src/providers/local/embedding-protocol.d.ts +7 -0
  455. package/esm/src/providers/local/embedding-protocol.js +60 -0
  456. package/esm/src/providers/local/provider.d.ts +7 -0
  457. package/esm/src/providers/local/provider.js +28 -0
  458. package/esm/src/providers/mod.d.ts +28 -7
  459. package/esm/src/providers/mod.js +19 -3
  460. package/esm/src/providers/open-ai/protocol.d.ts +3 -0
  461. package/esm/src/providers/open-ai/protocol.js +189 -0
  462. package/esm/src/providers/openrouter/embedding-protocol.d.ts +6 -0
  463. package/esm/src/providers/openrouter/embedding-protocol.js +86 -0
  464. package/esm/src/providers/openrouter/image.d.ts +0 -9
  465. package/esm/src/providers/openrouter/image.js +0 -153
  466. package/esm/src/providers/openrouter/images-protocol.d.ts +3 -0
  467. package/esm/src/providers/openrouter/images-protocol.js +82 -0
  468. package/esm/src/providers/openrouter/openai/compat.d.ts +2 -2
  469. package/esm/src/providers/openrouter/openai/compat.js +6 -6
  470. package/esm/src/providers/openrouter/openai/image-payload.d.ts +2 -2
  471. package/esm/src/providers/openrouter/openai/reasoning-state.d.ts +2 -0
  472. package/esm/src/providers/openrouter/openai/reasoning-state.js +31 -0
  473. package/esm/src/providers/openrouter/protocol.d.ts +8 -0
  474. package/esm/src/providers/openrouter/protocol.js +171 -0
  475. package/esm/src/providers/openrouter/provider.d.ts +10 -0
  476. package/esm/src/providers/openrouter/provider.js +50 -0
  477. package/esm/src/providers/shared/carried-tool-files.d.ts +7 -0
  478. package/esm/src/providers/shared/carried-tool-files.js +43 -0
  479. package/esm/src/providers/shared/pcm.js +2 -2
  480. package/esm/src/providers/shared/protocol-events.d.ts +8 -0
  481. package/esm/src/providers/shared/protocol-events.js +20 -0
  482. package/esm/src/providers/shared/response-identity.d.ts +2 -2
  483. package/esm/src/providers/shared/retry.d.ts +18 -0
  484. package/esm/src/providers/shared/retry.js +89 -0
  485. package/esm/src/providers/shared/sse.d.ts +0 -4
  486. package/esm/src/providers/shared/sse.js +50 -36
  487. package/esm/src/providers/shared/tool-args.d.ts +6 -7
  488. package/esm/src/providers/shared/tool-args.js +10 -6
  489. package/esm/src/providers/shared/tool-draft.d.ts +16 -0
  490. package/esm/src/providers/shared/tool-draft.js +14 -0
  491. package/esm/src/providers/shared/upstream-tap.d.ts +2 -2
  492. package/esm/src/providers/shared/upstream-tape.js +1 -1
  493. package/esm/src/providers/system-one/protocol.d.ts +8 -0
  494. package/esm/src/providers/system-one/protocol.js +93 -0
  495. package/esm/src/providers/types.d.ts +48 -16
  496. package/esm/src/providers/types.js +2 -1
  497. package/esm/src/providers/typesafe/provider.d.ts +7 -0
  498. package/esm/src/providers/typesafe/provider.js +24 -0
  499. package/esm/src/surface/formats.d.ts +19 -1
  500. package/esm/src/surface/formats.js +68 -29
  501. package/esm/src/surface/mod.d.ts +4 -2
  502. package/esm/src/surface/mod.js +4 -2
  503. package/esm/src/surface/runtime.d.ts +4 -0
  504. package/esm/src/surface/runtime.js +2 -0
  505. package/esm/src/surface/tools.d.ts +2 -8
  506. package/esm/src/surface/tools.js +4 -22
  507. package/esm/src/surface/types.d.ts +6 -0
  508. package/package.json +5 -13
  509. package/esm/src/cli/commands/egress-compile.d.ts +0 -17
  510. package/esm/src/cli/commands/egress-compile.js +0 -25
  511. package/esm/src/guardrails/egress-policy.d.ts +0 -27
  512. package/esm/src/guardrails/egress-policy.js +0 -76
  513. package/esm/src/guardrails/egress-rules.d.ts +0 -54
  514. package/esm/src/guardrails/egress-rules.js +0 -49
  515. package/esm/src/guardrails/lexicon.d.ts +0 -30
  516. package/esm/src/guardrails/lexicon.js +0 -478
  517. package/esm/src/kernel/engine/media-probe/audio.d.ts +0 -7
  518. package/esm/src/kernel/engine/media-probe/audio.js +0 -342
  519. package/esm/src/kernel/engine/media-probe/bytes.d.ts +0 -6
  520. package/esm/src/kernel/engine/media-probe/bytes.js +0 -26
  521. package/esm/src/kernel/engine/media-probe/image.d.ts +0 -5
  522. package/esm/src/kernel/engine/media-probe/image.js +0 -171
  523. package/esm/src/kernel/engine/media-probe/iso-bmff.d.ts +0 -19
  524. package/esm/src/kernel/engine/media-probe/iso-bmff.js +0 -48
  525. package/esm/src/kernel/engine/media-probe/matroska.d.ts +0 -35
  526. package/esm/src/kernel/engine/media-probe/matroska.js +0 -226
  527. package/esm/src/kernel/engine/media-probe/mp4.d.ts +0 -22
  528. package/esm/src/kernel/engine/media-probe/mp4.js +0 -279
  529. package/esm/src/kernel/engine/media-probe/opus.d.ts +0 -4
  530. package/esm/src/kernel/engine/media-probe/opus.js +0 -23
  531. package/esm/src/kernel/engine/media-probe/pdf.d.ts +0 -5
  532. package/esm/src/kernel/engine/media-probe/pdf.js +0 -117
  533. package/esm/src/kernel/engine/media-probe/video.d.ts +0 -15
  534. package/esm/src/kernel/engine/media-probe/video.js +0 -49
  535. package/esm/src/presets/typesafe.d.ts +0 -2
  536. package/esm/src/presets/typesafe.js +0 -2
  537. package/esm/src/providers/create-provider.d.ts +0 -21
  538. package/esm/src/providers/create-provider.js +0 -90
  539. package/esm/src/providers/decision/usage.d.ts +0 -3
  540. package/esm/src/providers/decision/usage.js +0 -25
  541. package/esm/src/providers/google/interactions/mod.d.ts +0 -2
  542. package/esm/src/providers/google/interactions/mod.js +0 -2
  543. package/esm/src/providers/google/keys.d.ts +0 -20
  544. package/esm/src/providers/google/keys.js +0 -87
  545. package/esm/src/providers/google/live/mod.d.ts +0 -7
  546. package/esm/src/providers/google/live/mod.js +0 -7
  547. package/esm/src/providers/google/live/openapi-schema.d.ts +0 -1
  548. package/esm/src/providers/google/live/openapi-schema.js +0 -42
  549. package/esm/src/providers/google/live/session.d.ts +0 -14
  550. package/esm/src/providers/google/live/session.js +0 -150
  551. package/esm/src/providers/local/local.d.ts +0 -12
  552. package/esm/src/providers/local/local.js +0 -186
  553. package/esm/src/providers/local/mod.d.ts +0 -8
  554. package/esm/src/providers/local/mod.js +0 -8
  555. package/esm/src/providers/openrouter/cache-control.d.ts +0 -5
  556. package/esm/src/providers/openrouter/cache-control.js +0 -4
  557. package/esm/src/providers/openrouter/chat.d.ts +0 -64
  558. package/esm/src/providers/openrouter/chat.js +0 -490
  559. package/esm/src/providers/openrouter/openai/sdk-messages.d.ts +0 -10
  560. package/esm/src/providers/openrouter/openai/sdk-messages.js +0 -99
  561. package/esm/src/providers/openrouter/resolve-api-key.d.ts +0 -3
  562. package/esm/src/providers/openrouter/resolve-api-key.js +0 -8
  563. package/esm/src/providers/openrouter/speech.d.ts +0 -18
  564. package/esm/src/providers/openrouter/speech.js +0 -109
  565. package/esm/src/providers/probe.d.ts +0 -5
  566. package/esm/src/providers/probe.js +0 -15
  567. package/esm/src/providers/shared/builtin-wire.d.ts +0 -4
  568. package/esm/src/providers/shared/builtin-wire.js +0 -9
  569. package/esm/src/providers/shared/vault.d.ts +0 -13
  570. package/esm/src/providers/shared/vault.js +0 -41
@@ -0,0 +1,3001 @@
1
+ /**
2
+ * Generated by `scripts/gen-credential-rules.ts` from gitleaks' default rules
3
+ * (`scripts/gitleaks/gitleaks.toml`). Do not edit: update the rules and run the script.
4
+ *
5
+ * The rules are gitleaks', under its license:
6
+ *
7
+ * MIT License
8
+ *
9
+ * Copyright (c) 2019 Zachary Rice
10
+ *
11
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
12
+ * of this software and associated documentation files (the "Software"), to deal
13
+ * in the Software without restriction, including without limitation the rights
14
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
15
+ * copies of the Software, and to permit persons to whom the Software is
16
+ * furnished to do so, subject to the following conditions:
17
+ *
18
+ * The above copyright notice and this permission notice shall be included in all
19
+ * copies or substantial portions of the Software.
20
+ *
21
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
22
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
23
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
24
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
25
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
26
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
27
+ * SOFTWARE.
28
+ *
29
+ * @module
30
+ */
31
+ /** What every rule lets through. */
32
+ const GLOBAL_ALLOWLIST = {
33
+ target: 'secret',
34
+ regexes: [
35
+ /^true|false|null$/i,
36
+ /^(?:[aA]+|[bB]+|[cC]+|[dD]+|[eE]+|[fF]+|[gG]+|[hH]+|[iI]+|[jJ]+|[kK]+|[lL]+|[mM]+|[nN]+|[oO]+|[pP]+|[qQ]+|[rR]+|[sS]+|[tT]+|[uU]+|[vV]+|[wW]+|[xX]+|[yY]+|[zZ]+|\*+|\.+)$/,
37
+ /^\$(?:\d+|\{\d+\})$/,
38
+ /^\$(?:[A-Z_]+|[a-z_]+)$/,
39
+ /^\$\{(?:[A-Z_]+|[a-z_]+)\}$/,
40
+ /^\{\{[ \t]*[\w ().|]+[ \t]*\}\}$/,
41
+ /^\$\{\{[ \t]*(?:(?:env|github|secrets|vars)(?:\.[A-Za-z]\w+)+[\w "'&./=|]*)[ \t]*\}\}$/,
42
+ /^%(?:[A-Z_]+|[a-z_]+)%$/,
43
+ /^%[+\-# 0]?[bcdeEfFgGoOpqstTUvxX]$/,
44
+ /^\{\d{0,2}\}$/,
45
+ /^@(?:[A-Z_]+|[a-z_]+)@$/,
46
+ /^\/Users\/(?:[a-zA-Z0-9]+\/[\w .-/]+$)/,
47
+ /^\/(?:bin|etc|home|opt|tmp|usr|var)\/[\w ./-]+$/,
48
+ ],
49
+ hashes: [],
50
+ stopwords: ['014df517-39d1-4453-b7b3-9930c563627c', 'abcdefghijklmnopqrstuvwxyz'],
51
+ };
52
+ /** gitleaks' rules that read text, in its order. */
53
+ const CREDENTIAL_RULES = [
54
+ {
55
+ id: '1password-secret-key',
56
+ pattern: /\bA3-[A-Z0-9]{6}-(?:(?:[A-Z0-9]{11})|(?:[A-Z0-9]{6}-[A-Z0-9]{5}))-[A-Z0-9]{5}-[A-Z0-9]{5}-[A-Z0-9]{5}\b/,
57
+ entropy: 3.8,
58
+ keywords: ['a3-'],
59
+ allowlists: [],
60
+ },
61
+ {
62
+ id: '1password-service-account-token',
63
+ pattern: /ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}/,
64
+ entropy: 4,
65
+ keywords: ['ops_'],
66
+ allowlists: [],
67
+ },
68
+ {
69
+ id: 'adafruit-api-key',
70
+ pattern: /[\w.-]{0,50}?(?:adafruit)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9_-]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
71
+ keywords: ['adafruit'],
72
+ allowlists: [],
73
+ },
74
+ {
75
+ id: 'adobe-client-id',
76
+ pattern: /[\w.-]{0,50}?(?:adobe)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
77
+ entropy: 2,
78
+ keywords: ['adobe'],
79
+ allowlists: [],
80
+ },
81
+ {
82
+ id: 'adobe-client-secret',
83
+ pattern: /\b(p8e-(?:[a-zA-Z0-9]{32}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
84
+ entropy: 2,
85
+ keywords: ['p8e-'],
86
+ allowlists: [],
87
+ },
88
+ {
89
+ id: 'age-secret-key',
90
+ pattern: /AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}/,
91
+ keywords: ['age-secret-key-1'],
92
+ allowlists: [],
93
+ },
94
+ {
95
+ id: 'airtable-api-key',
96
+ pattern: /[\w.-]{0,50}?(?:airtable)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{17})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
97
+ keywords: ['airtable'],
98
+ allowlists: [],
99
+ },
100
+ {
101
+ id: 'airtable-personnal-access-token',
102
+ pattern: /\b(pat[a-zA-Z0-9]{14}\.[a-f0-9]{64})\b/,
103
+ keywords: ['airtable'],
104
+ allowlists: [],
105
+ },
106
+ {
107
+ id: 'algolia-api-key',
108
+ pattern: /[\w.-]{0,50}?(?:algolia)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
109
+ keywords: ['algolia'],
110
+ allowlists: [],
111
+ },
112
+ {
113
+ id: 'alibaba-access-key-id',
114
+ pattern: /\b(LTAI(?:[a-zA-Z0-9]{20}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
115
+ entropy: 2,
116
+ keywords: ['ltai'],
117
+ allowlists: [],
118
+ },
119
+ {
120
+ id: 'alibaba-secret-key',
121
+ pattern: /[\w.-]{0,50}?(?:alibaba)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{30})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
122
+ entropy: 2,
123
+ keywords: ['alibaba'],
124
+ allowlists: [],
125
+ },
126
+ {
127
+ id: 'anthropic-admin-api-key',
128
+ pattern: /\b(sk-ant-admin01-[a-zA-Z0-9_-]{93}AA)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
129
+ keywords: ['sk-ant-admin01'],
130
+ allowlists: [],
131
+ },
132
+ {
133
+ id: 'anthropic-api-key',
134
+ pattern: /\b(sk-ant-api03-[a-zA-Z0-9_-]{93}AA)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
135
+ keywords: ['sk-ant-api03'],
136
+ allowlists: [],
137
+ },
138
+ {
139
+ id: 'artifactory-api-key',
140
+ pattern: /\bAKCp[A-Za-z0-9]{69}\b/,
141
+ entropy: 4.5,
142
+ keywords: ['akcp'],
143
+ allowlists: [],
144
+ },
145
+ {
146
+ id: 'artifactory-reference-token',
147
+ pattern: /\bcmVmd[A-Za-z0-9]{59}\b/,
148
+ entropy: 4.5,
149
+ keywords: ['cmvmd'],
150
+ allowlists: [],
151
+ },
152
+ {
153
+ id: 'asana-client-id',
154
+ pattern: /[\w.-]{0,50}?(?:asana)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
155
+ keywords: ['asana'],
156
+ allowlists: [],
157
+ },
158
+ {
159
+ id: 'asana-client-secret',
160
+ pattern: /[\w.-]{0,50}?(?:asana)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
161
+ keywords: ['asana'],
162
+ allowlists: [],
163
+ },
164
+ {
165
+ id: 'atlassian-api-token',
166
+ pattern: /(?:[\w.-]{0,50}?(?:(?:ATLASSIAN|[Aa]tlassian)|(?:CONFLUENCE|[Cc]onfluence)|(?:JIRA|[Jj]ira))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-zA-Z0-9]{20}[a-fA-F0-9]{4})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))|(?:\b([Aa][Tt][Aa][Tt][Tt]3[A-Za-z0-9_\-=]{186})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
167
+ entropy: 3.5,
168
+ keywords: ['atlassian', 'confluence', 'jira', 'atatt3'],
169
+ allowlists: [],
170
+ },
171
+ {
172
+ id: 'authress-service-client-access-key',
173
+ pattern: /\b((?:sc|ext|scauth|authress)_(?:[a-zA-Z0-9]{5,30}\.[a-zA-Z0-9]{4,6}\.(?:acc)[_-][a-zA-Z0-9-]{10,32}\.[a-zA-Z0-9+/_=-]{30,120}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
174
+ entropy: 2,
175
+ keywords: ['sc_', 'ext_', 'scauth_', 'authress_'],
176
+ allowlists: [],
177
+ },
178
+ {
179
+ id: 'aws-access-token',
180
+ pattern: /\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z2-7]{16})\b/,
181
+ entropy: 3,
182
+ keywords: ['a3t', 'akia', 'asia', 'abia', 'acca'],
183
+ allowlists: [{ target: 'secret', regexes: [/[^\n]+EXAMPLE$/], hashes: [], stopwords: [] }],
184
+ },
185
+ {
186
+ id: 'aws-amazon-bedrock-api-key-long-lived',
187
+ pattern: /\b(ABSK[A-Za-z0-9+/]{109,269}={0,2})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
188
+ entropy: 3,
189
+ keywords: ['absk'],
190
+ allowlists: [],
191
+ },
192
+ {
193
+ id: 'aws-amazon-bedrock-api-key-short-lived',
194
+ pattern: /bedrock-api-key-YmVkcm9jay5hbWF6b25hd3MuY29t/,
195
+ entropy: 3,
196
+ keywords: ['bedrock-api-key-'],
197
+ allowlists: [],
198
+ },
199
+ {
200
+ id: 'azure-ad-client-secret',
201
+ pattern: /(?:^|[\\'"`\t\n\f\r >=:(,)])([a-zA-Z0-9_~.]{3}\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\'"`\t\n\f\r <),])/,
202
+ entropy: 3,
203
+ keywords: ['q~'],
204
+ allowlists: [],
205
+ },
206
+ {
207
+ id: 'beamer-api-token',
208
+ pattern: /[\w.-]{0,50}?(?:beamer)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(b_[a-z0-9=_-]{44})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
209
+ keywords: ['beamer'],
210
+ allowlists: [],
211
+ },
212
+ {
213
+ id: 'bitbucket-client-id',
214
+ pattern: /[\w.-]{0,50}?(?:bitbucket)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
215
+ keywords: ['bitbucket'],
216
+ allowlists: [],
217
+ },
218
+ {
219
+ id: 'bitbucket-client-secret',
220
+ pattern: /[\w.-]{0,50}?(?:bitbucket)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
221
+ keywords: ['bitbucket'],
222
+ allowlists: [],
223
+ },
224
+ {
225
+ id: 'bittrex-access-key',
226
+ pattern: /[\w.-]{0,50}?(?:bittrex)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
227
+ keywords: ['bittrex'],
228
+ allowlists: [],
229
+ },
230
+ {
231
+ id: 'bittrex-secret-key',
232
+ pattern: /[\w.-]{0,50}?(?:bittrex)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
233
+ keywords: ['bittrex'],
234
+ allowlists: [],
235
+ },
236
+ {
237
+ id: 'cisco-meraki-api-key',
238
+ pattern: /[\w.-]{0,50}?(?:[\w.-]{0,50}?(?:(?:[Mm]eraki|MERAKI))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
239
+ entropy: 3,
240
+ keywords: ['meraki'],
241
+ allowlists: [],
242
+ },
243
+ {
244
+ id: 'clickhouse-cloud-api-secret-key',
245
+ pattern: /\b(4b1d[A-Za-z0-9]{38})\b/,
246
+ entropy: 3,
247
+ keywords: ['4b1d'],
248
+ allowlists: [],
249
+ },
250
+ {
251
+ id: 'clojars-api-token',
252
+ pattern: /CLOJARS_[a-z0-9]{60}/i,
253
+ entropy: 2,
254
+ keywords: ['clojars_'],
255
+ allowlists: [],
256
+ },
257
+ {
258
+ id: 'cloudflare-api-key',
259
+ pattern: /[\w.-]{0,50}?(?:cloudflare)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9_-]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
260
+ entropy: 2,
261
+ keywords: ['cloudflare'],
262
+ allowlists: [],
263
+ },
264
+ {
265
+ id: 'cloudflare-global-api-key',
266
+ pattern: /[\w.-]{0,50}?(?:cloudflare)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{37})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
267
+ entropy: 2,
268
+ keywords: ['cloudflare'],
269
+ allowlists: [],
270
+ },
271
+ {
272
+ id: 'cloudflare-origin-ca-key',
273
+ pattern: /\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
274
+ entropy: 2,
275
+ keywords: ['cloudflare', 'v1.0-'],
276
+ allowlists: [],
277
+ },
278
+ {
279
+ id: 'codecov-access-token',
280
+ pattern: /[\w.-]{0,50}?(?:codecov)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
281
+ keywords: ['codecov'],
282
+ allowlists: [],
283
+ },
284
+ {
285
+ id: 'cohere-api-token',
286
+ pattern: /[\w.-]{0,50}?(?:[\w.-]{0,50}?(?:[cC][oO][hH][eE][rR][eE]|[Cc][Oo]_[Aa][Pp][Ii]_[Kk][Ee][Yy])(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-zA-Z0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
287
+ entropy: 4,
288
+ keywords: ['cohere', 'co_api_key'],
289
+ allowlists: [],
290
+ },
291
+ {
292
+ id: 'coinbase-access-token',
293
+ pattern: /[\w.-]{0,50}?(?:coinbase)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9_-]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
294
+ keywords: ['coinbase'],
295
+ allowlists: [],
296
+ },
297
+ {
298
+ id: 'confluent-access-token',
299
+ pattern: /[\w.-]{0,50}?(?:confluent)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
300
+ keywords: ['confluent'],
301
+ allowlists: [],
302
+ },
303
+ {
304
+ id: 'confluent-secret-key',
305
+ pattern: /[\w.-]{0,50}?(?:confluent)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
306
+ keywords: ['confluent'],
307
+ allowlists: [],
308
+ },
309
+ {
310
+ id: 'contentful-delivery-api-token',
311
+ pattern: /[\w.-]{0,50}?(?:contentful)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{43})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
312
+ keywords: ['contentful'],
313
+ allowlists: [],
314
+ },
315
+ {
316
+ id: 'curl-auth-header',
317
+ pattern: /\bcurl\b(?:[^\n]*?|[^\n]*?(?:[\r\n]{1,2}[^\n]*?){1,5})[ \t\n\r](?:-H|--header)(?:=|[ \t]{0,5})(?:"(?:(?:[Aa][uU][tT][hH][oO][rR][iI][zZ][aA][tT][iI][oO][nN]:[ \t]{0,5}(?:[Bb][aA][sS][iI][cC][ \t]([a-zA-Z0-9+/]{8,}={0,3})|(?:[Bb][eE][aA][rR][eE][rR]|(?:[Aa][pP][iI]-)?[Tt][oO][kK][eE][nN])[ \t]([\w=~@.+/-]{8,})|([\w=~@.+/-]{8,}))|(?:(?:[Xx]-(?:[a-zA-Z]+-)?)?(?:[Aa][pP][iI]-?)?(?:[Kk][eE][yY]|[Tt][oO][kK][eE][nN])):[ \t]{0,5}([\w=~@.+/-]{8,}))")|(?:'(?:(?:[Aa][uU][tT][hH][oO][rR][iI][zZ][aA][tT][iI][oO][nN]:[ \t]{0,5}(?:[Bb][aA][sS][iI][cC][ \t]([a-zA-Z0-9+/]{8,}={0,3})|(?:[Bb][eE][aA][rR][eE][rR]|(?:[Aa][pP][iI]-)?[Tt][oO][kK][eE][nN])[ \t]([\w=~@.+/-]{8,})|([\w=~@.+/-]{8,}))|(?:(?:[Xx]-(?:[a-zA-Z]+-)?)?(?:[Aa][pP][iI]-?)?(?:[Kk][eE][yY]|[Tt][oO][kK][eE][nN])):[ \t]{0,5}([\w=~@.+/-]{8,}))')))(?:\B|[\t\n\f\r ]|$)/,
318
+ entropy: 2.75,
319
+ keywords: ['curl'],
320
+ allowlists: [],
321
+ },
322
+ {
323
+ id: 'curl-auth-user',
324
+ pattern: /\bcurl\b(?:[^\n]*|[^\n]*(?:[\r\n]{1,2}[^\n]*){1,5})[ \t\n\r](?:-u|--user)(?:=|[ \t]{0,5})("(:[^"]{3,}|[^:"]{3,}:|[^:"]{3,}:[^"]{3,})"|'([^:']{3,}:[^']{3,})'|((?:"[^"]{3,}"|'[^']{3,}'|[\w$@.-]+):(?:"[^"]{3,}"|'[^']{3,}'|[\w${}@.-]+)))(?:[\t\n\f\r ]|$)/,
325
+ entropy: 2,
326
+ keywords: ['curl'],
327
+ allowlists: [
328
+ {
329
+ target: 'secret',
330
+ regexes: [
331
+ /[^:]+:(?:change(?:it|me)|pass(?:word)?|pwd|test|token|\*+|x+)/,
332
+ /['"]?<[^>]+>['"]?:['"]?<[^>]+>|<[^:]+:[^>]+>['"]?/,
333
+ /[^:]+:\[[^\]]+\]/,
334
+ /['"]?[^:]+['"]?:['"]?\$(?:\d|\w+|\{(?:\d|\w+)\})['"]?/,
335
+ /\$\([^)]+\):\$\([^)]+\)/,
336
+ /['"]?\$?\{\{[^}]+\}\}['"]?:['"]?\$?\{\{[^}]+\}\}['"]?/,
337
+ ],
338
+ hashes: [],
339
+ stopwords: [],
340
+ },
341
+ ],
342
+ },
343
+ {
344
+ id: 'databricks-api-token',
345
+ pattern: /\b(dapi[a-f0-9]{32}(?:-\d)?)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
346
+ entropy: 3,
347
+ keywords: ['dapi'],
348
+ allowlists: [],
349
+ },
350
+ {
351
+ id: 'datadog-access-token',
352
+ pattern: /[\w.-]{0,50}?(?:datadog)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
353
+ keywords: ['datadog'],
354
+ allowlists: [],
355
+ },
356
+ {
357
+ id: 'defined-networking-api-token',
358
+ pattern: /[\w.-]{0,50}?(?:dnkey)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(dnkey-[a-z0-9=_-]{26}-[a-z0-9=_-]{52})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
359
+ keywords: ['dnkey'],
360
+ allowlists: [],
361
+ },
362
+ {
363
+ id: 'digitalocean-access-token',
364
+ pattern: /\b(doo_v1_[a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
365
+ entropy: 3,
366
+ keywords: ['doo_v1_'],
367
+ allowlists: [],
368
+ },
369
+ {
370
+ id: 'digitalocean-pat',
371
+ pattern: /\b(dop_v1_[a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
372
+ entropy: 3,
373
+ keywords: ['dop_v1_'],
374
+ allowlists: [],
375
+ },
376
+ {
377
+ id: 'digitalocean-refresh-token',
378
+ pattern: /\b(dor_v1_[a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
379
+ keywords: ['dor_v1_'],
380
+ allowlists: [],
381
+ },
382
+ {
383
+ id: 'discord-api-token',
384
+ pattern: /[\w.-]{0,50}?(?:discord)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
385
+ keywords: ['discord'],
386
+ allowlists: [],
387
+ },
388
+ {
389
+ id: 'discord-client-id',
390
+ pattern: /[\w.-]{0,50}?(?:discord)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9]{18})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
391
+ entropy: 2,
392
+ keywords: ['discord'],
393
+ allowlists: [],
394
+ },
395
+ {
396
+ id: 'discord-client-secret',
397
+ pattern: /[\w.-]{0,50}?(?:discord)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
398
+ entropy: 2,
399
+ keywords: ['discord'],
400
+ allowlists: [],
401
+ },
402
+ {
403
+ id: 'doppler-api-token',
404
+ pattern: /dp\.pt\.(?:[a-zA-Z0-9]{43})/,
405
+ entropy: 2,
406
+ keywords: ['dp.pt.'],
407
+ allowlists: [],
408
+ },
409
+ {
410
+ id: 'droneci-access-token',
411
+ pattern: /[\w.-]{0,50}?(?:droneci)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
412
+ keywords: ['droneci'],
413
+ allowlists: [],
414
+ },
415
+ {
416
+ id: 'dropbox-api-token',
417
+ pattern: /[\w.-]{0,50}?(?:dropbox)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{15})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
418
+ keywords: ['dropbox'],
419
+ allowlists: [],
420
+ },
421
+ {
422
+ id: 'dropbox-long-lived-api-token',
423
+ pattern: /[\w.-]{0,50}?(?:dropbox)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
424
+ keywords: ['dropbox'],
425
+ allowlists: [],
426
+ },
427
+ {
428
+ id: 'dropbox-short-lived-api-token',
429
+ pattern: /[\w.-]{0,50}?(?:dropbox)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(sl\.[a-z0-9\-=_]{135})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
430
+ keywords: ['dropbox'],
431
+ allowlists: [],
432
+ },
433
+ {
434
+ id: 'duffel-api-token',
435
+ pattern: /duffel_(?:test|live)_(?:[a-zA-Z0-9_\-=]{43})/,
436
+ entropy: 2,
437
+ keywords: ['duffel_'],
438
+ allowlists: [],
439
+ },
440
+ {
441
+ id: 'dynatrace-api-token',
442
+ pattern: /dt0c01\.(?:[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{64})/,
443
+ entropy: 4,
444
+ keywords: ['dt0c01.'],
445
+ allowlists: [],
446
+ },
447
+ {
448
+ id: 'easypost-api-token',
449
+ pattern: /\bEZAK(?:[a-zA-Z0-9]{54}\b)/,
450
+ entropy: 2,
451
+ keywords: ['ezak'],
452
+ allowlists: [],
453
+ },
454
+ {
455
+ id: 'easypost-test-api-token',
456
+ pattern: /\bEZTK(?:[a-zA-Z0-9]{54}\b)/,
457
+ entropy: 2,
458
+ keywords: ['eztk'],
459
+ allowlists: [],
460
+ },
461
+ {
462
+ id: 'etsy-access-token',
463
+ pattern: /(?:[\w.-]{0,50}?(?:(?:ETSY|[Ee]tsy))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-zA-Z0-9]{24})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
464
+ entropy: 3,
465
+ keywords: ['etsy'],
466
+ allowlists: [],
467
+ },
468
+ {
469
+ id: 'facebook-access-token',
470
+ pattern: /\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
471
+ entropy: 3,
472
+ keywords: ['facebook'],
473
+ allowlists: [],
474
+ },
475
+ {
476
+ id: 'facebook-page-access-token',
477
+ pattern: /\b(EAA[MC](?:[a-zA-Z0-9]{100,}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
478
+ entropy: 4,
479
+ keywords: ['eaam', 'eaac'],
480
+ allowlists: [],
481
+ },
482
+ {
483
+ id: 'facebook-secret',
484
+ pattern: /[\w.-]{0,50}?(?:facebook)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
485
+ entropy: 3,
486
+ keywords: ['facebook'],
487
+ allowlists: [],
488
+ },
489
+ {
490
+ id: 'fastly-api-token',
491
+ pattern: /[\w.-]{0,50}?(?:fastly)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
492
+ keywords: ['fastly'],
493
+ allowlists: [],
494
+ },
495
+ {
496
+ id: 'finicity-api-token',
497
+ pattern: /[\w.-]{0,50}?(?:finicity)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
498
+ keywords: ['finicity'],
499
+ allowlists: [],
500
+ },
501
+ {
502
+ id: 'finicity-client-secret',
503
+ pattern: /[\w.-]{0,50}?(?:finicity)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{20})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
504
+ keywords: ['finicity'],
505
+ allowlists: [],
506
+ },
507
+ {
508
+ id: 'finnhub-access-token',
509
+ pattern: /[\w.-]{0,50}?(?:finnhub)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{20})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
510
+ keywords: ['finnhub'],
511
+ allowlists: [],
512
+ },
513
+ {
514
+ id: 'flickr-access-token',
515
+ pattern: /[\w.-]{0,50}?(?:flickr)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
516
+ keywords: ['flickr'],
517
+ allowlists: [],
518
+ },
519
+ {
520
+ id: 'flutterwave-encryption-key',
521
+ pattern: /FLWSECK_TEST-(?:[a-hA-H0-9]{12})/,
522
+ entropy: 2,
523
+ keywords: ['flwseck_test'],
524
+ allowlists: [],
525
+ },
526
+ {
527
+ id: 'flutterwave-public-key',
528
+ pattern: /FLWPUBK_TEST-(?:[a-hA-H0-9]{32}-[Xx])/,
529
+ entropy: 2,
530
+ keywords: ['flwpubk_test'],
531
+ allowlists: [],
532
+ },
533
+ {
534
+ id: 'flutterwave-secret-key',
535
+ pattern: /FLWSECK_TEST-(?:[a-hA-H0-9]{32}-[Xx])/,
536
+ entropy: 2,
537
+ keywords: ['flwseck_test'],
538
+ allowlists: [],
539
+ },
540
+ {
541
+ id: 'flyio-access-token',
542
+ pattern: /\b((?:fo1_[\w-]{43}|fm1[ar]_[a-zA-Z0-9+/]{100,}={0,3}|fm2_[a-zA-Z0-9+/]{100,}={0,3}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
543
+ entropy: 4,
544
+ keywords: ['fo1_', 'fm1', 'fm2_'],
545
+ allowlists: [],
546
+ },
547
+ {
548
+ id: 'frameio-api-token',
549
+ pattern: /fio-u-(?:[a-zA-Z0-9\-_=]{64})/,
550
+ keywords: ['fio-u-'],
551
+ allowlists: [],
552
+ },
553
+ {
554
+ id: 'freshbooks-access-token',
555
+ pattern: /[\w.-]{0,50}?(?:freshbooks)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
556
+ keywords: ['freshbooks'],
557
+ allowlists: [],
558
+ },
559
+ {
560
+ id: 'gcp-api-key',
561
+ pattern: /\b(AIza[\w-]{35})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
562
+ entropy: 4,
563
+ keywords: ['aiza'],
564
+ allowlists: [
565
+ {
566
+ target: 'secret',
567
+ regexes: [],
568
+ hashes: [
569
+ 'f56e323494a6ffc2064e7a955908957d84f0755e5f975dabd64328d0359a8f7c',
570
+ '2037abcaffb2b77785da716cf7ccff4ff4d00c4ea930db0167b7d71f50af7eb4',
571
+ '3f370c9dd8225c63b5c77de1f785edc9712958f18bb612d5fa2e0ae33aeca682',
572
+ 'e4a5542bb7fd7b67e943c71ad29c34b5972c9840597e7eda53e666f44d5da0b9',
573
+ 'a19f89ab3555eac10c40741f6df79ecf0935998f15569f8db9d67bce0181fff6',
574
+ '0b476bdf9acf2123d547b5ae76f1e59884d8ec9553ee0c47e9f31fd4768f3f3c',
575
+ 'eb540d2b6ee2a0a47c5779bc8a0141784c6b753840d4c6f4e2428a6e86e9e0b1',
576
+ '37f8f09bdf12c2f2eae4ead7273a62ddb0c23459cbf902892f282b57f7ed6619',
577
+ '8731261cb72d86267a32a532ebd3df429e2144e5e4ced7e13568bc9e6c8fb1b1',
578
+ '49f777db995e8260da7ca9ffdf0c08d66f0453e97ec967018baf2cdfe3b582d0',
579
+ '27a9a42931dff7eb2f8434e20a9bce976ea364e7bee49187f19d5cfeca9c7045',
580
+ 'dc0fcf046c61640cbd1e8b999ada3262d722c2ca4bf42dceac999020ffdbb614',
581
+ '4c98242dcadc8b29005c6b4aad526552d5ea1842149154c0694adeec75847583',
582
+ 'ea9bb1082cf95663f5faca23b8b15ef2aa0fce0a5c6df9c32dcb85b2e0a4513d',
583
+ '3a8b61d0f636b007840c0d40ba12bcf48465dc054cdc1a68704a33521d84b665',
584
+ 'a6c814bc555ae62c7bd8b58ec07bf559c7ed3a009976a1e0acc9cef0d4473b41',
585
+ ],
586
+ stopwords: [],
587
+ },
588
+ ],
589
+ },
590
+ {
591
+ id: 'generic-api-key',
592
+ pattern: /(?:[\w.-]{0,50}?(?:[aA][cC][cC][eE][sS][sS]|[aA][uU][tT][hH]|(?:[Aa]pi|API)|[cC][rR][eE][dD][eE][nN][tT][iI][aA][lL]|[cC][rR][eE][dD][sS]|[kK][eE][yY]|[pP][aA][sS][sS][wW](?:[oO][rR])?[dD]|[sS][eE][cC][rR][eE][tT]|[tT][oO][kK][eE][nN])(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([\w.=-]{10,150}|[a-zA-Z0-9][a-zA-Z0-9+/]{11,}={0,3})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
593
+ entropy: 3.5,
594
+ keywords: [
595
+ 'access',
596
+ 'api',
597
+ 'auth',
598
+ 'key',
599
+ 'credential',
600
+ 'creds',
601
+ 'passwd',
602
+ 'password',
603
+ 'secret',
604
+ 'token',
605
+ ],
606
+ allowlists: [
607
+ { target: 'secret', regexes: [/^[a-zA-Z_.-]+$/], hashes: [], stopwords: [] },
608
+ {
609
+ target: 'match',
610
+ regexes: [
611
+ /(?:(?:[aA][cC][cC][eE][sS][sS](?:[iI][bB][iI][lL][iI][tT][yY]|[oO][rR])|[aA][cC][cC][eE][sS][sS][_.-]?[iI][dD]|[rR][aA][nN][dD][oO][mM][_.-]?[aA][cC][cC][eE][sS][sS]|[aA][pP][iI][_.-]?(?:[iI][dD]|[nN][aA][mM][eE]|[vV][eE][rR][sS][iI][oO][nN])|[rR][aA][pP][iI][dD]|[cC][aA][pP][iI][tT][aA][lL]|[a-zA-Z0-9-]*?[aA][pP][iI][a-zA-Z0-9-]*?:[jJ][aA][rR]:|[aA][uU][tT][hH][oO][rR]|[Xx]-[Mm][Ss]-[Ee][xX][cC][hH][aA][nN][gG][eE]-[Oo][rR][gG][aA][nN][iI][zZ][aA][tT][iI][oO][nN]-[Aa][uU][tT][hH]|[Aa][uU][tT][hH][eE][nN][tT][iI][cC][aA][tT][iI][oO][nN]-[Rr][eE][sS][uU][lL][tT][sS]|(?:[cC][rR][eE][dD][eE][nN][tT][iI][aA][lL][sS]?[_.-]?[iI][dD]|[wW][iI][tT][hH][Cc][rR][eE][dD][eE][nN][tT][iI][aA][lL][sS])|(?:[bB][uU][cC][kK][eE][tT]|[fF][oO][rR][eE][iI][gG][nN]|[hH][oO][tT]|[iI][dD][xX]|[nN][aA][tT][uU][rR][aA][lL]|[pP][rR][iI][mM][aA][rR][yY]|[pP][uU][bB](?:[lL][iI][cC])?|[sS][cC][hH][eE][mM][aA]|[sS][eE][qQ][uU][eE][nN][cC][eE])[_.-]?[kK][eE][yY]|(?:[tT][uU][rR][kK][eE][yY])|[kK][eE][yY][_.-]?(?:[aA][lL][iI][aA][sS]|[bB][oO][aA][rR][dD]|[cC][oO][dD][eE]|[fF][rR][aA][mM][eE]|[iI][dD]|[lL][eE][nN][gG][tT][hH]|[mM][eE][sS][hH]|[nN][aA][mM][eE]|[pP][aA][iI][rR]|[pP][rR][eE][sS][sS](?:[eE][dD])?|[rR][iI][nN][gG]|[sS][eE][lL][eE][cC][tT][oO][rR]|[sS][iI][gG][nN][aA][tT][uU][rR][eE]|[sS][iI][zZ][eE]|[sS][tT][oO][nN][eE]|[sS][tT][oO][rR][eE][tT][yY][pP][eE]|[wW][oO][rR][dD]|[uU][pP]|[dD][oO][wW][nN]|[lL][eE][fF][tT]|[rR][iI][gG][hH][tT])|[kK][eE][yY][_.-]?[vV][aA][uU][lL][tT][_.-]?(?:[iI][dD]|[nN][aA][mM][eE])|[kK][eE][yY][Vv][aA][uU][lL][tT][Tt][oO][Ss][tT][oO][rR][eE][Ss][eE][cC][rR][eE][tT][sS]|[kK][eE][yY](?:[sS][tT][oO][rR][eE]|[tT][aA][bB])[_.-]?(?:[fF][iI][lL][eE]|[pP][aA][tT][hH])|[iI][sS][sS][uU][eE][rR][kK][eE][yY][hH][aA][sS][hH]|(?:[DdMm]onkey|[DM]ONKEY)|[kK][eE][yY][iI][nN][gG]|(?:[sS][eE][cC][rR][eE][tT])[_.-]?(?:[lL][eE][nN][gG][tT][hH]|[nN][aA][mM][eE]|[sS][iI][zZ][eE])|[Uu][sS][eE][rR][Ss][eE][cC][rR][eE][tT][sS][Ii][dD]|(?:[cC][sS][rR][fF])[_.-]?[tT][oO][kK][eE][nN]|(?:[iI][oO]\.[jJ][sS][oO][nN][wW][eE][bB][tT][oO][kK][eE][nN][ \t]?:[ \t]?[\w-]+)|(?:[aA][pP][iI]|[cC][rR][eE][dD][eE][nN][tT][iI][aA][lL][sS]|[tT][oO][kK][eE][nN])[_.-]?(?:[eE][nN][dD][pP][oO][iI][nN][tT]|[uU][rR][iIlL])|[pP][uU][bB][lL][iI][cC][_.-]?[tT][oO][kK][eE][nN]|(?:[kK][eE][yY]|[tT][oO][kK][eE][nN])[_.-]?[fF][iI][lL][eE]|(?:(?:[A-Z_]+=\n[A-Z_]+=|[a-z_]+=\n[a-z_]+=)(?:\n|$))|(?:(?:[A-Z.]+=\n[A-Z.]+=|[a-z.]+=\n[a-z.]+=)(?:\n|$))))/,
612
+ ],
613
+ hashes: [],
614
+ stopwords: [
615
+ '000000',
616
+ '6fe4476ee5a1832882e326b506d14126',
617
+ '_ec2_',
618
+ 'aaaaaa',
619
+ 'about',
620
+ 'abstract',
621
+ 'academy',
622
+ 'acces',
623
+ 'account',
624
+ 'act-',
625
+ 'act.',
626
+ 'act_',
627
+ 'action',
628
+ 'active',
629
+ 'actively',
630
+ 'activity',
631
+ 'adapter',
632
+ 'add-',
633
+ 'add-on',
634
+ 'add.',
635
+ 'add_',
636
+ 'addon',
637
+ 'addres',
638
+ 'admin',
639
+ 'adobe',
640
+ 'advanced',
641
+ 'adventure',
642
+ 'agent',
643
+ 'agile',
644
+ 'air-',
645
+ 'air.',
646
+ 'air_',
647
+ 'ajax',
648
+ 'akka',
649
+ 'alert',
650
+ 'alfred',
651
+ 'algorithm',
652
+ 'all-',
653
+ 'all.',
654
+ 'all_',
655
+ 'alloy',
656
+ 'alpha',
657
+ 'amazon',
658
+ 'amqp',
659
+ 'analysi',
660
+ 'analytic',
661
+ 'analyzer',
662
+ 'android',
663
+ 'angular',
664
+ 'angularj',
665
+ 'animate',
666
+ 'animation',
667
+ 'another',
668
+ 'ansible',
669
+ 'answer',
670
+ 'ant-',
671
+ 'ant.',
672
+ 'ant_',
673
+ 'any-',
674
+ 'any.',
675
+ 'any_',
676
+ 'apache',
677
+ 'app-',
678
+ 'app.',
679
+ 'app_',
680
+ 'apple',
681
+ 'arch',
682
+ 'archive',
683
+ 'archived',
684
+ 'arduino',
685
+ 'array',
686
+ 'art-',
687
+ 'art.',
688
+ 'art_',
689
+ 'article',
690
+ 'asp-',
691
+ 'asp.',
692
+ 'asp_',
693
+ 'asset',
694
+ 'async',
695
+ 'atom',
696
+ 'attention',
697
+ 'audio',
698
+ 'audit',
699
+ 'aura',
700
+ 'auth',
701
+ 'author',
702
+ 'authorize',
703
+ 'auto',
704
+ 'automated',
705
+ 'automatic',
706
+ 'awesome',
707
+ 'aws_',
708
+ 'azure',
709
+ 'back',
710
+ 'backbone',
711
+ 'backend',
712
+ 'backup',
713
+ 'bar-',
714
+ 'bar.',
715
+ 'bar_',
716
+ 'base',
717
+ 'based',
718
+ 'bash',
719
+ 'basic',
720
+ 'batch',
721
+ 'been',
722
+ 'beer',
723
+ 'behavior',
724
+ 'being',
725
+ 'benchmark',
726
+ 'best',
727
+ 'beta',
728
+ 'better',
729
+ 'big-',
730
+ 'big.',
731
+ 'big_',
732
+ 'binary',
733
+ 'binding',
734
+ 'bit-',
735
+ 'bit.',
736
+ 'bit_',
737
+ 'bitcoin',
738
+ 'block',
739
+ 'blog',
740
+ 'board',
741
+ 'book',
742
+ 'bookmark',
743
+ 'boost',
744
+ 'boot',
745
+ 'bootstrap',
746
+ 'bosh',
747
+ 'bot-',
748
+ 'bot.',
749
+ 'bot_',
750
+ 'bower',
751
+ 'box-',
752
+ 'box.',
753
+ 'box_',
754
+ 'boxen',
755
+ 'bracket',
756
+ 'branch',
757
+ 'bridge',
758
+ 'browser',
759
+ 'brunch',
760
+ 'buffer',
761
+ 'bug-',
762
+ 'bug.',
763
+ 'bug_',
764
+ 'build',
765
+ 'builder',
766
+ 'building',
767
+ 'buildout',
768
+ 'buildpack',
769
+ 'built',
770
+ 'bundle',
771
+ 'busines',
772
+ 'but-',
773
+ 'but.',
774
+ 'but_',
775
+ 'button',
776
+ 'cache',
777
+ 'caching',
778
+ 'cakephp',
779
+ 'calendar',
780
+ 'call',
781
+ 'camera',
782
+ 'campfire',
783
+ 'can-',
784
+ 'can.',
785
+ 'can_',
786
+ 'canva',
787
+ 'captcha',
788
+ 'capture',
789
+ 'card',
790
+ 'carousel',
791
+ 'case',
792
+ 'cassandra',
793
+ 'cat-',
794
+ 'cat.',
795
+ 'cat_',
796
+ 'category',
797
+ 'center',
798
+ 'cento',
799
+ 'challenge',
800
+ 'change',
801
+ 'changelog',
802
+ 'channel',
803
+ 'chart',
804
+ 'chat',
805
+ 'cheat',
806
+ 'check',
807
+ 'checker',
808
+ 'chef',
809
+ 'ches',
810
+ 'chinese',
811
+ 'chosen',
812
+ 'chrome',
813
+ 'ckeditor',
814
+ 'clas',
815
+ 'classe',
816
+ 'classic',
817
+ 'clean',
818
+ 'cli-',
819
+ 'cli.',
820
+ 'cli_',
821
+ 'client',
822
+ 'clojure',
823
+ 'clone',
824
+ 'closure',
825
+ 'cloud',
826
+ 'club',
827
+ 'cluster',
828
+ 'cms-',
829
+ 'cms_',
830
+ 'coco',
831
+ 'code',
832
+ 'coding',
833
+ 'coffee',
834
+ 'color',
835
+ 'combination',
836
+ 'combo',
837
+ 'command',
838
+ 'commander',
839
+ 'comment',
840
+ 'commit',
841
+ 'common',
842
+ 'community',
843
+ 'compas',
844
+ 'compiler',
845
+ 'complete',
846
+ 'component',
847
+ 'composer',
848
+ 'computer',
849
+ 'computing',
850
+ 'con-',
851
+ 'con.',
852
+ 'con_',
853
+ 'concept',
854
+ 'conf',
855
+ 'config',
856
+ 'connect',
857
+ 'connector',
858
+ 'console',
859
+ 'contact',
860
+ 'container',
861
+ 'contao',
862
+ 'content',
863
+ 'contest',
864
+ 'context',
865
+ 'control',
866
+ 'convert',
867
+ 'converter',
868
+ "conway'",
869
+ 'cookbook',
870
+ 'cookie',
871
+ 'cool',
872
+ 'copy',
873
+ 'cordova',
874
+ 'core',
875
+ 'couchbase',
876
+ 'couchdb',
877
+ 'countdown',
878
+ 'counter',
879
+ 'course',
880
+ 'craft',
881
+ 'crawler',
882
+ 'create',
883
+ 'creating',
884
+ 'creator',
885
+ 'credential',
886
+ 'crm-',
887
+ 'crm.',
888
+ 'crm_',
889
+ 'cros',
890
+ 'crud',
891
+ 'csv-',
892
+ 'csv.',
893
+ 'csv_',
894
+ 'cube',
895
+ 'cucumber',
896
+ 'cuda',
897
+ 'current',
898
+ 'currently',
899
+ 'custom',
900
+ 'daemon',
901
+ 'dark',
902
+ 'dart',
903
+ 'dash',
904
+ 'dashboard',
905
+ 'data',
906
+ 'database',
907
+ 'date',
908
+ 'day-',
909
+ 'day.',
910
+ 'day_',
911
+ 'dead',
912
+ 'debian',
913
+ 'debug',
914
+ 'debugger',
915
+ 'deck',
916
+ 'define',
917
+ 'del-',
918
+ 'del.',
919
+ 'del_',
920
+ 'delete',
921
+ 'demo',
922
+ 'deploy',
923
+ 'design',
924
+ 'designer',
925
+ 'desktop',
926
+ 'detection',
927
+ 'detector',
928
+ 'dev-',
929
+ 'dev.',
930
+ 'dev_',
931
+ 'develop',
932
+ 'developer',
933
+ 'device',
934
+ 'devise',
935
+ 'diff',
936
+ 'digital',
937
+ 'directive',
938
+ 'directory',
939
+ 'discovery',
940
+ 'display',
941
+ 'django',
942
+ 'dns-',
943
+ 'dns_',
944
+ 'doc-',
945
+ 'doc.',
946
+ 'doc_',
947
+ 'docker',
948
+ 'docpad',
949
+ 'doctrine',
950
+ 'document',
951
+ 'doe-',
952
+ 'doe.',
953
+ 'doe_',
954
+ 'dojo',
955
+ 'dom-',
956
+ 'dom.',
957
+ 'dom_',
958
+ 'domain',
959
+ "don't",
960
+ 'done',
961
+ 'dot-',
962
+ 'dot.',
963
+ 'dot_',
964
+ 'dotfile',
965
+ 'download',
966
+ 'draft',
967
+ 'drag',
968
+ 'drill',
969
+ 'drive',
970
+ 'driven',
971
+ 'driver',
972
+ 'drop',
973
+ 'dropbox',
974
+ 'drupal',
975
+ 'dsl-',
976
+ 'dsl.',
977
+ 'dsl_',
978
+ 'dynamic',
979
+ 'easy',
980
+ 'ecdsa',
981
+ 'eclipse',
982
+ 'edit',
983
+ 'editing',
984
+ 'edition',
985
+ 'editor',
986
+ 'element',
987
+ 'emac',
988
+ 'email',
989
+ 'embed',
990
+ 'embedded',
991
+ 'ember',
992
+ 'emitter',
993
+ 'emulator',
994
+ 'encoding',
995
+ 'endpoint',
996
+ 'engine',
997
+ 'english',
998
+ 'enhanced',
999
+ 'entity',
1000
+ 'entry',
1001
+ 'env_',
1002
+ 'episode',
1003
+ 'erlang',
1004
+ 'error',
1005
+ 'espresso',
1006
+ 'event',
1007
+ 'evented',
1008
+ 'example',
1009
+ 'exchange',
1010
+ 'exercise',
1011
+ 'experiment',
1012
+ 'expire',
1013
+ 'exploit',
1014
+ 'explorer',
1015
+ 'export',
1016
+ 'exporter',
1017
+ 'expres',
1018
+ 'ext-',
1019
+ 'ext.',
1020
+ 'ext_',
1021
+ 'extended',
1022
+ 'extension',
1023
+ 'external',
1024
+ 'extra',
1025
+ 'extractor',
1026
+ 'fabric',
1027
+ 'facebook',
1028
+ 'factory',
1029
+ 'fake',
1030
+ 'fast',
1031
+ 'feature',
1032
+ 'feed',
1033
+ 'fewfwef',
1034
+ 'ffmpeg',
1035
+ 'field',
1036
+ 'file',
1037
+ 'filter',
1038
+ 'find',
1039
+ 'finder',
1040
+ 'firefox',
1041
+ 'firmware',
1042
+ 'first',
1043
+ 'fish',
1044
+ 'fix-',
1045
+ 'fix_',
1046
+ 'flash',
1047
+ 'flask',
1048
+ 'flat',
1049
+ 'flex',
1050
+ 'flexible',
1051
+ 'flickr',
1052
+ 'flow',
1053
+ 'fluent',
1054
+ 'fluentd',
1055
+ 'fluid',
1056
+ 'folder',
1057
+ 'font',
1058
+ 'force',
1059
+ 'foreman',
1060
+ 'fork',
1061
+ 'form',
1062
+ 'format',
1063
+ 'formatter',
1064
+ 'forum',
1065
+ 'foundry',
1066
+ 'framework',
1067
+ 'free',
1068
+ 'friend',
1069
+ 'friendly',
1070
+ 'front-end',
1071
+ 'frontend',
1072
+ 'ftp-',
1073
+ 'ftp.',
1074
+ 'ftp_',
1075
+ 'fuel',
1076
+ 'full',
1077
+ 'fun-',
1078
+ 'fun.',
1079
+ 'fun_',
1080
+ 'func',
1081
+ 'future',
1082
+ 'gaia',
1083
+ 'gallery',
1084
+ 'game',
1085
+ 'gateway',
1086
+ 'gem-',
1087
+ 'gem.',
1088
+ 'gem_',
1089
+ 'gen-',
1090
+ 'gen.',
1091
+ 'gen_',
1092
+ 'general',
1093
+ 'generator',
1094
+ 'generic',
1095
+ 'genetic',
1096
+ 'get-',
1097
+ 'get.',
1098
+ 'get_',
1099
+ 'getenv',
1100
+ 'getting',
1101
+ 'ghost',
1102
+ 'gist',
1103
+ 'git-',
1104
+ 'git.',
1105
+ 'git_',
1106
+ 'github',
1107
+ 'gitignore',
1108
+ 'gitlab',
1109
+ 'glas',
1110
+ 'gmail',
1111
+ 'gnome',
1112
+ 'gnu-',
1113
+ 'gnu.',
1114
+ 'gnu_',
1115
+ 'goal',
1116
+ 'golang',
1117
+ 'gollum',
1118
+ 'good',
1119
+ 'google',
1120
+ 'gpu-',
1121
+ 'gpu.',
1122
+ 'gpu_',
1123
+ 'gradle',
1124
+ 'grail',
1125
+ 'graph',
1126
+ 'graphic',
1127
+ 'great',
1128
+ 'grid',
1129
+ 'groovy',
1130
+ 'group',
1131
+ 'grunt',
1132
+ 'guard',
1133
+ 'gui-',
1134
+ 'gui.',
1135
+ 'gui_',
1136
+ 'guide',
1137
+ 'guideline',
1138
+ 'gulp',
1139
+ 'gwt-',
1140
+ 'gwt.',
1141
+ 'gwt_',
1142
+ 'hack',
1143
+ 'hackathon',
1144
+ 'hacker',
1145
+ 'hacking',
1146
+ 'hadoop',
1147
+ 'haml',
1148
+ 'handler',
1149
+ 'hardware',
1150
+ 'has-',
1151
+ 'has_',
1152
+ 'hash',
1153
+ 'haskell',
1154
+ 'have',
1155
+ 'haxe',
1156
+ 'hello',
1157
+ 'help',
1158
+ 'helper',
1159
+ 'here',
1160
+ 'hero',
1161
+ 'heroku',
1162
+ 'high',
1163
+ 'hipchat',
1164
+ 'history',
1165
+ 'home',
1166
+ 'homebrew',
1167
+ 'homepage',
1168
+ 'hook',
1169
+ 'host',
1170
+ 'hosting',
1171
+ 'hot-',
1172
+ 'hot.',
1173
+ 'hot_',
1174
+ 'house',
1175
+ 'how-',
1176
+ 'how.',
1177
+ 'how_',
1178
+ 'html',
1179
+ 'http',
1180
+ 'hub-',
1181
+ 'hub.',
1182
+ 'hub_',
1183
+ 'hubot',
1184
+ 'human',
1185
+ 'icon',
1186
+ 'ide-',
1187
+ 'ide.',
1188
+ 'ide_',
1189
+ 'idea',
1190
+ 'identity',
1191
+ 'idiomatic',
1192
+ 'image',
1193
+ 'impact',
1194
+ 'import',
1195
+ 'important',
1196
+ 'importer',
1197
+ 'impres',
1198
+ 'index',
1199
+ 'infinite',
1200
+ 'info',
1201
+ 'injection',
1202
+ 'inline',
1203
+ 'input',
1204
+ 'inside',
1205
+ 'inspector',
1206
+ 'instagram',
1207
+ 'install',
1208
+ 'installer',
1209
+ 'instant',
1210
+ 'intellij',
1211
+ 'interface',
1212
+ 'internet',
1213
+ 'interview',
1214
+ 'into',
1215
+ 'intro',
1216
+ 'ionic',
1217
+ 'iphone',
1218
+ 'ipython',
1219
+ 'irc-',
1220
+ 'irc_',
1221
+ 'iso-',
1222
+ 'iso.',
1223
+ 'iso_',
1224
+ 'issue',
1225
+ 'jade',
1226
+ 'jasmine',
1227
+ 'java',
1228
+ 'jbos',
1229
+ 'jekyll',
1230
+ 'jenkin',
1231
+ 'jetbrains',
1232
+ 'job-',
1233
+ 'job.',
1234
+ 'job_',
1235
+ 'joomla',
1236
+ 'jpa-',
1237
+ 'jpa.',
1238
+ 'jpa_',
1239
+ 'jquery',
1240
+ 'json',
1241
+ 'just',
1242
+ 'kafka',
1243
+ 'karma',
1244
+ 'kata',
1245
+ 'kernel',
1246
+ 'keyboard',
1247
+ 'kindle',
1248
+ 'kit-',
1249
+ 'kit.',
1250
+ 'kit_',
1251
+ 'kitchen',
1252
+ 'knife',
1253
+ 'koan',
1254
+ 'kohana',
1255
+ 'lab-',
1256
+ 'lab.',
1257
+ 'lab_',
1258
+ 'lambda',
1259
+ 'lamp',
1260
+ 'language',
1261
+ 'laravel',
1262
+ 'last',
1263
+ 'latest',
1264
+ 'latex',
1265
+ 'launcher',
1266
+ 'layer',
1267
+ 'layout',
1268
+ 'lazy',
1269
+ 'ldap',
1270
+ 'leaflet',
1271
+ 'league',
1272
+ 'learn',
1273
+ 'learning',
1274
+ 'led-',
1275
+ 'led.',
1276
+ 'led_',
1277
+ 'leetcode',
1278
+ 'les-',
1279
+ 'les.',
1280
+ 'les_',
1281
+ 'level',
1282
+ 'leveldb',
1283
+ 'lib-',
1284
+ 'lib.',
1285
+ 'lib_',
1286
+ 'librarie',
1287
+ 'library',
1288
+ 'license',
1289
+ 'life',
1290
+ 'liferay',
1291
+ 'light',
1292
+ 'lightbox',
1293
+ 'like',
1294
+ 'line',
1295
+ 'link',
1296
+ 'linked',
1297
+ 'linkedin',
1298
+ 'linux',
1299
+ 'lisp',
1300
+ 'list',
1301
+ 'lite',
1302
+ 'little',
1303
+ 'load',
1304
+ 'loader',
1305
+ 'local',
1306
+ 'location',
1307
+ 'lock',
1308
+ 'log-',
1309
+ 'log.',
1310
+ 'log_',
1311
+ 'logger',
1312
+ 'logging',
1313
+ 'logic',
1314
+ 'login',
1315
+ 'logstash',
1316
+ 'longer',
1317
+ 'look',
1318
+ 'love',
1319
+ 'lua-',
1320
+ 'lua.',
1321
+ 'lua_',
1322
+ 'mac-',
1323
+ 'mac.',
1324
+ 'mac_',
1325
+ 'machine',
1326
+ 'made',
1327
+ 'magento',
1328
+ 'magic',
1329
+ 'mail',
1330
+ 'make',
1331
+ 'maker',
1332
+ 'making',
1333
+ 'man-',
1334
+ 'man.',
1335
+ 'man_',
1336
+ 'manage',
1337
+ 'manager',
1338
+ 'manifest',
1339
+ 'manual',
1340
+ 'map-',
1341
+ 'map.',
1342
+ 'map_',
1343
+ 'mapper',
1344
+ 'mapping',
1345
+ 'markdown',
1346
+ 'markup',
1347
+ 'master',
1348
+ 'math',
1349
+ 'matrix',
1350
+ 'maven',
1351
+ 'md5',
1352
+ 'mean',
1353
+ 'media',
1354
+ 'mediawiki',
1355
+ 'meetup',
1356
+ 'memcached',
1357
+ 'memory',
1358
+ 'menu',
1359
+ 'merchant',
1360
+ 'message',
1361
+ 'messaging',
1362
+ 'meta',
1363
+ 'metadata',
1364
+ 'meteor',
1365
+ 'method',
1366
+ 'metric',
1367
+ 'micro',
1368
+ 'middleman',
1369
+ 'migration',
1370
+ 'minecraft',
1371
+ 'miner',
1372
+ 'mini',
1373
+ 'minimal',
1374
+ 'mirror',
1375
+ 'mit-',
1376
+ 'mit.',
1377
+ 'mit_',
1378
+ 'mobile',
1379
+ 'mocha',
1380
+ 'mock',
1381
+ 'mod-',
1382
+ 'mod.',
1383
+ 'mod_',
1384
+ 'mode',
1385
+ 'model',
1386
+ 'modern',
1387
+ 'modular',
1388
+ 'module',
1389
+ 'modx',
1390
+ 'money',
1391
+ 'mongo',
1392
+ 'mongodb',
1393
+ 'mongoid',
1394
+ 'mongoose',
1395
+ 'monitor',
1396
+ 'monkey',
1397
+ 'more',
1398
+ 'motion',
1399
+ 'moved',
1400
+ 'movie',
1401
+ 'mozilla',
1402
+ 'mqtt',
1403
+ 'mule',
1404
+ 'multi',
1405
+ 'multiple',
1406
+ 'music',
1407
+ 'mustache',
1408
+ 'mvc-',
1409
+ 'mvc.',
1410
+ 'mvc_',
1411
+ 'mysql',
1412
+ 'nagio',
1413
+ 'name',
1414
+ 'native',
1415
+ 'need',
1416
+ 'neo-',
1417
+ 'neo.',
1418
+ 'neo_',
1419
+ 'nest',
1420
+ 'nested',
1421
+ 'net-',
1422
+ 'net.',
1423
+ 'net_',
1424
+ 'nette',
1425
+ 'network',
1426
+ 'new-',
1427
+ 'new.',
1428
+ 'new_',
1429
+ 'next',
1430
+ 'nginx',
1431
+ 'ninja',
1432
+ 'nlp-',
1433
+ 'nlp.',
1434
+ 'nlp_',
1435
+ 'node',
1436
+ 'nodej',
1437
+ 'nosql',
1438
+ 'not-',
1439
+ 'not.',
1440
+ 'not_',
1441
+ 'note',
1442
+ 'notebook',
1443
+ 'notepad',
1444
+ 'notice',
1445
+ 'notifier',
1446
+ 'now-',
1447
+ 'now.',
1448
+ 'now_',
1449
+ 'number',
1450
+ 'oauth',
1451
+ 'object',
1452
+ 'objective',
1453
+ 'obsolete',
1454
+ 'ocaml',
1455
+ 'octopres',
1456
+ 'official',
1457
+ 'old-',
1458
+ 'old.',
1459
+ 'old_',
1460
+ 'onboard',
1461
+ 'online',
1462
+ 'only',
1463
+ 'open',
1464
+ 'opencv',
1465
+ 'opengl',
1466
+ 'openshift',
1467
+ 'openwrt',
1468
+ 'option',
1469
+ 'oracle',
1470
+ 'org-',
1471
+ 'org.',
1472
+ 'org_',
1473
+ 'origin',
1474
+ 'original',
1475
+ 'orm-',
1476
+ 'orm.',
1477
+ 'orm_',
1478
+ 'osx-',
1479
+ 'osx_',
1480
+ 'our-',
1481
+ 'our.',
1482
+ 'our_',
1483
+ 'out-',
1484
+ 'out.',
1485
+ 'out_',
1486
+ 'output',
1487
+ 'over',
1488
+ 'overview',
1489
+ 'own-',
1490
+ 'own.',
1491
+ 'own_',
1492
+ 'pack',
1493
+ 'package',
1494
+ 'packet',
1495
+ 'page',
1496
+ 'panel',
1497
+ 'paper',
1498
+ 'paperclip',
1499
+ 'para',
1500
+ 'parallax',
1501
+ 'parallel',
1502
+ 'parse',
1503
+ 'parser',
1504
+ 'parsing',
1505
+ 'particle',
1506
+ 'party',
1507
+ 'password',
1508
+ 'patch',
1509
+ 'path',
1510
+ 'pattern',
1511
+ 'payment',
1512
+ 'paypal',
1513
+ 'pdf-',
1514
+ 'pdf.',
1515
+ 'pdf_',
1516
+ 'pebble',
1517
+ 'people',
1518
+ 'perl',
1519
+ 'personal',
1520
+ 'phalcon',
1521
+ 'phoenix',
1522
+ 'phone',
1523
+ 'phonegap',
1524
+ 'photo',
1525
+ 'php-',
1526
+ 'php.',
1527
+ 'php_',
1528
+ 'physic',
1529
+ 'picker',
1530
+ 'pipeline',
1531
+ 'platform',
1532
+ 'play',
1533
+ 'player',
1534
+ 'please',
1535
+ 'plu-',
1536
+ 'plu.',
1537
+ 'plu_',
1538
+ 'plug-in',
1539
+ 'plugin',
1540
+ 'plupload',
1541
+ 'png-',
1542
+ 'png.',
1543
+ 'png_',
1544
+ 'poker',
1545
+ 'polyfill',
1546
+ 'polymer',
1547
+ 'pool',
1548
+ 'pop-',
1549
+ 'pop.',
1550
+ 'pop_',
1551
+ 'popcorn',
1552
+ 'popup',
1553
+ 'port',
1554
+ 'portable',
1555
+ 'portal',
1556
+ 'portfolio',
1557
+ 'post',
1558
+ 'power',
1559
+ 'powered',
1560
+ 'powerful',
1561
+ 'prelude',
1562
+ 'pretty',
1563
+ 'preview',
1564
+ 'principle',
1565
+ 'print',
1566
+ 'pro-',
1567
+ 'pro.',
1568
+ 'pro_',
1569
+ 'problem',
1570
+ 'proc',
1571
+ 'product',
1572
+ 'profile',
1573
+ 'profiler',
1574
+ 'program',
1575
+ 'progres',
1576
+ 'project',
1577
+ 'protocol',
1578
+ 'prototype',
1579
+ 'provider',
1580
+ 'proxy',
1581
+ 'public',
1582
+ 'pull',
1583
+ 'puppet',
1584
+ 'pure',
1585
+ 'purpose',
1586
+ 'push',
1587
+ 'pusher',
1588
+ 'pyramid',
1589
+ 'python',
1590
+ 'quality',
1591
+ 'query',
1592
+ 'queue',
1593
+ 'quick',
1594
+ 'rabbitmq',
1595
+ 'rack',
1596
+ 'radio',
1597
+ 'rail',
1598
+ 'railscast',
1599
+ 'random',
1600
+ 'range',
1601
+ 'raspberry',
1602
+ 'rdf-',
1603
+ 'rdf.',
1604
+ 'rdf_',
1605
+ 'react',
1606
+ 'reactive',
1607
+ 'read',
1608
+ 'reader',
1609
+ 'readme',
1610
+ 'ready',
1611
+ 'real',
1612
+ 'real-time',
1613
+ 'reality',
1614
+ 'realtime',
1615
+ 'recipe',
1616
+ 'recorder',
1617
+ 'red-',
1618
+ 'red.',
1619
+ 'red_',
1620
+ 'reddit',
1621
+ 'redi',
1622
+ 'redmine',
1623
+ 'reference',
1624
+ 'refinery',
1625
+ 'refresh',
1626
+ 'registry',
1627
+ 'related',
1628
+ 'release',
1629
+ 'remote',
1630
+ 'rendering',
1631
+ 'repo',
1632
+ 'report',
1633
+ 'request',
1634
+ 'require',
1635
+ 'required',
1636
+ 'requirej',
1637
+ 'research',
1638
+ 'resource',
1639
+ 'response',
1640
+ 'resque',
1641
+ 'rest',
1642
+ 'restful',
1643
+ 'resume',
1644
+ 'reveal',
1645
+ 'reverse',
1646
+ 'review',
1647
+ 'riak',
1648
+ 'rich',
1649
+ 'right',
1650
+ 'ring',
1651
+ 'robot',
1652
+ 'role',
1653
+ 'room',
1654
+ 'router',
1655
+ 'routing',
1656
+ 'rpc-',
1657
+ 'rpc.',
1658
+ 'rpc_',
1659
+ 'rpg-',
1660
+ 'rpg.',
1661
+ 'rpg_',
1662
+ 'rspec',
1663
+ 'ruby-',
1664
+ 'ruby.',
1665
+ 'ruby_',
1666
+ 'rule',
1667
+ 'run-',
1668
+ 'run.',
1669
+ 'run_',
1670
+ 'runner',
1671
+ 'running',
1672
+ 'runtime',
1673
+ 'rust',
1674
+ 'rvm-',
1675
+ 'rvm.',
1676
+ 'rvm_',
1677
+ 'salt',
1678
+ 'sample',
1679
+ 'sandbox',
1680
+ 'sas-',
1681
+ 'sas.',
1682
+ 'sas_',
1683
+ 'sbt-',
1684
+ 'sbt.',
1685
+ 'sbt_',
1686
+ 'scala',
1687
+ 'scalable',
1688
+ 'scanner',
1689
+ 'schema',
1690
+ 'scheme',
1691
+ 'school',
1692
+ 'science',
1693
+ 'scraper',
1694
+ 'scratch',
1695
+ 'screen',
1696
+ 'script',
1697
+ 'scroll',
1698
+ 'scs-',
1699
+ 'scs.',
1700
+ 'scs_',
1701
+ 'sdk-',
1702
+ 'sdk.',
1703
+ 'sdk_',
1704
+ 'sdl-',
1705
+ 'sdl.',
1706
+ 'sdl_',
1707
+ 'search',
1708
+ 'secure',
1709
+ 'security',
1710
+ 'see-',
1711
+ 'see.',
1712
+ 'see_',
1713
+ 'seed',
1714
+ 'select',
1715
+ 'selector',
1716
+ 'selenium',
1717
+ 'semantic',
1718
+ 'sencha',
1719
+ 'send',
1720
+ 'sentiment',
1721
+ 'serie',
1722
+ 'server',
1723
+ 'service',
1724
+ 'session',
1725
+ 'set-',
1726
+ 'set.',
1727
+ 'set_',
1728
+ 'setting',
1729
+ 'setup',
1730
+ 'sha1',
1731
+ 'sha2',
1732
+ 'sha256',
1733
+ 'share',
1734
+ 'shared',
1735
+ 'sharing',
1736
+ 'sheet',
1737
+ 'shell',
1738
+ 'shield',
1739
+ 'shipping',
1740
+ 'shop',
1741
+ 'shopify',
1742
+ 'shortener',
1743
+ 'should',
1744
+ 'show',
1745
+ 'showcase',
1746
+ 'side',
1747
+ 'silex',
1748
+ 'simple',
1749
+ 'simulator',
1750
+ 'single',
1751
+ 'site',
1752
+ 'skeleton',
1753
+ 'sketch',
1754
+ 'skin',
1755
+ 'slack',
1756
+ 'slide',
1757
+ 'slider',
1758
+ 'slim',
1759
+ 'small',
1760
+ 'smart',
1761
+ 'smtp',
1762
+ 'snake',
1763
+ 'snapshot',
1764
+ 'snippet',
1765
+ 'soap',
1766
+ 'social',
1767
+ 'socket',
1768
+ 'software',
1769
+ 'solarized',
1770
+ 'solr',
1771
+ 'solution',
1772
+ 'solver',
1773
+ 'some',
1774
+ 'soon',
1775
+ 'source',
1776
+ 'space',
1777
+ 'spark',
1778
+ 'spatial',
1779
+ 'spec',
1780
+ 'sphinx',
1781
+ 'spine',
1782
+ 'spotify',
1783
+ 'spree',
1784
+ 'spring',
1785
+ 'sprite',
1786
+ 'sql-',
1787
+ 'sql.',
1788
+ 'sql_',
1789
+ 'sqlite',
1790
+ 'ssh-',
1791
+ 'ssh.',
1792
+ 'ssh_',
1793
+ 'stack',
1794
+ 'staging',
1795
+ 'standard',
1796
+ 'stanford',
1797
+ 'start',
1798
+ 'started',
1799
+ 'starter',
1800
+ 'startup',
1801
+ 'stat',
1802
+ 'statamic',
1803
+ 'state',
1804
+ 'static',
1805
+ 'statistic',
1806
+ 'statsd',
1807
+ 'statu',
1808
+ 'steam',
1809
+ 'step',
1810
+ 'still',
1811
+ 'stm-',
1812
+ 'stm.',
1813
+ 'stm_',
1814
+ 'storage',
1815
+ 'store',
1816
+ 'storm',
1817
+ 'story',
1818
+ 'strategy',
1819
+ 'stream',
1820
+ 'streaming',
1821
+ 'string',
1822
+ 'stripe',
1823
+ 'structure',
1824
+ 'studio',
1825
+ 'study',
1826
+ 'stuff',
1827
+ 'style',
1828
+ 'sublime',
1829
+ 'sugar',
1830
+ 'suite',
1831
+ 'summary',
1832
+ 'super',
1833
+ 'support',
1834
+ 'supported',
1835
+ 'svg-',
1836
+ 'svg.',
1837
+ 'svg_',
1838
+ 'svn-',
1839
+ 'svn.',
1840
+ 'svn_',
1841
+ 'swagger',
1842
+ 'swift',
1843
+ 'switch',
1844
+ 'switcher',
1845
+ 'symfony',
1846
+ 'symphony',
1847
+ 'sync',
1848
+ 'synopsi',
1849
+ 'syntax',
1850
+ 'system',
1851
+ 'tab-',
1852
+ 'tab.',
1853
+ 'tab_',
1854
+ 'table',
1855
+ 'tag-',
1856
+ 'tag.',
1857
+ 'tag_',
1858
+ 'talk',
1859
+ 'target',
1860
+ 'task',
1861
+ 'tcp-',
1862
+ 'tcp.',
1863
+ 'tcp_',
1864
+ 'tdd-',
1865
+ 'tdd.',
1866
+ 'tdd_',
1867
+ 'team',
1868
+ 'tech',
1869
+ 'template',
1870
+ 'term',
1871
+ 'terminal',
1872
+ 'testing',
1873
+ 'tetri',
1874
+ 'text',
1875
+ 'textmate',
1876
+ 'theme',
1877
+ 'theory',
1878
+ 'three',
1879
+ 'thrift',
1880
+ 'time',
1881
+ 'timeline',
1882
+ 'timer',
1883
+ 'tiny',
1884
+ 'tinymce',
1885
+ 'tip-',
1886
+ 'tip.',
1887
+ 'tip_',
1888
+ 'title',
1889
+ 'todo',
1890
+ 'todomvc',
1891
+ 'token',
1892
+ 'tool',
1893
+ 'toolbox',
1894
+ 'toolkit',
1895
+ 'top-',
1896
+ 'top.',
1897
+ 'top_',
1898
+ 'tornado',
1899
+ 'touch',
1900
+ 'tower',
1901
+ 'tracker',
1902
+ 'tracking',
1903
+ 'traffic',
1904
+ 'training',
1905
+ 'transfer',
1906
+ 'translate',
1907
+ 'transport',
1908
+ 'tree',
1909
+ 'trello',
1910
+ 'try-',
1911
+ 'try.',
1912
+ 'try_',
1913
+ 'tumblr',
1914
+ 'tut-',
1915
+ 'tut.',
1916
+ 'tut_',
1917
+ 'tutorial',
1918
+ 'tweet',
1919
+ 'twig',
1920
+ 'twitter',
1921
+ 'type',
1922
+ 'typo',
1923
+ 'ubuntu',
1924
+ 'uiview',
1925
+ 'ultimate',
1926
+ 'under',
1927
+ 'unit',
1928
+ 'unity',
1929
+ 'universal',
1930
+ 'unix',
1931
+ 'update',
1932
+ 'updated',
1933
+ 'upgrade',
1934
+ 'upload',
1935
+ 'uploader',
1936
+ 'uri-',
1937
+ 'uri.',
1938
+ 'uri_',
1939
+ 'url-',
1940
+ 'url.',
1941
+ 'url_',
1942
+ 'usage',
1943
+ 'usb-',
1944
+ 'usb.',
1945
+ 'usb_',
1946
+ 'use-',
1947
+ 'use.',
1948
+ 'use_',
1949
+ 'used',
1950
+ 'useful',
1951
+ 'user',
1952
+ 'using',
1953
+ 'util',
1954
+ 'utilitie',
1955
+ 'utility',
1956
+ 'vagrant',
1957
+ 'validator',
1958
+ 'value',
1959
+ 'variou',
1960
+ 'varnish',
1961
+ 'version',
1962
+ 'via-',
1963
+ 'via.',
1964
+ 'via_',
1965
+ 'video',
1966
+ 'view',
1967
+ 'viewer',
1968
+ 'vim-',
1969
+ 'vim.',
1970
+ 'vim_',
1971
+ 'vimrc',
1972
+ 'virtual',
1973
+ 'vision',
1974
+ 'visual',
1975
+ 'vpn',
1976
+ 'want',
1977
+ 'warning',
1978
+ 'watch',
1979
+ 'watcher',
1980
+ 'wave',
1981
+ 'way-',
1982
+ 'way.',
1983
+ 'way_',
1984
+ 'weather',
1985
+ 'web-',
1986
+ 'web_',
1987
+ 'webapp',
1988
+ 'webgl',
1989
+ 'webhook',
1990
+ 'webkit',
1991
+ 'webrtc',
1992
+ 'website',
1993
+ 'websocket',
1994
+ 'welcome',
1995
+ 'what',
1996
+ "what'",
1997
+ 'when',
1998
+ 'where',
1999
+ 'which',
2000
+ 'why-',
2001
+ 'why.',
2002
+ 'why_',
2003
+ 'widget',
2004
+ 'wifi',
2005
+ 'wiki',
2006
+ 'win-',
2007
+ 'win.',
2008
+ 'win_',
2009
+ 'window',
2010
+ 'wip-',
2011
+ 'wip.',
2012
+ 'wip_',
2013
+ 'within',
2014
+ 'without',
2015
+ 'wizard',
2016
+ 'word',
2017
+ 'wordpres',
2018
+ 'work',
2019
+ 'worker',
2020
+ 'workflow',
2021
+ 'working',
2022
+ 'workshop',
2023
+ 'world',
2024
+ 'wrapper',
2025
+ 'write',
2026
+ 'writer',
2027
+ 'writing',
2028
+ 'written',
2029
+ 'www-',
2030
+ 'www.',
2031
+ 'www_',
2032
+ 'xamarin',
2033
+ 'xcode',
2034
+ 'xml-',
2035
+ 'xml.',
2036
+ 'xml_',
2037
+ 'xmpp',
2038
+ 'xxxxxx',
2039
+ 'yahoo',
2040
+ 'yaml',
2041
+ 'yandex',
2042
+ 'yeoman',
2043
+ 'yet-',
2044
+ 'yet.',
2045
+ 'yet_',
2046
+ 'yii-',
2047
+ 'yii.',
2048
+ 'yii_',
2049
+ 'youtube',
2050
+ 'yui-',
2051
+ 'yui.',
2052
+ 'yui_',
2053
+ 'zend',
2054
+ 'zero',
2055
+ 'zip-',
2056
+ 'zip.',
2057
+ 'zip_',
2058
+ 'zsh-',
2059
+ 'zsh.',
2060
+ 'zsh_',
2061
+ ],
2062
+ },
2063
+ {
2064
+ target: 'line',
2065
+ regexes: [
2066
+ /--mount=type=secret,/,
2067
+ /import[ \t]+\{[ \t\w,]+\}[ \t]+from[ \t]+['"][^'"]+['"]/,
2068
+ ],
2069
+ hashes: [],
2070
+ stopwords: [],
2071
+ },
2072
+ ],
2073
+ },
2074
+ {
2075
+ id: 'github-app-token',
2076
+ pattern: /(?:ghu|ghs)_[0-9a-zA-Z]{36}/,
2077
+ entropy: 3,
2078
+ keywords: ['ghu_', 'ghs_'],
2079
+ allowlists: [],
2080
+ },
2081
+ {
2082
+ id: 'github-fine-grained-pat',
2083
+ pattern: /github_pat_\w{82}/,
2084
+ entropy: 3,
2085
+ keywords: ['github_pat_'],
2086
+ allowlists: [],
2087
+ },
2088
+ {
2089
+ id: 'github-oauth',
2090
+ pattern: /gho_[0-9a-zA-Z]{36}/,
2091
+ entropy: 3,
2092
+ keywords: ['gho_'],
2093
+ allowlists: [],
2094
+ },
2095
+ {
2096
+ id: 'github-pat',
2097
+ pattern: /ghp_[0-9a-zA-Z]{36}/,
2098
+ entropy: 3,
2099
+ keywords: ['ghp_'],
2100
+ allowlists: [],
2101
+ },
2102
+ {
2103
+ id: 'github-refresh-token',
2104
+ pattern: /ghr_[0-9a-zA-Z]{36}/,
2105
+ entropy: 3,
2106
+ keywords: ['ghr_'],
2107
+ allowlists: [],
2108
+ },
2109
+ {
2110
+ id: 'gitlab-cicd-job-token',
2111
+ pattern: /glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}/,
2112
+ entropy: 3,
2113
+ keywords: ['glcbt-'],
2114
+ allowlists: [],
2115
+ },
2116
+ {
2117
+ id: 'gitlab-deploy-token',
2118
+ pattern: /gldt-[0-9a-zA-Z_-]{20}/,
2119
+ entropy: 3,
2120
+ keywords: ['gldt-'],
2121
+ allowlists: [],
2122
+ },
2123
+ {
2124
+ id: 'gitlab-feature-flag-client-token',
2125
+ pattern: /glffct-[0-9a-zA-Z_-]{20}/,
2126
+ entropy: 3,
2127
+ keywords: ['glffct-'],
2128
+ allowlists: [],
2129
+ },
2130
+ {
2131
+ id: 'gitlab-feed-token',
2132
+ pattern: /glft-[0-9a-zA-Z_-]{20}/,
2133
+ entropy: 3,
2134
+ keywords: ['glft-'],
2135
+ allowlists: [],
2136
+ },
2137
+ {
2138
+ id: 'gitlab-incoming-mail-token',
2139
+ pattern: /glimt-[0-9a-zA-Z_-]{25}/,
2140
+ entropy: 3,
2141
+ keywords: ['glimt-'],
2142
+ allowlists: [],
2143
+ },
2144
+ {
2145
+ id: 'gitlab-kubernetes-agent-token',
2146
+ pattern: /glagent-[0-9a-zA-Z_-]{50}/,
2147
+ entropy: 3,
2148
+ keywords: ['glagent-'],
2149
+ allowlists: [],
2150
+ },
2151
+ {
2152
+ id: 'gitlab-oauth-app-secret',
2153
+ pattern: /gloas-[0-9a-zA-Z_-]{64}/,
2154
+ entropy: 3,
2155
+ keywords: ['gloas-'],
2156
+ allowlists: [],
2157
+ },
2158
+ {
2159
+ id: 'gitlab-pat',
2160
+ pattern: /glpat-[\w-]{20}/,
2161
+ entropy: 3,
2162
+ keywords: ['glpat-'],
2163
+ allowlists: [],
2164
+ },
2165
+ {
2166
+ id: 'gitlab-pat-routable',
2167
+ pattern: /\bglpat-[0-9a-zA-Z_-]{27,300}\.[0-9a-z]{2}[0-9a-z]{7}\b/,
2168
+ entropy: 4,
2169
+ keywords: ['glpat-'],
2170
+ allowlists: [],
2171
+ },
2172
+ {
2173
+ id: 'gitlab-ptt',
2174
+ pattern: /glptt-[0-9a-f]{40}/,
2175
+ entropy: 3,
2176
+ keywords: ['glptt-'],
2177
+ allowlists: [],
2178
+ },
2179
+ {
2180
+ id: 'gitlab-rrt',
2181
+ pattern: /GR1348941[\w-]{20}/,
2182
+ entropy: 3,
2183
+ keywords: ['gr1348941'],
2184
+ allowlists: [],
2185
+ },
2186
+ {
2187
+ id: 'gitlab-runner-authentication-token',
2188
+ pattern: /glrt-[0-9a-zA-Z_-]{20}/,
2189
+ entropy: 3,
2190
+ keywords: ['glrt-'],
2191
+ allowlists: [],
2192
+ },
2193
+ {
2194
+ id: 'gitlab-runner-authentication-token-routable',
2195
+ pattern: /\bglrt-t\d_[0-9a-zA-Z_-]{27,300}\.[0-9a-z]{2}[0-9a-z]{7}\b/,
2196
+ entropy: 4,
2197
+ keywords: ['glrt-'],
2198
+ allowlists: [],
2199
+ },
2200
+ {
2201
+ id: 'gitlab-scim-token',
2202
+ pattern: /glsoat-[0-9a-zA-Z_-]{20}/,
2203
+ entropy: 3,
2204
+ keywords: ['glsoat-'],
2205
+ allowlists: [],
2206
+ },
2207
+ {
2208
+ id: 'gitlab-session-cookie',
2209
+ pattern: /_gitlab_session=[0-9a-z]{32}/,
2210
+ entropy: 3,
2211
+ keywords: ['_gitlab_session='],
2212
+ allowlists: [],
2213
+ },
2214
+ {
2215
+ id: 'gitter-access-token',
2216
+ pattern: /[\w.-]{0,50}?(?:gitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9_-]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2217
+ keywords: ['gitter'],
2218
+ allowlists: [],
2219
+ },
2220
+ {
2221
+ id: 'gocardless-api-token',
2222
+ pattern: /(?:[\w.-]{0,50}?(?:[gG][oO][cC][aA][rR][dD][lL][eE][sS][sS])(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([lL][iI][vV][eE]_(?:[a-zA-Z0-9\-_=]{40}))(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
2223
+ keywords: ['live_', 'gocardless'],
2224
+ allowlists: [],
2225
+ },
2226
+ {
2227
+ id: 'grafana-api-key',
2228
+ pattern: /\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2229
+ entropy: 3,
2230
+ keywords: ['eyjrijoi'],
2231
+ allowlists: [],
2232
+ },
2233
+ {
2234
+ id: 'grafana-cloud-api-token',
2235
+ pattern: /\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2236
+ entropy: 3,
2237
+ keywords: ['glc_'],
2238
+ allowlists: [],
2239
+ },
2240
+ {
2241
+ id: 'grafana-service-account-token',
2242
+ pattern: /\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2243
+ entropy: 3,
2244
+ keywords: ['glsa_'],
2245
+ allowlists: [],
2246
+ },
2247
+ {
2248
+ id: 'harness-api-key',
2249
+ pattern: /(?:pat|sat)\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{20}/,
2250
+ keywords: ['pat.', 'sat.'],
2251
+ allowlists: [],
2252
+ },
2253
+ {
2254
+ id: 'hashicorp-tf-api-token',
2255
+ pattern: /(?:[a-zA-Z0-9]{14}\.(?:atlasv1)\.[a-zA-Z0-9\-_=]{60,70})/,
2256
+ entropy: 3.5,
2257
+ keywords: ['atlasv1'],
2258
+ allowlists: [],
2259
+ },
2260
+ {
2261
+ id: 'heroku-api-key',
2262
+ pattern: /[\w.-]{0,50}?(?:heroku)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2263
+ keywords: ['heroku'],
2264
+ allowlists: [],
2265
+ },
2266
+ {
2267
+ id: 'heroku-api-key-v2',
2268
+ pattern: /\b((HRKU-AA[0-9a-zA-Z_-]{58}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2269
+ entropy: 4,
2270
+ keywords: ['hrku-aa'],
2271
+ allowlists: [],
2272
+ },
2273
+ {
2274
+ id: 'hubspot-api-key',
2275
+ pattern: /[\w.-]{0,50}?(?:hubspot)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2276
+ keywords: ['hubspot'],
2277
+ allowlists: [],
2278
+ },
2279
+ {
2280
+ id: 'huggingface-access-token',
2281
+ pattern: /\b(hf_(?:[a-zA-Z]{34}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2282
+ entropy: 2,
2283
+ keywords: ['hf_'],
2284
+ allowlists: [],
2285
+ },
2286
+ {
2287
+ id: 'huggingface-organization-api-token',
2288
+ pattern: /\b(api_org_(?:[a-zA-Z]{34}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2289
+ entropy: 2,
2290
+ keywords: ['api_org_'],
2291
+ allowlists: [],
2292
+ },
2293
+ {
2294
+ id: 'infracost-api-token',
2295
+ pattern: /\b(ico-[a-zA-Z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2296
+ entropy: 3,
2297
+ keywords: ['ico-'],
2298
+ allowlists: [],
2299
+ },
2300
+ {
2301
+ id: 'intercom-api-key',
2302
+ pattern: /[\w.-]{0,50}?(?:intercom)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{60})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2303
+ keywords: ['intercom'],
2304
+ allowlists: [],
2305
+ },
2306
+ {
2307
+ id: 'intra42-client-secret',
2308
+ pattern: /\b(s-s4t2(?:ud|af)-(?:[aAbBcCdDeEfF0123456789]{64}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2309
+ entropy: 3,
2310
+ keywords: ['intra', 's-s4t2ud-', 's-s4t2af-'],
2311
+ allowlists: [],
2312
+ },
2313
+ {
2314
+ id: 'jfrog-api-key',
2315
+ pattern: /[\w.-]{0,50}?(?:jfrog|artifactory|bintray|xray)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{73})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2316
+ keywords: ['jfrog', 'artifactory', 'bintray', 'xray'],
2317
+ allowlists: [],
2318
+ },
2319
+ {
2320
+ id: 'jfrog-identity-token',
2321
+ pattern: /[\w.-]{0,50}?(?:jfrog|artifactory|bintray|xray)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2322
+ keywords: ['jfrog', 'artifactory', 'bintray', 'xray'],
2323
+ allowlists: [],
2324
+ },
2325
+ {
2326
+ id: 'jwt',
2327
+ pattern: /\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9/\\_-]{17,}\.(?:[a-zA-Z0-9/\\_-]{10,}={0,2})?)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2328
+ entropy: 3,
2329
+ keywords: ['ey'],
2330
+ allowlists: [],
2331
+ },
2332
+ {
2333
+ id: 'jwt-base64',
2334
+ pattern: /\bZXlK(?:(?<alg>aGJHY2lPaU)|(?<apu>aGNIVWlPaU)|(?<apv>aGNIWWlPaU)|(?<aud>aGRXUWlPaU)|(?<b64>aU5qUWlP)|(?<crit>amNtbDBJanBi)|(?<cty>amRIa2lPaU)|(?<epk>bGNHc2lPbn)|(?<enc>bGJtTWlPaU)|(?<jku>cWEzVWlPaU)|(?<jwk>cWQyc2lPb)|(?<iss>cGMzTWlPaU)|(?<iv>cGRpSTZJ)|(?<kid>cmFXUWlP)|(?<key_ops>clpYbGZiM0J6SWpwY)|(?<kty>cmRIa2lPaUp)|(?<nonce>dWIyNWpaU0k2)|(?<p2c>d01tTWlP)|(?<p2s>d01uTWlPaU)|(?<ppt>d2NIUWlPaU)|(?<sub>emRXSWlPaU)|(?<svt>emRuUWlP)|(?<tag>MFlXY2lPaU)|(?<typ>MGVYQWlPaUp)|(?<url>MWNtd2l)|(?<use>MWMyVWlPaUp)|(?<ver>MlpYSWlPaU)|(?<version>MlpYSnphVzl1SWpv)|(?<x>NElqb2)|(?<x5c>NE5XTWlP)|(?<x5t>NE5YUWlPaU)|(?<x5ts256>NE5YUWpVekkxTmlJNkl)|(?<x5u>NE5YVWlPaU)|(?<zip>NmFYQWlPaU))[a-zA-Z0-9/\\_+\-\r\n]{40,}={0,2}/,
2335
+ entropy: 2,
2336
+ keywords: ['zxlk'],
2337
+ allowlists: [],
2338
+ },
2339
+ {
2340
+ id: 'kraken-access-token',
2341
+ pattern: /[\w.-]{0,50}?(?:kraken)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9/=_+-]{80,90})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2342
+ keywords: ['kraken'],
2343
+ allowlists: [],
2344
+ },
2345
+ {
2346
+ id: 'kucoin-access-token',
2347
+ pattern: /[\w.-]{0,50}?(?:kucoin)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{24})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2348
+ keywords: ['kucoin'],
2349
+ allowlists: [],
2350
+ },
2351
+ {
2352
+ id: 'kucoin-secret-key',
2353
+ pattern: /[\w.-]{0,50}?(?:kucoin)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2354
+ keywords: ['kucoin'],
2355
+ allowlists: [],
2356
+ },
2357
+ {
2358
+ id: 'launchdarkly-access-token',
2359
+ pattern: /[\w.-]{0,50}?(?:launchdarkly)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2360
+ keywords: ['launchdarkly'],
2361
+ allowlists: [],
2362
+ },
2363
+ {
2364
+ id: 'linear-api-key',
2365
+ pattern: /lin_api_(?:[a-zA-Z0-9]{40})/,
2366
+ entropy: 2,
2367
+ keywords: ['lin_api_'],
2368
+ allowlists: [],
2369
+ },
2370
+ {
2371
+ id: 'linear-client-secret',
2372
+ pattern: /[\w.-]{0,50}?(?:linear)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2373
+ entropy: 2,
2374
+ keywords: ['linear'],
2375
+ allowlists: [],
2376
+ },
2377
+ {
2378
+ id: 'linkedin-client-id',
2379
+ pattern: /[\w.-]{0,50}?(?:linked[_-]?in)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{14})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2380
+ entropy: 2,
2381
+ keywords: ['linkedin', 'linked_in', 'linked-in'],
2382
+ allowlists: [],
2383
+ },
2384
+ {
2385
+ id: 'linkedin-client-secret',
2386
+ pattern: /[\w.-]{0,50}?(?:linked[_-]?in)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2387
+ entropy: 2,
2388
+ keywords: ['linkedin', 'linked_in', 'linked-in'],
2389
+ allowlists: [],
2390
+ },
2391
+ {
2392
+ id: 'lob-api-key',
2393
+ pattern: /[\w.-]{0,50}?(?:lob)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}((live|test)_[a-f0-9]{35})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2394
+ keywords: ['test_', 'live_'],
2395
+ allowlists: [],
2396
+ },
2397
+ {
2398
+ id: 'lob-pub-api-key',
2399
+ pattern: /[\w.-]{0,50}?(?:lob)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}((test|live)_pub_[a-f0-9]{31})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2400
+ keywords: ['test_pub', 'live_pub', '_pub'],
2401
+ allowlists: [],
2402
+ },
2403
+ {
2404
+ id: 'looker-client-id',
2405
+ pattern: /[\w.-]{0,50}?(?:looker)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{20})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2406
+ keywords: ['looker'],
2407
+ allowlists: [],
2408
+ },
2409
+ {
2410
+ id: 'looker-client-secret',
2411
+ pattern: /[\w.-]{0,50}?(?:looker)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{24})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2412
+ keywords: ['looker'],
2413
+ allowlists: [],
2414
+ },
2415
+ {
2416
+ id: 'mailchimp-api-key',
2417
+ pattern: /[\w.-]{0,50}?(?:MailchimpSDK[^\n]initialize|mailchimp)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{32}-us\d\d)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2418
+ keywords: ['mailchimp'],
2419
+ allowlists: [],
2420
+ },
2421
+ {
2422
+ id: 'mailgun-private-api-token',
2423
+ pattern: /[\w.-]{0,50}?(?:mailgun)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(key-[a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2424
+ keywords: ['mailgun'],
2425
+ allowlists: [],
2426
+ },
2427
+ {
2428
+ id: 'mailgun-pub-key',
2429
+ pattern: /[\w.-]{0,50}?(?:mailgun)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(pubkey-[a-f0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2430
+ keywords: ['mailgun'],
2431
+ allowlists: [],
2432
+ },
2433
+ {
2434
+ id: 'mailgun-signing-key',
2435
+ pattern: /[\w.-]{0,50}?(?:mailgun)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2436
+ keywords: ['mailgun'],
2437
+ allowlists: [],
2438
+ },
2439
+ {
2440
+ id: 'mapbox-api-token',
2441
+ pattern: /[\w.-]{0,50}?(?:mapbox)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2442
+ keywords: ['mapbox'],
2443
+ allowlists: [],
2444
+ },
2445
+ {
2446
+ id: 'mattermost-access-token',
2447
+ pattern: /[\w.-]{0,50}?(?:mattermost)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{26})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2448
+ keywords: ['mattermost'],
2449
+ allowlists: [],
2450
+ },
2451
+ {
2452
+ id: 'maxmind-license-key',
2453
+ pattern: /\b([A-Za-z0-9]{6}_[A-Za-z0-9]{29}_mmk)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2454
+ entropy: 4,
2455
+ keywords: ['_mmk'],
2456
+ allowlists: [],
2457
+ },
2458
+ {
2459
+ id: 'messagebird-api-token',
2460
+ pattern: /[\w.-]{0,50}?(?:message[_-]?bird)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{25})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2461
+ keywords: ['messagebird', 'message-bird', 'message_bird'],
2462
+ allowlists: [],
2463
+ },
2464
+ {
2465
+ id: 'messagebird-client-id',
2466
+ pattern: /[\w.-]{0,50}?(?:message[_-]?bird)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2467
+ keywords: ['messagebird', 'message-bird', 'message_bird'],
2468
+ allowlists: [],
2469
+ },
2470
+ {
2471
+ id: 'microsoft-teams-webhook',
2472
+ pattern: /https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/,
2473
+ keywords: ['webhook.office.com', 'webhookb2', 'incomingwebhook'],
2474
+ allowlists: [],
2475
+ },
2476
+ {
2477
+ id: 'netlify-access-token',
2478
+ pattern: /[\w.-]{0,50}?(?:netlify)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{40,46})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2479
+ keywords: ['netlify'],
2480
+ allowlists: [],
2481
+ },
2482
+ {
2483
+ id: 'new-relic-browser-api-token',
2484
+ pattern: /[\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(NRJS-[a-f0-9]{19})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2485
+ keywords: ['nrjs-'],
2486
+ allowlists: [],
2487
+ },
2488
+ {
2489
+ id: 'new-relic-insert-key',
2490
+ pattern: /[\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(NRII-[a-z0-9-]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2491
+ keywords: ['nrii-'],
2492
+ allowlists: [],
2493
+ },
2494
+ {
2495
+ id: 'new-relic-user-api-id',
2496
+ pattern: /[\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2497
+ keywords: ['new-relic', 'newrelic', 'new_relic'],
2498
+ allowlists: [],
2499
+ },
2500
+ {
2501
+ id: 'new-relic-user-api-key',
2502
+ pattern: /[\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(NRAK-[a-z0-9]{27})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2503
+ keywords: ['nrak'],
2504
+ allowlists: [],
2505
+ },
2506
+ {
2507
+ id: 'notion-api-token',
2508
+ pattern: /\b(ntn_[0-9]{11}[A-Za-z0-9]{32}[A-Za-z0-9]{3})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2509
+ entropy: 4,
2510
+ keywords: ['ntn_'],
2511
+ allowlists: [],
2512
+ },
2513
+ {
2514
+ id: 'npm-access-token',
2515
+ pattern: /\b(npm_[a-z0-9]{36})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2516
+ entropy: 2,
2517
+ keywords: ['npm_'],
2518
+ allowlists: [],
2519
+ },
2520
+ {
2521
+ id: 'nytimes-access-token',
2522
+ pattern: /[\w.-]{0,50}?(?:nytimes|new-york-times,|newyorktimes)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9=_-]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2523
+ keywords: ['nytimes', 'new-york-times', 'newyorktimes'],
2524
+ allowlists: [],
2525
+ },
2526
+ {
2527
+ id: 'octopus-deploy-api-key',
2528
+ pattern: /\b(API-[A-Z0-9]{26})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2529
+ entropy: 3,
2530
+ keywords: ['api-'],
2531
+ allowlists: [],
2532
+ },
2533
+ {
2534
+ id: 'okta-access-token',
2535
+ pattern: /[\w.-]{0,50}?(?:[\w.-]{0,50}?(?:(?:[Oo]kta|OKTA))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(00[\w=-]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2536
+ entropy: 4,
2537
+ keywords: ['okta'],
2538
+ allowlists: [],
2539
+ },
2540
+ {
2541
+ id: 'openai-api-key',
2542
+ pattern: /\b(sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2543
+ entropy: 3,
2544
+ keywords: ['t3blbkfj'],
2545
+ allowlists: [],
2546
+ },
2547
+ {
2548
+ id: 'openshift-user-token',
2549
+ pattern: /\b(sha256~[\w-]{43})(?:[^\w-]|$)/,
2550
+ entropy: 3.5,
2551
+ keywords: ['sha256~'],
2552
+ allowlists: [],
2553
+ },
2554
+ {
2555
+ id: 'perplexity-api-key',
2556
+ pattern: /\b(pplx-[a-zA-Z0-9]{48})(?:[`'"\t\n\f\r ;]|\\[nr]|$|\b)/,
2557
+ entropy: 4,
2558
+ keywords: ['pplx-'],
2559
+ allowlists: [],
2560
+ },
2561
+ {
2562
+ id: 'plaid-api-token',
2563
+ pattern: /[\w.-]{0,50}?(?:plaid)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2564
+ keywords: ['plaid'],
2565
+ allowlists: [],
2566
+ },
2567
+ {
2568
+ id: 'plaid-client-id',
2569
+ pattern: /[\w.-]{0,50}?(?:plaid)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{24})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2570
+ entropy: 3.5,
2571
+ keywords: ['plaid'],
2572
+ allowlists: [],
2573
+ },
2574
+ {
2575
+ id: 'plaid-secret-key',
2576
+ pattern: /[\w.-]{0,50}?(?:plaid)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{30})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2577
+ entropy: 3.5,
2578
+ keywords: ['plaid'],
2579
+ allowlists: [],
2580
+ },
2581
+ {
2582
+ id: 'planetscale-api-token',
2583
+ pattern: /\b(pscale_tkn_(?:[\w=.-]{32,64}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2584
+ entropy: 3,
2585
+ keywords: ['pscale_tkn_'],
2586
+ allowlists: [],
2587
+ },
2588
+ {
2589
+ id: 'planetscale-oauth-token',
2590
+ pattern: /\b(pscale_oauth_[\w=.-]{32,64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2591
+ entropy: 3,
2592
+ keywords: ['pscale_oauth_'],
2593
+ allowlists: [],
2594
+ },
2595
+ {
2596
+ id: 'planetscale-password',
2597
+ pattern: /(?:\b([pP][sS][cC][aA][lL][eE]_[pP][wW]_(?:[\w=.-]{32,64}))(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
2598
+ entropy: 3,
2599
+ keywords: ['pscale_pw_'],
2600
+ allowlists: [],
2601
+ },
2602
+ {
2603
+ id: 'postman-api-token',
2604
+ pattern: /\b(PMAK-(?:[a-fA-F0-9]{24}-[a-fA-F0-9]{34}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2605
+ entropy: 3,
2606
+ keywords: ['pmak-'],
2607
+ allowlists: [],
2608
+ },
2609
+ {
2610
+ id: 'prefect-api-token',
2611
+ pattern: /\b(pnu_[a-zA-Z0-9]{36})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2612
+ entropy: 2,
2613
+ keywords: ['pnu_'],
2614
+ allowlists: [],
2615
+ },
2616
+ {
2617
+ id: 'private-key',
2618
+ pattern: /-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\s\S]{64,}?KEY(?: BLOCK)?-----/i,
2619
+ keywords: ['-----begin'],
2620
+ allowlists: [],
2621
+ },
2622
+ {
2623
+ id: 'privateai-api-token',
2624
+ pattern: /[\w.-]{0,50}?(?:[\w.-]{0,50}?(?:[pP][rR][iI][vV][aA][tT][eE][_-]?[aA][iI])(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{32})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2625
+ entropy: 3,
2626
+ keywords: ['privateai', 'private_ai', 'private-ai'],
2627
+ allowlists: [],
2628
+ },
2629
+ {
2630
+ id: 'pulumi-api-token',
2631
+ pattern: /\b(pul-[a-f0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2632
+ entropy: 2,
2633
+ keywords: ['pul-'],
2634
+ allowlists: [],
2635
+ },
2636
+ {
2637
+ id: 'pypi-upload-token',
2638
+ pattern: /pypi-AgEIcHlwaS5vcmc[\w-]{50,1000}/,
2639
+ entropy: 3,
2640
+ keywords: ['pypi-ageichlwas5vcmc'],
2641
+ allowlists: [],
2642
+ },
2643
+ {
2644
+ id: 'rapidapi-access-token',
2645
+ pattern: /[\w.-]{0,50}?(?:rapidapi)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9_-]{50})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2646
+ keywords: ['rapidapi'],
2647
+ allowlists: [],
2648
+ },
2649
+ {
2650
+ id: 'readme-api-token',
2651
+ pattern: /\b(rdme_[a-z0-9]{70})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2652
+ entropy: 2,
2653
+ keywords: ['rdme_'],
2654
+ allowlists: [],
2655
+ },
2656
+ {
2657
+ id: 'rubygems-api-token',
2658
+ pattern: /\b(rubygems_[a-f0-9]{48})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2659
+ entropy: 2,
2660
+ keywords: ['rubygems_'],
2661
+ allowlists: [],
2662
+ },
2663
+ {
2664
+ id: 'scalingo-api-token',
2665
+ pattern: /\b(tk-us-[\w-]{48})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2666
+ entropy: 2,
2667
+ keywords: ['tk-us-'],
2668
+ allowlists: [],
2669
+ },
2670
+ {
2671
+ id: 'sendbird-access-id',
2672
+ pattern: /[\w.-]{0,50}?(?:sendbird)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2673
+ keywords: ['sendbird'],
2674
+ allowlists: [],
2675
+ },
2676
+ {
2677
+ id: 'sendbird-access-token',
2678
+ pattern: /[\w.-]{0,50}?(?:sendbird)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2679
+ keywords: ['sendbird'],
2680
+ allowlists: [],
2681
+ },
2682
+ {
2683
+ id: 'sendgrid-api-token',
2684
+ pattern: /\b(SG\.(?:[a-zA-Z0-9=_\-.]{66}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2685
+ entropy: 2,
2686
+ keywords: ['sg.'],
2687
+ allowlists: [],
2688
+ },
2689
+ {
2690
+ id: 'sendinblue-api-token',
2691
+ pattern: /\b(xkeysib-[a-f0-9]{64}-(?:[a-zA-Z0-9]{16}))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2692
+ entropy: 2,
2693
+ keywords: ['xkeysib-'],
2694
+ allowlists: [],
2695
+ },
2696
+ {
2697
+ id: 'sentry-access-token',
2698
+ pattern: /[\w.-]{0,50}?(?:sentry)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2699
+ entropy: 3,
2700
+ keywords: ['sentry'],
2701
+ allowlists: [],
2702
+ },
2703
+ {
2704
+ id: 'sentry-org-token',
2705
+ pattern: /\bsntrys_eyJpYXQiO[a-zA-Z0-9+/]{10,200}(?:LCJyZWdpb25fdXJs|InJlZ2lvbl91cmwi|cmVnaW9uX3VybCI6)[a-zA-Z0-9+/]{10,200}={0,2}_[a-zA-Z0-9+/]{43}(?:[^a-zA-Z0-9+/]|$)/,
2706
+ entropy: 4.5,
2707
+ keywords: ['sntrys_eyjpyxqio'],
2708
+ allowlists: [],
2709
+ },
2710
+ {
2711
+ id: 'sentry-user-token',
2712
+ pattern: /\b(sntryu_[a-f0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2713
+ entropy: 3.5,
2714
+ keywords: ['sntryu_'],
2715
+ allowlists: [],
2716
+ },
2717
+ {
2718
+ id: 'settlemint-application-access-token',
2719
+ pattern: /\b(sm_aat_[a-zA-Z0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2720
+ entropy: 3,
2721
+ keywords: ['sm_aat'],
2722
+ allowlists: [],
2723
+ },
2724
+ {
2725
+ id: 'settlemint-personal-access-token',
2726
+ pattern: /\b(sm_pat_[a-zA-Z0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2727
+ entropy: 3,
2728
+ keywords: ['sm_pat'],
2729
+ allowlists: [],
2730
+ },
2731
+ {
2732
+ id: 'settlemint-service-access-token',
2733
+ pattern: /\b(sm_sat_[a-zA-Z0-9]{16})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2734
+ entropy: 3,
2735
+ keywords: ['sm_sat'],
2736
+ allowlists: [],
2737
+ },
2738
+ {
2739
+ id: 'shippo-api-token',
2740
+ pattern: /\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2741
+ entropy: 2,
2742
+ keywords: ['shippo_'],
2743
+ allowlists: [],
2744
+ },
2745
+ {
2746
+ id: 'shopify-access-token',
2747
+ pattern: /shpat_[a-fA-F0-9]{32}/,
2748
+ entropy: 2,
2749
+ keywords: ['shpat_'],
2750
+ allowlists: [],
2751
+ },
2752
+ {
2753
+ id: 'shopify-custom-access-token',
2754
+ pattern: /shpca_[a-fA-F0-9]{32}/,
2755
+ entropy: 2,
2756
+ keywords: ['shpca_'],
2757
+ allowlists: [],
2758
+ },
2759
+ {
2760
+ id: 'shopify-private-app-access-token',
2761
+ pattern: /shppa_[a-fA-F0-9]{32}/,
2762
+ entropy: 2,
2763
+ keywords: ['shppa_'],
2764
+ allowlists: [],
2765
+ },
2766
+ {
2767
+ id: 'shopify-shared-secret',
2768
+ pattern: /shpss_[a-fA-F0-9]{32}/,
2769
+ entropy: 2,
2770
+ keywords: ['shpss_'],
2771
+ allowlists: [],
2772
+ },
2773
+ {
2774
+ id: 'sidekiq-secret',
2775
+ pattern: /[\w.-]{0,50}?(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2776
+ keywords: ['bundle_enterprise__contribsys__com', 'bundle_gems__contribsys__com'],
2777
+ allowlists: [],
2778
+ },
2779
+ {
2780
+ id: 'sidekiq-sensitive-url',
2781
+ pattern: /\bhttps?:\/\/([a-f0-9]{8}:[a-f0-9]{8})@(?:gems[^\n]contribsys[^\n]com|enterprise[^\n]contribsys[^\n]com)(?:[/|#?:]|$)/i,
2782
+ keywords: ['gems.contribsys.com', 'enterprise.contribsys.com'],
2783
+ allowlists: [],
2784
+ },
2785
+ {
2786
+ id: 'slack-app-token',
2787
+ pattern: /xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+/i,
2788
+ entropy: 2,
2789
+ keywords: ['xapp'],
2790
+ allowlists: [],
2791
+ },
2792
+ {
2793
+ id: 'slack-bot-token',
2794
+ pattern: /xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*/,
2795
+ entropy: 3,
2796
+ keywords: ['xoxb'],
2797
+ allowlists: [],
2798
+ },
2799
+ {
2800
+ id: 'slack-config-access-token',
2801
+ pattern: /xoxe[^\n]xox[bp]-\d-[A-Z0-9]{163,166}/i,
2802
+ entropy: 2,
2803
+ keywords: ['xoxe.xoxb-', 'xoxe.xoxp-'],
2804
+ allowlists: [],
2805
+ },
2806
+ {
2807
+ id: 'slack-config-refresh-token',
2808
+ pattern: /xoxe-\d-[A-Z0-9]{146}/i,
2809
+ entropy: 2,
2810
+ keywords: ['xoxe-'],
2811
+ allowlists: [],
2812
+ },
2813
+ {
2814
+ id: 'slack-legacy-bot-token',
2815
+ pattern: /xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}/,
2816
+ entropy: 2,
2817
+ keywords: ['xoxb'],
2818
+ allowlists: [],
2819
+ },
2820
+ {
2821
+ id: 'slack-legacy-token',
2822
+ pattern: /xox[os]-\d+-\d+-\d+-[a-fA-F\d]+/,
2823
+ entropy: 2,
2824
+ keywords: ['xoxo', 'xoxs'],
2825
+ allowlists: [],
2826
+ },
2827
+ {
2828
+ id: 'slack-legacy-workspace-token',
2829
+ pattern: /xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48}/,
2830
+ entropy: 2,
2831
+ keywords: ['xoxa', 'xoxr'],
2832
+ allowlists: [],
2833
+ },
2834
+ {
2835
+ id: 'slack-user-token',
2836
+ pattern: /xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}/,
2837
+ entropy: 2,
2838
+ keywords: ['xoxp-', 'xoxe-'],
2839
+ allowlists: [],
2840
+ },
2841
+ {
2842
+ id: 'slack-webhook-url',
2843
+ pattern: /(?:https?:\/\/)?hooks[^\n]slack[^\n]com\/(?:services|workflows|triggers)\/[A-Za-z0-9+/]{43,56}/,
2844
+ keywords: ['hooks.slack.com'],
2845
+ allowlists: [],
2846
+ },
2847
+ {
2848
+ id: 'snyk-api-token',
2849
+ pattern: /[\w.-]{0,50}?(?:snyk[_.-]?(?:(?:api|oauth)[_.-]?)?(?:key|token))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2850
+ keywords: ['snyk'],
2851
+ allowlists: [],
2852
+ },
2853
+ {
2854
+ id: 'sonar-api-token',
2855
+ pattern: /[\w.-]{0,50}?(?:sonar[_.-]?(login|token))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}((?:squ_|sqp_|sqa_)?[a-z0-9=_-]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2856
+ secretGroup: 2,
2857
+ keywords: ['sonar'],
2858
+ allowlists: [],
2859
+ },
2860
+ {
2861
+ id: 'sourcegraph-access-token',
2862
+ pattern: /\b(\b(sgp_(?:[a-fA-F0-9]{16}|local)_[a-fA-F0-9]{40}|sgp_[a-fA-F0-9]{40}|[a-fA-F0-9]{40})\b)(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2863
+ entropy: 3,
2864
+ keywords: ['sgp_', 'sourcegraph'],
2865
+ allowlists: [],
2866
+ },
2867
+ {
2868
+ id: 'square-access-token',
2869
+ pattern: /\b((?:EAAA|sq0atp-)[\w-]{22,60})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2870
+ entropy: 2,
2871
+ keywords: ['sq0atp-', 'eaaa'],
2872
+ allowlists: [],
2873
+ },
2874
+ {
2875
+ id: 'squarespace-access-token',
2876
+ pattern: /[\w.-]{0,50}?(?:squarespace)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2877
+ keywords: ['squarespace'],
2878
+ allowlists: [],
2879
+ },
2880
+ {
2881
+ id: 'stripe-access-token',
2882
+ pattern: /\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2883
+ entropy: 2,
2884
+ keywords: ['sk_test', 'sk_live', 'sk_prod', 'rk_test', 'rk_live', 'rk_prod'],
2885
+ allowlists: [],
2886
+ },
2887
+ {
2888
+ id: 'sumologic-access-id',
2889
+ pattern: /[\w.-]{0,50}?(?:[\w.-]{0,50}?(?:(?:[Ss]umo|SUMO))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(su[a-zA-Z0-9]{12})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2890
+ entropy: 3,
2891
+ keywords: ['sumo'],
2892
+ allowlists: [],
2893
+ },
2894
+ {
2895
+ id: 'sumologic-access-token',
2896
+ pattern: /(?:[\w.-]{0,50}?(?:(?:[Ss]umo|SUMO))(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-zA-Z0-9]{64})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
2897
+ entropy: 3,
2898
+ keywords: ['sumo'],
2899
+ allowlists: [],
2900
+ },
2901
+ {
2902
+ id: 'telegram-bot-api-token',
2903
+ pattern: /(?:[\w.-]{0,50}?(?:[tT][eE][lL][eE][gG][rR])(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9]{5,16}:(?:A)[a-zA-Z0-9_-]{34})(?:[`'"\t\n\f\r ;]|\\[nNrR]|$))/,
2904
+ keywords: ['telegr'],
2905
+ allowlists: [],
2906
+ },
2907
+ {
2908
+ id: 'travisci-access-token',
2909
+ pattern: /[\w.-]{0,50}?(?:travis)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{22})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2910
+ keywords: ['travis'],
2911
+ allowlists: [],
2912
+ },
2913
+ {
2914
+ id: 'twilio-api-key',
2915
+ pattern: /SK[0-9a-fA-F]{32}/,
2916
+ entropy: 3,
2917
+ keywords: ['sk'],
2918
+ allowlists: [],
2919
+ },
2920
+ {
2921
+ id: 'twitch-api-token',
2922
+ pattern: /[\w.-]{0,50}?(?:twitch)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{30})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2923
+ keywords: ['twitch'],
2924
+ allowlists: [],
2925
+ },
2926
+ {
2927
+ id: 'twitter-access-secret',
2928
+ pattern: /[\w.-]{0,50}?(?:twitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{45})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2929
+ keywords: ['twitter'],
2930
+ allowlists: [],
2931
+ },
2932
+ {
2933
+ id: 'twitter-access-token',
2934
+ pattern: /[\w.-]{0,50}?(?:twitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2935
+ keywords: ['twitter'],
2936
+ allowlists: [],
2937
+ },
2938
+ {
2939
+ id: 'twitter-api-key',
2940
+ pattern: /[\w.-]{0,50}?(?:twitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{25})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2941
+ keywords: ['twitter'],
2942
+ allowlists: [],
2943
+ },
2944
+ {
2945
+ id: 'twitter-api-secret',
2946
+ pattern: /[\w.-]{0,50}?(?:twitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{50})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2947
+ keywords: ['twitter'],
2948
+ allowlists: [],
2949
+ },
2950
+ {
2951
+ id: 'twitter-bearer-token',
2952
+ pattern: /[\w.-]{0,50}?(?:twitter)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2953
+ keywords: ['twitter'],
2954
+ allowlists: [],
2955
+ },
2956
+ {
2957
+ id: 'typeform-api-token',
2958
+ pattern: /[\w.-]{0,50}?(?:typeform)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(tfp_[a-z0-9\-_.=]{59})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2959
+ keywords: ['tfp_'],
2960
+ allowlists: [],
2961
+ },
2962
+ {
2963
+ id: 'vault-batch-token',
2964
+ pattern: /\b(hvb\.[\w-]{138,300})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2965
+ entropy: 4,
2966
+ keywords: ['hvb.'],
2967
+ allowlists: [],
2968
+ },
2969
+ {
2970
+ id: 'vault-service-token',
2971
+ pattern: /\b((?:hvs\.[\w-]{90,120}|s\.(?:[a-zA-Z0-9]{24})))(?:[`'"\t\n\f\r ;]|\\[nr]|$)/,
2972
+ entropy: 3.5,
2973
+ keywords: ['hvs.', 's.'],
2974
+ allowlists: [{ target: 'secret', regexes: [/s\.[A-Za-z]{24}/], hashes: [], stopwords: [] }],
2975
+ },
2976
+ {
2977
+ id: 'yandex-access-token',
2978
+ pattern: /[\w.-]{0,50}?(?:yandex)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2979
+ keywords: ['yandex'],
2980
+ allowlists: [],
2981
+ },
2982
+ {
2983
+ id: 'yandex-api-key',
2984
+ pattern: /[\w.-]{0,50}?(?:yandex)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(AQVN[A-Za-z0-9_-]{35,38})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2985
+ keywords: ['yandex'],
2986
+ allowlists: [],
2987
+ },
2988
+ {
2989
+ id: 'yandex-aws-access-token',
2990
+ pattern: /[\w.-]{0,50}?(?:yandex)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}(YC[a-zA-Z0-9_-]{38})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2991
+ keywords: ['yandex'],
2992
+ allowlists: [],
2993
+ },
2994
+ {
2995
+ id: 'zendesk-secret-key',
2996
+ pattern: /[\w.-]{0,50}?(?:zendesk)(?:[ \t\w.-]{0,20})[\t\n\f\r '"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[`'"\t\n\f\r =]{0,5}([a-z0-9]{40})(?:[`'"\t\n\f\r ;]|\\[nr]|$)/i,
2997
+ keywords: ['zendesk'],
2998
+ allowlists: [],
2999
+ },
3000
+ ];
3001
+ export { CREDENTIAL_RULES, GLOBAL_ALLOWLIST };