code-secret-handler 1.0.0

package/dist/scanner/rules/azure.d.ts

@@ -0,0 +1,6 @@
+import { Rule } from '../../types';
+/**
+ * Microsoft Azure credential patterns.
+ */
+export declare const azureRules: Rule[];
+//# sourceMappingURL=azure.d.ts.map

package/dist/scanner/rules/azure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure.d.ts","sourceRoot":"","sources":["../../../src/scanner/rules/azure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,IAAI,EAgF5B,CAAC"}

package/dist/scanner/rules/azure.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.azureRules = void 0;
+/**
+ * Microsoft Azure credential patterns.
+ */
+exports.azureRules = [
+    {
+        id: 'azure-storage-connection-string',
+        description: 'Azure Storage Connection String',
+        pattern: /(DefaultEndpointsProtocol=https?;AccountName=[^;]+;AccountKey=[A-Za-z0-9+/=]{88};[^\s'"]*)/,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_STORAGE_CONNECTION_STRING',
+        severity: 'critical',
+    },
+    {
+        id: 'azure-storage-account-key',
+        description: 'Azure Storage Account Key',
+        pattern: /(?:azure[_-]?storage[_-]?(?:account[_-]?)?key|AccountKey|AZURE_STORAGE_KEY)\s*[:=,]\s*['"\`]([A-Za-z0-9+/\s=]{40,})['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_STORAGE_ACCOUNT_KEY',
+        severity: 'critical',
+    },
+    {
+        id: 'azure-sas-token',
+        description: 'Azure Shared Access Signature (SAS) Token',
+        pattern: /(?:sas[_-]?token|azure[_-]?sas)\s*[:=]\s*['"\`](sv=\d{4}-\d{2}-\d{2}&[^'"\`\s]+)['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_SAS_TOKEN',
+        severity: 'critical',
+    },
+    {
+        id: 'azure-client-secret',
+        description: 'Azure AD Application Client Secret',
+        // Also handles define('AZURE_CLIENT_SECRET', '...') PHP form
+        pattern: /(?:define\s*\(\s*['"\`]AZURE_CLIENT_SECRET['"\`]\s*,\s*|(?:azure[_-]?client[_-]?secret|AZURE_CLIENT_SECRET)\s*[:=]\s*)['"\`]([A-Za-z0-9~.\-_]{8,})['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_CLIENT_SECRET',
+        severity: 'critical',
+    },
+    {
+        id: 'azure-client-id',
+        description: 'Azure AD Application Client ID (UUID)',
+        // Also handles define('AZURE_CLIENT_ID', 'uuid') PHP form
+        pattern: /(?:define\s*\(\s*['"\`]AZURE_CLIENT_ID['"\`]\s*,\s*|(?:azure[_-]?client[_-]?id|AZURE_CLIENT_ID)\s*[:=]\s*)['"\`]([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_CLIENT_ID',
+        severity: 'high',
+    },
+    {
+        id: 'azure-tenant-id',
+        description: 'Azure Tenant ID (UUID)',
+        // Also handles define('AZURE_TENANT_ID', 'uuid') PHP form
+        pattern: /(?:define\s*\(\s*['"\`]AZURE_TENANT_ID['"\`]\s*,\s*|(?:azure[_-]?tenant[_-]?id|AZURE_TENANT_ID)\s*[:=]\s*)['"\`]([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_TENANT_ID',
+        severity: 'high',
+    },
+    {
+        id: 'azure-servicebus-connection-string',
+        description: 'Azure Service Bus Connection String',
+        pattern: /(Endpoint=sb:\/\/[^;]+;SharedAccessKeyName=[^;]+;SharedAccessKey=[^'"\`\s]+)/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_SERVICEBUS_CONNECTION_STRING',
+        severity: 'critical',
+    },
+    {
+        id: 'azure-cosmos-key',
+        description: 'Azure CosmosDB Account Key',
+        pattern: /(?:cosmos[_-]?(?:db[_-]?)?key|azure[_-]?cosmos[_-]?key)\s*[:=]\s*['"\`]([A-Za-z0-9+/=]{88})['"\`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_COSMOS_KEY',
+        severity: 'critical',
+    },
+    // ── Azure DevOps ─────────────────────────────────────────────────────────────
+    {
+        id: 'azure-devops-pat',
+        description: 'Azure DevOps Personal Access Token (base64-encoded, 52 chars)',
+        // Azure DevOps PATs are base64-encoded strings typically 52 characters long
+        pattern: /(?:azure[_-]?devops[_-]?(?:pat|token)|AZURE_DEVOPS_PAT|AZURE_DEVOPS_TOKEN|ADO_PAT)\s*[:=]\s*['"`]([A-Za-z0-9+/]{52}={0,2})['"`]/i,
+        valueGroup: 1,
+        envKeyPrefix: 'AZURE_DEVOPS_PAT',
+        severity: 'critical',
+    },
+];
+//# sourceMappingURL=azure.js.map

package/dist/scanner/rules/azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure.js","sourceRoot":"","sources":["../../../src/scanner/rules/azure.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACU,QAAA,UAAU,GAAW;IAChC;QACE,EAAE,EAAE,iCAAiC;QACrC,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,4FAA4F;QACrG,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,iCAAiC;QAC/C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,4HAA4H;QACrI,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,2BAA2B;QACzC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,yFAAyF;QAClG,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,iBAAiB;QAC/B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,WAAW,EAAE,oCAAoC;QACjD,6DAA6D;QAC7D,OAAO,EAAE,2JAA2J;QACpK,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,qBAAqB;QACnC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,uCAAuC;QACpD,0DAA0D;QAC1D,OAAO,EAAE,uLAAuL;QAChM,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,iBAAiB;QAC/B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,wBAAwB;QACrC,0DAA0D;QAC1D,OAAO,EAAE,uLAAuL;QAChM,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,iBAAiB;QAC/B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oCAAoC;QACxC,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,+EAA+E;QACxF,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,oCAAoC;QAClD,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,oGAAoG;QAC7G,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,kBAAkB;QAChC,QAAQ,EAAE,UAAU;KACrB;IAED,gFAAgF;IAChF;QACE,EAAE,EAAE,kBAAkB;QACtB,WAAW,EAAE,+DAA+D;QAC5E,4EAA4E;QAC5E,OAAO,EAAE,kIAAkI;QAC3I,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,kBAAkB;QAChC,QAAQ,EAAE,UAAU;KACrB;CAEF,CAAC"}

package/dist/scanner/rules/cloud.d.ts

@@ -0,0 +1,11 @@
+import { Rule } from '../../types';
+/**
+ * Third-party cloud / SaaS service credential patterns.
+ * Covers: GitHub, Stripe, Twilio, SendGrid, Slack, Heroku,
+ *         Mailgun, Cloudflare, Datadog, NPM, Docker Hub,
+ *         OpenAI, Anthropic, Telegram, Discord, Supabase,
+ *         Vercel, DigitalOcean, Algolia, Mapbox, Pinecone,
+ *         Vault, Airtable, HubSpot, Square, Razorpay, Plaid, etc.
+ */
+export declare const cloudRules: Rule[];
+//# sourceMappingURL=cloud.d.ts.map

package/dist/scanner/rules/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../../src/scanner/rules/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,IAAI,EAgjC5B,CAAC"}