dd-trace 3.55.0 → 3.56.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/index.d.ts +15 -0
  2. package/package.json +2 -1
  3. package/packages/datadog-instrumentations/src/fetch.js +6 -45
  4. package/packages/datadog-instrumentations/src/helpers/fetch.js +17 -0
  5. package/packages/datadog-instrumentations/src/helpers/hooks.js +3 -1
  6. package/packages/datadog-instrumentations/src/jest.js +77 -10
  7. package/packages/datadog-instrumentations/src/mongoose.js +2 -1
  8. package/packages/datadog-instrumentations/src/otel-sdk-trace.js +6 -1
  9. package/packages/datadog-instrumentations/src/selenium.js +69 -0
  10. package/packages/datadog-plugin-cucumber/src/index.js +2 -2
  11. package/packages/datadog-plugin-cypress/src/cypress-plugin.js +2 -2
  12. package/packages/datadog-plugin-cypress/src/support.js +19 -3
  13. package/packages/datadog-plugin-fetch/src/index.js +17 -11
  14. package/packages/datadog-plugin-jest/src/index.js +7 -2
  15. package/packages/datadog-plugin-mocha/src/index.js +4 -5
  16. package/packages/datadog-plugin-openai/src/services.js +2 -1
  17. package/packages/datadog-plugin-playwright/src/index.js +2 -2
  18. package/packages/datadog-plugin-selenium/src/index.js +71 -0
  19. package/packages/dd-trace/src/appsec/iast/analyzers/analyzers.js +1 -0
  20. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-base-analyzer.js +70 -0
  21. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-password-analyzer.js +14 -0
  22. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-password-rules.js +12 -0
  23. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-rule-type.js +6 -0
  24. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-secret-analyzer.js +5 -50
  25. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-secret-rules.js +742 -0
  26. package/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-secrets-rules.js +539 -66
  27. package/packages/dd-trace/src/appsec/iast/vulnerabilities.js +1 -0
  28. package/packages/dd-trace/src/appsec/reporter.js +11 -10
  29. package/packages/dd-trace/src/appsec/telemetry.js +36 -7
  30. package/packages/dd-trace/src/ci-visibility/exporters/ci-visibility-exporter.js +4 -2
  31. package/packages/dd-trace/src/ci-visibility/requests/get-library-configuration.js +4 -1
  32. package/packages/dd-trace/src/config.js +94 -9
  33. package/packages/dd-trace/src/dogstatsd.js +13 -11
  34. package/packages/dd-trace/src/index.js +5 -1
  35. package/packages/dd-trace/src/noop/dogstatsd.js +11 -0
  36. package/packages/dd-trace/src/noop/proxy.js +3 -0
  37. package/packages/dd-trace/src/opentracing/propagation/text_map.js +10 -4
  38. package/packages/dd-trace/src/opentracing/span.js +2 -0
  39. package/packages/dd-trace/src/plugins/index.js +2 -0
  40. package/packages/dd-trace/src/plugins/util/test.js +34 -3
  41. package/packages/dd-trace/src/profiling/config.js +8 -4
  42. package/packages/dd-trace/src/profiling/profiler.js +4 -0
  43. package/packages/dd-trace/src/profiling/ssi-telemetry-mock-profiler.js +33 -0
  44. package/packages/dd-trace/src/profiling/ssi-telemetry.js +167 -0
  45. package/packages/dd-trace/src/proxy.js +7 -1
  46. package/packages/dd-trace/src/tagger.js +13 -3
  47. package/packages/dd-trace/src/telemetry/index.js +5 -4
  48. package/packages/dd-trace/src/telemetry/metrics.js +2 -2
@@ -1,269 +1,742 @@
1
1
  /* eslint-disable max-len */
2
2
  'use strict'
3
3
 
4
+ const { ValueOnly, NameAndValue } = require('./hardcoded-rule-type')
5
+
4
6
  module.exports = [
7
+ {
8
+ id: 'adafruit-api-key',
9
+ regex: /(?:adafruit)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['"\s\x60;]|$)/i,
10
+ type: NameAndValue
11
+ },
12
+ {
13
+ id: 'adobe-client-id',
14
+ regex: /(?:adobe)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{32})(?:['"\s\x60;]|$)/i,
15
+ type: NameAndValue
16
+ },
5
17
  {
6
18
  id: 'adobe-client-secret',
7
- regex: /\b((p8e-)[a-z0-9]{32})(?:['"\s\x60;]|$)/i
19
+ regex: /\b((p8e-)[a-z0-9]{32})(?:['"\s\x60;]|$)/i,
20
+ type: ValueOnly
8
21
  },
9
22
  {
10
23
  id: 'age-secret-key',
11
- regex: /AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}/
24
+ regex: /AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}/,
25
+ type: ValueOnly
26
+ },
27
+ {
28
+ id: 'airtable-api-key',
29
+ regex: /(?:airtable)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{17})(?:['"\s\x60;]|$)/i,
30
+ type: NameAndValue
31
+ },
32
+ {
33
+ id: 'algolia-api-key',
34
+ regex: /(?:algolia)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
35
+ type: NameAndValue
12
36
  },
13
37
  {
14
38
  id: 'alibaba-access-key-id',
15
- regex: /\b((LTAI)[a-z0-9]{20})(?:['"\s\x60;]|$)/i
39
+ regex: /\b((LTAI)[a-z0-9]{20})(?:['"\s\x60;]|$)/i,
40
+ type: ValueOnly
41
+ },
42
+ {
43
+ id: 'asana-client-id',
44
+ regex: /(?:asana)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9]{16})(?:['"\s\x60;]|$)/i,
45
+ type: NameAndValue
46
+ },
47
+ {
48
+ id: 'asana-client-secret',
49
+ regex: /(?:asana)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
50
+ type: NameAndValue
51
+ },
52
+ {
53
+ id: 'atlassian-api-token',
54
+ regex: /(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{24})(?:['"\s\x60;]|$)/i,
55
+ type: NameAndValue
16
56
  },
17
57
  {
18
58
  id: 'authress-service-client-access-key',
19
- regex: /\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['"\s\x60;]|$)/i
59
+ regex: /\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['"\s\x60;]|$)/i,
60
+ type: ValueOnly
20
61
  },
21
62
  {
22
63
  id: 'aws-access-token',
23
- regex: /\b((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})(?:['"\s\x60;]|$)/
64
+ regex: /\b((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})(?:['"\s\x60;]|$)/,
65
+ type: ValueOnly
66
+ },
67
+ {
68
+ id: 'beamer-api-token',
69
+ regex: /(?:beamer)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(b_[a-z0-9=_-]{44})(?:['"\s\x60;]|$)/i,
70
+ type: NameAndValue
71
+ },
72
+ {
73
+ id: 'bitbucket-client-id',
74
+ regex: /(?:bitbucket)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
75
+ type: NameAndValue
76
+ },
77
+ {
78
+ id: 'bitbucket-client-secret',
79
+ regex: /(?:bitbucket)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{64})(?:['"\s\x60;]|$)/i,
80
+ type: NameAndValue
81
+ },
82
+ {
83
+ id: 'bittrex-access-key',
84
+ regex: /(?:bittrex)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
85
+ type: NameAndValue
24
86
  },
25
87
  {
26
88
  id: 'clojars-api-token',
27
- regex: /(CLOJARS_)[a-z0-9]{60}/i
89
+ regex: /(CLOJARS_)[a-z0-9]{60}/i,
90
+ type: ValueOnly
91
+ },
92
+ {
93
+ id: 'codecov-access-token',
94
+ regex: /(?:codecov)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
95
+ type: NameAndValue
96
+ },
97
+ {
98
+ id: 'coinbase-access-token',
99
+ regex: /(?:coinbase)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['"\s\x60;]|$)/i,
100
+ type: NameAndValue
101
+ },
102
+ {
103
+ id: 'confluent-access-token',
104
+ regex: /(?:confluent)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{16})(?:['"\s\x60;]|$)/i,
105
+ type: NameAndValue
106
+ },
107
+ {
108
+ id: 'confluent-secret-key',
109
+ regex: /(?:confluent)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{64})(?:['"\s\x60;]|$)/i,
110
+ type: NameAndValue
111
+ },
112
+ {
113
+ id: 'contentful-delivery-api-token',
114
+ regex: /(?:contentful)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{43})(?:['"\s\x60;]|$)/i,
115
+ type: NameAndValue
28
116
  },
29
117
  {
30
118
  id: 'databricks-api-token',
31
- regex: /\b(dapi[a-h0-9]{32})(?:['"\s\x60;]|$)/i
119
+ regex: /\b(dapi[a-h0-9]{32})(?:['"\s\x60;]|$)/i,
120
+ type: ValueOnly
121
+ },
122
+ {
123
+ id: 'datadog-access-token',
124
+ regex: /(?:datadog)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{40})(?:['"\s\x60;]|$)/i,
125
+ type: NameAndValue
126
+ },
127
+ {
128
+ id: 'defined-networking-api-token',
129
+ regex: /(?:dnkey)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(dnkey-[a-z0-9=_-]{26}-[a-z0-9=_-]{52})(?:['"\s\x60;]|$)/i,
130
+ type: NameAndValue
32
131
  },
33
132
  {
34
133
  id: 'digitalocean-access-token',
35
- regex: /\b(doo_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i
134
+ regex: /\b(doo_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i,
135
+ type: ValueOnly
36
136
  },
37
137
  {
38
138
  id: 'digitalocean-pat',
39
- regex: /\b(dop_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i
139
+ regex: /\b(dop_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i,
140
+ type: ValueOnly
40
141
  },
41
142
  {
42
143
  id: 'digitalocean-refresh-token',
43
- regex: /\b(dor_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i
144
+ regex: /\b(dor_v1_[a-f0-9]{64})(?:['"\s\x60;]|$)/i,
145
+ type: ValueOnly
146
+ },
147
+ {
148
+ id: 'discord-api-token',
149
+ regex: /(?:discord)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{64})(?:['"\s\x60;]|$)/i,
150
+ type: NameAndValue
151
+ },
152
+ {
153
+ id: 'discord-client-id',
154
+ regex: /(?:discord)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9]{18})(?:['"\s\x60;]|$)/i,
155
+ type: NameAndValue
156
+ },
157
+ {
158
+ id: 'discord-client-secret',
159
+ regex: /(?:discord)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{32})(?:['"\s\x60;]|$)/i,
160
+ type: NameAndValue
44
161
  },
45
162
  {
46
163
  id: 'doppler-api-token',
47
- regex: /(dp\.pt\.)[a-z0-9]{43}/i
164
+ regex: /(dp\.pt\.)[a-z0-9]{43}/i,
165
+ type: ValueOnly
166
+ },
167
+ {
168
+ id: 'droneci-access-token',
169
+ regex: /(?:droneci)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
170
+ type: NameAndValue
171
+ },
172
+ {
173
+ id: 'dropbox-api-token',
174
+ regex: /(?:dropbox)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{15})(?:['"\s\x60;]|$)/i,
175
+ type: NameAndValue
176
+ },
177
+ {
178
+ id: 'dropbox-long-lived-api-token',
179
+ regex: /(?:dropbox)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['"\s\x60;]|$)/i,
180
+ type: NameAndValue
181
+ },
182
+ {
183
+ id: 'dropbox-short-lived-api-token',
184
+ regex: /(?:dropbox)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['"\s\x60;]|$)/i,
185
+ type: NameAndValue
48
186
  },
49
187
  {
50
188
  id: 'duffel-api-token',
51
- regex: /duffel_(test|live)_[a-z0-9_\-=]{43}/i
189
+ regex: /duffel_(test|live)_[a-z0-9_\-=]{43}/i,
190
+ type: ValueOnly
52
191
  },
53
192
  {
54
193
  id: 'dynatrace-api-token',
55
- regex: /dt0c01\.[a-z0-9]{24}\.[a-z0-9]{64}/i
194
+ regex: /dt0c01\.[a-z0-9]{24}\.[a-z0-9]{64}/i,
195
+ type: ValueOnly
56
196
  },
57
197
  {
58
198
  id: 'easypost-api-token',
59
- regex: /\bEZAK[a-z0-9]{54}/i
199
+ regex: /\bEZAK[a-z0-9]{54}/i,
200
+ type: ValueOnly
201
+ },
202
+ {
203
+ id: 'etsy-access-token',
204
+ regex: /(?:etsy)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{24})(?:['"\s\x60;]|$)/i,
205
+ type: NameAndValue
206
+ },
207
+ {
208
+ id: 'facebook',
209
+ regex: /(?:facebook)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{32})(?:['"\s\x60;]|$)/i,
210
+ type: NameAndValue
211
+ },
212
+ {
213
+ id: 'fastly-api-token',
214
+ regex: /(?:fastly)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{32})(?:['"\s\x60;]|$)/i,
215
+ type: NameAndValue
216
+ },
217
+ {
218
+ id: 'finicity-api-token',
219
+ regex: /(?:finicity)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{32})(?:['"\s\x60;]|$)/i,
220
+ type: NameAndValue
221
+ },
222
+ {
223
+ id: 'finicity-client-secret',
224
+ regex: /(?:finicity)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{20})(?:['"\s\x60;]|$)/i,
225
+ type: NameAndValue
226
+ },
227
+ {
228
+ id: 'finnhub-access-token',
229
+ regex: /(?:finnhub)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{20})(?:['"\s\x60;]|$)/i,
230
+ type: NameAndValue
231
+ },
232
+ {
233
+ id: 'flickr-access-token',
234
+ regex: /(?:flickr)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{32})(?:['"\s\x60;]|$)/i,
235
+ type: NameAndValue
60
236
  },
61
237
  {
62
238
  id: 'flutterwave-public-key',
63
- regex: /FLWPUBK_TEST-[a-h0-9]{32}-X/i
239
+ regex: /FLWPUBK_TEST-[a-h0-9]{32}-X/i,
240
+ type: ValueOnly
64
241
  },
65
242
  {
66
243
  id: 'frameio-api-token',
67
- regex: /fio-u-[a-z0-9\-_=]{64}/i
244
+ regex: /fio-u-[a-z0-9\-_=]{64}/i,
245
+ type: ValueOnly
246
+ },
247
+ {
248
+ id: 'freshbooks-access-token',
249
+ regex: /(?:freshbooks)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{64})(?:['"\s\x60;]|$)/i,
250
+ type: NameAndValue
68
251
  },
69
252
  {
70
253
  id: 'gcp-api-key',
71
- regex: /\b(AIza[0-9a-z\-_]{35})(?:['"\s\x60;]|$)/i
254
+ regex: /\b(AIza[0-9a-z\-_]{35})(?:['"\s\x60;]|$)/i,
255
+ type: ValueOnly
72
256
  },
73
257
  {
74
258
  id: 'github-app-token',
75
- regex: /(ghu|ghs)_[0-9a-zA-Z]{36}/
259
+ regex: /(ghu|ghs)_[0-9a-zA-Z]{36}/,
260
+ type: ValueOnly
76
261
  },
77
262
  {
78
263
  id: 'github-fine-grained-pat',
79
- regex: /github_pat_[0-9a-zA-Z_]{82}/
264
+ regex: /github_pat_[0-9a-zA-Z_]{82}/,
265
+ type: ValueOnly
80
266
  },
81
267
  {
82
268
  id: 'github-oauth',
83
- regex: /gho_[0-9a-zA-Z]{36}/
269
+ regex: /gho_[0-9a-zA-Z]{36}/,
270
+ type: ValueOnly
84
271
  },
85
272
  {
86
273
  id: 'github-pat',
87
- regex: /ghp_[0-9a-zA-Z]{36}/
274
+ regex: /ghp_[0-9a-zA-Z]{36}/,
275
+ type: ValueOnly
88
276
  },
89
277
  {
90
278
  id: 'gitlab-pat',
91
- regex: /glpat-[0-9a-zA-Z\-_]{20}/
279
+ regex: /glpat-[0-9a-zA-Z\-_]{20}/,
280
+ type: ValueOnly
92
281
  },
93
282
  {
94
283
  id: 'gitlab-ptt',
95
- regex: /glptt-[0-9a-f]{40}/
284
+ regex: /glptt-[0-9a-f]{40}/,
285
+ type: ValueOnly
96
286
  },
97
287
  {
98
288
  id: 'gitlab-rrt',
99
- regex: /GR1348941[0-9a-zA-Z\-_]{20}/
289
+ regex: /GR1348941[0-9a-zA-Z\-_]{20}/,
290
+ type: ValueOnly
291
+ },
292
+ {
293
+ id: 'gitter-access-token',
294
+ regex: /(?:gitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['"\s\x60;]|$)/i,
295
+ type: NameAndValue
296
+ },
297
+ {
298
+ id: 'gocardless-api-token',
299
+ regex: /(?:gocardless)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(live_[a-z0-9\-_=]{40})(?:['"\s\x60;]|$)/i,
300
+ type: NameAndValue
100
301
  },
101
302
  {
102
303
  id: 'grafana-api-key',
103
- regex: /\b(eyJrIjoi[a-z0-9]{70,400}={0,2})(?:['"\s\x60;]|$)/i
304
+ regex: /\b(eyJrIjoi[a-z0-9]{70,400}={0,2})(?:['"\s\x60;]|$)/i,
305
+ type: ValueOnly
104
306
  },
105
307
  {
106
308
  id: 'grafana-cloud-api-token',
107
- regex: /\b(glc_[a-z0-9+/]{32,400}={0,2})(?:['"\s\x60;]|$)/i
309
+ regex: /\b(glc_[a-z0-9+/]{32,400}={0,2})(?:['"\s\x60;]|$)/i,
310
+ type: ValueOnly
108
311
  },
109
312
  {
110
313
  id: 'grafana-service-account-token',
111
- regex: /\b(glsa_[a-z0-9]{32}_[a-f0-9]{8})(?:['"\s\x60;]|$)/i
314
+ regex: /\b(glsa_[a-z0-9]{32}_[a-f0-9]{8})(?:['"\s\x60;]|$)/i,
315
+ type: ValueOnly
112
316
  },
113
317
  {
114
318
  id: 'hashicorp-tf-api-token',
115
- regex: /[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}/i
319
+ regex: /[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}/i,
320
+ type: ValueOnly
321
+ },
322
+ {
323
+ id: 'heroku-api-key',
324
+ regex: /(?:heroku)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['"\s\x60;]|$)/i,
325
+ type: NameAndValue
326
+ },
327
+ {
328
+ id: 'hubspot-api-key',
329
+ regex: /(?:hubspot)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['"\s\x60;]|$)/i,
330
+ type: NameAndValue
331
+ },
332
+ {
333
+ id: 'intercom-api-key',
334
+ regex: /(?:intercom)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{60})(?:['"\s\x60;]|$)/i,
335
+ type: NameAndValue
336
+ },
337
+ {
338
+ id: 'jfrog-api-key',
339
+ regex: /(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{73})(?:['"\s\x60;]|$)/i,
340
+ type: NameAndValue
116
341
  },
117
342
  {
118
343
  id: 'jwt',
119
- regex: /\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9/_-]{17,}\.(?:[a-zA-Z0-9/_-]{10,}={0,2})?)(?:['"\s\x60;]|$)/
344
+ regex: /\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9/_-]{17,}\.(?:[a-zA-Z0-9/_-]{10,}={0,2})?)(?:['"\s\x60;]|$)/,
345
+ type: ValueOnly
346
+ },
347
+ {
348
+ id: 'kraken-access-token',
349
+ regex: /(?:kraken)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9/=_+-]{80,90})(?:['"\s\x60;]|$)/i,
350
+ type: NameAndValue
351
+ },
352
+ {
353
+ id: 'kucoin-access-token',
354
+ regex: /(?:kucoin)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{24})(?:['"\s\x60;]|$)/i,
355
+ type: NameAndValue
356
+ },
357
+ {
358
+ id: 'launchdarkly-access-token',
359
+ regex: /(?:launchdarkly)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{40})(?:['"\s\x60;]|$)/i,
360
+ type: NameAndValue
120
361
  },
121
362
  {
122
363
  id: 'linear-api-key',
123
- regex: /lin_api_[a-z0-9]{40}/i
364
+ regex: /lin_api_[a-z0-9]{40}/i,
365
+ type: ValueOnly
366
+ },
367
+ {
368
+ id: 'linkedin-client-secret',
369
+ regex: /(?:linkedin|linked-in)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{16})(?:['"\s\x60;]|$)/i,
370
+ type: NameAndValue
371
+ },
372
+ {
373
+ id: 'lob-pub-api-key',
374
+ regex: /(?:lob)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['"\s\x60;]|$)/i,
375
+ type: NameAndValue
376
+ },
377
+ {
378
+ id: 'mailchimp-api-key',
379
+ regex: /(?:mailchimp)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['"\s\x60;]|$)/i,
380
+ type: NameAndValue
381
+ },
382
+ {
383
+ id: 'mailgun-private-api-token',
384
+ regex: /(?:mailgun)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['"\s\x60;]|$)/i,
385
+ type: NameAndValue
386
+ },
387
+ {
388
+ id: 'mailgun-pub-key',
389
+ regex: /(?:mailgun)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['"\s\x60;]|$)/i,
390
+ type: NameAndValue
391
+ },
392
+ {
393
+ id: 'mailgun-signing-key',
394
+ regex: /(?:mailgun)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['"\s\x60;]|$)/i,
395
+ type: NameAndValue
396
+ },
397
+ {
398
+ id: 'mapbox-api-token',
399
+ regex: /(?:mapbox)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['"\s\x60;]|$)/i,
400
+ type: NameAndValue
401
+ },
402
+ {
403
+ id: 'mattermost-access-token',
404
+ regex: /(?:mattermost)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{26})(?:['"\s\x60;]|$)/i,
405
+ type: NameAndValue
406
+ },
407
+ {
408
+ id: 'messagebird-api-token',
409
+ regex: /(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{25})(?:['"\s\x60;]|$)/i,
410
+ type: NameAndValue
411
+ },
412
+ {
413
+ id: 'netlify-access-token',
414
+ regex: /(?:netlify)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{40,46})(?:['"\s\x60;]|$)/i,
415
+ type: NameAndValue
416
+ },
417
+ {
418
+ id: 'new-relic-browser-api-token',
419
+ regex: /(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['"\s\x60;]|$)/i,
420
+ type: NameAndValue
421
+ },
422
+ {
423
+ id: 'new-relic-user-api-id',
424
+ regex: /(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{64})(?:['"\s\x60;]|$)/i,
425
+ type: NameAndValue
426
+ },
427
+ {
428
+ id: 'new-relic-user-api-key',
429
+ regex: /(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['"\s\x60;]|$)/i,
430
+ type: NameAndValue
124
431
  },
125
432
  {
126
433
  id: 'npm-access-token',
127
- regex: /\b(npm_[a-z0-9]{36})(?:['"\s\x60;]|$)/i
434
+ regex: /\b(npm_[a-z0-9]{36})(?:['"\s\x60;]|$)/i,
435
+ type: ValueOnly
436
+ },
437
+ {
438
+ id: 'nytimes-access-token',
439
+ regex: /(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{32})(?:['"\s\x60;]|$)/i,
440
+ type: NameAndValue
441
+ },
442
+ {
443
+ id: 'okta-access-token',
444
+ regex: /(?:okta)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9=_-]{42})(?:['"\s\x60;]|$)/i,
445
+ type: NameAndValue
128
446
  },
129
447
  {
130
448
  id: 'openai-api-key',
131
- regex: /\b(sk-[a-z0-9]{20}T3BlbkFJ[a-z0-9]{20})(?:['"\s\x60;]|$)/i
449
+ regex: /\b(sk-[a-z0-9]{20}T3BlbkFJ[a-z0-9]{20})(?:['"\s\x60;]|$)/i,
450
+ type: ValueOnly
451
+ },
452
+ {
453
+ id: 'plaid-api-token',
454
+ regex: /(?:plaid)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['"\s\x60;]|$)/i,
455
+ type: NameAndValue
456
+ },
457
+ {
458
+ id: 'plaid-client-id',
459
+ regex: /(?:plaid)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{24})(?:['"\s\x60;]|$)/i,
460
+ type: NameAndValue
461
+ },
462
+ {
463
+ id: 'plaid-secret-key',
464
+ regex: /(?:plaid)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{30})(?:['"\s\x60;]|$)/i,
465
+ type: NameAndValue
132
466
  },
133
467
  {
134
468
  id: 'planetscale-api-token',
135
- regex: /\b(pscale_tkn_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i
469
+ regex: /\b(pscale_tkn_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i,
470
+ type: ValueOnly
136
471
  },
137
472
  {
138
473
  id: 'planetscale-oauth-token',
139
- regex: /\b(pscale_oauth_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i
474
+ regex: /\b(pscale_oauth_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i,
475
+ type: ValueOnly
140
476
  },
141
477
  {
142
478
  id: 'planetscale-password',
143
- regex: /\b(pscale_pw_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i
479
+ regex: /\b(pscale_pw_[a-z0-9=\-_.]{32,64})(?:['"\s\x60;]|$)/i,
480
+ type: ValueOnly
144
481
  },
145
482
  {
146
483
  id: 'postman-api-token',
147
- regex: /\b(PMAK-[a-f0-9]{24}-[a-f0-9]{34})(?:['"\s\x60;]|$)/i
484
+ regex: /\b(PMAK-[a-f0-9]{24}-[a-f0-9]{34})(?:['"\s\x60;]|$)/i,
485
+ type: ValueOnly
148
486
  },
149
487
  {
150
488
  id: 'prefect-api-token',
151
- regex: /\b(pnu_[a-z0-9]{36})(?:['"\s\x60;]|$)/i
489
+ regex: /\b(pnu_[a-z0-9]{36})(?:['"\s\x60;]|$)/i,
490
+ type: ValueOnly
152
491
  },
153
492
  {
154
493
  id: 'private-key',
155
- regex: /-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S]*KEY( BLOCK)?----/i
494
+ regex: /-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S]*KEY( BLOCK)?----/i,
495
+ type: ValueOnly
156
496
  },
157
497
  {
158
498
  id: 'pulumi-api-token',
159
- regex: /\b(pul-[a-f0-9]{40})(?:['"\s\x60;]|$)/i
499
+ regex: /\b(pul-[a-f0-9]{40})(?:['"\s\x60;]|$)/i,
500
+ type: ValueOnly
160
501
  },
161
502
  {
162
503
  id: 'pypi-upload-token',
163
- regex: /pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}/
504
+ regex: /pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}/,
505
+ type: ValueOnly
506
+ },
507
+ {
508
+ id: 'rapidapi-access-token',
509
+ regex: /(?:rapidapi)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['"\s\x60;]|$)/i,
510
+ type: NameAndValue
164
511
  },
165
512
  {
166
513
  id: 'readme-api-token',
167
- regex: /\b(rdme_[a-z0-9]{70})(?:['"\s\x60;]|$)/i
514
+ regex: /\b(rdme_[a-z0-9]{70})(?:['"\s\x60;]|$)/i,
515
+ type: ValueOnly
168
516
  },
169
517
  {
170
518
  id: 'rubygems-api-token',
171
- regex: /\b(rubygems_[a-f0-9]{48})(?:['"\s\x60;]|$)/i
519
+ regex: /\b(rubygems_[a-f0-9]{48})(?:['"\s\x60;]|$)/i,
520
+ type: ValueOnly
172
521
  },
173
522
  {
174
523
  id: 'scalingo-api-token',
175
- regex: /tk-us-[a-zA-Z0-9-_]{48}/
524
+ regex: /tk-us-[a-zA-Z0-9-_]{48}/,
525
+ type: ValueOnly
526
+ },
527
+ {
528
+ id: 'sendbird-access-id',
529
+ regex: /(?:sendbird)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['"\s\x60;]|$)/i,
530
+ type: NameAndValue
531
+ },
532
+ {
533
+ id: 'sendbird-access-token',
534
+ regex: /(?:sendbird)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{40})(?:['"\s\x60;]|$)/i,
535
+ type: NameAndValue
176
536
  },
177
537
  {
178
538
  id: 'sendgrid-api-token',
179
- regex: /\b(SG\.[a-z0-9=_\-.]{66})(?:['"\s\x60;]|$)/i
539
+ regex: /\b(SG\.[a-z0-9=_\-.]{66})(?:['"\s\x60;]|$)/i,
540
+ type: ValueOnly
180
541
  },
181
542
  {
182
543
  id: 'sendinblue-api-token',
183
- regex: /\b(xkeysib-[a-f0-9]{64}-[a-z0-9]{16})(?:['"\s\x60;]|$)/i
544
+ regex: /\b(xkeysib-[a-f0-9]{64}-[a-z0-9]{16})(?:['"\s\x60;]|$)/i,
545
+ type: ValueOnly
546
+ },
547
+ {
548
+ id: 'sentry-access-token',
549
+ regex: /(?:sentry)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{64})(?:['"\s\x60;]|$)/i,
550
+ type: NameAndValue
184
551
  },
185
552
  {
186
553
  id: 'shippo-api-token',
187
- regex: /\b(shippo_(live|test)_[a-f0-9]{40})(?:['"\s\x60;]|$)/i
554
+ regex: /\b(shippo_(live|test)_[a-f0-9]{40})(?:['"\s\x60;]|$)/i,
555
+ type: ValueOnly
188
556
  },
189
557
  {
190
558
  id: 'shopify-access-token',
191
- regex: /shpat_[a-fA-F0-9]{32}/
559
+ regex: /shpat_[a-fA-F0-9]{32}/,
560
+ type: ValueOnly
192
561
  },
193
562
  {
194
563
  id: 'shopify-custom-access-token',
195
- regex: /shpca_[a-fA-F0-9]{32}/
564
+ regex: /shpca_[a-fA-F0-9]{32}/,
565
+ type: ValueOnly
196
566
  },
197
567
  {
198
568
  id: 'shopify-private-app-access-token',
199
- regex: /shppa_[a-fA-F0-9]{32}/
569
+ regex: /shppa_[a-fA-F0-9]{32}/,
570
+ type: ValueOnly
200
571
  },
201
572
  {
202
573
  id: 'shopify-shared-secret',
203
- regex: /shpss_[a-fA-F0-9]{32}/
574
+ regex: /shpss_[a-fA-F0-9]{32}/,
575
+ type: ValueOnly
576
+ },
577
+ {
578
+ id: 'sidekiq-secret',
579
+ regex: /(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['"\s\x60;]|$)/i,
580
+ type: NameAndValue
204
581
  },
205
582
  {
206
583
  id: 'slack-app-token',
207
- regex: /(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)/i
584
+ regex: /(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)/i,
585
+ type: ValueOnly
208
586
  },
209
587
  {
210
588
  id: 'slack-bot-token',
211
- regex: /(xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*)/
589
+ regex: /(xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*)/,
590
+ type: ValueOnly
212
591
  },
213
592
  {
214
593
  id: 'slack-config-access-token',
215
- regex: /(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})/i
594
+ regex: /(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})/i,
595
+ type: ValueOnly
216
596
  },
217
597
  {
218
598
  id: 'slack-config-refresh-token',
219
- regex: /(xoxe-\d-[A-Z0-9]{146})/i
599
+ regex: /(xoxe-\d-[A-Z0-9]{146})/i,
600
+ type: ValueOnly
220
601
  },
221
602
  {
222
603
  id: 'slack-legacy-bot-token',
223
- regex: /(xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26})/
604
+ regex: /(xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26})/,
605
+ type: ValueOnly
224
606
  },
225
607
  {
226
608
  id: 'slack-legacy-token',
227
- regex: /(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)/
609
+ regex: /(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)/,
610
+ type: ValueOnly
228
611
  },
229
612
  {
230
613
  id: 'slack-legacy-workspace-token',
231
- regex: /(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})/
614
+ regex: /(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})/,
615
+ type: ValueOnly
232
616
  },
233
617
  {
234
618
  id: 'slack-user-token',
235
- regex: /(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})/
619
+ regex: /(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})/,
620
+ type: ValueOnly
236
621
  },
237
622
  {
238
623
  id: 'slack-webhook-url',
239
- regex: /(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+/]{43,46}/
624
+ regex: /(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+/]{43,46}/,
625
+ type: ValueOnly
626
+ },
627
+ {
628
+ id: 'snyk-api-token',
629
+ regex: /(?:snyk)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['"\s\x60;]|$)/i,
630
+ type: NameAndValue
240
631
  },
241
632
  {
242
633
  id: 'square-access-token',
243
- regex: /\b(sq0atp-[0-9a-z\-_]{22})(?:['"\s\x60;]|$)/i
634
+ regex: /\b(sq0atp-[0-9a-z\-_]{22})(?:['"\s\x60;]|$)/i,
635
+ type: ValueOnly
244
636
  },
245
637
  {
246
638
  id: 'square-secret',
247
- regex: /\b(sq0csp-[0-9a-z\-_]{43})(?:['"\s\x60;]|$)/i
639
+ regex: /\b(sq0csp-[0-9a-z\-_]{43})(?:['"\s\x60;]|$)/i,
640
+ type: ValueOnly
641
+ },
642
+ {
643
+ id: 'squarespace-access-token',
644
+ regex: /(?:squarespace)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['"\s\x60;]|$)/i,
645
+ type: NameAndValue
248
646
  },
249
647
  {
250
648
  id: 'stripe-access-token',
251
- regex: /(sk|pk)_(test|live)_[0-9a-z]{10,32}/i
649
+ regex: /(sk|pk)_(test|live)_[0-9a-z]{10,32}/i,
650
+ type: ValueOnly
651
+ },
652
+ {
653
+ id: 'sumologic-access-token',
654
+ regex: /(?:sumo)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{64})(?:['"\s\x60;]|$)/i,
655
+ type: NameAndValue
252
656
  },
253
657
  {
254
658
  id: 'telegram-bot-api-token',
255
- regex: /(?:^|[^0-9])([0-9]{5,16}:A[a-z0-9_-]{34})(?:$|[^a-z0-9_-])/i
659
+ regex: /(?:^|[^0-9])([0-9]{5,16}:A[a-z0-9_-]{34})(?:$|[^a-z0-9_-])/i,
660
+ type: ValueOnly
661
+ },
662
+ {
663
+ id: 'travisci-access-token',
664
+ regex: /(?:travis)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{22})(?:['"\s\x60;]|$)/i,
665
+ type: NameAndValue
666
+ },
667
+ {
668
+ id: 'trello-access-token',
669
+ regex: /(?:trello)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z-0-9]{32})(?:['"\s\x60;]|$)/i,
670
+ type: NameAndValue
256
671
  },
257
672
  {
258
673
  id: 'twilio-api-key',
259
- regex: /SK[0-9a-fA-F]{32}/
674
+ regex: /SK[0-9a-fA-F]{32}/,
675
+ type: ValueOnly
676
+ },
677
+ {
678
+ id: 'twitch-api-token',
679
+ regex: /(?:twitch)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{30})(?:['"\s\x60;]|$)/i,
680
+ type: NameAndValue
681
+ },
682
+ {
683
+ id: 'twitter-access-secret',
684
+ regex: /(?:twitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{45})(?:['"\s\x60;]|$)/i,
685
+ type: NameAndValue
686
+ },
687
+ {
688
+ id: 'twitter-access-token',
689
+ regex: /(?:twitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9]{15,25}-[a-z0-9]{20,40})(?:['"\s\x60;]|$)/i,
690
+ type: NameAndValue
691
+ },
692
+ {
693
+ id: 'twitter-api-key',
694
+ regex: /(?:twitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{25})(?:['"\s\x60;]|$)/i,
695
+ type: NameAndValue
696
+ },
697
+ {
698
+ id: 'twitter-api-secret',
699
+ regex: /(?:twitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{50})(?:['"\s\x60;]|$)/i,
700
+ type: NameAndValue
701
+ },
702
+ {
703
+ id: 'twitter-bearer-token',
704
+ regex: /(?:twitter)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(A{22}[a-z0-9%]{80,100})(?:['"\s\x60;]|$)/i,
705
+ type: NameAndValue
706
+ },
707
+ {
708
+ id: 'typeform-api-token',
709
+ regex: /(?:typeform)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(tfp_[a-z0-9\-_.=]{59})(?:['"\s\x60;]|$)/i,
710
+ type: NameAndValue
260
711
  },
261
712
  {
262
713
  id: 'vault-batch-token',
263
- regex: /\b(hvb\.[a-z0-9_-]{138,212})(?:['"\s\x60;]|$)/i
714
+ regex: /\b(hvb\.[a-z0-9_-]{138,212})(?:['"\s\x60;]|$)/i,
715
+ type: ValueOnly
264
716
  },
265
717
  {
266
718
  id: 'vault-service-token',
267
- regex: /\b(hvs\.[a-z0-9_-]{90,100})(?:['"\s\x60;]|$)/i
719
+ regex: /\b(hvs\.[a-z0-9_-]{90,100})(?:['"\s\x60;]|$)/i,
720
+ type: ValueOnly
721
+ },
722
+ {
723
+ id: 'yandex-access-token',
724
+ regex: /(?:yandex)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['"\s\x60;]|$)/i,
725
+ type: NameAndValue
726
+ },
727
+ {
728
+ id: 'yandex-api-key',
729
+ regex: /(?:yandex)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(AQVN[a-z0-9_-]{35,38})(?:['"\s\x60;]|$)/i,
730
+ type: NameAndValue
731
+ },
732
+ {
733
+ id: 'yandex-aws-access-token',
734
+ regex: /(?:yandex)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}(YC[a-z0-9_-]{38})(?:['"\s\x60;]|$)/i,
735
+ type: NameAndValue
736
+ },
737
+ {
738
+ id: 'zendesk-secret-key',
739
+ regex: /(?:zendesk)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([a-z0-9]{40})(?:['"\s\x60;]|$)/i,
740
+ type: NameAndValue
268
741
  }
269
742
  ]