getdoorman 1.2.0 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "getdoorman",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Zero-config security scanner for AI-assisted development. 2000+ rules, 11 languages, 4 detection engines.",
   "main": "src/index.js",
   "exports": {

package/src/simple-checks.js

@@ -17,17 +17,24 @@ const CHECKS = [
         { name: 'AWS Secret Key', regex: /(?:aws_secret|secret_access_key)\s*[:=]\s*['"][A-Za-z0-9/+=]{40}['"]/ },
         { name: 'Google API Key', regex: /AIza[0-9A-Za-z_-]{35}/ },
         { name: 'Google OAuth Secret', regex: /GOCSPX-[a-zA-Z0-9_-]{28}/ },
+        { name: 'Vercel Token', regex: /vercel_[a-zA-Z0-9]{24,}/ },
+        { name: 'Netlify Token', regex: /nfp_[a-zA-Z0-9]{40,}/ },
         // AI providers
         { name: 'OpenAI API Key', regex: /sk-(?:proj-)?[a-zA-Z0-9]{32,}/ },
         { name: 'Anthropic API Key', regex: /sk-ant-[a-zA-Z0-9-]{20,}/ },
         { name: 'Groq API Key', regex: /gsk_[a-zA-Z0-9]{48,}/ },
-        { name: 'Cohere API Key', regex: /[a-zA-Z0-9]{40}/ && false }, // too broad, skip
         { name: 'Replicate API Token', regex: /r8_[a-zA-Z0-9]{38}/ },
         { name: 'Hugging Face Token', regex: /hf_[a-zA-Z0-9]{34}/ },
+        { name: 'Together AI Key', regex: /tog_[a-zA-Z0-9]{40,}/ },
+        { name: 'Pinecone API Key', regex: /pcsk_[a-zA-Z0-9]{50,}/ },
         // Payment
         { name: 'Stripe Secret Key', regex: /sk_live_[0-9a-zA-Z]{24,}/ },
         { name: 'Stripe Publishable (live)', regex: /pk_live_[0-9a-zA-Z]{24,}/ },
-        // Auth & dev tools
+        // Auth
+        { name: 'Clerk Secret Key', regex: /sk_live_[a-zA-Z0-9]{27,}/ },
+        { name: 'Clerk Publishable Key', regex: /pk_live_[a-zA-Z0-9]{27,}/ },
+        { name: 'Auth0 Client Secret', regex: /(?:auth0|AUTH0).*secret.*['"][a-zA-Z0-9_-]{32,}['"]/ },
+        // Dev tools
         { name: 'GitHub Token', regex: /ghp_[0-9a-zA-Z]{36}/ },
         { name: 'GitHub OAuth Secret', regex: /gho_[0-9a-zA-Z]{36}/ },
         { name: 'GitLab Token', regex: /glpat-[0-9a-zA-Z_-]{20,}/ },
@@ -36,15 +43,22 @@ const CHECKS = [
         { name: 'Discord Bot Token', regex: /[MN][A-Za-z0-9]{23,}\.[A-Za-z0-9_-]{6}\.[A-Za-z0-9_-]{27}/ },
         { name: 'Twilio Auth Token', regex: /(?:twilio|TWILIO).*[0-9a-f]{32}/ },
         { name: 'SendGrid API Key', regex: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/ },
+        { name: 'Resend API Key', regex: /re_[a-zA-Z0-9]{30,}/ },
         { name: 'Mailgun API Key', regex: /key-[0-9a-zA-Z]{32}/ },
+        { name: 'Postmark Token', regex: /(?:postmark|POSTMARK).*['"][0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}['"]/ },
         // Database
         { name: 'Supabase Service Key', regex: /eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[a-zA-Z0-9_-]{50,}/ },
         { name: 'Firebase Private Key', regex: /-----BEGIN RSA PRIVATE KEY-----/ },
         { name: 'MongoDB Connection String', regex: /mongodb\+srv:\/\/[^:]+:[^@]+@/ },
         { name: 'Postgres Connection String', regex: /postgres(?:ql)?:\/\/[^:]+:[^@]+@/ },
-        // SSH
+        { name: 'PlanetScale Connection', regex: /mysql:\/\/[^:]+:[^@]+@aws\.connect\.psdb\.cloud/ },
+        { name: 'Neon Postgres', regex: /postgres(?:ql)?:\/\/[^:]+:[^@]+@[^/]*neon\.tech/ },
+        { name: 'Turso Database Token', regex: /eyJhbGciOiJFZERTQS[a-zA-Z0-9_-]{50,}/ },
+        { name: 'Upstash Redis Token', regex: /AX[a-zA-Z0-9]{34,}/ },
+        { name: 'Redis Connection String', regex: /redis:\/\/[^:]+:[^@]+@/ },
+        // SSH & certificates
         { name: 'SSH Private Key', regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/ },
-      ].filter(p => p.regex); // filter out disabled patterns
+      ];
       const findings = [];
       for (const [fp, content] of files) {
         if (fp.endsWith('.example') || fp.endsWith('.sample') || fp.endsWith('.template')) continue;