hullproof 0.0.0-stage → 0.5.0

package/checks/log.no-credential-in-logs.json

@@ -0,0 +1,30 @@
+{
+  "id": "check.log.no-credential-in-logs",
+  "sec_ids": [
+    "SEC-LOG-001"
+  ],
+  "applies_when": {},
+  "op": "regex_absent",
+  "params": {
+    "files": [
+      "**/*.{ts,tsx,js,jsx,mjs,cjs,py,rb,php,go,java,kt,cs,rs,dart,swift,vue,svelte,astro}"
+    ],
+    "exclude": [
+      "**/*.test.*",
+      "**/*.spec.*",
+      "**/__tests__/**",
+      "**/test/**",
+      "**/tests/**",
+      "**/fixtures/**"
+    ],
+    "pattern": "\\b(?:console\\.(?:log|info|warn|error|debug)|logger\\.\\w+|log\\.(?:info|warn|warning|error|debug|print\\w*)|logging\\.\\w+|print|println|Log\\.\\w|puts|error_log)\\s*\\([^\\n]*(?:\\b(?:token|password|passwd|secret|api_?key|apiKey|access_?token|accessToken|refresh_?token|refreshToken|session_?token|sessionToken|authorization|card_?number|cvv)\\b\\s*[:=,})]|\\.(?:token|password|secret|accessToken|refreshToken|apiKey)\\b)",
+    "note": "a credential is written to the logs",
+    "not_applicable_reason": "no source file"
+  },
+  "on_true": "NOT ASSESSED: NEEDS DYNAMIC TEST",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/no-credential-in-logs/pass",
+    "fail": "test/fixtures/checks/no-credential-in-logs/fail"
+  }
+}

package/checks/secrets.no-env-file-committed.json

@@ -0,0 +1,31 @@
+{
+  "id": "check.secrets.no-env-file-committed",
+  "sec_ids": [
+    "SEC-SECRETS-004"
+  ],
+  "applies_when": {},
+  "op": "file_absent",
+  "params": {
+    "files": [
+      ".env",
+      ".env.*",
+      "**/.env",
+      "**/.env.*"
+    ],
+    "exclude": [
+      "**/.env.example",
+      "**/.env.sample",
+      "**/.env.template",
+      "**/.env.dist",
+      "**/.env.*.example",
+      "**/.env.example.*"
+    ],
+    "note": "an environment file is in the repository; its values are readable by anyone with the code"
+  },
+  "on_true": "NOT ASSESSED: NEEDS DASHBOARD",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/no-env-file-committed/pass",
+    "fail": "test/fixtures/checks/no-env-file-committed/fail"
+  }
+}

package/checks/secrets.no-secret-in-public-env.json

@@ -0,0 +1,37 @@
+{
+  "id": "check.secrets.no-secret-in-public-env",
+  "sec_ids": [
+    "SEC-SECRETS-001",
+    "SEC-SECRETS-003"
+  ],
+  "applies_when": {},
+  "op": "regex_absent",
+  "params": {
+    "files": [
+      "**/*.{ts,tsx,js,jsx,mjs,cjs,py,rb,php,go,java,kt,cs,rs,dart,swift,vue,svelte,astro}",
+      "**/.env*",
+      "**/app.json",
+      "**/app.config.*",
+      "**/eas.json",
+      "**/vercel.json",
+      "**/netlify.toml"
+    ],
+    "exclude": [
+      "**/*.test.*",
+      "**/*.spec.*",
+      "**/__tests__/**",
+      "**/test/**",
+      "**/tests/**",
+      "**/fixtures/**"
+    ],
+    "pattern": "\\b(?:NEXT_PUBLIC|VITE|EXPO_PUBLIC|REACT_APP|NUXT_PUBLIC|PUBLIC|GATSBY|STORYBOOK)_[A-Z0-9_]*(?:SERVICE_ROLE|SECRET|PRIVATE|PASSWORD|PASSWD)[A-Z0-9_]*\\b",
+    "note": "a secret is named with a prefix the framework copies into the browser or app bundle",
+    "not_applicable_reason": "no source or environment file"
+  },
+  "on_true": "NOT ASSESSED: NEEDS BUILD",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/no-secret-in-public-env/pass",
+    "fail": "test/fixtures/checks/no-secret-in-public-env/fail"
+  }
+}

package/checks/storage.firebase-rules-not-open.json

@@ -0,0 +1,22 @@
+{
+  "id": "check.storage.firebase-rules-not-open",
+  "sec_ids": [
+    "SEC-DATA-019"
+  ],
+  "applies_when": {},
+  "op": "regex_absent",
+  "params": {
+    "files": [
+      "**/storage.rules"
+    ],
+    "pattern": "allow\\s+[\\w\\s,]+:\\s*if\\s+true\\s*;|allow\\s+[\\w\\s,]+\\s*;|request\\.time\\s*<\\s*timestamp\\.date",
+    "note": "storage rule open to every caller (Firebase)",
+    "not_applicable_reason": "no Firebase Storage rules file"
+  },
+  "on_true": "NOT ASSESSED: NEEDS DYNAMIC TEST",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/storage-rules-not-open/pass",
+    "fail": "test/fixtures/checks/storage-rules-not-open/fail"
+  }
+}

package/checks/supply.no-untrusted-event-in-run.json

@@ -0,0 +1,23 @@
+{
+  "id": "check.supply.no-untrusted-event-in-run",
+  "sec_ids": [
+    "SEC-SUPPLY-032"
+  ],
+  "applies_when": {},
+  "op": "regex_absent",
+  "params": {
+    "files": [
+      ".github/workflows/*.yml",
+      ".github/workflows/*.yaml"
+    ],
+    "pattern": "^(?![ \\t]*-?[ \\t]*[A-Za-z_][\\w-]*:[ \\t]*[\"']?\\$\\{\\{)[^\\n]*\\$\\{\\{\\s*github\\.(?:event\\.(?:issue|pull_request|comment|review|review_comment|discussion|discussion_comment|head_commit|commits|pages|workflow_run|pull_request_target)\\b[\\w.\\[\\]*]*\\.(?:title|body|message|name|label|ref|email|login|page_name|default_branch|head_branch)\\b|head_ref\\b)[^}]*\\}\\}",
+    "note": "text an outside person controls is expanded straight into a workflow script",
+    "not_applicable_reason": "no GitHub Actions workflow"
+  },
+  "on_true": "PASS (static)",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/no-untrusted-event-in-run/pass",
+    "fail": "test/fixtures/checks/no-untrusted-event-in-run/fail"
+  }
+}

package/checks/web.cors-no-reflected-origin.json

@@ -0,0 +1,31 @@
+{
+  "id": "check.web.cors-no-reflected-origin",
+  "sec_ids": [
+    "SEC-WEB-022"
+  ],
+  "applies_when": {},
+  "op": "regex_absent",
+  "params": {
+    "files": [
+      "**/*.{ts,tsx,js,jsx,mjs,cjs,py,rb,php,go,java,kt,cs,rs,dart,swift,vue,svelte,astro}"
+    ],
+    "exclude": [
+      "**/*.test.*",
+      "**/*.spec.*",
+      "**/__tests__/**",
+      "**/test/**",
+      "**/tests/**",
+      "**/fixtures/**"
+    ],
+    "pattern": "Access-Control-Allow-Origin[\"']?\\s*[,:=]\\s*(?:req|request|r|ctx|c|event)?\\.?(?:headers?\\.get\\(\\s*[\"']origin[\"']\\)|origin\\b|headers\\[[\"']origin[\"']\\])|Access-Control-Allow-Origin[\"']?\\s*[,:=]\\s*origin\\b|\\borigin\\s*:\\s*true\\b|CORS_(?:ORIGIN_)?ALLOW_ALL(?:_ORIGINS)?\\s*=\\s*True|SetIsOriginAllowed\\(\\s*\\w+\\s*=>\\s*true\\s*\\)|AllowOriginFunc:\\s*func\\([^)]*\\)\\s*bool\\s*\\{\\s*return\\s+true|\\$_SERVER\\[[\"']HTTP_ORIGIN[\"']\\]",
+    "ignore_case": true,
+    "note": "the response allows whatever origin the request names",
+    "not_applicable_reason": "no source file"
+  },
+  "on_true": "NOT ASSESSED: NEEDS DYNAMIC TEST",
+  "on_false": "FAIL",
+  "fixtures": {
+    "pass": "test/fixtures/checks/cors-no-reflected-origin/pass",
+    "fail": "test/fixtures/checks/cors-no-reflected-origin/fail"
+  }
+}

package/detectors/ai.json

@@ -0,0 +1,25 @@
+{
+  "category": "ai",
+  "entries": [
+    {"id": "anthropic-sdk", "deps": {"npm": ["@anthropic-ai/sdk"], "pypi": ["anthropic"]}, "imports": {"js": ["@anthropic-ai/sdk"], "python": ["anthropic"]}},
+    {"id": "aws-bedrock", "deps": {"npm": ["@aws-sdk/client-bedrock-runtime", "@ai-sdk/amazon-bedrock"]}, "signals": [{"files": ["*.py"], "regex": "boto3\\.client\\(\\s*['\"]bedrock-runtime['\"]"}]},
+    {"id": "azure-openai", "deps": {"npm": ["@azure/openai"], "nuget": ["Azure.AI.OpenAI"]}},
+    {"id": "chromadb", "deps": {"npm": ["chromadb"], "pypi": ["chromadb"]}},
+    {"id": "cohere-sdk", "deps": {"npm": ["cohere-ai"], "pypi": ["cohere"]}},
+    {"id": "google-gemini-sdk", "deps": {"npm": ["@google/generative-ai", "@google/genai"], "pypi": ["google-generativeai", "google-genai"]}, "imports": {"python": ["google.generativeai", "google.genai"]}},
+    {"id": "groq-sdk", "deps": {"npm": ["groq-sdk"], "pypi": ["groq"]}},
+    {"id": "huggingface", "deps": {"npm": ["@huggingface/inference", "@huggingface/transformers"], "pypi": ["transformers", "huggingface-hub"]}},
+    {"id": "langchain", "deps": {"npm": ["langchain", "@langchain/*"], "pypi": ["langchain", "langchain-*", "langgraph"]}},
+    {"id": "llamaindex", "deps": {"npm": ["llamaindex"], "pypi": ["llama-index", "llama-index-*"]}},
+    {"id": "mcp-server", "deps": {"npm": ["@modelcontextprotocol/sdk"], "pypi": ["mcp", "fastmcp"]}, "imports": {"js": ["@modelcontextprotocol/sdk/server"], "python": ["mcp.server"]}},
+    {"id": "mistral-sdk", "deps": {"npm": ["@mistralai/mistralai"], "pypi": ["mistralai"]}},
+    {"id": "ollama", "deps": {"npm": ["ollama"], "pypi": ["ollama"]}},
+    {"id": "openai-sdk", "deps": {"npm": ["openai"], "pypi": ["openai"], "go": ["github.com/openai/openai-go*", "github.com/sashabaranov/go-openai"]}, "imports": {"js": ["openai"], "python": ["openai"]}},
+    {"id": "pgvector", "deps": {"npm": ["pgvector"], "pypi": ["pgvector"]}, "signals": [{"files": ["*.sql"], "regex": "create\\s+extension\\s+(if\\s+not\\s+exists\\s+)?\"?vector\"?", "ignore_case": true, "confidence": "high"}]},
+    {"id": "pinecone", "deps": {"npm": ["@pinecone-database/pinecone"], "pypi": ["pinecone", "pinecone-client"]}},
+    {"id": "qdrant", "deps": {"npm": ["@qdrant/js-client-rest"], "pypi": ["qdrant-client"]}},
+    {"id": "replicate", "deps": {"npm": ["replicate"], "pypi": ["replicate"]}},
+    {"id": "vercel-ai-sdk", "deps": {"npm": ["ai", "@ai-sdk/*"]}},
+    {"id": "weaviate", "deps": {"npm": ["weaviate-client", "weaviate-ts-client"], "pypi": ["weaviate-client"]}}
+  ]
+}

package/detectors/auth.json

@@ -0,0 +1,27 @@
+{
+  "category": "auth",
+  "entries": [
+    {"id": "auth0", "deps": {"npm": ["@auth0/*", "auth0", "express-openid-connect"], "pypi": ["auth0-python"], "pub": ["auth0_flutter"]}},
+    {"id": "aws-cognito", "deps": {"npm": ["amazon-cognito-identity-js", "@aws-sdk/client-cognito-identity-provider"]}, "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"aws_cognito_user_pool\"", "confidence": "high"}, {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "AWS::Cognito::UserPool\\b", "confidence": "high"}]},
+    {"id": "better-auth", "deps": {"npm": ["better-auth"]}},
+    {"id": "clerk", "deps": {"npm": ["@clerk/*"], "pypi": ["clerk-backend-api"]}},
+    {"id": "devise", "deps": {"rubygems": ["devise"]}},
+    {"id": "django-auth", "imports": {"python": ["django.contrib.auth"]}},
+    {"id": "firebase-auth", "deps": {"pub": ["firebase_auth"], "npm": ["@react-native-firebase/auth"]}, "imports": {"js": ["firebase/auth", "firebase-admin/auth"], "python": ["firebase_admin.auth"]}},
+    {"id": "flask-login", "deps": {"pypi": ["flask-login"]}},
+    {"id": "jwt", "deps": {"npm": ["jsonwebtoken", "jose", "express-jwt", "passport-jwt"], "pypi": ["pyjwt", "python-jose", "flask-jwt-extended"], "go": ["github.com/golang-jwt/jwt*"], "rubygems": ["jwt"], "maven": ["io.jsonwebtoken*"], "composer": ["firebase/php-jwt", "lcobucci/jwt"]}, "deps_confidence": "medium"},
+    {"id": "keycloak", "deps": {"npm": ["keycloak-js", "keycloak-connect"], "pypi": ["python-keycloak"]}},
+    {"id": "kinde", "deps": {"npm": ["@kinde-oss/*"]}},
+    {"id": "laravel-auth", "deps": {"composer": ["laravel/sanctum", "laravel/passport", "laravel/breeze", "laravel/fortify", "laravel/jetstream"]}},
+    {"id": "lucia", "deps": {"npm": ["lucia"]}},
+    {"id": "microsoft-entra", "deps": {"npm": ["@azure/msal-*"], "pypi": ["msal"], "nuget": ["Microsoft.Identity.Web", "Microsoft.Identity.Client"]}, "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"(azuread_|azurerm_aadb2c_)", "confidence": "high"}]},
+    {"id": "nextauth", "deps": {"npm": ["next-auth", "@auth/*"]}},
+    {"id": "okta", "deps": {"npm": ["@okta/*"], "pypi": ["okta"]}},
+    {"id": "passport", "deps": {"npm": ["passport"]}},
+    {"id": "password-hashing", "deps": {"npm": ["bcrypt", "bcryptjs", "argon2", "@node-rs/argon2", "@node-rs/bcrypt"], "pypi": ["bcrypt", "argon2-cffi", "passlib"], "rubygems": ["bcrypt"]}, "deps_confidence": "medium", "imports": {"go": ["golang.org/x/crypto/bcrypt", "golang.org/x/crypto/argon2"]}},
+    {"id": "spring-security", "deps": {"maven": ["org.springframework.security*", "org.springframework.boot:spring-boot-starter-security"]}},
+    {"id": "stytch", "deps": {"npm": ["stytch", "@stytch/*"], "pypi": ["stytch"]}},
+    {"id": "supabase-auth", "deps": {"npm": ["@supabase/auth-helpers-*", "@supabase/auth-ui-react"]}, "signals": [{"files": ["*.ts", "*.tsx", "*.js", "*.jsx", "*.mjs", "*.vue", "*.svelte", "*.dart", "*.py"], "regex": "\\bsupabase\\w*\\.auth\\.\\w+"}]},
+    {"id": "workos", "deps": {"npm": ["@workos-inc/*"], "pypi": ["workos"]}}
+  ]
+}

package/detectors/ci.json

@@ -0,0 +1,19 @@
+{
+  "category": "ci",
+  "entries": [
+    {"id": "aws-codebuild", "signals": [{"files": ["buildspec.yml", "buildspec.yaml"]}]},
+    {"id": "azure-pipelines", "signals": [{"files": ["azure-pipelines.yml", "azure-pipelines.yaml", ".azure-pipelines/*.yml", ".azure-pipelines/*.yaml"]}]},
+    {"id": "bitbucket-pipelines", "signals": [{"files": ["bitbucket-pipelines.yml"]}]},
+    {"id": "bitrise", "signals": [{"files": ["bitrise.yml"]}]},
+    {"id": "buildkite", "signals": [{"files": [".buildkite/*.yml", ".buildkite/*.yaml"]}]},
+    {"id": "circleci", "signals": [{"files": [".circleci/config.yml", ".circleci/config.yaml"]}]},
+    {"id": "codemagic", "signals": [{"files": ["codemagic.yaml", "codemagic.yml"]}]},
+    {"id": "drone", "signals": [{"files": [".drone.yml"]}]},
+    {"id": "expo-eas", "signals": [{"files": ["eas.json"]}]},
+    {"id": "github-actions", "signals": [{"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"]}]},
+    {"id": "gitlab-ci", "signals": [{"files": [".gitlab-ci.yml", ".gitlab-ci.yaml"]}, {"files": ["*.gitlab-ci.yml", "*.gitlab-ci.yaml"], "regex": "^(stages|include|[A-Za-z0-9_-]+):\\s*$", "confidence": "medium"}]},
+    {"id": "google-cloud-build", "signals": [{"files": ["cloudbuild.yaml", "cloudbuild.yml", "cloudbuild.json"]}]},
+    {"id": "jenkins", "signals": [{"files": ["Jenkinsfile", "Jenkinsfile.*"]}]},
+    {"id": "travis-ci", "signals": [{"files": [".travis.yml"]}]}
+  ]
+}

package/detectors/containers.json

@@ -0,0 +1,8 @@
+{
+  "category": "containers",
+  "entries": [
+    {"id": "docker-compose", "signals": [{"files": ["docker-compose.yml", "docker-compose.yaml", "docker-compose.*.yml", "docker-compose.*.yaml", "compose.yml", "compose.yaml", "compose.*.yml", "compose.*.yaml"]}]},
+    {"id": "dockerfile", "signals": [{"files": ["Dockerfile", "Dockerfile.*", "*.dockerfile", "Containerfile"]}]},
+    {"id": "devcontainer", "signals": [{"files": [".devcontainer.json", ".devcontainer/devcontainer.json"]}]}
+  ]
+}

package/detectors/data_stores.json

@@ -0,0 +1,38 @@
+{
+  "category": "data_stores",
+  "entries": [
+    {"id": "aws-rds", "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"aws_(db_instance|rds_cluster)\"", "confidence": "high"}]},
+    {"id": "azure-cosmos-db", "deps": {"npm": ["@azure/cosmos"], "pypi": ["azure-cosmos"], "nuget": ["Microsoft.Azure.Cosmos"]}, "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"azurerm_cosmosdb_", "confidence": "high"}]},
+    {"id": "azure-database-mysql", "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"azurerm_mysql_", "confidence": "high"}]},
+    {"id": "azure-database-postgres", "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"azurerm_postgresql_", "confidence": "high"}]},
+    {"id": "azure-sql", "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"azurerm_(mssql|sql)_(server|database)\"", "confidence": "high"}]},
+    {"id": "dynamodb", "deps": {"npm": ["@aws-sdk/client-dynamodb", "@aws-sdk/lib-dynamodb", "dynamoose"]}, "signals": [
+      {"files": ["*.tf"], "regex": "^\\s*resource\\s+\"aws_dynamodb_table\"", "confidence": "high"},
+      {"files": ["*.py"], "regex": "boto3\\.(resource|client)\\(\\s*['\"]dynamodb['\"]"},
+      {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "AWS::DynamoDB::Table", "confidence": "high"}]},
+    {"id": "elasticsearch", "deps": {"npm": ["@elastic/elasticsearch"], "pypi": ["elasticsearch"]}},
+    {"id": "firebase-realtime-database", "deps": {"pub": ["firebase_database"], "npm": ["@react-native-firebase/database"]}, "imports": {"js": ["firebase/database", "firebase-admin/database"]}, "signals": [{"files": ["database.rules.json"]}]},
+    {"id": "firestore", "deps": {"pub": ["cloud_firestore"], "pypi": ["google-cloud-firestore"], "npm": ["@react-native-firebase/firestore", "@google-cloud/firestore"]}, "imports": {"js": ["firebase/firestore", "firebase-admin/firestore"]}, "signals": [{"files": ["firestore.rules", "firestore.indexes.json"]}]},
+    {"id": "google-cloud-sql", "deps": {"npm": ["@google-cloud/cloud-sql-connector"], "pypi": ["cloud-sql-python-connector"]}, "signals": [{"files": ["*.tf"], "regex": "^\\s*resource\\s+\"google_sql_database_instance\"", "confidence": "high"}]},
+    {"id": "mongodb", "deps": {"npm": ["mongodb", "mongoose"], "pypi": ["pymongo", "motor", "mongoengine"], "go": ["go.mongodb.org/mongo-driver*"], "rubygems": ["mongo", "mongoid"], "maven": ["org.mongodb*"], "nuget": ["MongoDB.Driver"]}, "signals": [
+      {"files": ["docker-compose*.yml", "docker-compose*.yaml", "compose.yml", "compose.yaml"], "regex": "^\\s*image:\\s*['\"]?mongo(:|['\"]?\\s*$)"},
+      {"files": ["*.prisma"], "regex": "provider\\s*=\\s*\"mongodb\"", "confidence": "high"}]},
+    {"id": "mssql", "deps": {"npm": ["mssql", "tedious"], "nuget": ["Microsoft.Data.SqlClient", "System.Data.SqlClient"], "pypi": ["pymssql"]}, "signals": [{"files": ["*.prisma"], "regex": "provider\\s*=\\s*\"sqlserver\"", "confidence": "high"}]},
+    {"id": "mysql", "deps": {"npm": ["mysql", "mysql2"], "pypi": ["pymysql", "mysqlclient", "mysql-connector-python", "aiomysql"], "go": ["github.com/go-sql-driver/mysql"], "rubygems": ["mysql2"], "maven": ["mysql:mysql-connector-java", "com.mysql:mysql-connector-j"], "nuget": ["MySql.Data", "MySqlConnector"]}, "signals": [
+      {"files": ["docker-compose*.yml", "docker-compose*.yaml", "compose.yml", "compose.yaml"], "regex": "^\\s*image:\\s*['\"]?(mysql|mariadb)(:|['\"]?\\s*$)"},
+      {"files": ["*.prisma"], "regex": "provider\\s*=\\s*\"mysql\"", "confidence": "high"}]},
+    {"id": "neon", "deps": {"npm": ["@neondatabase/serverless"]}},
+    {"id": "oracle-database", "deps": {"npm": ["oracledb"], "pypi": ["oracledb", "cx-oracle"]}},
+    {"id": "planetscale", "deps": {"npm": ["@planetscale/database"]}},
+    {"id": "postgres", "deps": {"npm": ["pg", "postgres", "pg-promise", "@vercel/postgres"], "pypi": ["psycopg2", "psycopg2-binary", "psycopg", "asyncpg"], "go": ["github.com/lib/pq", "github.com/jackc/pgx*"], "rubygems": ["pg"], "maven": ["org.postgresql:postgresql"], "nuget": ["Npgsql"], "cargo": ["tokio-postgres", "postgres"], "hex": ["postgrex"]}, "imports": {"python": ["psycopg2", "psycopg", "asyncpg"]}, "signals": [
+      {"files": ["docker-compose*.yml", "docker-compose*.yaml", "compose.yml", "compose.yaml"], "regex": "^\\s*image:\\s*['\"]?(postgres|postgis/postgis)(:|['\"]?\\s*$)"},
+      {"files": ["*.prisma"], "regex": "provider\\s*=\\s*\"(postgresql|postgres|cockroachdb)\"", "confidence": "high"}]},
+    {"id": "redis", "deps": {"npm": ["redis", "ioredis", "@upstash/redis"], "pypi": ["redis"], "go": ["github.com/redis/go-redis*", "github.com/go-redis/redis*"], "rubygems": ["redis"], "maven": ["redis.clients:jedis", "io.lettuce:lettuce-core"], "nuget": ["StackExchange.Redis"]}, "signals": [
+      {"files": ["docker-compose*.yml", "docker-compose*.yaml", "compose.yml", "compose.yaml"], "regex": "^\\s*image:\\s*['\"]?(redis|valkey/valkey)(:|['\"]?\\s*$)"}]},
+    {"id": "sqlite", "deps": {"npm": ["sqlite3", "better-sqlite3", "sqlite", "expo-sqlite"], "pypi": ["aiosqlite"], "go": ["github.com/mattn/go-sqlite3", "modernc.org/sqlite"], "rubygems": ["sqlite3"], "maven": ["org.xerial:sqlite-jdbc"], "nuget": ["Microsoft.Data.Sqlite"], "cargo": ["rusqlite"], "pub": ["sqflite"]}, "imports": {"python": ["sqlite3"]}, "signals": [
+      {"files": ["*.prisma"], "regex": "provider\\s*=\\s*\"sqlite\"", "confidence": "high"},
+      {"files": ["*.sqlite", "*.sqlite3"], "confidence": "medium"}]},
+    {"id": "supabase", "deps": {"npm": ["@supabase/supabase-js", "@supabase/ssr"], "pypi": ["supabase"], "pub": ["supabase_flutter"]}, "signals": [{"files": ["**/supabase/config.toml"]}, {"files": ["**/supabase/migrations/*.sql"]}]},
+    {"id": "turso", "deps": {"npm": ["@libsql/client"], "pypi": ["libsql-client", "libsql"]}}
+  ]
+}

package/detectors/frameworks.json

@@ -0,0 +1,94 @@
+{
+  "category": "frameworks",
+  "entries": [
+    {"id": "actix-web", "deps": {"cargo": ["actix-web"]}, "imports": {"rust": ["actix_web"]}},
+    {"id": "adonisjs", "deps": {"npm": ["@adonisjs/core"]}},
+    {"id": "aiohttp", "deps": {"pypi": ["aiohttp"]}, "imports": {"python": ["aiohttp"]}},
+    {"id": "angular", "deps": {"npm": ["@angular/core"]}, "imports": {"js": ["@angular/core"]}, "signals": [{"files": ["angular.json"]}]},
+    {"id": "apollo-server", "deps": {"npm": ["@apollo/server", "apollo-server", "apollo-server-express"]}},
+    {"id": "aspnet-core", "deps": {"nuget": ["Microsoft.AspNetCore"]}, "imports": {"csharp": ["Microsoft.AspNetCore"]}, "signals": [{"files": ["*.csproj"], "regex": "Sdk=\"Microsoft\\.NET\\.Sdk\\.Web\"", "confidence": "high"}]},
+    {"id": "astro", "deps": {"npm": ["astro"]}, "signals": [{"files": ["astro.config.*"]}]},
+    {"id": "axum", "deps": {"cargo": ["axum"]}, "imports": {"rust": ["axum"]}},
+    {"id": "bottle", "deps": {"pypi": ["bottle"]}, "imports": {"python": ["bottle"]}},
+    {"id": "cakephp", "deps": {"composer": ["cakephp/cakephp"]}},
+    {"id": "chi", "deps": {"go": ["github.com/go-chi/chi"]}, "imports": {"go": ["github.com/go-chi/chi"]}},
+    {"id": "codeigniter", "deps": {"composer": ["codeigniter4/framework", "codeigniter/framework"]}},
+    {"id": "dart-frog", "deps": {"pub": ["dart_frog"]}},
+    {"id": "diesel", "deps": {"cargo": ["diesel"]}},
+    {"id": "django", "deps": {"pypi": ["django"]}, "imports": {"python": ["django"]}, "signals": [{"files": ["manage.py"], "regex": "DJANGO_SETTINGS_MODULE", "confidence": "high"}]},
+    {"id": "drizzle-orm", "deps": {"npm": ["drizzle-orm"]}},
+    {"id": "drupal", "deps": {"composer": ["drupal/core", "drupal/core-recommended"]}},
+    {"id": "echo", "deps": {"go": ["github.com/labstack/echo*"]}, "imports": {"go": ["github.com/labstack/echo*"]}},
+    {"id": "ecto", "deps": {"hex": ["ecto", "ecto_sql"]}},
+    {"id": "electron", "deps": {"npm": ["electron"]}},
+    {"id": "ember", "deps": {"npm": ["ember-source"]}},
+    {"id": "entity-framework", "deps": {"nuget": ["Microsoft.EntityFrameworkCore"]}},
+    {"id": "express", "deps": {"npm": ["express"]}, "imports": {"js": ["express"]}},
+    {"id": "falcon", "deps": {"pypi": ["falcon"]}, "imports": {"python": ["falcon"]}},
+    {"id": "fastapi", "deps": {"pypi": ["fastapi"]}, "imports": {"python": ["fastapi"]}},
+    {"id": "fastify", "deps": {"npm": ["fastify"]}, "imports": {"js": ["fastify"]}},
+    {"id": "fiber", "deps": {"go": ["github.com/gofiber/fiber*"]}, "imports": {"go": ["github.com/gofiber/fiber*"]}},
+    {"id": "flask", "deps": {"pypi": ["flask"]}, "imports": {"python": ["flask"]}},
+    {"id": "gatsby", "deps": {"npm": ["gatsby"]}, "signals": [{"files": ["gatsby-config.*"]}]},
+    {"id": "gin", "deps": {"go": ["github.com/gin-gonic/gin"]}, "imports": {"go": ["github.com/gin-gonic/gin"]}},
+    {"id": "gorilla-mux", "deps": {"go": ["github.com/gorilla/mux"]}, "imports": {"go": ["github.com/gorilla/mux"]}},
+    {"id": "gorm", "deps": {"go": ["gorm.io/gorm"]}, "imports": {"go": ["gorm.io/gorm"]}},
+    {"id": "gradio", "deps": {"pypi": ["gradio"]}, "imports": {"python": ["gradio"]}},
+    {"id": "grape", "deps": {"rubygems": ["grape"]}},
+    {"id": "graphql", "deps": {"npm": ["graphql"], "pypi": ["graphene", "strawberry-graphql", "ariadne"], "rubygems": ["graphql"]}},
+    {"id": "hanami", "deps": {"rubygems": ["hanami"]}},
+    {"id": "hapi", "deps": {"npm": ["@hapi/hapi", "hapi"]}},
+    {"id": "hibernate", "deps": {"maven": ["org.hibernate*"]}},
+    {"id": "hono", "deps": {"npm": ["hono"]}, "imports": {"js": ["hono"]}},
+    {"id": "javalin", "deps": {"maven": ["io.javalin"]}},
+    {"id": "knex", "deps": {"npm": ["knex"]}},
+    {"id": "koa", "deps": {"npm": ["koa"]}, "imports": {"js": ["koa"]}},
+    {"id": "ktor", "deps": {"maven": ["io.ktor"]}, "imports": {"jvm": ["io.ktor"]}},
+    {"id": "laravel", "deps": {"composer": ["laravel/framework"]}, "signals": [{"files": ["artisan"], "regex": "Illuminate", "confidence": "high"}]},
+    {"id": "litestar", "deps": {"pypi": ["litestar"]}, "imports": {"python": ["litestar"]}},
+    {"id": "loopback", "deps": {"npm": ["@loopback/core", "loopback"]}},
+    {"id": "micronaut", "deps": {"maven": ["io.micronaut*"]}},
+    {"id": "mikro-orm", "deps": {"npm": ["@mikro-orm/core"]}},
+    {"id": "nestjs", "deps": {"npm": ["@nestjs/core"]}, "imports": {"js": ["@nestjs/core"]}},
+    {"id": "nextjs", "deps": {"npm": ["next"]}, "imports": {"js": ["next"]}, "signals": [{"files": ["next.config.*"]}]},
+    {"id": "nuxt", "deps": {"npm": ["nuxt"]}, "signals": [{"files": ["nuxt.config.*"]}]},
+    {"id": "objection", "deps": {"npm": ["objection"]}},
+    {"id": "peewee", "deps": {"pypi": ["peewee"]}},
+    {"id": "phoenix", "deps": {"hex": ["phoenix"]}},
+    {"id": "preact", "deps": {"npm": ["preact"]}},
+    {"id": "prisma", "deps": {"npm": ["prisma", "@prisma/client"]}, "signals": [{"files": ["schema.prisma"]}]},
+    {"id": "pyramid", "deps": {"pypi": ["pyramid"]}},
+    {"id": "quarkus", "deps": {"maven": ["io.quarkus*"]}},
+    {"id": "quart", "deps": {"pypi": ["quart"]}, "imports": {"python": ["quart"]}},
+    {"id": "rails", "deps": {"rubygems": ["rails", "railties"]}, "signals": [{"files": ["**/config/application.rb"], "regex": "Rails::Application", "confidence": "high"}]},
+    {"id": "react", "deps": {"npm": ["react"]}, "imports": {"js": ["react"]}},
+    {"id": "remix", "deps": {"npm": ["@remix-run/*"]}},
+    {"id": "rocket", "deps": {"cargo": ["rocket"]}},
+    {"id": "roda", "deps": {"rubygems": ["roda"]}},
+    {"id": "sanic", "deps": {"pypi": ["sanic"]}, "imports": {"python": ["sanic"]}},
+    {"id": "sequelize", "deps": {"npm": ["sequelize"]}, "imports": {"js": ["sequelize"]}},
+    {"id": "shelf", "deps": {"pub": ["shelf"]}},
+    {"id": "sinatra", "deps": {"rubygems": ["sinatra"]}},
+    {"id": "slim", "deps": {"composer": ["slim/slim"]}},
+    {"id": "socket.io", "deps": {"npm": ["socket.io"]}},
+    {"id": "solid", "deps": {"npm": ["solid-js"]}},
+    {"id": "spring", "deps": {"maven": ["org.springframework"]}, "imports": {"jvm": ["org.springframework"]}},
+    {"id": "spring-boot", "deps": {"maven": ["org.springframework.boot"]}, "signals": [{"files": ["build.gradle", "build.gradle.kts"], "regex": "org\\.springframework\\.boot", "confidence": "high"}]},
+    {"id": "sqlalchemy", "deps": {"pypi": ["sqlalchemy", "flask-sqlalchemy"]}, "imports": {"python": ["sqlalchemy"]}},
+    {"id": "sqlx", "deps": {"cargo": ["sqlx"]}},
+    {"id": "starlette", "deps": {"pypi": ["starlette"]}},
+    {"id": "streamlit", "deps": {"pypi": ["streamlit"]}, "imports": {"python": ["streamlit"]}},
+    {"id": "svelte", "deps": {"npm": ["svelte"]}},
+    {"id": "sveltekit", "deps": {"npm": ["@sveltejs/kit"]}, "signals": [{"files": ["svelte.config.*"]}]},
+    {"id": "symfony", "deps": {"composer": ["symfony/framework-bundle", "symfony/http-kernel"]}},
+    {"id": "tornado", "deps": {"pypi": ["tornado"]}, "imports": {"python": ["tornado"]}},
+    {"id": "tortoise-orm", "deps": {"pypi": ["tortoise-orm"]}},
+    {"id": "trpc", "deps": {"npm": ["@trpc/server"]}},
+    {"id": "typeorm", "deps": {"npm": ["typeorm"]}},
+    {"id": "vapor", "deps": {"swiftpm": ["github.com/vapor/vapor"]}, "imports": {"swift": ["Vapor"]}},
+    {"id": "vue", "deps": {"npm": ["vue"]}, "imports": {"js": ["vue"]}},
+    {"id": "warp", "deps": {"cargo": ["warp"]}},
+    {"id": "wordpress", "signals": [{"files": ["wp-config.php", "wp-config-sample.php"]}]},
+    {"id": "yii", "deps": {"composer": ["yiisoft/yii2"]}}
+  ]
+}

package/detectors/hosting.json

@@ -0,0 +1,44 @@
+{
+  "category": "hosting",
+  "entries": [
+    {"id": "alibaba-cloud", "attrs": {"kind": "cloud"}, "deps": {"terraform": ["alicloud"]}},
+    {"id": "aws", "attrs": {"kind": "cloud"},
+     "deps": {"terraform": ["aws"], "npm": ["@aws-sdk/*", "aws-sdk", "aws-cdk-lib", "aws-amplify", "@aws-amplify/*"], "pypi": ["boto3", "botocore", "aws-cdk-lib"], "go": ["github.com/aws/aws-sdk-go*"], "maven": ["com.amazonaws*", "software.amazon.awssdk*"], "nuget": ["AWSSDK*"], "rubygems": ["aws-sdk*"], "composer": ["aws/aws-sdk-php"]},
+     "deps_confidence": {"terraform": "high", "*": "medium"},
+     "imports": {"js": ["@aws-sdk/*", "aws-sdk"], "python": ["boto3"]},
+     "signals": [
+       {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*aws\\b", "confidence": "high"},
+       {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "AWSTemplateFormatVersion", "confidence": "high"},
+       {"files": ["samconfig.toml", "cdk.json", "amplify.yml", "buildspec.yml", "appspec.yml", "Dockerrun.aws.json", ".ebextensions/*"]},
+       {"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"], "regex": "uses:\\s*aws-actions/"}]},
+    {"id": "azure", "attrs": {"kind": "cloud"},
+     "deps": {"terraform": ["azurerm", "azuread", "azapi"], "npm": ["@azure/*"], "pypi": ["azure-*"], "nuget": ["Azure*", "Microsoft.Azure*"], "maven": ["com.azure*", "com.microsoft.azure*"]},
+     "deps_confidence": {"terraform": "high", "*": "medium"},
+     "signals": [
+       {"files": ["*.bicep", "azure.yaml", "staticwebapp.config.json"]},
+       {"files": ["*.json"], "regex": "schema\\.management\\.azure\\.com/schemas/[^\"]*deploymentTemplate", "confidence": "high"},
+       {"files": ["host.json"], "regex": "\"extensionBundle\"|\"version\"\\s*:\\s*\"2\\.0\""},
+       {"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"], "regex": "uses:\\s*azure/", "ignore_case": true},
+       {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*azure\\b", "confidence": "high"}]},
+    {"id": "cloudflare", "attrs": {"kind": "platform"}, "deps": {"terraform": ["cloudflare"], "npm": ["wrangler", "@cloudflare/*"]}, "signals": [{"files": ["wrangler.toml", "wrangler.json", "wrangler.jsonc"]}]},
+    {"id": "digitalocean", "attrs": {"kind": "cloud"}, "deps": {"terraform": ["digitalocean"]}, "signals": [{"files": [".do/app.yaml", ".do/deploy.template.yaml"]}, {"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"], "regex": "uses:\\s*digitalocean/"}]},
+    {"id": "firebase", "attrs": {"kind": "platform"}, "deps": {"npm": ["firebase", "firebase-admin", "firebase-functions", "@react-native-firebase/*"], "pypi": ["firebase-admin"], "pub": ["firebase_core"]}, "deps_confidence": "medium", "signals": [{"files": ["firebase.json", ".firebaserc"]}]},
+    {"id": "fly", "attrs": {"kind": "platform"}, "signals": [{"files": ["fly.toml"]}]},
+    {"id": "google-cloud", "attrs": {"kind": "cloud"},
+     "deps": {"terraform": ["google", "google-beta"], "npm": ["@google-cloud/*"], "pypi": ["google-cloud-*"], "go": ["cloud.google.com/go*"], "maven": ["com.google.cloud*"], "nuget": ["Google.Cloud*"]},
+     "deps_confidence": {"terraform": "high", "*": "medium"},
+     "signals": [
+       {"files": ["cloudbuild.yaml", "cloudbuild.yml", "cloudbuild.json"]},
+       {"files": ["app.yaml"], "regex": "^runtime:\\s*\\S+"},
+       {"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"], "regex": "uses:\\s*google-github-actions/"},
+       {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*google\\b", "confidence": "high"}]},
+    {"id": "heroku", "attrs": {"kind": "platform"}, "deps": {"terraform": ["heroku"]}, "signals": [{"files": ["heroku.yml"]}, {"files": ["Procfile"], "confidence": "medium"}, {"files": ["app.json"], "regex": "\"(buildpacks|formation|stack)\"\\s*:"}]},
+    {"id": "ibm-cloud", "attrs": {"kind": "cloud"}, "deps": {"terraform": ["ibm"]}},
+    {"id": "netlify", "attrs": {"kind": "platform"}, "deps": {"terraform": ["netlify"], "npm": ["@netlify/*", "netlify-cli"]}, "signals": [{"files": ["netlify.toml"]}]},
+    {"id": "oracle-cloud", "attrs": {"kind": "cloud"}, "deps": {"terraform": ["oci"]}},
+    {"id": "railway", "attrs": {"kind": "platform"}, "signals": [{"files": ["railway.json", "railway.toml"]}]},
+    {"id": "render", "attrs": {"kind": "platform"}, "signals": [{"files": ["render.yaml"]}]},
+    {"id": "supabase", "attrs": {"kind": "platform"}, "deps": {"npm": ["@supabase/supabase-js", "@supabase/ssr"], "pypi": ["supabase"], "pub": ["supabase_flutter"]}, "deps_confidence": "medium", "signals": [{"files": ["**/supabase/config.toml"]}, {"files": ["**/supabase/functions/**"], "confidence": "high"}]},
+    {"id": "vercel", "attrs": {"kind": "platform"}, "deps": {"terraform": ["vercel"], "npm": ["@vercel/analytics", "@vercel/functions", "@vercel/node", "@vercel/postgres", "@vercel/kv", "@vercel/blob", "vercel"]}, "deps_confidence": {"terraform": "high", "*": "medium"}, "signals": [{"files": ["vercel.json"]}, {"files": [".github/workflows/*.yml", ".github/workflows/*.yaml"], "regex": "\\bvercel\\s+(deploy|--prod|build)|amondnet/vercel-action"}]}
+  ]
+}

package/detectors/iac.json

@@ -0,0 +1,43 @@
+{
+  "category": "iac",
+  "entries": [
+    {"id": "arm", "signals": [{"files": ["*.json"], "regex": "schema\\.management\\.azure\\.com/schemas/[^\"]*deploymentTemplate", "confidence": "high", "attrs": {"clouds": "azure"}}]},
+    {"id": "bicep", "signals": [{"files": ["*.bicep"], "attrs": {"clouds": "azure"}}]},
+    {"id": "cdk", "deps": {"npm": ["aws-cdk-lib", "@aws-cdk/*", "aws-cdk"], "pypi": ["aws-cdk-lib"]}, "signals": [{"files": ["cdk.json"], "attrs": {"clouds": "aws"}}]},
+    {"id": "cdktf", "deps": {"npm": ["cdktf"], "pypi": ["cdktf"]}, "signals": [{"files": ["cdktf.json"]}]},
+    {"id": "cloudformation", "signals": [
+      {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "AWSTemplateFormatVersion", "confidence": "high", "attrs": {"clouds": "aws"}},
+      {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "^\\s*\"?Type\"?\\s*:\\s*['\"]?AWS::[A-Za-z0-9]+::", "all": ["^\\s*\"?Resources\"?\\s*:"], "confidence": "high", "attrs": {"clouds": "aws"}}]},
+    {"id": "docker-compose", "signals": [{"files": ["docker-compose.yml", "docker-compose.yaml", "docker-compose.*.yml", "docker-compose.*.yaml", "compose.yml", "compose.yaml", "compose.*.yml", "compose.*.yaml"]}]},
+    {"id": "helm", "signals": [{"files": ["Chart.yaml"], "regex": "^apiVersion:\\s*v[12]", "all": ["^name:"], "confidence": "high"}]},
+    {"id": "kubernetes", "signals": [{"files": ["*.yaml", "*.yml"], "regex": "^kind:\\s*(Deployment|Service|Pod|StatefulSet|DaemonSet|Ingress|ConfigMap|Secret|Job|CronJob|Namespace|Role|ClusterRole|RoleBinding|ClusterRoleBinding|ServiceAccount|NetworkPolicy|PersistentVolumeClaim|HorizontalPodAutoscaler|ReplicaSet|PodDisruptionBudget)\\s*$", "all": ["^apiVersion:\\s*\\S+"], "confidence": "high"}]},
+    {"id": "kustomize", "signals": [{"files": ["kustomization.yaml", "kustomization.yml", "Kustomization"]}]},
+    {"id": "opentofu", "signals": [{"files": ["*.tofu"]}]},
+    {"id": "pulumi", "deps": {"npm": ["@pulumi/*"], "pypi": ["pulumi", "pulumi-*"], "go": ["github.com/pulumi/pulumi*"]}, "signals": [
+      {"files": ["Pulumi.yaml", "Pulumi.yml"]},
+      {"files": ["package.json"], "regex": "\"@pulumi/aws(x)?\"", "confidence": "high", "attrs": {"clouds": "aws"}},
+      {"files": ["package.json"], "regex": "\"@pulumi/azure(-native)?\"", "confidence": "high", "attrs": {"clouds": "azure"}},
+      {"files": ["package.json"], "regex": "\"@pulumi/gcp\"", "confidence": "high", "attrs": {"clouds": "google-cloud"}}]},
+    {"id": "sam", "signals": [
+      {"files": ["*.yaml", "*.yml", "*.json", "*.template"], "regex": "Transform\"?\\s*:\\s*\\[?\\s*['\"]?AWS::Serverless", "confidence": "high", "attrs": {"clouds": "aws"}},
+      {"files": ["samconfig.toml"], "attrs": {"clouds": "aws"}}]},
+    {"id": "serverless-framework", "signals": [
+      {"files": ["serverless.yml", "serverless.yaml", "serverless.ts", "serverless.js"]},
+      {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*aws\\b", "confidence": "high", "attrs": {"clouds": "aws"}},
+      {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*azure\\b", "confidence": "high", "attrs": {"clouds": "azure"}},
+      {"files": ["serverless.yml", "serverless.yaml"], "regex": "^provider:\\s*\\n(?:\\s+.*\\n)*?\\s+name:\\s*google\\b", "confidence": "high", "attrs": {"clouds": "google-cloud"}}]},
+    {"id": "terraform", "signals": [
+      {"files": ["*.tf", "*.tf.json", ".terraform.lock.hcl"]},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"aws(_|\")", "confidence": "high", "attrs": {"clouds": "aws"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"(azurerm|azuread|azapi)(_|\")", "confidence": "high", "attrs": {"clouds": "azure"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"google(-beta)?(_|\")", "confidence": "high", "attrs": {"clouds": "google-cloud"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"alicloud(_|\")", "confidence": "high", "attrs": {"clouds": "alibaba-cloud"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"oci(_|\")", "confidence": "high", "attrs": {"clouds": "oracle-cloud"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"ibm(_|\")", "confidence": "high", "attrs": {"clouds": "ibm-cloud"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"digitalocean(_|\")", "confidence": "high", "attrs": {"clouds": "digitalocean"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"cloudflare(_|\")", "confidence": "high", "attrs": {"clouds": "cloudflare"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"heroku(_|\")", "confidence": "high", "attrs": {"clouds": "heroku"}},
+      {"files": ["*.tf"], "regex": "^\\s*(provider|resource|data)\\s+\"vercel(_|\")", "confidence": "high", "attrs": {"clouds": "vercel"}}]},
+    {"id": "terragrunt", "signals": [{"files": ["terragrunt.hcl"]}]}
+  ]
+}

package/detectors/languages.json

@@ -0,0 +1,48 @@
+{
+  "category": "languages",
+  "entries": [
+    {"id": "astro", "extensions": ["astro"]},
+    {"id": "c", "extensions": ["c"]},
+    {"id": "clojure", "extensions": ["clj", "cljs", "cljc", "edn"]},
+    {"id": "cpp", "extensions": ["cc", "cpp", "cxx", "hpp", "hh", "hxx"]},
+    {"id": "csharp", "extensions": ["cs", "cshtml", "razor"]},
+    {"id": "css", "extensions": ["css", "scss", "sass", "less", "styl"]},
+    {"id": "dart", "extensions": ["dart"]},
+    {"id": "elixir", "extensions": ["ex", "exs", "heex"]},
+    {"id": "erlang", "extensions": ["erl", "hrl"]},
+    {"id": "fsharp", "extensions": ["fs", "fsx", "fsi"]},
+    {"id": "go", "extensions": ["go"]},
+    {"id": "graphql", "extensions": ["graphql", "gql"]},
+    {"id": "groovy", "extensions": ["groovy"]},
+    {"id": "haskell", "extensions": ["hs", "lhs"]},
+    {"id": "hcl", "extensions": ["tf", "tofu"], "signals": [{"files": ["*.hcl"]}]},
+    {"id": "html", "extensions": ["html", "htm", "hbs", "handlebars", "ejs", "pug", "njk", "jinja", "jinja2", "erb", "twig", "liquid", "mustache"]},
+    {"id": "java", "extensions": ["java", "jsp"]},
+    {"id": "javascript", "extensions": ["js", "jsx", "mjs", "cjs"]},
+    {"id": "julia", "extensions": ["jl"]},
+    {"id": "kotlin", "extensions": ["kt", "kts"]},
+    {"id": "lua", "extensions": ["lua"]},
+    {"id": "nim", "extensions": ["nim"]},
+    {"id": "objective-c", "extensions": ["mm"], "signals": [{"files": ["*.m"], "regex": "^\\s*(#import|@interface|@implementation)\\b", "confidence": "high"}]},
+    {"id": "ocaml", "extensions": ["ml", "mli"]},
+    {"id": "perl", "extensions": ["pl", "pm"]},
+    {"id": "php", "extensions": ["php", "phtml"]},
+    {"id": "powershell", "extensions": ["ps1", "psm1", "psd1"]},
+    {"id": "prisma", "extensions": ["prisma"]},
+    {"id": "protobuf", "extensions": ["proto"]},
+    {"id": "python", "extensions": ["py", "pyi", "pyx"]},
+    {"id": "r", "extensions": ["r", "rmd"]},
+    {"id": "ruby", "extensions": ["rb", "rake", "gemspec"], "signals": [{"files": ["Gemfile", "Rakefile"]}]},
+    {"id": "rust", "extensions": ["rs"]},
+    {"id": "scala", "extensions": ["scala", "sc", "sbt"]},
+    {"id": "shell", "extensions": ["sh", "bash", "zsh", "fish"]},
+    {"id": "solidity", "extensions": ["sol"]},
+    {"id": "sql", "extensions": ["sql", "psql", "plsql"]},
+    {"id": "svelte", "extensions": ["svelte"]},
+    {"id": "swift", "extensions": ["swift"]},
+    {"id": "typescript", "extensions": ["ts", "tsx", "mts", "cts"], "signals": [{"files": ["tsconfig.json", "tsconfig.*.json"]}]},
+    {"id": "visual-basic", "extensions": ["vb", "vbs"]},
+    {"id": "vue", "extensions": ["vue"]},
+    {"id": "zig", "extensions": ["zig"]}
+  ]
+}