switchroom 0.19.35 → 0.19.36

package/vendor/hindsight-memory/scripts/lib/secret_patterns.json

@@ -0,0 +1,431 @@
+{
+  "_generated_by": "scripts/gen-secret-patterns.ts",
+  "_source_of_truth": "telegram-plugin/secret-detect/patterns.ts",
+  "_do_not_edit": "Run `bun scripts/gen-secret-patterns.ts` after changing patterns.ts. `bun lint` fails when this file drifts from the TS table.",
+  "patterns": [
+    {
+      "rule_id": "anthropic_api_key",
+      "source": "\\b(sk-ant-[A-Za-z0-9_-]{8,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "anthropic_api_key"
+    },
+    {
+      "rule_id": "anthropic_oauth_code",
+      "source": "(?:^|\\s)([A-Za-z0-9_-]{20,}#[A-Za-z0-9_-]{20,})(?=\\s|$)",
+      "ignore_case": false,
+      "multiline": true,
+      "capture_index": 1,
+      "slug_hint": "anthropic_oauth_code"
+    },
+    {
+      "rule_id": "openai_api_key",
+      "source": "\\b(sk-[A-Za-z0-9_-]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "openai_api_key"
+    },
+    {
+      "rule_id": "github_pat_classic",
+      "source": "\\b(ghp_[A-Za-z0-9]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "github_pat"
+    },
+    {
+      "rule_id": "github_pat_fine_grained",
+      "source": "\\b(github_pat_[A-Za-z0-9_]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "github_pat"
+    },
+    {
+      "rule_id": "slack_token",
+      "source": "\\b(xox[baprs]-[A-Za-z0-9-]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "slack_token"
+    },
+    {
+      "rule_id": "slack_app_token",
+      "source": "\\b(xapp-[A-Za-z0-9-]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "slack_app_token"
+    },
+    {
+      "rule_id": "groq_api_key",
+      "source": "\\b(gsk_[A-Za-z0-9_-]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "groq_api_key"
+    },
+    {
+      "rule_id": "google_api_key",
+      "source": "\\b(AIza[0-9A-Za-z\\-_]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "google_api_key"
+    },
+    {
+      "rule_id": "perplexity_api_key",
+      "source": "\\b(pplx-[A-Za-z0-9_-]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "perplexity_api_key"
+    },
+    {
+      "rule_id": "npm_token",
+      "source": "\\b(npm_[A-Za-z0-9]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "npm_token"
+    },
+    {
+      "rule_id": "telegram_bot_token_prefixed",
+      "source": "\\bbot(\\d{6,}:[A-Za-z0-9_-]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "telegram_bot_token"
+    },
+    {
+      "rule_id": "telegram_bot_token",
+      "source": "\\b(\\d{6,}:[A-Za-z0-9_-]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "telegram_bot_token"
+    },
+    {
+      "rule_id": "laravel_sanctum_token",
+      "source": "\\b(\\d+\\|[A-Za-z0-9]{40,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "api_token"
+    },
+    {
+      "rule_id": "aws_access_key",
+      "source": "\\b(AKIA[0-9A-Z]{16})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "aws_access_key"
+    },
+    {
+      "rule_id": "jwt",
+      "source": "\\b(eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "jwt"
+    },
+    {
+      "rule_id": "slack_webhook",
+      "source": "(https://hooks\\.slack\\.com/services/[A-Za-z0-9_/]+)",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "slack_webhook"
+    },
+    {
+      "rule_id": "stripe_live_secret",
+      "source": "\\b(sk_live_[A-Za-z0-9]{24,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "stripe_key"
+    },
+    {
+      "rule_id": "stripe_restricted",
+      "source": "\\b(rk_live_[A-Za-z0-9]{24,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "stripe_key"
+    },
+    {
+      "rule_id": "sendgrid_api_key",
+      "source": "\\b(SG\\.[A-Za-z0-9_-]{22}\\.[A-Za-z0-9_-]{43})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "sendgrid_key"
+    },
+    {
+      "rule_id": "gitlab_pat",
+      "source": "\\b(glpat-[A-Za-z0-9_-]{20})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "gitlab_pat"
+    },
+    {
+      "rule_id": "huggingface_token",
+      "source": "\\b(hf_[A-Za-z0-9]{34,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "huggingface_token"
+    },
+    {
+      "rule_id": "twilio_api_key",
+      "source": "\\b(SK[0-9a-f]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "twilio_api_key"
+    },
+    {
+      "rule_id": "mailgun_key",
+      "source": "\\b(key-[0-9a-f]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "mailgun_key"
+    },
+    {
+      "rule_id": "digitalocean_pat",
+      "source": "\\b(dop_v1_[a-f0-9]{64})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "digitalocean_token"
+    },
+    {
+      "rule_id": "digitalocean_oauth",
+      "source": "\\b(doo_v1_[a-f0-9]{64})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "digitalocean_token"
+    },
+    {
+      "rule_id": "digitalocean_refresh",
+      "source": "\\b(dor_v1_[a-f0-9]{64})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "digitalocean_token"
+    },
+    {
+      "rule_id": "doppler_token",
+      "source": "\\b(dp\\.(?:pt|st|ct|sa|scim|audit)\\.[A-Za-z0-9]{40,44})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "doppler_token"
+    },
+    {
+      "rule_id": "linear_api_key",
+      "source": "\\b(lin_api_[A-Za-z0-9]{40})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "linear_api_key"
+    },
+    {
+      "rule_id": "shopify_access_token",
+      "source": "\\b(shpat_[a-fA-F0-9]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "shopify_token"
+    },
+    {
+      "rule_id": "shopify_shared_secret",
+      "source": "\\b(shpss_[a-fA-F0-9]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "shopify_token"
+    },
+    {
+      "rule_id": "shopify_private_app",
+      "source": "\\b(shppa_[a-fA-F0-9]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "shopify_token"
+    },
+    {
+      "rule_id": "square_access_token",
+      "source": "\\b(sq0atp-[A-Za-z0-9_-]{22})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "square_token"
+    },
+    {
+      "rule_id": "square_oauth_secret",
+      "source": "\\b(sq0csp-[A-Za-z0-9_-]{43})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "square_token"
+    },
+    {
+      "rule_id": "newrelic_key",
+      "source": "\\b(NRAK-[A-Z0-9]{27})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "newrelic_key"
+    },
+    {
+      "rule_id": "notion_token",
+      "source": "\\b(ntn_[A-Za-z0-9]{46})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "notion_token"
+    },
+    {
+      "rule_id": "planetscale_password",
+      "source": "\\b(pscale_pw_[A-Za-z0-9_.-]{43})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "planetscale_token"
+    },
+    {
+      "rule_id": "planetscale_token",
+      "source": "\\b(pscale_tkn_[A-Za-z0-9_.-]{43})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "planetscale_token"
+    },
+    {
+      "rule_id": "supabase_service_key",
+      "source": "\\b(sbp_[a-f0-9]{40})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "supabase_key"
+    },
+    {
+      "rule_id": "atlassian_token",
+      "source": "\\b(ATATT[A-Za-z0-9_\\-=]{20,})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "atlassian_token"
+    },
+    {
+      "rule_id": "dropbox_token",
+      "source": "\\b(sl\\.[A-Za-z0-9_-]{130,})",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "dropbox_token"
+    },
+    {
+      "rule_id": "databricks_token",
+      "source": "\\b(dapi[a-f0-9]{32})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "databricks_token"
+    },
+    {
+      "rule_id": "grafana_service_account",
+      "source": "\\b(glsa_[A-Za-z0-9]{32}_[a-fA-F0-9]{8})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "grafana_token"
+    },
+    {
+      "rule_id": "pypi_token",
+      "source": "\\b(pypi-AgEIcHlwaS[A-Za-z0-9_-]{50,})",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "pypi_token"
+    },
+    {
+      "rule_id": "aws_temp_access_key",
+      "source": "\\b(ASIA[0-9A-Z]{16})\\b",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "aws_access_key"
+    },
+    {
+      "rule_id": "gcp_oauth_token",
+      "source": "\\b(ya29\\.[A-Za-z0-9_-]{30,})",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "gcp_oauth_token"
+    },
+    {
+      "rule_id": "env_key_value",
+      "source": "\\b([A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD))\\b\\s*[=:]\\s*([\"']?)([^\\s\"'\\\\]+)\\2",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 3,
+      "slug_hint": "env"
+    },
+    {
+      "rule_id": "json_secret_field",
+      "source": "\"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken)\"\\s*:\\s*\"([^\"]+)\"",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "json_secret"
+    },
+    {
+      "rule_id": "cli_flag",
+      "source": "--(?:api[-_]?key|hook[-_]?token|token|secret|password|passwd)\\s+([\"']?)([^\\s\"']+)\\1",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 2,
+      "slug_hint": "cli_flag"
+    },
+    {
+      "rule_id": "bearer_auth_header",
+      "source": "Authorization\\s*[:=]\\s*Bearer\\s+([A-Za-z0-9._\\-+=]+)",
+      "ignore_case": true,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "bearer_token"
+    },
+    {
+      "rule_id": "bearer_loose",
+      "source": "\\bBearer\\s+([A-Za-z0-9._\\-+=]{18,})\\b",
+      "ignore_case": true,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "bearer_token"
+    },
+    {
+      "rule_id": "basic_auth_header",
+      "source": "Authorization\\s*[:=]\\s*Basic\\s+([A-Za-z0-9+/=]{8,})",
+      "ignore_case": true,
+      "multiline": false,
+      "capture_index": 1,
+      "slug_hint": "basic_auth"
+    },
+    {
+      "rule_id": "pem_private_key",
+      "source": "-----BEGIN [A-Z ]*PRIVATE KEY-----[\\s\\S]+?-----END [A-Z ]*PRIVATE KEY-----",
+      "ignore_case": false,
+      "multiline": false,
+      "capture_index": 0,
+      "slug_hint": "pem_private_key"
+    }
+  ]
+}