whatileaked 0.1.0

package/dist/cli.js

@@ -0,0 +1,2698 @@
+#!/usr/bin/env node
+
+// src/main.ts
+import { homedir } from "os";
+
+// src/commands.ts
+var Command = {
+  home: "home",
+  scan: "scan",
+  wipe: "wipe"
+};
+function parseCommand(argv) {
+  const first = argv[0];
+  if (first === void 0) return Command.home;
+  if (first === Command.scan || first === Command.wipe) return first;
+  return null;
+}
+
+// src/errors.ts
+var UnknownCommandError = class extends Error {
+  command;
+  constructor(command) {
+    super(`unknown command "${command}" \u2014 expected "scan" or "wipe"`);
+    this.name = "UnknownCommandError";
+    this.command = command;
+  }
+};
+
+// src/report/style.ts
+var ESC = "\x1B[";
+var RESET = `${ESC}0m`;
+var enabled = process.stdout.isTTY === true && process.env.NO_COLOR === void 0;
+var wrap = (code) => (text) => enabled ? `${ESC}${code}m${text}${RESET}` : text;
+var bold = wrap("1");
+var dim = wrap("2");
+var red = wrap("31");
+var yellow = wrap("33");
+var green = wrap("32");
+var cyan = wrap("36");
+
+// src/report/home.ts
+function home() {
+  return [
+    `  ${dim("Built by Selan \u2014")} ${cyan("selan.ai")} ${dim("\u2014 we redact these before they leave your machine.")}`,
+    "",
+    `  ${bold("whatileaked scan")}   ${dim("find credentials in your local transcripts")}`,
+    `  ${bold("whatileaked wipe")}   ${dim("replace them with a placeholder")} ${red("(rewrites files)")}`,
+    "",
+    `  ${green("No network.")} ${dim("No telemetry. Nothing is written unless you run wipe.")}`,
+    `  ${dim("Secrets are never printed \u2014 findings show a fingerprint, not the value.")}`
+  ];
+}
+
+// src/report/paths.ts
+function shorten(file) {
+  const home2 = process.env.HOME;
+  return home2 !== void 0 && file.startsWith(home2) ? `~${file.slice(home2.length)}` : file;
+}
+function plural(count2, noun) {
+  return `${count2.toLocaleString("en-US")} ${noun}${count2 === 1 ? "" : "s"}`;
+}
+
+// src/report/progress.ts
+var SPINNER = ["|", "/", "-", "\\"];
+var CLEAR_LINE = `${String.fromCharCode(27)}[2K`;
+var Progress = class {
+  #write;
+  #enabled;
+  #frame = 0;
+  constructor(write, enabled2) {
+    this.#write = write;
+    this.#enabled = enabled2;
+  }
+  advance(transcripts, project) {
+    if (!this.#enabled) return;
+    if (transcripts % 8 !== 0) return;
+    const spinner = SPINNER[this.#frame % SPINNER.length] ?? "|";
+    this.#frame++;
+    this.#write(`\r${CLEAR_LINE}  ${spinner} reading ${transcripts} transcripts \u2014 ${clip(project)}`);
+  }
+  done() {
+    if (this.#enabled) this.#write(`\r${CLEAR_LINE}`);
+  }
+};
+function clip(project) {
+  return project.length > 40 ? `${project.slice(0, 39)}\u2026` : project;
+}
+
+// src/report/aggregate.ts
+function aggregate(findings) {
+  const byRule = /* @__PURE__ */ new Map();
+  const totals = /* @__PURE__ */ new Map();
+  for (const finding of findings) {
+    totals.set(finding.rule, (totals.get(finding.rule) ?? 0) + 1);
+    const sites = byRule.get(finding.rule) ?? /* @__PURE__ */ new Map();
+    byRule.set(finding.rule, sites);
+    const key = `${finding.fingerprint}:${finding.project}`;
+    const site = sites.get(key);
+    if (site) {
+      site.occurrences++;
+      site.firstEntryIndex = Math.min(site.firstEntryIndex, finding.entryIndex);
+      continue;
+    }
+    sites.set(key, {
+      fingerprint: finding.fingerprint,
+      project: finding.project,
+      sessionId: finding.sessionId,
+      file: finding.file,
+      context: finding.context,
+      occurrences: 1,
+      firstEntryIndex: finding.entryIndex
+    });
+  }
+  return [...byRule.entries()].map(([rule, sites]) => ({
+    rule,
+    total: totals.get(rule) ?? 0,
+    distinct: new Set([...sites.values()].map((site) => site.fingerprint)).size,
+    sites: [...sites.values()].sort((a, b) => b.occurrences - a.occurrences)
+  })).sort((a, b) => b.total - a.total || a.rule.localeCompare(b.rule));
+}
+
+// src/report/disclosure.ts
+var DISCLOSURE = [
+  "Built by Selan (selan.ai) \u2014 we make a proxy that redacts these before they leave",
+  "your machine. This tool sends nothing anywhere; read src/scan/scanner.ts."
+].join("\n");
+
+// src/report/terminal-reporter.ts
+var PROJECT_COLUMN = 22;
+var FINGERPRINT_CHARS = 8;
+var TerminalReporter = class {
+  #write;
+  constructor(write) {
+    this.#write = write;
+  }
+  report(findings, stats) {
+    const totals = aggregate(findings);
+    const secrets = totals.reduce((sum, total) => sum + total.distinct, 0);
+    this.#write(
+      dim(`  scanned ${count(stats.transcripts)} transcripts \xB7 ${count(stats.entries)} messages`)
+    );
+    this.#write("");
+    if (totals.length === 0) {
+      this.#write(green("No credentials found."));
+      this.#write("");
+      this.#write(dim(DISCLOSURE));
+      return;
+    }
+    for (const total of totals) {
+      this.#write(`${red("*")} ${bold(total.rule)}  ${dim(plural(total.distinct, "secret"))}`);
+      for (const site of total.sites) {
+        const times = site.occurrences === 1 ? "sent once" : `sent ${count(site.occurrences)} times`;
+        this.#write(
+          `    ${yellow(site.fingerprint.slice(0, FINGERPRINT_CHARS))}  ${site.project.padEnd(PROJECT_COLUMN)} ${dim(times)}`
+        );
+        if (site.context !== "") this.#write(`              ${dim(`${site.context}***`)}`);
+        this.#write(`              ${dim(shorten(site.file))}`);
+      }
+      this.#write("");
+    }
+    this.#write(bold(red(`${plural(secrets, "credential")} sent to a model provider.`)));
+    if (stats.unscannable > 0) {
+      this.#write(
+        yellow(`${plural(stats.unscannable, "message")} could not be scanned and are not counted.`)
+      );
+    }
+    this.#write("");
+    this.#write(dim("The 8-character code is a fingerprint, never the secret: a truncated"));
+    this.#write(dim("SHA-256, so one credential shows the same code everywhere it leaked."));
+    this.#write(dim("Some findings will be test fixtures \u2014 open the file to tell."));
+    this.#write("");
+    this.#write(dim(DISCLOSURE));
+  }
+};
+function count(value) {
+  return value.toLocaleString("en-US");
+}
+
+// src/scan/keyword-index.ts
+var WINDOW_CHARS = 512;
+var KeywordIndex = class {
+  #alternation;
+  #byKeyword;
+  constructor(rules) {
+    const byKeyword = /* @__PURE__ */ new Map();
+    for (const rule of rules) {
+      for (const word of rule.keywords) {
+        const owners = byKeyword.get(word);
+        if (owners) owners.push(rule);
+        else byKeyword.set(word, [rule]);
+      }
+    }
+    this.#byKeyword = byKeyword;
+    this.#alternation = new RegExp(
+      `(?:${[...byKeyword.keys()].map(escapeLiteral).join("|")})`,
+      "gi"
+    );
+  }
+  windows(text) {
+    this.#alternation.lastIndex = 0;
+    const spans = /* @__PURE__ */ new Map();
+    for (const hit of text.matchAll(this.#alternation)) {
+      const at = hit.index;
+      const start = Math.max(0, at - WINDOW_CHARS);
+      const end = Math.min(text.length, at + hit[0].length + WINDOW_CHARS);
+      for (const rule of this.#byKeyword.get(hit[0].toLowerCase()) ?? []) {
+        const existing = spans.get(rule);
+        if (!existing) {
+          spans.set(rule, [{ start, end }]);
+          continue;
+        }
+        const last = existing[existing.length - 1];
+        if (last && start <= last.end) last.end = Math.max(last.end, end);
+        else existing.push({ start, end });
+      }
+    }
+    const windows = [];
+    for (const [rule, ranges] of spans) {
+      for (const range of ranges) windows.push({ rule, text: text.slice(range.start, range.end) });
+    }
+    return windows;
+  }
+};
+function escapeLiteral(value) {
+  return value.replace(/[.*+?^${}()|[\]-]/g, "\\$&");
+}
+
+// src/scan/entropy.ts
+function shannonEntropy(value) {
+  if (value.length === 0) return 0;
+  const counts = /* @__PURE__ */ new Map();
+  for (const char of value) counts.set(char, (counts.get(char) ?? 0) + 1);
+  let bits = 0;
+  for (const count2 of counts.values()) {
+    const p = count2 / value.length;
+    bits -= p * Math.log2(p);
+  }
+  return bits;
+}
+
+// src/scan/case-fold.ts
+function foldToJavaScript(pattern) {
+  const out = [];
+  const insensitive = [false];
+  const current = () => insensitive[insensitive.length - 1] ?? false;
+  for (let i = 0; i < pattern.length; ) {
+    const char = pattern[i];
+    if (char === "\\") {
+      const next = pattern[i + 1];
+      if (next === void 0) return null;
+      out.push(char, next);
+      i += 2;
+      continue;
+    }
+    if (char === "[") {
+      const end = classEnd(pattern, i);
+      if (end === null) return null;
+      const body = pattern.slice(i, end + 1);
+      out.push(current() ? foldClass(body) : body);
+      i = end + 1;
+      continue;
+    }
+    if (pattern.startsWith("(?i)", i)) {
+      insensitive[insensitive.length - 1] = true;
+      i += 4;
+      continue;
+    }
+    if (char === "(") {
+      const opened = openGroup(pattern, i, current());
+      if (opened === null) return null;
+      out.push(opened.text);
+      insensitive.push(opened.insensitive);
+      i += opened.consumed;
+      continue;
+    }
+    if (char === ")") {
+      if (insensitive.length === 1) return null;
+      insensitive.pop();
+      out.push(char);
+      i += 1;
+      continue;
+    }
+    out.push(current() ? foldLiteral(char ?? "") : char ?? "");
+    i += 1;
+  }
+  if (insensitive.length !== 1) return null;
+  try {
+    new RegExp(out.join(""), "g");
+  } catch {
+    return null;
+  }
+  return out.join("");
+}
+function openGroup(pattern, at, inherited) {
+  if (pattern.startsWith("(?i:", at)) {
+    return { text: "(?:", insensitive: true, consumed: 4 };
+  }
+  if (pattern.startsWith("(?-i:", at)) {
+    return { text: "(?:", insensitive: false, consumed: 5 };
+  }
+  if (pattern.startsWith("(?:", at)) {
+    return { text: "(?:", insensitive: inherited, consumed: 3 };
+  }
+  if (pattern.startsWith("(?P<", at)) {
+    const close = pattern.indexOf(">", at);
+    if (close === -1) return null;
+    const name = pattern.slice(at + 4, close);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) return null;
+    return { text: `(?<${name}>`, insensitive: inherited, consumed: close - at + 1 };
+  }
+  if (pattern.startsWith("(?<", at)) {
+    const close = pattern.indexOf(">", at);
+    if (close === -1) return null;
+    return { text: pattern.slice(at, close + 1), insensitive: inherited, consumed: close - at + 1 };
+  }
+  if (pattern.startsWith("(?", at)) return null;
+  return { text: "(", insensitive: inherited, consumed: 1 };
+}
+function classEnd(pattern, at) {
+  let i = at + 1;
+  if (pattern[i] === "^") i += 1;
+  if (pattern[i] === "]") i += 1;
+  for (; i < pattern.length; i++) {
+    if (pattern[i] === "\\") {
+      i += 1;
+      continue;
+    }
+    if (pattern[i] === "]") return i;
+  }
+  return null;
+}
+function foldClass(body) {
+  const inner = body.slice(1, -1);
+  const negated = inner.startsWith("^");
+  const items = negated ? inner.slice(1) : inner;
+  const additions = [];
+  for (let i = 0; i < items.length; i++) {
+    if (items[i] === "\\") {
+      i += 1;
+      continue;
+    }
+    const char = items[i];
+    const isRange = items[i + 1] === "-" && items[i + 2] !== void 0 && items[i + 2] !== "]";
+    if (isRange) {
+      const from = char ?? "";
+      const to = items[i + 2] ?? "";
+      if (isAlpha(from) && isAlpha(to)) additions.push(`${flip(from)}-${flip(to)}`);
+      i += 2;
+      continue;
+    }
+    if (isAlpha(char ?? "")) additions.push(flip(char ?? ""));
+  }
+  if (additions.length === 0) return body;
+  return `[${negated ? "^" : ""}${items}${additions.join("")}]`;
+}
+function foldLiteral(char) {
+  return isAlpha(char) ? `[${char}${flip(char)}]` : char;
+}
+function isAlpha(char) {
+  return /^[A-Za-z]$/.test(char);
+}
+function flip(char) {
+  return char === char.toLowerCase() ? char.toUpperCase() : char.toLowerCase();
+}
+
+// src/scan/errors.ts
+var UntranslatableRuleError = class extends Error {
+  pattern;
+  constructor(pattern) {
+    super(`no JavaScript translation preserves what this pattern matches: ${pattern}`);
+    this.name = "UntranslatableRuleError";
+    this.pattern = pattern;
+  }
+};
+
+// src/scan/matcher.ts
+function translateToJavaScript(pattern) {
+  const leading = pattern.startsWith("(?i)");
+  const body = leading ? pattern.slice(4) : pattern;
+  if (body.includes("(?i)") || body.includes("(?-i")) return null;
+  try {
+    return new RegExp(body, leading ? "gi" : "g");
+  } catch {
+    return null;
+  }
+}
+var JavaScriptMatcher = class {
+  #regex;
+  #group;
+  constructor(regex, group) {
+    this.#regex = regex;
+    this.#group = group;
+  }
+  candidatesIn(text) {
+    this.#regex.lastIndex = 0;
+    const candidates = [];
+    for (const match of text.matchAll(this.#regex)) {
+      const value = match[this.#group] ?? match[0];
+      if (value !== void 0) candidates.push(value);
+    }
+    return candidates;
+  }
+  matches(text) {
+    this.#regex.lastIndex = 0;
+    return this.#regex.test(text);
+  }
+};
+function matcherFor(pattern, group) {
+  const flagged = translateToJavaScript(pattern);
+  if (flagged !== null) return new JavaScriptMatcher(flagged, group);
+  const folded = foldToJavaScript(pattern);
+  if (folded !== null) return new JavaScriptMatcher(new RegExp(folded, "g"), group);
+  throw new UntranslatableRuleError(pattern);
+}
+
+// src/scan/rule.ts
+var CompiledRule = class {
+  id;
+  keywords;
+  #source;
+  #compiled = null;
+  constructor(source) {
+    this.id = source.id;
+    this.keywords = source.keywords;
+    this.#source = source;
+  }
+  /** Every secret this rule finds in `text`, after its entropy threshold and
+   *  its upstream allowlist have had their say. */
+  secretsIn(text) {
+    const { matcher, allowlist } = this.#compile();
+    const secrets = [];
+    for (const secret of matcher.candidatesIn(text)) {
+      if (this.#source.entropy > 0 && shannonEntropy(secret) < this.#source.entropy) continue;
+      if (allowlist.some((allowed) => allowed.matches(secret))) continue;
+      secrets.push(secret);
+    }
+    return secrets;
+  }
+  #compile() {
+    const existing = this.#compiled;
+    if (existing) return existing;
+    const compiled = {
+      matcher: matcherFor(this.#source.pattern, this.#source.group),
+      allowlist: this.#source.allowlist.map((entry) => matcherFor(entry, 0))
+    };
+    this.#compiled = compiled;
+    return compiled;
+  }
+};
+function compileRules(sources) {
+  return sources.map((source) => new CompiledRule(source));
+}
+
+// src/scan/fingerprint.ts
+import { createHash } from "crypto";
+function fingerprint(secret) {
+  return createHash("sha256").update(secret).digest("hex").slice(0, 12);
+}
+
+// src/scan/scanner.ts
+var BASE64_RUN = /[A-Za-z0-9+/_-]{40,}={0,2}/g;
+var CHUNK_CHARS = 16 * 1024;
+var OVERLAP_CHARS = 1024;
+var Scanner = class {
+  #index;
+  constructor(index) {
+    this.#index = index;
+  }
+  scan(text) {
+    const found = /* @__PURE__ */ new Map();
+    for (const chunk of chunks(text)) {
+      this.#collect(chunk, found);
+      BASE64_RUN.lastIndex = 0;
+      for (const run of chunk.matchAll(BASE64_RUN)) {
+        const decoded = decodeBase64(run[0]);
+        if (decoded !== null) this.#collect(decoded, found);
+      }
+    }
+    return [...found.values()];
+  }
+  /**
+   * The secret values themselves, mapped to the rule that found them.
+   *
+   * Every other path in this codebase is built so a secret cannot escape it.
+   * This one exists because redaction has to know what string to replace, and
+   * nothing else may call it: the result is held in memory long enough to
+   * rewrite a line and is never printed, logged, stored or returned to a
+   * reporter.
+   */
+  secretsOf(text) {
+    const secrets = /* @__PURE__ */ new Map();
+    for (const chunk of chunks(text)) {
+      for (const window of this.#index.windows(chunk)) {
+        for (const secret of window.rule.secretsIn(window.text)) {
+          secrets.set(secret, window.rule.id);
+        }
+      }
+      BASE64_RUN.lastIndex = 0;
+      for (const run of chunk.matchAll(BASE64_RUN)) {
+        const decoded = decodeBase64(run[0]);
+        if (decoded === null) continue;
+        for (const window of this.#index.windows(decoded)) {
+          const found = window.rule.secretsIn(window.text);
+          if (found.length > 0) secrets.set(run[0], window.rule.id);
+        }
+      }
+    }
+    return secrets;
+  }
+  #collect(text, found) {
+    for (const window of this.#index.windows(text)) {
+      const secrets = window.rule.secretsIn(window.text);
+      for (const secret of secrets) {
+        found.set(`${window.rule.id}:${secret}`, {
+          rule: window.rule.id,
+          fingerprint: fingerprint(secret),
+          context: contextBefore(window.text, secret, secrets)
+        });
+      }
+    }
+  }
+};
+function* chunks(text) {
+  if (text.length === 0) return;
+  for (let offset = 0; offset < text.length; offset += CHUNK_CHARS) {
+    yield text.slice(offset, Math.min(text.length, offset + CHUNK_CHARS + OVERLAP_CHARS));
+  }
+}
+var CONTEXT_CHARS = 52;
+function contextBefore(text, secret, secrets) {
+  const at = text.indexOf(secret);
+  if (at === -1) return "";
+  let lead = text.slice(Math.max(0, at - CONTEXT_CHARS), at);
+  for (const other of secrets) lead = lead.split(other).join("***");
+  return lead.replace(/\s+/g, " ").trimStart();
+}
+function decodeBase64(run) {
+  const decoded = Buffer.from(run, "base64").toString("utf8");
+  return decoded.includes("\uFFFD") ? null : decoded;
+}
+
+// src/scan/secret-rules.ts
+var SECRET_RULE_SOURCES = [
+  {
+    id: "1password-secret-key",
+    keywords: ["a3-"],
+    pattern: "\\bA3-[A-Z0-9]{6}-(?:(?:[A-Z0-9]{11})|(?:[A-Z0-9]{6}-[A-Z0-9]{5}))-[A-Z0-9]{5}-[A-Z0-9]{5}-[A-Z0-9]{5}\\b",
+    group: 0,
+    entropy: 3.8,
+    allowlist: []
+  },
+  {
+    id: "1password-service-account-token",
+    keywords: ["ops_"],
+    pattern: "ops_eyJ[a-zA-Z0-9+/]{250,}={0,3}",
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "adafruit-api-key",
+    keywords: ["adafruit"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:adafruit)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "adobe-client-id",
+    keywords: ["adobe"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:adobe)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "adobe-client-secret",
+    keywords: ["p8e-"],
+    pattern: `\\b(p8e-(?i)[a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "age-secret-key",
+    keywords: ["age-secret-key-1"],
+    pattern: "AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "airtable-api-key",
+    keywords: ["airtable"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:airtable)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{17})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "airtable-personnal-access-token",
+    keywords: ["airtable"],
+    pattern: "\\b(pat[[:alnum:]]{14}\\.[a-f0-9]{64})\\b",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "algolia-api-key",
+    keywords: ["algolia"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:algolia)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "alibaba-access-key-id",
+    keywords: ["ltai"],
+    pattern: `\\b(LTAI(?i)[a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "alibaba-secret-key",
+    keywords: ["alibaba"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:alibaba)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "anthropic-admin-api-key",
+    keywords: ["sk-ant-admin01"],
+    pattern: `\\b(sk-ant-admin01-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "anthropic-api-key",
+    keywords: ["sk-ant-api03"],
+    pattern: `\\b(sk-ant-api03-[a-zA-Z0-9_\\-]{93}AA)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "artifactory-api-key",
+    keywords: ["akcp"],
+    pattern: "\\bAKCp[A-Za-z0-9]{69}\\b",
+    group: 0,
+    entropy: 4.5,
+    allowlist: []
+  },
+  {
+    id: "artifactory-reference-token",
+    keywords: ["cmvmd"],
+    pattern: "\\bcmVmd[A-Za-z0-9]{59}\\b",
+    group: 0,
+    entropy: 4.5,
+    allowlist: []
+  },
+  {
+    id: "asana-client-id",
+    keywords: ["asana"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "asana-client-secret",
+    keywords: ["asana"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:asana)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "atlassian-api-token",
+    keywords: ["atlassian", "confluence", "jira", "atatt3"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:(?-i:ATLASSIAN|[Aa]tlassian)|(?-i:CONFLUENCE|[Cc]onfluence)|(?-i:JIRA|[Jj]ira))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20}[a-f0-9]{4})(?:[\\x60'"\\s;]|\\\\[nr]|$)|\\b(ATATT3[A-Za-z0-9_\\-=]{186})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "authress-service-client-access-key",
+    keywords: ["sc_", "ext_", "scauth_", "authress_"],
+    pattern: `\\b((?:sc|ext|scauth|authress)_(?i)[a-z0-9]{5,30}\\.[a-z0-9]{4,6}\\.(?-i:acc)[_-][a-z0-9-]{10,32}\\.[a-z0-9+/_=-]{30,120})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "aws-access-token",
+    keywords: ["a3t", "akia", "asia", "abia", "acca"],
+    pattern: "\\b((?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z2-7]{16})\\b",
+    group: 0,
+    entropy: 3,
+    allowlist: [".+EXAMPLE$"]
+  },
+  {
+    id: "aws-amazon-bedrock-api-key-long-lived",
+    keywords: ["absk"],
+    pattern: `\\b(ABSK[A-Za-z0-9+/]{109,269}={0,2})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "aws-amazon-bedrock-api-key-short-lived",
+    keywords: ["bedrock-api-key-"],
+    pattern: "bedrock-api-key-YmVkcm9jay5hbWF6b25hd3MuY29t",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "azure-ad-client-secret",
+    keywords: ["q~"],
+    pattern: `(?:^|[\\\\'"\\x60\\s>=:(,)])([a-zA-Z0-9_~.]{3}\\dQ~[a-zA-Z0-9_~.-]{31,34})(?:$|[\\\\'"\\x60\\s<),])`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "beamer-api-token",
+    keywords: ["beamer"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:beamer)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(b_[a-z0-9=_\\-]{44})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "bitbucket-client-id",
+    keywords: ["bitbucket"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "bitbucket-client-secret",
+    keywords: ["bitbucket"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:bitbucket)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "bittrex-access-key",
+    keywords: ["bittrex"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "bittrex-secret-key",
+    keywords: ["bittrex"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:bittrex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "cisco-meraki-api-key",
+    keywords: ["meraki"],
+    pattern: `[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:(?-i:[Mm]eraki|MERAKI))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "clickhouse-cloud-api-secret-key",
+    keywords: ["4b1d"],
+    pattern: "\\b(4b1d[A-Za-z0-9]{38})\\b",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "clojars-api-token",
+    keywords: ["clojars_"],
+    pattern: "(?i)CLOJARS_[a-z0-9]{60}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "cloudflare-api-key",
+    keywords: ["cloudflare"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "cloudflare-global-api-key",
+    keywords: ["cloudflare"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:cloudflare)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{37})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "cloudflare-origin-ca-key",
+    keywords: ["cloudflare", "v1.0-"],
+    pattern: `\\b(v1\\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "codecov-access-token",
+    keywords: ["codecov"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:codecov)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "cohere-api-token",
+    keywords: ["cohere", "co_api_key"],
+    pattern: `[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:cohere|CO_API_KEY)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-zA-Z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "coinbase-access-token",
+    keywords: ["coinbase"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:coinbase)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "confluent-access-token",
+    keywords: ["confluent"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "confluent-secret-key",
+    keywords: ["confluent"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:confluent)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "contentful-delivery-api-token",
+    keywords: ["contentful"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:contentful)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{43})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "curl-auth-header",
+    keywords: ["curl"],
+    pattern: `\\bcurl\\b(?:.*?|.*?(?:[\\r\\n]{1,2}.*?){1,5})[ \\t\\n\\r](?:-H|--header)(?:=|[ \\t]{0,5})(?:"(?i)(?:Authorization:[ \\t]{0,5}(?:Basic[ \\t]([a-z0-9+/]{8,}={0,3})|(?:Bearer|(?:Api-)?Token)[ \\t]([\\w=~@.+/-]{8,})|([\\w=~@.+/-]{8,}))|(?:(?:X-(?:[a-z]+-)?)?(?:Api-?)?(?:Key|Token)):[ \\t]{0,5}([\\w=~@.+/-]{8,}))"|'(?i)(?:Authorization:[ \\t]{0,5}(?:Basic[ \\t]([a-z0-9+/]{8,}={0,3})|(?:Bearer|(?:Api-)?Token)[ \\t]([\\w=~@.+/-]{8,})|([\\w=~@.+/-]{8,}))|(?:(?:X-(?:[a-z]+-)?)?(?:Api-?)?(?:Key|Token)):[ \\t]{0,5}([\\w=~@.+/-]{8,}))')(?:\\B|\\s|\\z)`,
+    group: 0,
+    entropy: 2.75,
+    allowlist: []
+  },
+  {
+    id: "curl-auth-user",
+    keywords: ["curl"],
+    pattern: `\\bcurl\\b(?:.*|.*(?:[\\r\\n]{1,2}.*){1,5})[ \\t\\n\\r](?:-u|--user)(?:=|[ \\t]{0,5})("(:[^"]{3,}|[^:"]{3,}:|[^:"]{3,}:[^"]{3,})"|'([^:']{3,}:[^']{3,})'|((?:"[^"]{3,}"|'[^']{3,}'|[\\w$@.-]+):(?:"[^"]{3,}"|'[^']{3,}'|[\\w\${}@.-]+)))(?:\\s|\\z)`,
+    group: 0,
+    entropy: 2,
+    allowlist: [
+      "[^:]+:(?:change(?:it|me)|pass(?:word)?|pwd|test|token|\\*+|x+)",
+      `['"]?<[^>]+>['"]?:['"]?<[^>]+>|<[^:]+:[^>]+>['"]?`,
+      "[^:]+:\\[[^]]+]",
+      `['"]?[^:]+['"]?:['"]?\\$(?:\\d|\\w+|\\{(?:\\d|\\w+)})['"]?`,
+      "\\$\\([^)]+\\):\\$\\([^)]+\\)",
+      `['"]?\\$?{{[^}]+}}['"]?:['"]?\\$?{{[^}]+}}['"]?`
+    ]
+  },
+  {
+    id: "databricks-api-token",
+    keywords: ["dapi"],
+    pattern: `\\b(dapi[a-f0-9]{32}(?:-\\d)?)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "datadog-access-token",
+    keywords: ["datadog"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:datadog)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "defined-networking-api-token",
+    keywords: ["dnkey"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:dnkey)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(dnkey-[a-z0-9=_\\-]{26}-[a-z0-9=_\\-]{52})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "digitalocean-access-token",
+    keywords: ["doo_v1_"],
+    pattern: `\\b(doo_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "digitalocean-pat",
+    keywords: ["dop_v1_"],
+    pattern: `\\b(dop_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "digitalocean-refresh-token",
+    keywords: ["dor_v1_"],
+    pattern: `(?i)\\b(dor_v1_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "discord-api-token",
+    keywords: ["discord"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "discord-client-id",
+    keywords: ["discord"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{18})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "discord-client-secret",
+    keywords: ["discord"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:discord)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "doppler-api-token",
+    keywords: ["dp.pt."],
+    pattern: "dp\\.pt\\.(?i)[a-z0-9]{43}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "droneci-access-token",
+    keywords: ["droneci"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:droneci)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "dropbox-api-token",
+    keywords: ["dropbox"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{15})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "dropbox-long-lived-api-token",
+    keywords: ["dropbox"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "dropbox-short-lived-api-token",
+    keywords: ["dropbox"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:dropbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(sl\\.[a-z0-9\\-=_]{135})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "duffel-api-token",
+    keywords: ["duffel_"],
+    pattern: "duffel_(?:test|live)_(?i)[a-z0-9_\\-=]{43}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "dynatrace-api-token",
+    keywords: ["dt0c01."],
+    pattern: "dt0c01\\.(?i)[a-z0-9]{24}\\.[a-z0-9]{64}",
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "easypost-api-token",
+    keywords: ["ezak"],
+    pattern: "\\bEZAK(?i)[a-z0-9]{54}\\b",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "easypost-test-api-token",
+    keywords: ["eztk"],
+    pattern: "\\bEZTK(?i)[a-z0-9]{54}\\b",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "etsy-access-token",
+    keywords: ["etsy"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:(?-i:ETSY|[Ee]tsy))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "facebook-access-token",
+    keywords: ["facebook"],
+    pattern: `(?i)\\b(\\d{15,16}(\\||%)[0-9a-z\\-_]{27,40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "facebook-page-access-token",
+    keywords: ["eaam", "eaac"],
+    pattern: `\\b(EAA[MC](?i)[a-z0-9]{100,})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "facebook-secret",
+    keywords: ["facebook"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:facebook)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "fastly-api-token",
+    keywords: ["fastly"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:fastly)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "finicity-api-token",
+    keywords: ["finicity"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "finicity-client-secret",
+    keywords: ["finicity"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:finicity)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "finnhub-access-token",
+    keywords: ["finnhub"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:finnhub)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "flickr-access-token",
+    keywords: ["flickr"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:flickr)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "flutterwave-encryption-key",
+    keywords: ["flwseck_test"],
+    pattern: "FLWSECK_TEST-(?i)[a-h0-9]{12}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "flutterwave-public-key",
+    keywords: ["flwpubk_test"],
+    pattern: "FLWPUBK_TEST-(?i)[a-h0-9]{32}-X",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "flutterwave-secret-key",
+    keywords: ["flwseck_test"],
+    pattern: "FLWSECK_TEST-(?i)[a-h0-9]{32}-X",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "flyio-access-token",
+    keywords: ["fo1_", "fm1", "fm2_"],
+    pattern: `\\b((?:fo1_[\\w-]{43}|fm1[ar]_[a-zA-Z0-9+\\/]{100,}={0,3}|fm2_[a-zA-Z0-9+\\/]{100,}={0,3}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "frameio-api-token",
+    keywords: ["fio-u-"],
+    pattern: "fio-u-(?i)[a-z0-9\\-_=]{64}",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "freemius-secret-key",
+    keywords: ["secret_key"],
+    pattern: `(?i)["']secret_key["']\\s*=>\\s*["'](sk_[\\S]{29})["']`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "freshbooks-access-token",
+    keywords: ["freshbooks"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:freshbooks)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "gcp-api-key",
+    keywords: ["aiza"],
+    pattern: `\\b(AIza[\\w-]{35})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: [
+      "AIzaSyabcdefghijklmnopqrstuvwxyz1234567",
+      "AIzaSyAnLA7NfeLquW1tJFpx_eQCxoX-oo6YyIs",
+      "AIzaSyCkEhVjf3pduRDt6d1yKOMitrUEke8agEM",
+      "AIzaSyDMAScliyLx7F0NPDEJi1QmyCgHIAODrlU",
+      "AIzaSyD3asb-2pEZVqMkmL6M9N6nHZRR_znhrh0",
+      "AIzayDNSXIbFmlXbIE6mCzDLQAqITYefhixbX4A",
+      "AIzaSyAdOS2zB6NCsk1pCdZ4-P6GBdi_UUPwX7c",
+      "AIzaSyASWm6HmTMdYWpgMnjRBjxcQ9CKctWmLd4",
+      "AIzaSyANUvH9H9BsUccjsu2pCmEkOPjjaXeDQgY",
+      "AIzaSyA5_iVawFQ8ABuTZNUdcwERLJv_a_p4wtM",
+      "AIzaSyA4UrcGxgwQFTfaI3no3t7Lt1sjmdnP5sQ",
+      "AIzaSyDSb51JiIcB6OJpwwMicseKRhhrOq1cS7g",
+      "AIzaSyBF2RrAIm4a0mO64EShQfqfd2AFnzAvvuU",
+      "AIzaSyBcE-OOIbhjyR83gm4r2MFCu4MJmprNXsw",
+      "AIzaSyB8qGxt4ec15vitgn44duC5ucxaOi4FmqE",
+      "AIzaSyA8vmApnrHNFE0bApF4hoZ11srVL_n0nvY"
+    ]
+  },
+  {
+    id: "github-app-token",
+    keywords: ["ghu_", "ghs_"],
+    pattern: "(?:ghu|ghs)_[0-9a-zA-Z]{36}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "github-fine-grained-pat",
+    keywords: ["github_pat_"],
+    pattern: "github_pat_\\w{82}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "github-oauth",
+    keywords: ["gho_"],
+    pattern: "gho_[0-9a-zA-Z]{36}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "github-pat",
+    keywords: ["ghp_"],
+    pattern: "ghp_[0-9a-zA-Z]{36}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "github-refresh-token",
+    keywords: ["ghr_"],
+    pattern: "ghr_[0-9a-zA-Z]{36}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-cicd-job-token",
+    keywords: ["glcbt-"],
+    pattern: "glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-deploy-token",
+    keywords: ["gldt-"],
+    pattern: "gldt-[0-9a-zA-Z_\\-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-feature-flag-client-token",
+    keywords: ["glffct-"],
+    pattern: "glffct-[0-9a-zA-Z_\\-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-feed-token",
+    keywords: ["glft-"],
+    pattern: "glft-[0-9a-zA-Z_\\-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-incoming-mail-token",
+    keywords: ["glimt-"],
+    pattern: "glimt-[0-9a-zA-Z_\\-]{25}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-kubernetes-agent-token",
+    keywords: ["glagent-"],
+    pattern: "glagent-[0-9a-zA-Z_\\-]{50}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-oauth-app-secret",
+    keywords: ["gloas-"],
+    pattern: "gloas-[0-9a-zA-Z_\\-]{64}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-pat",
+    keywords: ["glpat-"],
+    pattern: "glpat-[\\w-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-pat-routable",
+    keywords: ["glpat-"],
+    pattern: "\\bglpat-[0-9a-zA-Z_-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b",
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "gitlab-ptt",
+    keywords: ["glptt-"],
+    pattern: "glptt-[0-9a-f]{40}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-rrt",
+    keywords: ["gr1348941"],
+    pattern: "GR1348941[\\w-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-runner-authentication-token",
+    keywords: ["glrt-"],
+    pattern: "glrt-[0-9a-zA-Z_\\-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-runner-authentication-token-routable",
+    keywords: ["glrt-"],
+    pattern: "\\bglrt-t\\d_[0-9a-zA-Z_\\-]{27,300}\\.[0-9a-z]{2}[0-9a-z]{7}\\b",
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "gitlab-scim-token",
+    keywords: ["glsoat-"],
+    pattern: "glsoat-[0-9a-zA-Z_\\-]{20}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitlab-session-cookie",
+    keywords: ["_gitlab_session="],
+    pattern: "_gitlab_session=[0-9a-z]{32}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "gitter-access-token",
+    keywords: ["gitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:gitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "gocardless-api-token",
+    keywords: ["live_", "gocardless"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:gocardless)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(live_(?i)[a-z0-9\\-_=]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "grafana-api-key",
+    keywords: ["eyjrijoi"],
+    pattern: `(?i)\\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "grafana-cloud-api-token",
+    keywords: ["glc_"],
+    pattern: `(?i)\\b(glc_[A-Za-z0-9+/]{32,400}={0,3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "grafana-service-account-token",
+    keywords: ["glsa_"],
+    pattern: `(?i)\\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "harness-api-key",
+    keywords: ["pat.", "sat."],
+    pattern: "(?:pat|sat)\\.[a-zA-Z0-9_-]{22}\\.[a-zA-Z0-9]{24}\\.[a-zA-Z0-9]{20}",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "hashicorp-tf-api-token",
+    keywords: ["atlasv1"],
+    pattern: "(?i)[a-z0-9]{14}\\.(?-i:atlasv1)\\.[a-z0-9\\-_=]{60,70}",
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "hashicorp-tf-password",
+    keywords: ["administrator_login_password", "password"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:administrator_login_password|password)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}("[a-z0-9=_\\-]{8,20}")(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "heroku-api-key",
+    keywords: ["heroku"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:heroku)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "heroku-api-key-v2",
+    keywords: ["hrku-aa"],
+    pattern: `\\b((HRKU-AA[0-9a-zA-Z_-]{58}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "hubspot-api-key",
+    keywords: ["hubspot"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:hubspot)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "huggingface-access-token",
+    keywords: ["hf_"],
+    pattern: `\\b(hf_(?i:[a-z]{34}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "huggingface-organization-api-token",
+    keywords: ["api_org_"],
+    pattern: `\\b(api_org_(?i:[a-z]{34}))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "infracost-api-token",
+    keywords: ["ico-"],
+    pattern: `\\b(ico-[a-zA-Z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "intercom-api-key",
+    keywords: ["intercom"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:intercom)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{60})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "intra42-client-secret",
+    keywords: ["intra", "s-s4t2ud-", "s-s4t2af-"],
+    pattern: `\\b(s-s4t2(?:ud|af)-(?i)[abcdef0123456789]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "jfrog-api-key",
+    keywords: ["jfrog", "artifactory", "bintray", "xray"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{73})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "jfrog-identity-token",
+    keywords: ["jfrog", "artifactory", "bintray", "xray"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:jfrog|artifactory|bintray|xray)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "jwt",
+    keywords: ["ey"],
+    pattern: `\\b(ey[a-zA-Z0-9]{17,}\\.ey[a-zA-Z0-9\\/\\\\_-]{17,}\\.(?:[a-zA-Z0-9\\/\\\\_-]{10,}={0,2})?)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "jwt-base64",
+    keywords: ["zxlk"],
+    pattern: "\\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\\/\\\\_+\\-\\r\\n]{40,}={0,2}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "kraken-access-token",
+    keywords: ["kraken"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:kraken)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9\\/=_\\+\\-]{80,90})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "kucoin-access-token",
+    keywords: ["kucoin"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "kucoin-secret-key",
+    keywords: ["kucoin"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:kucoin)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "launchdarkly-access-token",
+    keywords: ["launchdarkly"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:launchdarkly)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "linear-api-key",
+    keywords: ["lin_api_"],
+    pattern: "lin_api_(?i)[a-z0-9]{40}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "linear-client-secret",
+    keywords: ["linear"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:linear)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "linkedin-client-id",
+    keywords: ["linkedin", "linked_in", "linked-in"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{14})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "linkedin-client-secret",
+    keywords: ["linkedin", "linked_in", "linked-in"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:linked[_-]?in)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "lob-api-key",
+    keywords: ["test_", "live_"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((live|test)_[a-f0-9]{35})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "lob-pub-api-key",
+    keywords: ["test_pub", "live_pub", "_pub"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:lob)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((test|live)_pub_[a-f0-9]{31})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "looker-client-id",
+    keywords: ["looker"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "looker-client-secret",
+    keywords: ["looker"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:looker)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mailchimp-api-key",
+    keywords: ["mailchimp"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:MailchimpSDK.initialize|mailchimp)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{32}-us\\d\\d)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mailgun-private-api-token",
+    keywords: ["mailgun"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(key-[a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mailgun-pub-key",
+    keywords: ["mailgun"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(pubkey-[a-f0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mailgun-signing-key",
+    keywords: ["mailgun"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:mailgun)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mapbox-api-token",
+    keywords: ["mapbox"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:mapbox)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "mattermost-access-token",
+    keywords: ["mattermost"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:mattermost)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{26})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "maxmind-license-key",
+    keywords: ["_mmk"],
+    pattern: `\\b([A-Za-z0-9]{6}_[A-Za-z0-9]{29}_mmk)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "messagebird-api-token",
+    keywords: ["messagebird", "message-bird", "message_bird"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "messagebird-client-id",
+    keywords: ["messagebird", "message-bird", "message_bird"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:message[_-]?bird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "microsoft-teams-webhook",
+    keywords: ["webhook.office.com", "webhookb2", "incomingwebhook"],
+    pattern: "https://[a-z0-9]+\\.webhook\\.office\\.com/webhookb2/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}/IncomingWebhook/[a-z0-9]{32}/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "netlify-access-token",
+    keywords: ["netlify"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:netlify)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{40,46})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "new-relic-browser-api-token",
+    keywords: ["nrjs-"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRJS-[a-f0-9]{19})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "new-relic-insert-key",
+    keywords: ["nrii-"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRII-[a-z0-9-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "new-relic-user-api-id",
+    keywords: ["new-relic", "newrelic", "new_relic"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "new-relic-user-api-key",
+    keywords: ["nrak"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:new-relic|newrelic|new_relic)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(NRAK-[a-z0-9]{27})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "notion-api-token",
+    keywords: ["ntn_"],
+    pattern: `\\b(ntn_[0-9]{11}[A-Za-z0-9]{32}[A-Za-z0-9]{3})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "npm-access-token",
+    keywords: ["npm_"],
+    pattern: `(?i)\\b(npm_[a-z0-9]{36})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "nuget-config-password",
+    keywords: ["<add key="],
+    pattern: '(?i)<add key=\\"(?:(?:ClearText)?Password)\\"\\s*value=\\"(.{8,})\\"\\s*/>',
+    group: 0,
+    entropy: 1,
+    allowlist: ["33f!!lloppa", "hal\\+9ooo_da!sY", "^\\%\\S.*\\%$"]
+  },
+  {
+    id: "nytimes-access-token",
+    keywords: ["nytimes", "new-york-times", "newyorktimes"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:nytimes|new-york-times,|newyorktimes)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9=_\\-]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "octopus-deploy-api-key",
+    keywords: ["api-"],
+    pattern: `\\b(API-[A-Z0-9]{26})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "okta-access-token",
+    keywords: ["okta"],
+    pattern: `[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:(?-i:[Oo]kta|OKTA))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(00[\\w=\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "openai-api-key",
+    keywords: ["t3blbkfj"],
+    pattern: `\\b(sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "openshift-user-token",
+    keywords: ["sha256~"],
+    pattern: "\\b(sha256~[\\w-]{43})(?:[^\\w-]|\\z)",
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "perplexity-api-key",
+    keywords: ["pplx-"],
+    pattern: `\\b(pplx-[a-zA-Z0-9]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$|\\b)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "plaid-api-token",
+    keywords: ["plaid"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "plaid-client-id",
+    keywords: ["plaid"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{24})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "plaid-secret-key",
+    keywords: ["plaid"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:plaid)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "planetscale-api-token",
+    keywords: ["pscale_tkn_"],
+    pattern: `\\b(pscale_tkn_(?i)[\\w=\\.-]{32,64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "planetscale-oauth-token",
+    keywords: ["pscale_oauth_"],
+    pattern: `\\b(pscale_oauth_[\\w=\\.-]{32,64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "planetscale-password",
+    keywords: ["pscale_pw_"],
+    pattern: `(?i)\\b(pscale_pw_(?i)[\\w=\\.-]{32,64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "postman-api-token",
+    keywords: ["pmak-"],
+    pattern: `\\b(PMAK-(?i)[a-f0-9]{24}\\-[a-f0-9]{34})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "prefect-api-token",
+    keywords: ["pnu_"],
+    pattern: `\\b(pnu_[a-zA-Z0-9]{36})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "private-key",
+    keywords: ["-----begin"],
+    pattern: "(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\\s\\S-]{64,}?KEY(?: BLOCK)?-----",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "privateai-api-token",
+    keywords: ["privateai", "private_ai", "private-ai"],
+    pattern: `[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:private[_-]?ai)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{32})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "pulumi-api-token",
+    keywords: ["pul-"],
+    pattern: `\\b(pul-[a-f0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "pypi-upload-token",
+    keywords: ["pypi-ageichlwas5vcmc"],
+    pattern: "pypi-AgEIcHlwaS5vcmc[\\w-]{50,1000}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "rapidapi-access-token",
+    keywords: ["rapidapi"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:rapidapi)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9_-]{50})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "readme-api-token",
+    keywords: ["rdme_"],
+    pattern: `\\b(rdme_[a-z0-9]{70})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "rubygems-api-token",
+    keywords: ["rubygems_"],
+    pattern: `\\b(rubygems_[a-f0-9]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "scalingo-api-token",
+    keywords: ["tk-us-"],
+    pattern: `\\b(tk-us-[\\w-]{48})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "sendbird-access-id",
+    keywords: ["sendbird"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "sendbird-access-token",
+    keywords: ["sendbird"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:sendbird)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "sendgrid-api-token",
+    keywords: ["sg."],
+    pattern: `\\b(SG\\.(?i)[a-z0-9=_\\-\\.]{66})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "sendinblue-api-token",
+    keywords: ["xkeysib-"],
+    pattern: `\\b(xkeysib-[a-f0-9]{64}\\-(?i)[a-z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "sentry-access-token",
+    keywords: ["sentry"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:sentry)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "sentry-org-token",
+    keywords: ["sntrys_eyjpyxqio"],
+    pattern: "\\bsntrys_eyJpYXQiO[a-zA-Z0-9+/]{10,200}(?:LCJyZWdpb25fdXJs|InJlZ2lvbl91cmwi|cmVnaW9uX3VybCI6)[a-zA-Z0-9+/]{10,200}={0,2}_[a-zA-Z0-9+/]{43}(?:[^a-zA-Z0-9+/]|\\z)",
+    group: 0,
+    entropy: 4.5,
+    allowlist: []
+  },
+  {
+    id: "sentry-user-token",
+    keywords: ["sntryu_"],
+    pattern: `\\b(sntryu_[a-f0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3.5,
+    allowlist: []
+  },
+  {
+    id: "settlemint-application-access-token",
+    keywords: ["sm_aat"],
+    pattern: `\\b(sm_aat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "settlemint-personal-access-token",
+    keywords: ["sm_pat"],
+    pattern: `\\b(sm_pat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "settlemint-service-access-token",
+    keywords: ["sm_sat"],
+    pattern: `\\b(sm_sat_[a-zA-Z0-9]{16})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "shippo-api-token",
+    keywords: ["shippo_"],
+    pattern: `\\b(shippo_(?:live|test)_[a-fA-F0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "shopify-access-token",
+    keywords: ["shpat_"],
+    pattern: "shpat_[a-fA-F0-9]{32}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "shopify-custom-access-token",
+    keywords: ["shpca_"],
+    pattern: "shpca_[a-fA-F0-9]{32}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "shopify-private-app-access-token",
+    keywords: ["shppa_"],
+    pattern: "shppa_[a-fA-F0-9]{32}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "shopify-shared-secret",
+    keywords: ["shpss_"],
+    pattern: "shpss_[a-fA-F0-9]{32}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "sidekiq-secret",
+    keywords: ["bundle_enterprise__contribsys__com", "bundle_gems__contribsys__com"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "sidekiq-sensitive-url",
+    keywords: ["gems.contribsys.com", "enterprise.contribsys.com"],
+    pattern: "(?i)\\bhttps?://([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\\/|\\#|\\?|:]|$)",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "slack-app-token",
+    keywords: ["xapp"],
+    pattern: "(?i)xapp-\\d-[A-Z0-9]+-\\d+-[a-z0-9]+",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-bot-token",
+    keywords: ["xoxb"],
+    pattern: "xoxb-[0-9]{10,13}-[0-9]{10,13}[a-zA-Z0-9-]*",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "slack-config-access-token",
+    keywords: ["xoxe.xoxb-", "xoxe.xoxp-"],
+    pattern: "(?i)xoxe.xox[bp]-\\d-[A-Z0-9]{163,166}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-config-refresh-token",
+    keywords: ["xoxe-"],
+    pattern: "(?i)xoxe-\\d-[A-Z0-9]{146}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-legacy-bot-token",
+    keywords: ["xoxb"],
+    pattern: "xoxb-[0-9]{8,14}-[a-zA-Z0-9]{18,26}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-legacy-token",
+    keywords: ["xoxo", "xoxs"],
+    pattern: "xox[os]-\\d+-\\d+-\\d+-[a-fA-F\\d]+",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-legacy-workspace-token",
+    keywords: ["xoxa", "xoxr"],
+    pattern: "xox[ar]-(?:\\d-)?[0-9a-zA-Z]{8,48}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-user-token",
+    keywords: ["xoxp-", "xoxe-"],
+    pattern: "xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34}",
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "slack-webhook-url",
+    keywords: ["hooks.slack.com"],
+    pattern: "(?:https?://)?hooks.slack.com/(?:services|workflows|triggers)/[A-Za-z0-9+/]{43,56}",
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "snyk-api-token",
+    keywords: ["snyk"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:snyk[_.-]?(?:(?:api|oauth)[_.-]?)?(?:key|token))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "sonar-api-token",
+    keywords: ["sonar"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:sonar[_.-]?(login|token))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}((?:squ_|sqp_|sqa_)?[a-z0-9=_\\-]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 2,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "sourcegraph-access-token",
+    keywords: ["sgp_", "sourcegraph"],
+    pattern: `(?i)\\b(\\b(sgp_(?:[a-fA-F0-9]{16}|local)_[a-fA-F0-9]{40}|sgp_[a-fA-F0-9]{40}|[a-fA-F0-9]{40})\\b)(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "square-access-token",
+    keywords: ["sq0atp-", "eaaa"],
+    pattern: `\\b((?:EAAA|sq0atp-)[\\w-]{22,60})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "squarespace-access-token",
+    keywords: ["squarespace"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:squarespace)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "stripe-access-token",
+    keywords: ["sk_test", "sk_live", "sk_prod", "rk_test", "rk_live", "rk_prod"],
+    pattern: `\\b((?:sk|rk)_(?:test|live|prod)_[a-zA-Z0-9]{10,99})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 2,
+    allowlist: []
+  },
+  {
+    id: "sumologic-access-id",
+    keywords: ["sumo"],
+    pattern: `[\\w.-]{0,50}?(?i:[\\w.-]{0,50}?(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3})(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(su[a-zA-Z0-9]{12})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "sumologic-access-token",
+    keywords: ["sumo"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:(?-i:[Ss]umo|SUMO))(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{64})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "telegram-bot-api-token",
+    keywords: ["telegr"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:telegr)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{5,16}:(?-i:A)[a-z0-9_\\-]{34})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "travisci-access-token",
+    keywords: ["travis"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:travis)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{22})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twilio-api-key",
+    keywords: ["sk"],
+    pattern: "SK[0-9a-fA-F]{32}",
+    group: 0,
+    entropy: 3,
+    allowlist: []
+  },
+  {
+    id: "twitch-api-token",
+    keywords: ["twitch"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitch)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{30})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twitter-access-secret",
+    keywords: ["twitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{45})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twitter-access-token",
+    keywords: ["twitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twitter-api-key",
+    keywords: ["twitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{25})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twitter-api-secret",
+    keywords: ["twitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{50})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "twitter-bearer-token",
+    keywords: ["twitter"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:twitter)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "typeform-api-token",
+    keywords: ["tfp_"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:typeform)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(tfp_[a-z0-9\\-_\\.=]{59})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "vault-batch-token",
+    keywords: ["hvb."],
+    pattern: `\\b(hvb\\.[\\w-]{138,300})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 4,
+    allowlist: []
+  },
+  {
+    id: "vault-service-token",
+    keywords: ["hvs.", "s."],
+    pattern: `\\b((?:hvs\\.[\\w-]{90,120}|s\\.(?i:[a-z0-9]{24})))(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 3.5,
+    allowlist: ["s\\.[A-Za-z]{24}"]
+  },
+  {
+    id: "yandex-access-token",
+    keywords: ["yandex"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(t1\\.[A-Z0-9a-z_-]+[=]{0,2}\\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "yandex-api-key",
+    keywords: ["yandex"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(AQVN[A-Za-z0-9_\\-]{35,38})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "yandex-aws-access-token",
+    keywords: ["yandex"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:yandex)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}(YC[a-zA-Z0-9_\\-]{38})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  },
+  {
+    id: "zendesk-secret-key",
+    keywords: ["zendesk"],
+    pattern: `(?i)[\\w.-]{0,50}?(?:zendesk)(?:[ \\t\\w.-]{0,20})[\\s'"]{0,3}(?:=|>|:{1,3}=|\\|\\||:|=>|\\?=|,)[\\x60'"\\s=]{0,5}([a-z0-9]{40})(?:[\\x60'"\\s;]|\\\\[nr]|$)`,
+    group: 0,
+    entropy: 0,
+    allowlist: []
+  }
+];
+
+// src/transcript/reader.ts
+import { createReadStream } from "fs";
+import { createInterface } from "readline";
+var TranscriptReader = class {
+  stats = { entries: 0, skipped: 0 };
+  async *read(path) {
+    const stream = createReadStream(path, "utf8");
+    stream.on("error", () => {
+    });
+    const lines = createInterface({ input: stream, crlfDelay: Number.POSITIVE_INFINITY });
+    let index = -1;
+    try {
+      for await (const line of lines) {
+        index++;
+        if (line.trim().length === 0) continue;
+        let payload;
+        try {
+          payload = JSON.parse(line);
+        } catch {
+          this.stats.skipped++;
+          continue;
+        }
+        this.stats.entries++;
+        yield { index, payload, line };
+      }
+    } catch {
+      return;
+    }
+  }
+};
+
+// src/scan-run.ts
+var ScanRun = class {
+  #sources;
+  #scanner;
+  #reporter;
+  #progress;
+  constructor(sources, scanner, reporter, progress) {
+    this.#sources = sources;
+    this.#scanner = scanner;
+    this.#reporter = reporter;
+    this.#progress = progress;
+  }
+  /** Returns the finding count so the CLI can pick an exit code without
+   *  re-deriving it from the reporter's output. */
+  async run() {
+    const findings = [];
+    const stats = { transcripts: 0, entries: 0, skipped: 0, unscannable: 0 };
+    for (const source of this.#sources) {
+      for await (const file of source.discover()) {
+        stats.transcripts++;
+        this.#progress.advance(stats.transcripts, file.project);
+        const reader = new TranscriptReader();
+        for await (const entry of reader.read(file.path)) {
+          let matches = [];
+          try {
+            matches = this.#scanner.scan(entry.line);
+          } catch {
+            stats.unscannable++;
+            continue;
+          }
+          for (const match of matches) {
+            findings.push({
+              rule: match.rule,
+              fingerprint: match.fingerprint,
+              context: match.context,
+              source: file.source,
+              project: file.project,
+              sessionId: file.sessionId,
+              file: file.path,
+              entryIndex: entry.index
+            });
+          }
+        }
+        stats.entries += reader.stats.entries;
+        stats.skipped += reader.stats.skipped;
+      }
+    }
+    this.#progress.done();
+    this.#reporter.report(findings, stats);
+    return findings.length;
+  }
+};
+
+// src/sources/claude-code-source.ts
+import { basename, join as join2 } from "path";
+
+// src/sources/listing.ts
+import { readdir } from "fs/promises";
+import { join } from "path";
+async function listDirectories(root) {
+  try {
+    const entries = await readdir(root, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}
+async function listJsonl(dir) {
+  try {
+    const entries = await readdir(dir, { withFileTypes: true });
+    return entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+}
+async function walkDirectories(root) {
+  const found = [root];
+  for (const name of await listDirectories(root)) {
+    found.push(...await walkDirectories(join(root, name)));
+  }
+  return found;
+}
+
+// src/transcript/entry.ts
+var SourceName = {
+  "claude-code": "claude-code",
+  codex: "codex"
+};
+
+// src/transcript/shape.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stringField(source, key) {
+  if (!isRecord(source)) return null;
+  const value = source[key];
+  return typeof value === "string" ? value : null;
+}
+function objectField(source, key) {
+  return isRecord(source) ? source[key] : null;
+}
+
+// src/sources/claude-code-source.ts
+var ClaudeCodeSource = class {
+  name = SourceName["claude-code"];
+  #home;
+  constructor(home2) {
+    this.#home = home2;
+  }
+  async *discover() {
+    const root = join2(this.#home, ".claude", "projects");
+    for (const slug of await listDirectories(root)) {
+      const dir = join2(root, slug);
+      for (const file of await listJsonl(dir)) {
+        const path = join2(dir, file);
+        const meta = await firstMeta(path);
+        yield {
+          source: this.name,
+          path,
+          sessionId: meta === null ? basename(file, ".jsonl") : meta.sessionId,
+          project: meta === null ? slug : basename(meta.cwd)
+        };
+      }
+    }
+  }
+};
+async function firstMeta(path) {
+  const reader = new TranscriptReader();
+  for await (const entry of reader.read(path)) {
+    const sessionId = stringField(entry.payload, "sessionId");
+    const cwd = stringField(entry.payload, "cwd");
+    if (sessionId !== null && cwd !== null) return { sessionId, cwd };
+  }
+  return null;
+}
+
+// src/sources/codex-source.ts
+import { basename as basename2, join as join3 } from "path";
+var CodexSource = class {
+  name = SourceName.codex;
+  #home;
+  constructor(home2) {
+    this.#home = home2;
+  }
+  async *discover() {
+    const root = join3(this.#home, ".codex", "sessions");
+    for (const dir of await walkDirectories(root)) {
+      for (const file of await listJsonl(dir)) {
+        const path = join3(dir, file);
+        const meta = await firstMeta2(path);
+        yield {
+          source: this.name,
+          path,
+          sessionId: meta === null ? basename2(file, ".jsonl") : meta.id,
+          project: meta === null ? basename2(dir) : basename2(meta.cwd)
+        };
+      }
+    }
+  }
+};
+async function firstMeta2(path) {
+  const reader = new TranscriptReader();
+  for await (const entry of reader.read(path)) {
+    if (stringField(entry.payload, "type") !== "session_meta") continue;
+    const payload = objectField(entry.payload, "payload");
+    const id = stringField(payload, "id");
+    const cwd = stringField(payload, "cwd");
+    if (id !== null && cwd !== null) return { id, cwd };
+  }
+  return null;
+}
+
+// src/wipe/confirm.ts
+import { createInterface as createInterface2 } from "readline/promises";
+var CONFIRMATION = "wipe";
+var TerminalPrompt = class {
+  async ask(question) {
+    if (process.stdin.isTTY !== true) return "";
+    const readline = createInterface2({ input: process.stdin, output: process.stdout });
+    try {
+      return (await readline.question(question)).trim();
+    } finally {
+      readline.close();
+    }
+  }
+};
+
+// src/wipe/wipe-run.ts
+import { readFile, rename, writeFile } from "fs/promises";
+
+// src/wipe/redact.ts
+function placeholder(rule) {
+  return `[REDACTED BY whatileaked: ${rule}]`;
+}
+function redactLine(line, secrets) {
+  let redacted = line;
+  for (const [secret, rule] of secrets) {
+    redacted = redacted.split(secret).join(placeholder(rule));
+  }
+  return redacted;
+}
+
+// src/wipe/wipe-run.ts
+var WipeRun = class {
+  #sources;
+  #scanner;
+  #prompt;
+  #write;
+  constructor(sources, scanner, prompt, write) {
+    this.#sources = sources;
+    this.#scanner = scanner;
+    this.#prompt = prompt;
+    this.#write = write;
+  }
+  async run() {
+    const plans = await this.#plan();
+    if (plans.length === 0) {
+      return { planned: [], filesRewritten: 0, secretsRedacted: 0, confirmed: false };
+    }
+    this.#preview(plans);
+    const answer = await this.#prompt.ask(
+      `  Type ${bold(red(CONFIRMATION))} to rewrite these files, or anything else to stop: `
+    );
+    if (answer !== CONFIRMATION) {
+      return { planned: plans, filesRewritten: 0, secretsRedacted: 0, confirmed: false };
+    }
+    let filesRewritten = 0;
+    let secretsRedacted = 0;
+    for (const plan of plans) {
+      secretsRedacted += await this.#rewrite(plan.file);
+      filesRewritten++;
+    }
+    return { planned: plans, filesRewritten, secretsRedacted, confirmed: true };
+  }
+  async #plan() {
+    const plans = [];
+    for (const source of this.#sources) {
+      for await (const file of source.discover()) {
+        const reader = new TranscriptReader();
+        let lines = 0;
+        let secrets = 0;
+        for await (const entry of reader.read(file.path)) {
+          const found = this.#scanner.secretsOf(entry.line);
+          if (found.size === 0) continue;
+          lines++;
+          secrets += found.size;
+        }
+        if (lines > 0) plans.push({ file: file.path, project: file.project, lines, secrets });
+      }
+    }
+    return plans;
+  }
+  /** Rewrites through a temporary file and a rename, so an interrupted run
+   *  leaves the original intact rather than half a transcript. */
+  async #rewrite(file) {
+    const original = await readFile(file, "utf8");
+    const lines = original.split("\n");
+    let redacted = 0;
+    const rewritten = lines.map((line) => {
+      if (line.trim().length === 0) return line;
+      const secrets = this.#scanner.secretsOf(line);
+      if (secrets.size === 0) return line;
+      redacted += secrets.size;
+      return redactLine(line, secrets);
+    });
+    const temporary = `${file}.whatileaked-tmp`;
+    await writeFile(temporary, rewritten.join("\n"), "utf8");
+    await rename(temporary, file);
+    return redacted;
+  }
+  #preview(plans) {
+    const secrets = plans.reduce((sum, plan) => sum + plan.secrets, 0);
+    const project = Math.max(...plans.map((plan) => plan.project.length));
+    this.#write(dim(`  ${plural(secrets, "secret")} across ${plural(plans.length, "file")}`));
+    this.#write("");
+    for (const plan of plans) {
+      this.#write(
+        `  ${yellow("*")} ${bold(plan.project.padEnd(project))}  ${dim(`${plural(plan.secrets, "secret")} in ${plural(plan.lines, "message")}`)}`
+      );
+      this.#write(`      ${dim(shorten(plan.file))}`);
+    }
+    this.#write("");
+    this.#write(bold(red(`  Every secret above will be replaced with a placeholder.`)));
+    this.#write(red("  This rewrites the files and cannot be undone."));
+    this.#write("");
+    this.#write(dim("  It does not un-send anything \u2014 all of these already reached a model"));
+    this.#write(dim("  provider. Rotate them whether or not you wipe."));
+    this.#write("");
+  }
+};
+
+// src/main.ts
+async function main(argv) {
+  const command = parseCommand(argv);
+  if (command === null) throw new UnknownCommandError(argv[0] ?? "");
+  const write = (line) => {
+    process.stdout.write(`${line}
+`);
+  };
+  if (command === Command.home) {
+    for (const line of home()) write(line);
+    return 0;
+  }
+  const sources = [new ClaudeCodeSource(homedir()), new CodexSource(homedir())];
+  const scanner = new Scanner(new KeywordIndex(compileRules(SECRET_RULE_SOURCES)));
+  return command === Command.wipe ? await wipe(sources, scanner, write) : await scan(sources, scanner, write);
+}
+function colorful() {
+  return process.stdout.isTTY === true && process.env.NO_COLOR === void 0;
+}
+async function scan(sources, scanner, write) {
+  const progress = new Progress((text) => process.stderr.write(text), colorful());
+  return await new ScanRun(sources, scanner, new TerminalReporter(write), progress).run();
+}
+async function wipe(sources, scanner, write) {
+  write(dim("  replacing credentials in your local transcripts with a placeholder"));
+  write("");
+  const outcome = await new WipeRun(sources, scanner, new TerminalPrompt(), write).run();
+  if (outcome.planned.length === 0) {
+    write(green("  No credentials found. Nothing to wipe."));
+    return 0;
+  }
+  if (!outcome.confirmed) {
+    write("");
+    write(yellow("  Not confirmed. Nothing was changed."));
+    return 1;
+  }
+  write("");
+  write(
+    green(
+      `  Replaced ${plural(outcome.secretsRedacted, "secret")} across ${plural(outcome.filesRewritten, "file")}.`
+    )
+  );
+  write(bold(red("  Rotate every one of them \u2014 wiping your disk does not un-send them.")));
+  return 0;
+}
+
+// src/cli.ts
+try {
+  const findings = await main(process.argv.slice(2));
+  process.exit(findings > 0 ? 1 : 0);
+} catch (error) {
+  process.stderr.write(`whatileaked: ${error instanceof Error ? error.message : String(error)}
+`);
+  process.exit(2);
+}