gitleaks.toml 55 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728
  1. # This file has been auto-generated. Do not edit manually.
  2. # If you would like to contribute new rules, please use
  3. # cmd/generate/config/main.go and follow the contributing guidelines
  4. # at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
  5. # This is the default gitleaks configuration file.
  6. # Rules and allowlists are defined within this file.
  7. # Rules instruct gitleaks on what should be considered a secret.
  8. # Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
  9. title = "gitleaks config"
  10. [allowlist]
  11. description = "global allow lists"
  12. paths = [
  13. '''gitleaks.toml''',
  14. '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''',
  15. '''(go.mod|go.sum)$''',
  16. '''node_modules''',
  17. '''vendor''',
  18. ]
  19. [[rules]]
  20. description = "Adafruit API Key"
  21. id = "adafruit-api-key"
  22. regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  23. secretGroup = 1
  24. keywords = [
  25. "adafruit",
  26. ]
  27. [[rules]]
  28. description = "Adobe Client ID (OAuth Web)"
  29. id = "adobe-client-id"
  30. regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  31. secretGroup = 1
  32. keywords = [
  33. "adobe",
  34. ]
  35. [[rules]]
  36. description = "Adobe Client Secret"
  37. id = "adobe-client-secret"
  38. regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  39. keywords = [
  40. "p8e-",
  41. ]
  42. [[rules]]
  43. description = "Age secret key"
  44. id = "age secret key"
  45. regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
  46. keywords = [
  47. "age-secret-key-1",
  48. ]
  49. [[rules]]
  50. description = "Airtable API Key"
  51. id = "airtable-api-key"
  52. regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  53. secretGroup = 1
  54. keywords = [
  55. "airtable",
  56. ]
  57. [[rules]]
  58. description = "Algolia API Key"
  59. id = "algolia-api-key"
  60. regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  61. keywords = [
  62. "algolia",
  63. ]
  64. [[rules]]
  65. description = "Alibaba AccessKey ID"
  66. id = "alibaba-access-key-id"
  67. regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  68. keywords = [
  69. "ltai",
  70. ]
  71. [[rules]]
  72. description = "Alibaba Secret Key"
  73. id = "alibaba-secret-key"
  74. regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  75. secretGroup = 1
  76. keywords = [
  77. "alibaba",
  78. ]
  79. [[rules]]
  80. description = "Asana Client ID"
  81. id = "asana-client-id"
  82. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  83. secretGroup = 1
  84. keywords = [
  85. "asana",
  86. ]
  87. [[rules]]
  88. description = "Asana Client Secret"
  89. id = "asana-client-secret"
  90. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  91. secretGroup = 1
  92. keywords = [
  93. "asana",
  94. ]
  95. [[rules]]
  96. description = "Atlassian API token"
  97. id = "atlassian-api-token"
  98. regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  99. secretGroup = 1
  100. keywords = [
  101. "atlassian","confluence","jira",
  102. ]
  103. [[rules]]
  104. description = "AWS"
  105. id = "aws-access-token"
  106. regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}'''
  107. keywords = [
  108. "akia","agpa","aida","aroa","aipa","anpa","anva","asia",
  109. ]
  110. [[rules]]
  111. description = "Beamer API token"
  112. id = "beamer-api-token"
  113. regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  114. secretGroup = 1
  115. keywords = [
  116. "beamer",
  117. ]
  118. [[rules]]
  119. description = "Bitbucket Client ID"
  120. id = "bitbucket-client-id"
  121. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  122. secretGroup = 1
  123. keywords = [
  124. "bitbucket",
  125. ]
  126. [[rules]]
  127. description = "Bitbucket Client Secret"
  128. id = "bitbucket-client-secret"
  129. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  130. secretGroup = 1
  131. keywords = [
  132. "bitbucket",
  133. ]
  134. [[rules]]
  135. description = "Bittrex Access Key"
  136. id = "bittrex-access-key"
  137. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  138. secretGroup = 1
  139. keywords = [
  140. "bittrex",
  141. ]
  142. [[rules]]
  143. description = "Bittrex Secret Key"
  144. id = "bittrex-secret-key"
  145. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  146. secretGroup = 1
  147. keywords = [
  148. "bittrex",
  149. ]
  150. [[rules]]
  151. description = "Clojars API token"
  152. id = "clojars-api-token"
  153. regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
  154. keywords = [
  155. "clojars",
  156. ]
  157. [[rules]]
  158. description = "Codecov Access Token"
  159. id = "codecov-access-token"
  160. regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  161. secretGroup = 1
  162. keywords = [
  163. "codecov",
  164. ]
  165. [[rules]]
  166. description = "Coinbase Access Token"
  167. id = "coinbase-access-token"
  168. regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  169. secretGroup = 1
  170. keywords = [
  171. "coinbase",
  172. ]
  173. [[rules]]
  174. description = "Confluent Access Token"
  175. id = "confluent-access-token"
  176. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  177. secretGroup = 1
  178. keywords = [
  179. "confluent",
  180. ]
  181. [[rules]]
  182. description = "Confluent Secret Key"
  183. id = "confluent-secret-key"
  184. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  185. secretGroup = 1
  186. keywords = [
  187. "confluent",
  188. ]
  189. [[rules]]
  190. description = "Contentful delivery API token"
  191. id = "contentful-delivery-api-token"
  192. regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  193. secretGroup = 1
  194. keywords = [
  195. "contentful",
  196. ]
  197. [[rules]]
  198. description = "Databricks API token"
  199. id = "databricks-api-token"
  200. regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  201. keywords = [
  202. "dapi",
  203. ]
  204. [[rules]]
  205. description = "Datadog Access Token"
  206. id = "datadog-access-token"
  207. regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  208. secretGroup = 1
  209. keywords = [
  210. "datadog",
  211. ]
  212. [[rules]]
  213. description = "Discord API key"
  214. id = "discord-api-token"
  215. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  216. secretGroup = 1
  217. keywords = [
  218. "discord",
  219. ]
  220. [[rules]]
  221. description = "Discord client ID"
  222. id = "discord-client-id"
  223. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  224. secretGroup = 1
  225. keywords = [
  226. "discord",
  227. ]
  228. [[rules]]
  229. description = "Discord client secret"
  230. id = "discord-client-secret"
  231. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  232. secretGroup = 1
  233. keywords = [
  234. "discord",
  235. ]
  236. [[rules]]
  237. description = "Doppler API token"
  238. id = "doppler-api-token"
  239. regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
  240. keywords = [
  241. "doppler",
  242. ]
  243. [[rules]]
  244. description = "Droneci Access Token"
  245. id = "droneci-access-token"
  246. regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  247. secretGroup = 1
  248. keywords = [
  249. "droneci",
  250. ]
  251. [[rules]]
  252. description = "Dropbox API secret"
  253. id = "dropbox-api-token"
  254. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  255. secretGroup = 1
  256. keywords = [
  257. "dropbox",
  258. ]
  259. [[rules]]
  260. description = "Dropbox long lived API token"
  261. id = "dropbox-long-lived-api-token"
  262. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  263. keywords = [
  264. "dropbox",
  265. ]
  266. [[rules]]
  267. description = "Dropbox short lived API token"
  268. id = "dropbox-short-lived-api-token"
  269. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  270. keywords = [
  271. "dropbox",
  272. ]
  273. [[rules]]
  274. description = "Duffel API token"
  275. id = "duffel-api-token"
  276. regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
  277. keywords = [
  278. "duffel",
  279. ]
  280. [[rules]]
  281. description = "Dynatrace API token"
  282. id = "dynatrace-api-token"
  283. regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
  284. keywords = [
  285. "dynatrace",
  286. ]
  287. [[rules]]
  288. description = "EasyPost API token"
  289. id = "easypost-api-token"
  290. regex = '''EZAK(?i)[a-z0-9]{54}'''
  291. keywords = [
  292. "ezak",
  293. ]
  294. [[rules]]
  295. description = "EasyPost test API token"
  296. id = "easypost-test-api-token"
  297. regex = '''EZTK(?i)[a-z0-9]{54}'''
  298. keywords = [
  299. "eztk",
  300. ]
  301. [[rules]]
  302. description = "Etsy Access Token"
  303. id = "etsy-access-token"
  304. regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  305. secretGroup = 1
  306. keywords = [
  307. "etsy",
  308. ]
  309. [[rules]]
  310. description = "Facebook"
  311. id = "facebook"
  312. regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  313. secretGroup = 1
  314. keywords = [
  315. "facebook",
  316. ]
  317. [[rules]]
  318. description = "Fastly API key"
  319. id = "fastly-api-token"
  320. regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  321. secretGroup = 1
  322. keywords = [
  323. "fastly",
  324. ]
  325. [[rules]]
  326. description = "Finicity API token"
  327. id = "finicity-api-token"
  328. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  329. secretGroup = 1
  330. keywords = [
  331. "finicity",
  332. ]
  333. [[rules]]
  334. description = "Finicity Client Secret"
  335. id = "finicity-client-secret"
  336. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  337. secretGroup = 1
  338. keywords = [
  339. "finicity",
  340. ]
  341. [[rules]]
  342. description = "Finnhub Access Token"
  343. id = "finnhub-access-token"
  344. regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  345. secretGroup = 1
  346. keywords = [
  347. "finnhub",
  348. ]
  349. [[rules]]
  350. description = "Flickr Access Token"
  351. id = "flickr-access-token"
  352. regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  353. secretGroup = 1
  354. keywords = [
  355. "flickr",
  356. ]
  357. [[rules]]
  358. description = "Flutterwave Encryption Key"
  359. id = "flutterwave-encryption-key"
  360. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
  361. keywords = [
  362. "flwseck_test",
  363. ]
  364. [[rules]]
  365. description = "Finicity Public Key"
  366. id = "flutterwave-public-key"
  367. regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
  368. keywords = [
  369. "flwpubk_test",
  370. ]
  371. [[rules]]
  372. description = "Flutterwave Secret Key"
  373. id = "flutterwave-secret-key"
  374. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
  375. keywords = [
  376. "flwseck_test",
  377. ]
  378. [[rules]]
  379. description = "Frame.io API token"
  380. id = "frameio-api-token"
  381. regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
  382. keywords = [
  383. "fio-u-",
  384. ]
  385. [[rules]]
  386. description = "Freshbooks Access Token"
  387. id = "freshbooks-access-token"
  388. regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  389. secretGroup = 1
  390. keywords = [
  391. "freshbooks",
  392. ]
  393. [[rules]]
  394. description = "GCP API key"
  395. id = "gcp-api-key"
  396. regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  397. secretGroup = 1
  398. keywords = [
  399. "aiza",
  400. ]
  401. [[rules]]
  402. description = "Generic API Key"
  403. id = "generic-api-key"
  404. regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  405. secretGroup = 1
  406. entropy = 3.5
  407. keywords = [
  408. "key","api","token","secret","client","passwd","password","auth","access",
  409. ]
  410. [rules.allowlist]
  411. stopwords= [
  412. "client",
  413. "endpoint",
  414. "vpn",
  415. "_ec2_",
  416. "aws_",
  417. "authorize",
  418. "author",
  419. "define",
  420. "config",
  421. "credential",
  422. "setting",
  423. "sample",
  424. "xxxxxx",
  425. "000000",
  426. "buffer",
  427. "delete",
  428. "aaaaaa",
  429. "fewfwef",
  430. "getenv",
  431. "env_",
  432. "system",
  433. "example",
  434. "ecdsa",
  435. "sha256",
  436. "sha1",
  437. "sha2",
  438. "md5",
  439. "alert",
  440. "wizard",
  441. "target",
  442. "onboard",
  443. "welcome",
  444. "page",
  445. "exploit",
  446. "experiment",
  447. "expire",
  448. "rabbitmq",
  449. "scraper",
  450. "widget",
  451. "music",
  452. "dns_",
  453. "dns-",
  454. "yahoo",
  455. "want",
  456. "json",
  457. "action",
  458. "script",
  459. "fix_",
  460. "fix-",
  461. "develop",
  462. "compas",
  463. "stripe",
  464. "service",
  465. "master",
  466. "metric",
  467. "tech",
  468. "gitignore",
  469. "rich",
  470. "open",
  471. "stack",
  472. "irc_",
  473. "irc-",
  474. "sublime",
  475. "kohana",
  476. "has_",
  477. "has-",
  478. "fabric",
  479. "wordpres",
  480. "role",
  481. "osx_",
  482. "osx-",
  483. "boost",
  484. "addres",
  485. "queue",
  486. "working",
  487. "sandbox",
  488. "internet",
  489. "print",
  490. "vision",
  491. "tracking",
  492. "being",
  493. "generator",
  494. "traffic",
  495. "world",
  496. "pull",
  497. "rust",
  498. "watcher",
  499. "small",
  500. "auth",
  501. "full",
  502. "hash",
  503. "more",
  504. "install",
  505. "auto",
  506. "complete",
  507. "learn",
  508. "paper",
  509. "installer",
  510. "research",
  511. "acces",
  512. "last",
  513. "binding",
  514. "spine",
  515. "into",
  516. "chat",
  517. "algorithm",
  518. "resource",
  519. "uploader",
  520. "video",
  521. "maker",
  522. "next",
  523. "proc",
  524. "lock",
  525. "robot",
  526. "snake",
  527. "patch",
  528. "matrix",
  529. "drill",
  530. "terminal",
  531. "term",
  532. "stuff",
  533. "genetic",
  534. "generic",
  535. "identity",
  536. "audit",
  537. "pattern",
  538. "audio",
  539. "web_",
  540. "web-",
  541. "crud",
  542. "problem",
  543. "statu",
  544. "cms-",
  545. "cms_",
  546. "arch",
  547. "coffee",
  548. "workflow",
  549. "changelog",
  550. "another",
  551. "uiview",
  552. "content",
  553. "kitchen",
  554. "gnu_",
  555. "gnu-",
  556. "gnu.",
  557. "conf",
  558. "couchdb",
  559. "client",
  560. "opencv",
  561. "rendering",
  562. "update",
  563. "concept",
  564. "varnish",
  565. "gui_",
  566. "gui-",
  567. "gui.",
  568. "version",
  569. "shared",
  570. "extra",
  571. "product",
  572. "still",
  573. "not_",
  574. "not-",
  575. "not.",
  576. "drop",
  577. "ring",
  578. "png_",
  579. "png-",
  580. "png.",
  581. "actively",
  582. "import",
  583. "output",
  584. "backup",
  585. "start",
  586. "embedded",
  587. "registry",
  588. "pool",
  589. "semantic",
  590. "instagram",
  591. "bash",
  592. "system",
  593. "ninja",
  594. "drupal",
  595. "jquery",
  596. "polyfill",
  597. "physic",
  598. "league",
  599. "guide",
  600. "pack",
  601. "synopsi",
  602. "sketch",
  603. "injection",
  604. "svg_",
  605. "svg-",
  606. "svg.",
  607. "friendly",
  608. "wave",
  609. "convert",
  610. "manage",
  611. "camera",
  612. "link",
  613. "slide",
  614. "timer",
  615. "wrapper",
  616. "gallery",
  617. "url_",
  618. "url-",
  619. "url.",
  620. "todomvc",
  621. "requirej",
  622. "party",
  623. "http",
  624. "payment",
  625. "async",
  626. "library",
  627. "home",
  628. "coco",
  629. "gaia",
  630. "display",
  631. "universal",
  632. "func",
  633. "metadata",
  634. "hipchat",
  635. "under",
  636. "room",
  637. "config",
  638. "personal",
  639. "realtime",
  640. "resume",
  641. "database",
  642. "testing",
  643. "tiny",
  644. "basic",
  645. "forum",
  646. "meetup",
  647. "yet_",
  648. "yet-",
  649. "yet.",
  650. "cento",
  651. "dead",
  652. "fluentd",
  653. "editor",
  654. "utilitie",
  655. "run_",
  656. "run-",
  657. "run.",
  658. "box_",
  659. "box-",
  660. "box.",
  661. "bot_",
  662. "bot-",
  663. "bot.",
  664. "making",
  665. "sample",
  666. "group",
  667. "monitor",
  668. "ajax",
  669. "parallel",
  670. "cassandra",
  671. "ultimate",
  672. "site",
  673. "get_",
  674. "get-",
  675. "get.",
  676. "gen_",
  677. "gen-",
  678. "gen.",
  679. "gem_",
  680. "gem-",
  681. "gem.",
  682. "extended",
  683. "image",
  684. "knife",
  685. "asset",
  686. "nested",
  687. "zero",
  688. "plugin",
  689. "bracket",
  690. "mule",
  691. "mozilla",
  692. "number",
  693. "act_",
  694. "act-",
  695. "act.",
  696. "map_",
  697. "map-",
  698. "map.",
  699. "micro",
  700. "debug",
  701. "openshift",
  702. "chart",
  703. "expres",
  704. "backend",
  705. "task",
  706. "source",
  707. "translate",
  708. "jbos",
  709. "composer",
  710. "sqlite",
  711. "profile",
  712. "mustache",
  713. "mqtt",
  714. "yeoman",
  715. "have",
  716. "builder",
  717. "smart",
  718. "like",
  719. "oauth",
  720. "school",
  721. "guideline",
  722. "captcha",
  723. "filter",
  724. "bitcoin",
  725. "bridge",
  726. "color",
  727. "toolbox",
  728. "discovery",
  729. "new_",
  730. "new-",
  731. "new.",
  732. "dashboard",
  733. "when",
  734. "setting",
  735. "level",
  736. "post",
  737. "standard",
  738. "port",
  739. "platform",
  740. "yui_",
  741. "yui-",
  742. "yui.",
  743. "grunt",
  744. "animation",
  745. "haskell",
  746. "icon",
  747. "latex",
  748. "cheat",
  749. "lua_",
  750. "lua-",
  751. "lua.",
  752. "gulp",
  753. "case",
  754. "author",
  755. "without",
  756. "simulator",
  757. "wifi",
  758. "directory",
  759. "lisp",
  760. "list",
  761. "flat",
  762. "adventure",
  763. "story",
  764. "storm",
  765. "gpu_",
  766. "gpu-",
  767. "gpu.",
  768. "store",
  769. "caching",
  770. "attention",
  771. "solr",
  772. "logger",
  773. "demo",
  774. "shortener",
  775. "hadoop",
  776. "finder",
  777. "phone",
  778. "pipeline",
  779. "range",
  780. "textmate",
  781. "showcase",
  782. "app_",
  783. "app-",
  784. "app.",
  785. "idiomatic",
  786. "edit",
  787. "our_",
  788. "our-",
  789. "our.",
  790. "out_",
  791. "out-",
  792. "out.",
  793. "sentiment",
  794. "linked",
  795. "why_",
  796. "why-",
  797. "why.",
  798. "local",
  799. "cube",
  800. "gmail",
  801. "job_",
  802. "job-",
  803. "job.",
  804. "rpc_",
  805. "rpc-",
  806. "rpc.",
  807. "contest",
  808. "tcp_",
  809. "tcp-",
  810. "tcp.",
  811. "usage",
  812. "buildout",
  813. "weather",
  814. "transfer",
  815. "automated",
  816. "sphinx",
  817. "issue",
  818. "sas_",
  819. "sas-",
  820. "sas.",
  821. "parallax",
  822. "jasmine",
  823. "addon",
  824. "machine",
  825. "solution",
  826. "dsl_",
  827. "dsl-",
  828. "dsl.",
  829. "episode",
  830. "menu",
  831. "theme",
  832. "best",
  833. "adapter",
  834. "debugger",
  835. "chrome",
  836. "tutorial",
  837. "life",
  838. "step",
  839. "people",
  840. "joomla",
  841. "paypal",
  842. "developer",
  843. "solver",
  844. "team",
  845. "current",
  846. "love",
  847. "visual",
  848. "date",
  849. "data",
  850. "canva",
  851. "container",
  852. "future",
  853. "xml_",
  854. "xml-",
  855. "xml.",
  856. "twig",
  857. "nagio",
  858. "spatial",
  859. "original",
  860. "sync",
  861. "archived",
  862. "refinery",
  863. "science",
  864. "mapping",
  865. "gitlab",
  866. "play",
  867. "ext_",
  868. "ext-",
  869. "ext.",
  870. "session",
  871. "impact",
  872. "set_",
  873. "set-",
  874. "set.",
  875. "see_",
  876. "see-",
  877. "see.",
  878. "migration",
  879. "commit",
  880. "community",
  881. "shopify",
  882. "what'",
  883. "cucumber",
  884. "statamic",
  885. "mysql",
  886. "location",
  887. "tower",
  888. "line",
  889. "code",
  890. "amqp",
  891. "hello",
  892. "send",
  893. "index",
  894. "high",
  895. "notebook",
  896. "alloy",
  897. "python",
  898. "field",
  899. "document",
  900. "soap",
  901. "edition",
  902. "email",
  903. "php_",
  904. "php-",
  905. "php.",
  906. "command",
  907. "transport",
  908. "official",
  909. "upload",
  910. "study",
  911. "secure",
  912. "angularj",
  913. "akka",
  914. "scalable",
  915. "package",
  916. "request",
  917. "con_",
  918. "con-",
  919. "con.",
  920. "flexible",
  921. "security",
  922. "comment",
  923. "module",
  924. "flask",
  925. "graph",
  926. "flash",
  927. "apache",
  928. "change",
  929. "window",
  930. "space",
  931. "lambda",
  932. "sheet",
  933. "bookmark",
  934. "carousel",
  935. "friend",
  936. "objective",
  937. "jekyll",
  938. "bootstrap",
  939. "first",
  940. "article",
  941. "gwt_",
  942. "gwt-",
  943. "gwt.",
  944. "classic",
  945. "media",
  946. "websocket",
  947. "touch",
  948. "desktop",
  949. "real",
  950. "read",
  951. "recorder",
  952. "moved",
  953. "storage",
  954. "validator",
  955. "add-on",
  956. "pusher",
  957. "scs_",
  958. "scs-",
  959. "scs.",
  960. "inline",
  961. "asp_",
  962. "asp-",
  963. "asp.",
  964. "timeline",
  965. "base",
  966. "encoding",
  967. "ffmpeg",
  968. "kindle",
  969. "tinymce",
  970. "pretty",
  971. "jpa_",
  972. "jpa-",
  973. "jpa.",
  974. "used",
  975. "user",
  976. "required",
  977. "webhook",
  978. "download",
  979. "resque",
  980. "espresso",
  981. "cloud",
  982. "mongo",
  983. "benchmark",
  984. "pure",
  985. "cakephp",
  986. "modx",
  987. "mode",
  988. "reactive",
  989. "fuel",
  990. "written",
  991. "flickr",
  992. "mail",
  993. "brunch",
  994. "meteor",
  995. "dynamic",
  996. "neo_",
  997. "neo-",
  998. "neo.",
  999. "new_",
  1000. "new-",
  1001. "new.",
  1002. "net_",
  1003. "net-",
  1004. "net.",
  1005. "typo",
  1006. "type",
  1007. "keyboard",
  1008. "erlang",
  1009. "adobe",
  1010. "logging",
  1011. "ckeditor",
  1012. "message",
  1013. "iso_",
  1014. "iso-",
  1015. "iso.",
  1016. "hook",
  1017. "ldap",
  1018. "folder",
  1019. "reference",
  1020. "railscast",
  1021. "www_",
  1022. "www-",
  1023. "www.",
  1024. "tracker",
  1025. "azure",
  1026. "fork",
  1027. "form",
  1028. "digital",
  1029. "exporter",
  1030. "skin",
  1031. "string",
  1032. "template",
  1033. "designer",
  1034. "gollum",
  1035. "fluent",
  1036. "entity",
  1037. "language",
  1038. "alfred",
  1039. "summary",
  1040. "wiki",
  1041. "kernel",
  1042. "calendar",
  1043. "plupload",
  1044. "symfony",
  1045. "foundry",
  1046. "remote",
  1047. "talk",
  1048. "search",
  1049. "dev_",
  1050. "dev-",
  1051. "dev.",
  1052. "del_",
  1053. "del-",
  1054. "del.",
  1055. "token",
  1056. "idea",
  1057. "sencha",
  1058. "selector",
  1059. "interface",
  1060. "create",
  1061. "fun_",
  1062. "fun-",
  1063. "fun.",
  1064. "groovy",
  1065. "query",
  1066. "grail",
  1067. "red_",
  1068. "red-",
  1069. "red.",
  1070. "laravel",
  1071. "monkey",
  1072. "slack",
  1073. "supported",
  1074. "instant",
  1075. "value",
  1076. "center",
  1077. "latest",
  1078. "work",
  1079. "but_",
  1080. "but-",
  1081. "but.",
  1082. "bug_",
  1083. "bug-",
  1084. "bug.",
  1085. "virtual",
  1086. "tweet",
  1087. "statsd",
  1088. "studio",
  1089. "path",
  1090. "real-time",
  1091. "frontend",
  1092. "notifier",
  1093. "coding",
  1094. "tool",
  1095. "firmware",
  1096. "flow",
  1097. "random",
  1098. "mediawiki",
  1099. "bosh",
  1100. "been",
  1101. "beer",
  1102. "lightbox",
  1103. "theory",
  1104. "origin",
  1105. "redmine",
  1106. "hub_",
  1107. "hub-",
  1108. "hub.",
  1109. "require",
  1110. "pro_",
  1111. "pro-",
  1112. "pro.",
  1113. "ant_",
  1114. "ant-",
  1115. "ant.",
  1116. "any_",
  1117. "any-",
  1118. "any.",
  1119. "recipe",
  1120. "closure",
  1121. "mapper",
  1122. "event",
  1123. "todo",
  1124. "model",
  1125. "redi",
  1126. "provider",
  1127. "rvm_",
  1128. "rvm-",
  1129. "rvm.",
  1130. "program",
  1131. "memcached",
  1132. "rail",
  1133. "silex",
  1134. "foreman",
  1135. "activity",
  1136. "license",
  1137. "strategy",
  1138. "batch",
  1139. "streaming",
  1140. "fast",
  1141. "use_",
  1142. "use-",
  1143. "use.",
  1144. "usb_",
  1145. "usb-",
  1146. "usb.",
  1147. "impres",
  1148. "academy",
  1149. "slider",
  1150. "please",
  1151. "layer",
  1152. "cros",
  1153. "now_",
  1154. "now-",
  1155. "now.",
  1156. "miner",
  1157. "extension",
  1158. "own_",
  1159. "own-",
  1160. "own.",
  1161. "app_",
  1162. "app-",
  1163. "app.",
  1164. "debian",
  1165. "symphony",
  1166. "example",
  1167. "feature",
  1168. "serie",
  1169. "tree",
  1170. "project",
  1171. "runner",
  1172. "entry",
  1173. "leetcode",
  1174. "layout",
  1175. "webrtc",
  1176. "logic",
  1177. "login",
  1178. "worker",
  1179. "toolkit",
  1180. "mocha",
  1181. "support",
  1182. "back",
  1183. "inside",
  1184. "device",
  1185. "jenkin",
  1186. "contact",
  1187. "fake",
  1188. "awesome",
  1189. "ocaml",
  1190. "bit_",
  1191. "bit-",
  1192. "bit.",
  1193. "drive",
  1194. "screen",
  1195. "prototype",
  1196. "gist",
  1197. "binary",
  1198. "nosql",
  1199. "rest",
  1200. "overview",
  1201. "dart",
  1202. "dark",
  1203. "emac",
  1204. "mongoid",
  1205. "solarized",
  1206. "homepage",
  1207. "emulator",
  1208. "commander",
  1209. "django",
  1210. "yandex",
  1211. "gradle",
  1212. "xcode",
  1213. "writer",
  1214. "crm_",
  1215. "crm-",
  1216. "crm.",
  1217. "jade",
  1218. "startup",
  1219. "error",
  1220. "using",
  1221. "format",
  1222. "name",
  1223. "spring",
  1224. "parser",
  1225. "scratch",
  1226. "magic",
  1227. "try_",
  1228. "try-",
  1229. "try.",
  1230. "rack",
  1231. "directive",
  1232. "challenge",
  1233. "slim",
  1234. "counter",
  1235. "element",
  1236. "chosen",
  1237. "doc_",
  1238. "doc-",
  1239. "doc.",
  1240. "meta",
  1241. "should",
  1242. "button",
  1243. "packet",
  1244. "stream",
  1245. "hardware",
  1246. "android",
  1247. "infinite",
  1248. "password",
  1249. "software",
  1250. "ghost",
  1251. "xamarin",
  1252. "spec",
  1253. "chef",
  1254. "interview",
  1255. "hubot",
  1256. "mvc_",
  1257. "mvc-",
  1258. "mvc.",
  1259. "exercise",
  1260. "leaflet",
  1261. "launcher",
  1262. "air_",
  1263. "air-",
  1264. "air.",
  1265. "photo",
  1266. "board",
  1267. "boxen",
  1268. "way_",
  1269. "way-",
  1270. "way.",
  1271. "computing",
  1272. "welcome",
  1273. "notepad",
  1274. "portfolio",
  1275. "cat_",
  1276. "cat-",
  1277. "cat.",
  1278. "can_",
  1279. "can-",
  1280. "can.",
  1281. "magento",
  1282. "yaml",
  1283. "domain",
  1284. "card",
  1285. "yii_",
  1286. "yii-",
  1287. "yii.",
  1288. "checker",
  1289. "browser",
  1290. "upgrade",
  1291. "only",
  1292. "progres",
  1293. "aura",
  1294. "ruby_",
  1295. "ruby-",
  1296. "ruby.",
  1297. "polymer",
  1298. "util",
  1299. "lite",
  1300. "hackathon",
  1301. "rule",
  1302. "log_",
  1303. "log-",
  1304. "log.",
  1305. "opengl",
  1306. "stanford",
  1307. "skeleton",
  1308. "history",
  1309. "inspector",
  1310. "help",
  1311. "soon",
  1312. "selenium",
  1313. "lab_",
  1314. "lab-",
  1315. "lab.",
  1316. "scheme",
  1317. "schema",
  1318. "look",
  1319. "ready",
  1320. "leveldb",
  1321. "docker",
  1322. "game",
  1323. "minimal",
  1324. "logstash",
  1325. "messaging",
  1326. "within",
  1327. "heroku",
  1328. "mongodb",
  1329. "kata",
  1330. "suite",
  1331. "picker",
  1332. "win_",
  1333. "win-",
  1334. "win.",
  1335. "wip_",
  1336. "wip-",
  1337. "wip.",
  1338. "panel",
  1339. "started",
  1340. "starter",
  1341. "front-end",
  1342. "detector",
  1343. "deploy",
  1344. "editing",
  1345. "based",
  1346. "admin",
  1347. "capture",
  1348. "spree",
  1349. "page",
  1350. "bundle",
  1351. "goal",
  1352. "rpg_",
  1353. "rpg-",
  1354. "rpg.",
  1355. "setup",
  1356. "side",
  1357. "mean",
  1358. "reader",
  1359. "cookbook",
  1360. "mini",
  1361. "modern",
  1362. "seed",
  1363. "dom_",
  1364. "dom-",
  1365. "dom.",
  1366. "doc_",
  1367. "doc-",
  1368. "doc.",
  1369. "dot_",
  1370. "dot-",
  1371. "dot.",
  1372. "syntax",
  1373. "sugar",
  1374. "loader",
  1375. "website",
  1376. "make",
  1377. "kit_",
  1378. "kit-",
  1379. "kit.",
  1380. "protocol",
  1381. "human",
  1382. "daemon",
  1383. "golang",
  1384. "manager",
  1385. "countdown",
  1386. "connector",
  1387. "swagger",
  1388. "map_",
  1389. "map-",
  1390. "map.",
  1391. "mac_",
  1392. "mac-",
  1393. "mac.",
  1394. "man_",
  1395. "man-",
  1396. "man.",
  1397. "orm_",
  1398. "orm-",
  1399. "orm.",
  1400. "org_",
  1401. "org-",
  1402. "org.",
  1403. "little",
  1404. "zsh_",
  1405. "zsh-",
  1406. "zsh.",
  1407. "shop",
  1408. "show",
  1409. "workshop",
  1410. "money",
  1411. "grid",
  1412. "server",
  1413. "octopres",
  1414. "svn_",
  1415. "svn-",
  1416. "svn.",
  1417. "ember",
  1418. "embed",
  1419. "general",
  1420. "file",
  1421. "important",
  1422. "dropbox",
  1423. "portable",
  1424. "public",
  1425. "docpad",
  1426. "fish",
  1427. "sbt_",
  1428. "sbt-",
  1429. "sbt.",
  1430. "done",
  1431. "para",
  1432. "network",
  1433. "common",
  1434. "readme",
  1435. "popup",
  1436. "simple",
  1437. "purpose",
  1438. "mirror",
  1439. "single",
  1440. "cordova",
  1441. "exchange",
  1442. "object",
  1443. "design",
  1444. "gateway",
  1445. "account",
  1446. "lamp",
  1447. "intellij",
  1448. "math",
  1449. "mit_",
  1450. "mit-",
  1451. "mit.",
  1452. "control",
  1453. "enhanced",
  1454. "emitter",
  1455. "multi",
  1456. "add_",
  1457. "add-",
  1458. "add.",
  1459. "about",
  1460. "socket",
  1461. "preview",
  1462. "vagrant",
  1463. "cli_",
  1464. "cli-",
  1465. "cli.",
  1466. "powerful",
  1467. "top_",
  1468. "top-",
  1469. "top.",
  1470. "radio",
  1471. "watch",
  1472. "fluid",
  1473. "amazon",
  1474. "report",
  1475. "couchbase",
  1476. "automatic",
  1477. "detection",
  1478. "sprite",
  1479. "pyramid",
  1480. "portal",
  1481. "advanced",
  1482. "plu_",
  1483. "plu-",
  1484. "plu.",
  1485. "runtime",
  1486. "git_",
  1487. "git-",
  1488. "git.",
  1489. "uri_",
  1490. "uri-",
  1491. "uri.",
  1492. "haml",
  1493. "node",
  1494. "sql_",
  1495. "sql-",
  1496. "sql.",
  1497. "cool",
  1498. "core",
  1499. "obsolete",
  1500. "handler",
  1501. "iphone",
  1502. "extractor",
  1503. "array",
  1504. "copy",
  1505. "nlp_",
  1506. "nlp-",
  1507. "nlp.",
  1508. "reveal",
  1509. "pop_",
  1510. "pop-",
  1511. "pop.",
  1512. "engine",
  1513. "parse",
  1514. "check",
  1515. "html",
  1516. "nest",
  1517. "all_",
  1518. "all-",
  1519. "all.",
  1520. "chinese",
  1521. "buildpack",
  1522. "what",
  1523. "tag_",
  1524. "tag-",
  1525. "tag.",
  1526. "proxy",
  1527. "style",
  1528. "cookie",
  1529. "feed",
  1530. "restful",
  1531. "compiler",
  1532. "creating",
  1533. "prelude",
  1534. "context",
  1535. "java",
  1536. "rspec",
  1537. "mock",
  1538. "backbone",
  1539. "light",
  1540. "spotify",
  1541. "flex",
  1542. "related",
  1543. "shell",
  1544. "which",
  1545. "clas",
  1546. "webapp",
  1547. "swift",
  1548. "ansible",
  1549. "unity",
  1550. "console",
  1551. "tumblr",
  1552. "export",
  1553. "campfire",
  1554. "conway'",
  1555. "made",
  1556. "riak",
  1557. "hero",
  1558. "here",
  1559. "unix",
  1560. "unit",
  1561. "glas",
  1562. "smtp",
  1563. "how_",
  1564. "how-",
  1565. "how.",
  1566. "hot_",
  1567. "hot-",
  1568. "hot.",
  1569. "debug",
  1570. "release",
  1571. "diff",
  1572. "player",
  1573. "easy",
  1574. "right",
  1575. "old_",
  1576. "old-",
  1577. "old.",
  1578. "animate",
  1579. "time",
  1580. "push",
  1581. "explorer",
  1582. "course",
  1583. "training",
  1584. "nette",
  1585. "router",
  1586. "draft",
  1587. "structure",
  1588. "note",
  1589. "salt",
  1590. "where",
  1591. "spark",
  1592. "trello",
  1593. "power",
  1594. "method",
  1595. "social",
  1596. "via_",
  1597. "via-",
  1598. "via.",
  1599. "vim_",
  1600. "vim-",
  1601. "vim.",
  1602. "select",
  1603. "webkit",
  1604. "github",
  1605. "ftp_",
  1606. "ftp-",
  1607. "ftp.",
  1608. "creator",
  1609. "mongoose",
  1610. "led_",
  1611. "led-",
  1612. "led.",
  1613. "movie",
  1614. "currently",
  1615. "pdf_",
  1616. "pdf-",
  1617. "pdf.",
  1618. "load",
  1619. "markdown",
  1620. "phalcon",
  1621. "input",
  1622. "custom",
  1623. "atom",
  1624. "oracle",
  1625. "phonegap",
  1626. "ubuntu",
  1627. "great",
  1628. "rdf_",
  1629. "rdf-",
  1630. "rdf.",
  1631. "popcorn",
  1632. "firefox",
  1633. "zip_",
  1634. "zip-",
  1635. "zip.",
  1636. "cuda",
  1637. "dotfile",
  1638. "static",
  1639. "openwrt",
  1640. "viewer",
  1641. "powered",
  1642. "graphic",
  1643. "les_",
  1644. "les-",
  1645. "les.",
  1646. "doe_",
  1647. "doe-",
  1648. "doe.",
  1649. "maven",
  1650. "word",
  1651. "eclipse",
  1652. "lab_",
  1653. "lab-",
  1654. "lab.",
  1655. "hacking",
  1656. "steam",
  1657. "analytic",
  1658. "option",
  1659. "abstract",
  1660. "archive",
  1661. "reality",
  1662. "switcher",
  1663. "club",
  1664. "write",
  1665. "kafka",
  1666. "arduino",
  1667. "angular",
  1668. "online",
  1669. "title",
  1670. "don't",
  1671. "contao",
  1672. "notice",
  1673. "analyzer",
  1674. "learning",
  1675. "zend",
  1676. "external",
  1677. "staging",
  1678. "busines",
  1679. "tdd_",
  1680. "tdd-",
  1681. "tdd.",
  1682. "scanner",
  1683. "building",
  1684. "snippet",
  1685. "modular",
  1686. "bower",
  1687. "stm_",
  1688. "stm-",
  1689. "stm.",
  1690. "lib_",
  1691. "lib-",
  1692. "lib.",
  1693. "alpha",
  1694. "mobile",
  1695. "clean",
  1696. "linux",
  1697. "nginx",
  1698. "manifest",
  1699. "some",
  1700. "raspberry",
  1701. "gnome",
  1702. "ide_",
  1703. "ide-",
  1704. "ide.",
  1705. "block",
  1706. "statistic",
  1707. "info",
  1708. "drag",
  1709. "youtube",
  1710. "koan",
  1711. "facebook",
  1712. "paperclip",
  1713. "art_",
  1714. "art-",
  1715. "art.",
  1716. "quality",
  1717. "tab_",
  1718. "tab-",
  1719. "tab.",
  1720. "need",
  1721. "dojo",
  1722. "shield",
  1723. "computer",
  1724. "stat",
  1725. "state",
  1726. "twitter",
  1727. "utility",
  1728. "converter",
  1729. "hosting",
  1730. "devise",
  1731. "liferay",
  1732. "updated",
  1733. "force",
  1734. "tip_",
  1735. "tip-",
  1736. "tip.",
  1737. "behavior",
  1738. "active",
  1739. "call",
  1740. "answer",
  1741. "deck",
  1742. "better",
  1743. "principle",
  1744. "ches",
  1745. "bar_",
  1746. "bar-",
  1747. "bar.",
  1748. "reddit",
  1749. "three",
  1750. "haxe",
  1751. "just",
  1752. "plug-in",
  1753. "agile",
  1754. "manual",
  1755. "tetri",
  1756. "super",
  1757. "beta",
  1758. "parsing",
  1759. "doctrine",
  1760. "minecraft",
  1761. "useful",
  1762. "perl",
  1763. "sharing",
  1764. "agent",
  1765. "switch",
  1766. "view",
  1767. "dash",
  1768. "channel",
  1769. "repo",
  1770. "pebble",
  1771. "profiler",
  1772. "warning",
  1773. "cluster",
  1774. "running",
  1775. "markup",
  1776. "evented",
  1777. "mod_",
  1778. "mod-",
  1779. "mod.",
  1780. "share",
  1781. "csv_",
  1782. "csv-",
  1783. "csv.",
  1784. "response",
  1785. "good",
  1786. "house",
  1787. "connect",
  1788. "built",
  1789. "build",
  1790. "find",
  1791. "ipython",
  1792. "webgl",
  1793. "big_",
  1794. "big-",
  1795. "big.",
  1796. "google",
  1797. "scala",
  1798. "sdl_",
  1799. "sdl-",
  1800. "sdl.",
  1801. "sdk_",
  1802. "sdk-",
  1803. "sdk.",
  1804. "native",
  1805. "day_",
  1806. "day-",
  1807. "day.",
  1808. "puppet",
  1809. "text",
  1810. "routing",
  1811. "helper",
  1812. "linkedin",
  1813. "crawler",
  1814. "host",
  1815. "guard",
  1816. "merchant",
  1817. "poker",
  1818. "over",
  1819. "writing",
  1820. "free",
  1821. "classe",
  1822. "component",
  1823. "craft",
  1824. "nodej",
  1825. "phoenix",
  1826. "longer",
  1827. "quick",
  1828. "lazy",
  1829. "memory",
  1830. "clone",
  1831. "hacker",
  1832. "middleman",
  1833. "factory",
  1834. "motion",
  1835. "multiple",
  1836. "tornado",
  1837. "hack",
  1838. "ssh_",
  1839. "ssh-",
  1840. "ssh.",
  1841. "review",
  1842. "vimrc",
  1843. "driver",
  1844. "driven",
  1845. "blog",
  1846. "particle",
  1847. "table",
  1848. "intro",
  1849. "importer",
  1850. "thrift",
  1851. "xmpp",
  1852. "framework",
  1853. "refresh",
  1854. "react",
  1855. "font",
  1856. "librarie",
  1857. "variou",
  1858. "formatter",
  1859. "analysi",
  1860. "karma",
  1861. "scroll",
  1862. "tut_",
  1863. "tut-",
  1864. "tut.",
  1865. "apple",
  1866. "tag_",
  1867. "tag-",
  1868. "tag.",
  1869. "tab_",
  1870. "tab-",
  1871. "tab.",
  1872. "category",
  1873. "ionic",
  1874. "cache",
  1875. "homebrew",
  1876. "reverse",
  1877. "english",
  1878. "getting",
  1879. "shipping",
  1880. "clojure",
  1881. "boot",
  1882. "book",
  1883. "branch",
  1884. "combination",
  1885. "combo",
  1886. ]
  1887. [[rules]]
  1888. description = "GitHub App Token"
  1889. id = "github-app-token"
  1890. regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
  1891. keywords = [
  1892. "ghu_","ghs_",
  1893. ]
  1894. [[rules]]
  1895. description = "GitHub OAuth Access Token"
  1896. id = "github-oauth"
  1897. regex = '''gho_[0-9a-zA-Z]{36}'''
  1898. keywords = [
  1899. "gho_",
  1900. ]
  1901. [[rules]]
  1902. description = "GitHub Personal Access Token"
  1903. id = "github-pat"
  1904. regex = '''ghp_[0-9a-zA-Z]{36}'''
  1905. keywords = [
  1906. "ghp_",
  1907. ]
  1908. [[rules]]
  1909. description = "GitHub Refresh Token"
  1910. id = "github-refresh-token"
  1911. regex = '''ghr_[0-9a-zA-Z]{36}'''
  1912. keywords = [
  1913. "ghr_",
  1914. ]
  1915. [[rules]]
  1916. description = "GitLab Personal Access Token"
  1917. id = "gitlab-pat"
  1918. regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
  1919. keywords = [
  1920. "glpat-",
  1921. ]
  1922. [[rules]]
  1923. description = "Gitter Access Token"
  1924. id = "gitter-access-token"
  1925. regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1926. secretGroup = 1
  1927. keywords = [
  1928. "gitter",
  1929. ]
  1930. [[rules]]
  1931. description = "GoCardless API token"
  1932. id = "gocardless-api-token"
  1933. regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1934. secretGroup = 1
  1935. keywords = [
  1936. "live_","gocardless",
  1937. ]
  1938. [[rules]]
  1939. description = "Grafana api key (or Grafana cloud api key)"
  1940. id = "grafana-api-key"
  1941. regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1942. secretGroup = 1
  1943. keywords = [
  1944. "eyjrijoi",
  1945. ]
  1946. [[rules]]
  1947. description = "Grafana cloud api token"
  1948. id = "grafana-cloud-api-token"
  1949. regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1950. secretGroup = 1
  1951. keywords = [
  1952. "glc_",
  1953. ]
  1954. [[rules]]
  1955. description = "Grafana service account token"
  1956. id = "grafana-service-account-token"
  1957. regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1958. secretGroup = 1
  1959. keywords = [
  1960. "glsa_",
  1961. ]
  1962. [[rules]]
  1963. description = "HashiCorp Terraform user/org API token"
  1964. id = "hashicorp-tf-api-token"
  1965. regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
  1966. keywords = [
  1967. "atlasv1",
  1968. ]
  1969. [[rules]]
  1970. description = "Heroku API Key"
  1971. id = "heroku-api-key"
  1972. regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1973. secretGroup = 1
  1974. keywords = [
  1975. "heroku",
  1976. ]
  1977. [[rules]]
  1978. description = "HubSpot API Token"
  1979. id = "hubspot-api-key"
  1980. regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1981. secretGroup = 1
  1982. keywords = [
  1983. "hubspot",
  1984. ]
  1985. [[rules]]
  1986. description = "Intercom API Token"
  1987. id = "intercom-api-key"
  1988. regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1989. secretGroup = 1
  1990. keywords = [
  1991. "intercom",
  1992. ]
  1993. [[rules]]
  1994. description = "JSON Web Token"
  1995. id = "jwt"
  1996. regex = '''(?i)\b(ey[0-9a-z]{30,34}\.ey[0-9a-z-\/_]{30,500}\.[0-9a-zA-Z-\/_]{10,200})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1997. keywords = [
  1998. "ey",
  1999. ]
  2000. [[rules]]
  2001. description = "Kraken Access Token"
  2002. id = "kraken-access-token"
  2003. regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2004. secretGroup = 1
  2005. keywords = [
  2006. "kraken",
  2007. ]
  2008. [[rules]]
  2009. description = "Kucoin Access Token"
  2010. id = "kucoin-access-token"
  2011. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2012. secretGroup = 1
  2013. keywords = [
  2014. "kucoin",
  2015. ]
  2016. [[rules]]
  2017. description = "Kucoin Secret Key"
  2018. id = "kucoin-secret-key"
  2019. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2020. secretGroup = 1
  2021. keywords = [
  2022. "kucoin",
  2023. ]
  2024. [[rules]]
  2025. description = "Launchdarkly Access Token"
  2026. id = "launchdarkly-access-token"
  2027. regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2028. secretGroup = 1
  2029. keywords = [
  2030. "launchdarkly",
  2031. ]
  2032. [[rules]]
  2033. description = "Linear API Token"
  2034. id = "linear-api-key"
  2035. regex = '''lin_api_(?i)[a-z0-9]{40}'''
  2036. keywords = [
  2037. "lin_api_",
  2038. ]
  2039. [[rules]]
  2040. description = "Linear Client Secret"
  2041. id = "linear-client-secret"
  2042. regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2043. secretGroup = 1
  2044. keywords = [
  2045. "linear",
  2046. ]
  2047. [[rules]]
  2048. description = "LinkedIn Client ID"
  2049. id = "linkedin-client-id"
  2050. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2051. secretGroup = 1
  2052. keywords = [
  2053. "linkedin","linked-in",
  2054. ]
  2055. [[rules]]
  2056. description = "LinkedIn Client secret"
  2057. id = "linkedin-client-secret"
  2058. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2059. secretGroup = 1
  2060. keywords = [
  2061. "linkedin","linked-in",
  2062. ]
  2063. [[rules]]
  2064. description = "Lob API Key"
  2065. id = "lob-api-key"
  2066. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2067. secretGroup = 1
  2068. keywords = [
  2069. "test_","live_",
  2070. ]
  2071. [[rules]]
  2072. description = "Lob Publishable API Key"
  2073. id = "lob-pub-api-key"
  2074. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2075. secretGroup = 1
  2076. keywords = [
  2077. "test_pub","live_pub","_pub",
  2078. ]
  2079. [[rules]]
  2080. description = "Mailchimp API key"
  2081. id = "mailchimp-api-key"
  2082. regex = '''(?i)(?:mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2083. secretGroup = 1
  2084. keywords = [
  2085. "mailchimp",
  2086. ]
  2087. [[rules]]
  2088. description = "Mailgun private API token"
  2089. id = "mailgun-private-api-token"
  2090. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2091. secretGroup = 1
  2092. keywords = [
  2093. "mailgun",
  2094. ]
  2095. [[rules]]
  2096. description = "Mailgun public validation key"
  2097. id = "mailgun-pub-key"
  2098. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2099. secretGroup = 1
  2100. keywords = [
  2101. "mailgun",
  2102. ]
  2103. [[rules]]
  2104. description = "Mailgun webhook signing key"
  2105. id = "mailgun-signing-key"
  2106. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2107. secretGroup = 1
  2108. keywords = [
  2109. "mailgun",
  2110. ]
  2111. [[rules]]
  2112. description = "MapBox API token"
  2113. id = "mapbox-api-token"
  2114. regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2115. secretGroup = 1
  2116. keywords = [
  2117. "mapbox",
  2118. ]
  2119. [[rules]]
  2120. description = "Mattermost Access Token"
  2121. id = "mattermost-access-token"
  2122. regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2123. secretGroup = 1
  2124. keywords = [
  2125. "mattermost",
  2126. ]
  2127. [[rules]]
  2128. description = "MessageBird API token"
  2129. id = "messagebird-api-token"
  2130. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2131. secretGroup = 1
  2132. keywords = [
  2133. "messagebird","message-bird","message_bird",
  2134. ]
  2135. [[rules]]
  2136. description = "MessageBird client ID"
  2137. id = "messagebird-client-id"
  2138. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2139. secretGroup = 1
  2140. keywords = [
  2141. "messagebird","message-bird","message_bird",
  2142. ]
  2143. [[rules]]
  2144. description = "Microsoft Teams Webhook"
  2145. id = "microsoft-teams-webhook"
  2146. regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
  2147. keywords = [
  2148. "webhook.office.com","webhookb2","incomingwebhook",
  2149. ]
  2150. [[rules]]
  2151. description = "Netlify Access Token"
  2152. id = "netlify-access-token"
  2153. regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2154. secretGroup = 1
  2155. keywords = [
  2156. "netlify",
  2157. ]
  2158. [[rules]]
  2159. description = "New Relic ingest browser API token"
  2160. id = "new-relic-browser-api-token"
  2161. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2162. secretGroup = 1
  2163. keywords = [
  2164. "nrjs-",
  2165. ]
  2166. [[rules]]
  2167. description = "New Relic user API ID"
  2168. id = "new-relic-user-api-id"
  2169. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2170. secretGroup = 1
  2171. keywords = [
  2172. "new-relic","newrelic","new_relic",
  2173. ]
  2174. [[rules]]
  2175. description = "New Relic user API Key"
  2176. id = "new-relic-user-api-key"
  2177. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2178. secretGroup = 1
  2179. keywords = [
  2180. "nrak",
  2181. ]
  2182. [[rules]]
  2183. description = "npm access token"
  2184. id = "npm-access-token"
  2185. regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2186. secretGroup = 1
  2187. keywords = [
  2188. "npm_",
  2189. ]
  2190. [[rules]]
  2191. description = "Nytimes Access Token"
  2192. id = "nytimes-access-token"
  2193. regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2194. secretGroup = 1
  2195. keywords = [
  2196. "nytimes","new-york-times","newyorktimes",
  2197. ]
  2198. [[rules]]
  2199. description = "Okta Access Token"
  2200. id = "okta-access-token"
  2201. regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2202. secretGroup = 1
  2203. keywords = [
  2204. "okta",
  2205. ]
  2206. [[rules]]
  2207. description = "Plaid API Token"
  2208. id = "plaid-api-token"
  2209. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2210. secretGroup = 1
  2211. keywords = [
  2212. "plaid",
  2213. ]
  2214. [[rules]]
  2215. description = "Plaid Client ID"
  2216. id = "plaid-client-id"
  2217. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2218. secretGroup = 1
  2219. keywords = [
  2220. "plaid",
  2221. ]
  2222. [[rules]]
  2223. description = "Plaid Secret key"
  2224. id = "plaid-secret-key"
  2225. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2226. secretGroup = 1
  2227. keywords = [
  2228. "plaid",
  2229. ]
  2230. [[rules]]
  2231. description = "PlanetScale API token"
  2232. id = "planetscale-api-token"
  2233. regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2234. secretGroup = 1
  2235. keywords = [
  2236. "pscale_tkn_",
  2237. ]
  2238. [[rules]]
  2239. description = "PlanetScale OAuth token"
  2240. id = "planetscale-oauth-token"
  2241. regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2242. secretGroup = 1
  2243. keywords = [
  2244. "pscale_oauth_",
  2245. ]
  2246. [[rules]]
  2247. description = "PlanetScale password"
  2248. id = "planetscale-password"
  2249. regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2250. secretGroup = 1
  2251. keywords = [
  2252. "pscale_pw_",
  2253. ]
  2254. [[rules]]
  2255. description = "Postman API token"
  2256. id = "postman-api-token"
  2257. regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2258. secretGroup = 1
  2259. keywords = [
  2260. "pmak-",
  2261. ]
  2262. [[rules]]
  2263. description = "Prefect API token"
  2264. id = "prefect-api-token"
  2265. regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2266. secretGroup = 1
  2267. keywords = [
  2268. "pnu_",
  2269. ]
  2270. [[rules]]
  2271. description = "Private Key"
  2272. id = "private-key"
  2273. regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY----'''
  2274. keywords = [
  2275. "-----begin",
  2276. ]
  2277. [[rules]]
  2278. description = "Pulumi API token"
  2279. id = "pulumi-api-token"
  2280. regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2281. secretGroup = 1
  2282. keywords = [
  2283. "pul-",
  2284. ]
  2285. [[rules]]
  2286. description = "PyPI upload token"
  2287. id = "pypi-upload-token"
  2288. regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
  2289. keywords = [
  2290. "pypi-ageichlwas5vcmc",
  2291. ]
  2292. [[rules]]
  2293. description = "RapidAPI Access Token"
  2294. id = "rapidapi-access-token"
  2295. regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2296. secretGroup = 1
  2297. keywords = [
  2298. "rapidapi",
  2299. ]
  2300. [[rules]]
  2301. description = "Readme API token"
  2302. id = "readme-api-token"
  2303. regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2304. secretGroup = 1
  2305. keywords = [
  2306. "rdme_",
  2307. ]
  2308. [[rules]]
  2309. description = "Rubygem API token"
  2310. id = "rubygems-api-token"
  2311. regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2312. secretGroup = 1
  2313. keywords = [
  2314. "rubygems_",
  2315. ]
  2316. [[rules]]
  2317. description = "Sendbird Access ID"
  2318. id = "sendbird-access-id"
  2319. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2320. secretGroup = 1
  2321. keywords = [
  2322. "sendbird",
  2323. ]
  2324. [[rules]]
  2325. description = "Sendbird Access Token"
  2326. id = "sendbird-access-token"
  2327. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2328. secretGroup = 1
  2329. keywords = [
  2330. "sendbird",
  2331. ]
  2332. [[rules]]
  2333. description = "SendGrid API token"
  2334. id = "sendgrid-api-token"
  2335. regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2336. secretGroup = 1
  2337. keywords = [
  2338. "sg.",
  2339. ]
  2340. [[rules]]
  2341. description = "Sendinblue API token"
  2342. id = "sendinblue-api-token"
  2343. regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2344. secretGroup = 1
  2345. keywords = [
  2346. "xkeysib-",
  2347. ]
  2348. [[rules]]
  2349. description = "Sentry Access Token"
  2350. id = "sentry-access-token"
  2351. regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2352. secretGroup = 1
  2353. keywords = [
  2354. "sentry",
  2355. ]
  2356. [[rules]]
  2357. description = "Shippo API token"
  2358. id = "shippo-api-token"
  2359. regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2360. secretGroup = 1
  2361. keywords = [
  2362. "shippo_",
  2363. ]
  2364. [[rules]]
  2365. description = "Shopify access token"
  2366. id = "shopify-access-token"
  2367. regex = '''shpat_[a-fA-F0-9]{32}'''
  2368. keywords = [
  2369. "shpat_",
  2370. ]
  2371. [[rules]]
  2372. description = "Shopify custom access token"
  2373. id = "shopify-custom-access-token"
  2374. regex = '''shpca_[a-fA-F0-9]{32}'''
  2375. keywords = [
  2376. "shpca_",
  2377. ]
  2378. [[rules]]
  2379. description = "Shopify private app access token"
  2380. id = "shopify-private-app-access-token"
  2381. regex = '''shppa_[a-fA-F0-9]{32}'''
  2382. keywords = [
  2383. "shppa_",
  2384. ]
  2385. [[rules]]
  2386. description = "Shopify shared secret"
  2387. id = "shopify-shared-secret"
  2388. regex = '''shpss_[a-fA-F0-9]{32}'''
  2389. keywords = [
  2390. "shpss_",
  2391. ]
  2392. [[rules]]
  2393. description = "Sidekiq Secret"
  2394. id = "sidekiq-secret"
  2395. regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2396. secretGroup = 1
  2397. keywords = [
  2398. "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
  2399. ]
  2400. [[rules]]
  2401. description = "Sidekiq Sensitive URL"
  2402. id = "sidekiq-sensitive-url"
  2403. regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
  2404. secretGroup = 2
  2405. keywords = [
  2406. "gems.contribsys.com","enterprise.contribsys.com",
  2407. ]
  2408. [[rules]]
  2409. description = "Slack token"
  2410. id = "slack-access-token"
  2411. regex = '''xox[baprs]-([0-9a-zA-Z]{10,48})'''
  2412. keywords = [
  2413. "xoxb","xoxa","xoxp","xoxr","xoxs",
  2414. ]
  2415. [[rules]]
  2416. description = "Slack Webhook"
  2417. id = "slack-web-hook"
  2418. regex = '''https:\/\/hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{44,46}'''
  2419. keywords = [
  2420. "hooks.slack.com",
  2421. ]
  2422. [[rules]]
  2423. description = "Square Access Token"
  2424. id = "square-access-token"
  2425. regex = '''(?i)\b(sq0atp-[0-9A-Za-z\-_]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2426. keywords = [
  2427. "sq0atp-",
  2428. ]
  2429. [[rules]]
  2430. description = "Squarespace Access Token"
  2431. id = "squarespace-access-token"
  2432. regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2433. secretGroup = 1
  2434. keywords = [
  2435. "squarespace",
  2436. ]
  2437. [[rules]]
  2438. description = "Stripe"
  2439. id = "stripe-access-token"
  2440. regex = '''(?i)(sk|pk)_(test|live)_[0-9a-z]{10,32}'''
  2441. keywords = [
  2442. "sk_test","pk_test","sk_live","pk_live",
  2443. ]
  2444. [[rules]]
  2445. description = "SumoLogic Access ID"
  2446. id = "sumologic-access-id"
  2447. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2448. secretGroup = 1
  2449. keywords = [
  2450. "sumo",
  2451. ]
  2452. [[rules]]
  2453. description = "SumoLogic Access Token"
  2454. id = "sumologic-access-token"
  2455. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2456. secretGroup = 1
  2457. keywords = [
  2458. "sumo",
  2459. ]
  2460. [[rules]]
  2461. description = "Telegram Bot API Token"
  2462. id = "telegram-bot-api-token"
  2463. regex = '''(?i)(?:^|[^0-9])([0-9]{5,16}:A[a-zA-Z0-9_\-]{34})(?:$|[^a-zA-Z0-9_\-])'''
  2464. secretGroup = 1
  2465. keywords = [
  2466. "telegram","api","bot","token","url",
  2467. ]
  2468. [[rules]]
  2469. description = "Travis CI Access Token"
  2470. id = "travisci-access-token"
  2471. regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2472. secretGroup = 1
  2473. keywords = [
  2474. "travis",
  2475. ]
  2476. [[rules]]
  2477. description = "Twilio API Key"
  2478. id = "twilio-api-key"
  2479. regex = '''SK[0-9a-fA-F]{32}'''
  2480. keywords = [
  2481. "twilio",
  2482. ]
  2483. [[rules]]
  2484. description = "Twitch API token"
  2485. id = "twitch-api-token"
  2486. regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2487. secretGroup = 1
  2488. keywords = [
  2489. "twitch",
  2490. ]
  2491. [[rules]]
  2492. description = "Twitter Access Secret"
  2493. id = "twitter-access-secret"
  2494. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2495. secretGroup = 1
  2496. keywords = [
  2497. "twitter",
  2498. ]
  2499. [[rules]]
  2500. description = "Twitter Access Token"
  2501. id = "twitter-access-token"
  2502. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2503. secretGroup = 1
  2504. keywords = [
  2505. "twitter",
  2506. ]
  2507. [[rules]]
  2508. description = "Twitter API Key"
  2509. id = "twitter-api-key"
  2510. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2511. secretGroup = 1
  2512. keywords = [
  2513. "twitter",
  2514. ]
  2515. [[rules]]
  2516. description = "Twitter API Secret"
  2517. id = "twitter-api-secret"
  2518. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2519. secretGroup = 1
  2520. keywords = [
  2521. "twitter",
  2522. ]
  2523. [[rules]]
  2524. description = "Twitter Bearer Token"
  2525. id = "twitter-bearer-token"
  2526. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2527. secretGroup = 1
  2528. keywords = [
  2529. "twitter",
  2530. ]
  2531. [[rules]]
  2532. description = "Typeform API token"
  2533. id = "typeform-api-token"
  2534. regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2535. secretGroup = 1
  2536. keywords = [
  2537. "tfp_",
  2538. ]
  2539. [[rules]]
  2540. description = "Vault Batch Token"
  2541. id = "vault-batch-token"
  2542. regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2543. keywords = [
  2544. "hvb",
  2545. ]
  2546. [[rules]]
  2547. description = "Vault Service Token"
  2548. id = "vault-service-token"
  2549. regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2550. keywords = [
  2551. "hvs",
  2552. ]
  2553. [[rules]]
  2554. description = "Yandex Access Token"
  2555. id = "yandex-access-token"
  2556. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2557. secretGroup = 1
  2558. keywords = [
  2559. "yandex",
  2560. ]
  2561. [[rules]]
  2562. description = "Yandex API Key"
  2563. id = "yandex-api-key"
  2564. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2565. secretGroup = 1
  2566. keywords = [
  2567. "yandex",
  2568. ]
  2569. [[rules]]
  2570. description = "Yandex AWS Access Token"
  2571. id = "yandex-aws-access-token"
  2572. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2573. secretGroup = 1
  2574. keywords = [
  2575. "yandex",
  2576. ]
  2577. [[rules]]
  2578. description = "Zendesk Secret Key"
  2579. id = "zendesk-secret-key"
  2580. regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2581. secretGroup = 1
  2582. keywords = [
  2583. "zendesk",
  2584. ]