gitleaks.toml 57 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793
  1. # This file has been auto-generated. Do not edit manually.
  2. # If you would like to contribute new rules, please use
  3. # cmd/generate/config/main.go and follow the contributing guidelines
  4. # at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
  5. # This is the default gitleaks configuration file.
  6. # Rules and allowlists are defined within this file.
  7. # Rules instruct gitleaks on what should be considered a secret.
  8. # Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
  9. title = "gitleaks config"
  10. [allowlist]
  11. description = "global allow lists"
  12. paths = [
  13. '''gitleaks.toml''',
  14. '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''',
  15. '''(go.mod|go.sum)$''',
  16. '''gradle.lockfile''',
  17. '''node_modules''',
  18. '''package-lock.json''',
  19. '''pnpm-lock.yaml''',
  20. '''Database.refactorlog''',
  21. '''vendor''',
  22. ]
  23. [[rules]]
  24. description = "Adafruit API Key"
  25. id = "adafruit-api-key"
  26. regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  27. secretGroup = 1
  28. keywords = [
  29. "adafruit",
  30. ]
  31. [[rules]]
  32. description = "Adobe Client ID (OAuth Web)"
  33. id = "adobe-client-id"
  34. regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  35. secretGroup = 1
  36. keywords = [
  37. "adobe",
  38. ]
  39. [[rules]]
  40. description = "Adobe Client Secret"
  41. id = "adobe-client-secret"
  42. regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  43. keywords = [
  44. "p8e-",
  45. ]
  46. [[rules]]
  47. description = "Age secret key"
  48. id = "age secret key"
  49. regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
  50. keywords = [
  51. "age-secret-key-1",
  52. ]
  53. [[rules]]
  54. description = "Airtable API Key"
  55. id = "airtable-api-key"
  56. regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  57. secretGroup = 1
  58. keywords = [
  59. "airtable",
  60. ]
  61. [[rules]]
  62. description = "Algolia API Key"
  63. id = "algolia-api-key"
  64. regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  65. keywords = [
  66. "algolia",
  67. ]
  68. [[rules]]
  69. description = "Alibaba AccessKey ID"
  70. id = "alibaba-access-key-id"
  71. regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  72. keywords = [
  73. "ltai",
  74. ]
  75. [[rules]]
  76. description = "Alibaba Secret Key"
  77. id = "alibaba-secret-key"
  78. regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  79. secretGroup = 1
  80. keywords = [
  81. "alibaba",
  82. ]
  83. [[rules]]
  84. description = "Asana Client ID"
  85. id = "asana-client-id"
  86. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  87. secretGroup = 1
  88. keywords = [
  89. "asana",
  90. ]
  91. [[rules]]
  92. description = "Asana Client Secret"
  93. id = "asana-client-secret"
  94. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  95. secretGroup = 1
  96. keywords = [
  97. "asana",
  98. ]
  99. [[rules]]
  100. description = "Atlassian API token"
  101. id = "atlassian-api-token"
  102. regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  103. secretGroup = 1
  104. keywords = [
  105. "atlassian","confluence","jira",
  106. ]
  107. [[rules]]
  108. description = "AWS"
  109. id = "aws-access-token"
  110. regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}'''
  111. keywords = [
  112. "akia","agpa","aida","aroa","aipa","anpa","anva","asia",
  113. ]
  114. [[rules]]
  115. description = "Beamer API token"
  116. id = "beamer-api-token"
  117. regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  118. secretGroup = 1
  119. keywords = [
  120. "beamer",
  121. ]
  122. [[rules]]
  123. description = "Bitbucket Client ID"
  124. id = "bitbucket-client-id"
  125. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  126. secretGroup = 1
  127. keywords = [
  128. "bitbucket",
  129. ]
  130. [[rules]]
  131. description = "Bitbucket Client Secret"
  132. id = "bitbucket-client-secret"
  133. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  134. secretGroup = 1
  135. keywords = [
  136. "bitbucket",
  137. ]
  138. [[rules]]
  139. description = "Bittrex Access Key"
  140. id = "bittrex-access-key"
  141. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  142. secretGroup = 1
  143. keywords = [
  144. "bittrex",
  145. ]
  146. [[rules]]
  147. description = "Bittrex Secret Key"
  148. id = "bittrex-secret-key"
  149. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  150. secretGroup = 1
  151. keywords = [
  152. "bittrex",
  153. ]
  154. [[rules]]
  155. description = "Clojars API token"
  156. id = "clojars-api-token"
  157. regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
  158. keywords = [
  159. "clojars",
  160. ]
  161. [[rules]]
  162. description = "Codecov Access Token"
  163. id = "codecov-access-token"
  164. regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  165. secretGroup = 1
  166. keywords = [
  167. "codecov",
  168. ]
  169. [[rules]]
  170. description = "Coinbase Access Token"
  171. id = "coinbase-access-token"
  172. regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  173. secretGroup = 1
  174. keywords = [
  175. "coinbase",
  176. ]
  177. [[rules]]
  178. description = "Confluent Access Token"
  179. id = "confluent-access-token"
  180. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  181. secretGroup = 1
  182. keywords = [
  183. "confluent",
  184. ]
  185. [[rules]]
  186. description = "Confluent Secret Key"
  187. id = "confluent-secret-key"
  188. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  189. secretGroup = 1
  190. keywords = [
  191. "confluent",
  192. ]
  193. [[rules]]
  194. description = "Contentful delivery API token"
  195. id = "contentful-delivery-api-token"
  196. regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  197. secretGroup = 1
  198. keywords = [
  199. "contentful",
  200. ]
  201. [[rules]]
  202. description = "Databricks API token"
  203. id = "databricks-api-token"
  204. regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  205. keywords = [
  206. "dapi",
  207. ]
  208. [[rules]]
  209. description = "Datadog Access Token"
  210. id = "datadog-access-token"
  211. regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  212. secretGroup = 1
  213. keywords = [
  214. "datadog",
  215. ]
  216. [[rules]]
  217. description = "Defined Networking API token"
  218. id = "defined-networking-api-token"
  219. regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  220. secretGroup = 1
  221. keywords = [
  222. "dnkey",
  223. ]
  224. [[rules]]
  225. description = "DigitalOcean OAuth Access Token"
  226. id = "digitalocean-access-token"
  227. regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  228. secretGroup = 1
  229. keywords = [
  230. "doo_v1_",
  231. ]
  232. [[rules]]
  233. description = "DigitalOcean Personal Access Token"
  234. id = "digitalocean-pat"
  235. regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  236. secretGroup = 1
  237. keywords = [
  238. "dop_v1_",
  239. ]
  240. [[rules]]
  241. description = "DigitalOcean OAuth Refresh Token"
  242. id = "digitalocean-refresh-token"
  243. regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  244. secretGroup = 1
  245. keywords = [
  246. "dor_v1_",
  247. ]
  248. [[rules]]
  249. description = "Discord API key"
  250. id = "discord-api-token"
  251. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  252. secretGroup = 1
  253. keywords = [
  254. "discord",
  255. ]
  256. [[rules]]
  257. description = "Discord client ID"
  258. id = "discord-client-id"
  259. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  260. secretGroup = 1
  261. keywords = [
  262. "discord",
  263. ]
  264. [[rules]]
  265. description = "Discord client secret"
  266. id = "discord-client-secret"
  267. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  268. secretGroup = 1
  269. keywords = [
  270. "discord",
  271. ]
  272. [[rules]]
  273. description = "Doppler API token"
  274. id = "doppler-api-token"
  275. regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
  276. keywords = [
  277. "doppler",
  278. ]
  279. [[rules]]
  280. description = "Droneci Access Token"
  281. id = "droneci-access-token"
  282. regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  283. secretGroup = 1
  284. keywords = [
  285. "droneci",
  286. ]
  287. [[rules]]
  288. description = "Dropbox API secret"
  289. id = "dropbox-api-token"
  290. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  291. secretGroup = 1
  292. keywords = [
  293. "dropbox",
  294. ]
  295. [[rules]]
  296. description = "Dropbox long lived API token"
  297. id = "dropbox-long-lived-api-token"
  298. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  299. keywords = [
  300. "dropbox",
  301. ]
  302. [[rules]]
  303. description = "Dropbox short lived API token"
  304. id = "dropbox-short-lived-api-token"
  305. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  306. keywords = [
  307. "dropbox",
  308. ]
  309. [[rules]]
  310. description = "Duffel API token"
  311. id = "duffel-api-token"
  312. regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
  313. keywords = [
  314. "duffel",
  315. ]
  316. [[rules]]
  317. description = "Dynatrace API token"
  318. id = "dynatrace-api-token"
  319. regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
  320. keywords = [
  321. "dynatrace",
  322. ]
  323. [[rules]]
  324. description = "EasyPost API token"
  325. id = "easypost-api-token"
  326. regex = '''\bEZAK(?i)[a-z0-9]{54}'''
  327. keywords = [
  328. "ezak",
  329. ]
  330. [[rules]]
  331. description = "EasyPost test API token"
  332. id = "easypost-test-api-token"
  333. regex = '''\bEZTK(?i)[a-z0-9]{54}'''
  334. keywords = [
  335. "eztk",
  336. ]
  337. [[rules]]
  338. description = "Etsy Access Token"
  339. id = "etsy-access-token"
  340. regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  341. secretGroup = 1
  342. keywords = [
  343. "etsy",
  344. ]
  345. [[rules]]
  346. description = "Facebook Access Token"
  347. id = "facebook"
  348. regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  349. secretGroup = 1
  350. keywords = [
  351. "facebook",
  352. ]
  353. [[rules]]
  354. description = "Fastly API key"
  355. id = "fastly-api-token"
  356. regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  357. secretGroup = 1
  358. keywords = [
  359. "fastly",
  360. ]
  361. [[rules]]
  362. description = "Finicity API token"
  363. id = "finicity-api-token"
  364. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  365. secretGroup = 1
  366. keywords = [
  367. "finicity",
  368. ]
  369. [[rules]]
  370. description = "Finicity Client Secret"
  371. id = "finicity-client-secret"
  372. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  373. secretGroup = 1
  374. keywords = [
  375. "finicity",
  376. ]
  377. [[rules]]
  378. description = "Finnhub Access Token"
  379. id = "finnhub-access-token"
  380. regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  381. secretGroup = 1
  382. keywords = [
  383. "finnhub",
  384. ]
  385. [[rules]]
  386. description = "Flickr Access Token"
  387. id = "flickr-access-token"
  388. regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  389. secretGroup = 1
  390. keywords = [
  391. "flickr",
  392. ]
  393. [[rules]]
  394. description = "Flutterwave Encryption Key"
  395. id = "flutterwave-encryption-key"
  396. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
  397. keywords = [
  398. "flwseck_test",
  399. ]
  400. [[rules]]
  401. description = "Finicity Public Key"
  402. id = "flutterwave-public-key"
  403. regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
  404. keywords = [
  405. "flwpubk_test",
  406. ]
  407. [[rules]]
  408. description = "Flutterwave Secret Key"
  409. id = "flutterwave-secret-key"
  410. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
  411. keywords = [
  412. "flwseck_test",
  413. ]
  414. [[rules]]
  415. description = "Frame.io API token"
  416. id = "frameio-api-token"
  417. regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
  418. keywords = [
  419. "fio-u-",
  420. ]
  421. [[rules]]
  422. description = "Freshbooks Access Token"
  423. id = "freshbooks-access-token"
  424. regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  425. secretGroup = 1
  426. keywords = [
  427. "freshbooks",
  428. ]
  429. [[rules]]
  430. description = "GCP API key"
  431. id = "gcp-api-key"
  432. regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  433. secretGroup = 1
  434. keywords = [
  435. "aiza",
  436. ]
  437. [[rules]]
  438. description = "Generic API Key"
  439. id = "generic-api-key"
  440. regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  441. secretGroup = 1
  442. entropy = 3.5
  443. keywords = [
  444. "key","api","token","secret","client","passwd","password","auth","access",
  445. ]
  446. [rules.allowlist]
  447. stopwords= [
  448. "client",
  449. "endpoint",
  450. "vpn",
  451. "_ec2_",
  452. "aws_",
  453. "authorize",
  454. "author",
  455. "define",
  456. "config",
  457. "credential",
  458. "setting",
  459. "sample",
  460. "xxxxxx",
  461. "000000",
  462. "buffer",
  463. "delete",
  464. "aaaaaa",
  465. "fewfwef",
  466. "getenv",
  467. "env_",
  468. "system",
  469. "example",
  470. "ecdsa",
  471. "sha256",
  472. "sha1",
  473. "sha2",
  474. "md5",
  475. "alert",
  476. "wizard",
  477. "target",
  478. "onboard",
  479. "welcome",
  480. "page",
  481. "exploit",
  482. "experiment",
  483. "expire",
  484. "rabbitmq",
  485. "scraper",
  486. "widget",
  487. "music",
  488. "dns_",
  489. "dns-",
  490. "yahoo",
  491. "want",
  492. "json",
  493. "action",
  494. "script",
  495. "fix_",
  496. "fix-",
  497. "develop",
  498. "compas",
  499. "stripe",
  500. "service",
  501. "master",
  502. "metric",
  503. "tech",
  504. "gitignore",
  505. "rich",
  506. "open",
  507. "stack",
  508. "irc_",
  509. "irc-",
  510. "sublime",
  511. "kohana",
  512. "has_",
  513. "has-",
  514. "fabric",
  515. "wordpres",
  516. "role",
  517. "osx_",
  518. "osx-",
  519. "boost",
  520. "addres",
  521. "queue",
  522. "working",
  523. "sandbox",
  524. "internet",
  525. "print",
  526. "vision",
  527. "tracking",
  528. "being",
  529. "generator",
  530. "traffic",
  531. "world",
  532. "pull",
  533. "rust",
  534. "watcher",
  535. "small",
  536. "auth",
  537. "full",
  538. "hash",
  539. "more",
  540. "install",
  541. "auto",
  542. "complete",
  543. "learn",
  544. "paper",
  545. "installer",
  546. "research",
  547. "acces",
  548. "last",
  549. "binding",
  550. "spine",
  551. "into",
  552. "chat",
  553. "algorithm",
  554. "resource",
  555. "uploader",
  556. "video",
  557. "maker",
  558. "next",
  559. "proc",
  560. "lock",
  561. "robot",
  562. "snake",
  563. "patch",
  564. "matrix",
  565. "drill",
  566. "terminal",
  567. "term",
  568. "stuff",
  569. "genetic",
  570. "generic",
  571. "identity",
  572. "audit",
  573. "pattern",
  574. "audio",
  575. "web_",
  576. "web-",
  577. "crud",
  578. "problem",
  579. "statu",
  580. "cms-",
  581. "cms_",
  582. "arch",
  583. "coffee",
  584. "workflow",
  585. "changelog",
  586. "another",
  587. "uiview",
  588. "content",
  589. "kitchen",
  590. "gnu_",
  591. "gnu-",
  592. "gnu.",
  593. "conf",
  594. "couchdb",
  595. "client",
  596. "opencv",
  597. "rendering",
  598. "update",
  599. "concept",
  600. "varnish",
  601. "gui_",
  602. "gui-",
  603. "gui.",
  604. "version",
  605. "shared",
  606. "extra",
  607. "product",
  608. "still",
  609. "not_",
  610. "not-",
  611. "not.",
  612. "drop",
  613. "ring",
  614. "png_",
  615. "png-",
  616. "png.",
  617. "actively",
  618. "import",
  619. "output",
  620. "backup",
  621. "start",
  622. "embedded",
  623. "registry",
  624. "pool",
  625. "semantic",
  626. "instagram",
  627. "bash",
  628. "system",
  629. "ninja",
  630. "drupal",
  631. "jquery",
  632. "polyfill",
  633. "physic",
  634. "league",
  635. "guide",
  636. "pack",
  637. "synopsi",
  638. "sketch",
  639. "injection",
  640. "svg_",
  641. "svg-",
  642. "svg.",
  643. "friendly",
  644. "wave",
  645. "convert",
  646. "manage",
  647. "camera",
  648. "link",
  649. "slide",
  650. "timer",
  651. "wrapper",
  652. "gallery",
  653. "url_",
  654. "url-",
  655. "url.",
  656. "todomvc",
  657. "requirej",
  658. "party",
  659. "http",
  660. "payment",
  661. "async",
  662. "library",
  663. "home",
  664. "coco",
  665. "gaia",
  666. "display",
  667. "universal",
  668. "func",
  669. "metadata",
  670. "hipchat",
  671. "under",
  672. "room",
  673. "config",
  674. "personal",
  675. "realtime",
  676. "resume",
  677. "database",
  678. "testing",
  679. "tiny",
  680. "basic",
  681. "forum",
  682. "meetup",
  683. "yet_",
  684. "yet-",
  685. "yet.",
  686. "cento",
  687. "dead",
  688. "fluentd",
  689. "editor",
  690. "utilitie",
  691. "run_",
  692. "run-",
  693. "run.",
  694. "box_",
  695. "box-",
  696. "box.",
  697. "bot_",
  698. "bot-",
  699. "bot.",
  700. "making",
  701. "sample",
  702. "group",
  703. "monitor",
  704. "ajax",
  705. "parallel",
  706. "cassandra",
  707. "ultimate",
  708. "site",
  709. "get_",
  710. "get-",
  711. "get.",
  712. "gen_",
  713. "gen-",
  714. "gen.",
  715. "gem_",
  716. "gem-",
  717. "gem.",
  718. "extended",
  719. "image",
  720. "knife",
  721. "asset",
  722. "nested",
  723. "zero",
  724. "plugin",
  725. "bracket",
  726. "mule",
  727. "mozilla",
  728. "number",
  729. "act_",
  730. "act-",
  731. "act.",
  732. "map_",
  733. "map-",
  734. "map.",
  735. "micro",
  736. "debug",
  737. "openshift",
  738. "chart",
  739. "expres",
  740. "backend",
  741. "task",
  742. "source",
  743. "translate",
  744. "jbos",
  745. "composer",
  746. "sqlite",
  747. "profile",
  748. "mustache",
  749. "mqtt",
  750. "yeoman",
  751. "have",
  752. "builder",
  753. "smart",
  754. "like",
  755. "oauth",
  756. "school",
  757. "guideline",
  758. "captcha",
  759. "filter",
  760. "bitcoin",
  761. "bridge",
  762. "color",
  763. "toolbox",
  764. "discovery",
  765. "new_",
  766. "new-",
  767. "new.",
  768. "dashboard",
  769. "when",
  770. "setting",
  771. "level",
  772. "post",
  773. "standard",
  774. "port",
  775. "platform",
  776. "yui_",
  777. "yui-",
  778. "yui.",
  779. "grunt",
  780. "animation",
  781. "haskell",
  782. "icon",
  783. "latex",
  784. "cheat",
  785. "lua_",
  786. "lua-",
  787. "lua.",
  788. "gulp",
  789. "case",
  790. "author",
  791. "without",
  792. "simulator",
  793. "wifi",
  794. "directory",
  795. "lisp",
  796. "list",
  797. "flat",
  798. "adventure",
  799. "story",
  800. "storm",
  801. "gpu_",
  802. "gpu-",
  803. "gpu.",
  804. "store",
  805. "caching",
  806. "attention",
  807. "solr",
  808. "logger",
  809. "demo",
  810. "shortener",
  811. "hadoop",
  812. "finder",
  813. "phone",
  814. "pipeline",
  815. "range",
  816. "textmate",
  817. "showcase",
  818. "app_",
  819. "app-",
  820. "app.",
  821. "idiomatic",
  822. "edit",
  823. "our_",
  824. "our-",
  825. "our.",
  826. "out_",
  827. "out-",
  828. "out.",
  829. "sentiment",
  830. "linked",
  831. "why_",
  832. "why-",
  833. "why.",
  834. "local",
  835. "cube",
  836. "gmail",
  837. "job_",
  838. "job-",
  839. "job.",
  840. "rpc_",
  841. "rpc-",
  842. "rpc.",
  843. "contest",
  844. "tcp_",
  845. "tcp-",
  846. "tcp.",
  847. "usage",
  848. "buildout",
  849. "weather",
  850. "transfer",
  851. "automated",
  852. "sphinx",
  853. "issue",
  854. "sas_",
  855. "sas-",
  856. "sas.",
  857. "parallax",
  858. "jasmine",
  859. "addon",
  860. "machine",
  861. "solution",
  862. "dsl_",
  863. "dsl-",
  864. "dsl.",
  865. "episode",
  866. "menu",
  867. "theme",
  868. "best",
  869. "adapter",
  870. "debugger",
  871. "chrome",
  872. "tutorial",
  873. "life",
  874. "step",
  875. "people",
  876. "joomla",
  877. "paypal",
  878. "developer",
  879. "solver",
  880. "team",
  881. "current",
  882. "love",
  883. "visual",
  884. "date",
  885. "data",
  886. "canva",
  887. "container",
  888. "future",
  889. "xml_",
  890. "xml-",
  891. "xml.",
  892. "twig",
  893. "nagio",
  894. "spatial",
  895. "original",
  896. "sync",
  897. "archived",
  898. "refinery",
  899. "science",
  900. "mapping",
  901. "gitlab",
  902. "play",
  903. "ext_",
  904. "ext-",
  905. "ext.",
  906. "session",
  907. "impact",
  908. "set_",
  909. "set-",
  910. "set.",
  911. "see_",
  912. "see-",
  913. "see.",
  914. "migration",
  915. "commit",
  916. "community",
  917. "shopify",
  918. "what'",
  919. "cucumber",
  920. "statamic",
  921. "mysql",
  922. "location",
  923. "tower",
  924. "line",
  925. "code",
  926. "amqp",
  927. "hello",
  928. "send",
  929. "index",
  930. "high",
  931. "notebook",
  932. "alloy",
  933. "python",
  934. "field",
  935. "document",
  936. "soap",
  937. "edition",
  938. "email",
  939. "php_",
  940. "php-",
  941. "php.",
  942. "command",
  943. "transport",
  944. "official",
  945. "upload",
  946. "study",
  947. "secure",
  948. "angularj",
  949. "akka",
  950. "scalable",
  951. "package",
  952. "request",
  953. "con_",
  954. "con-",
  955. "con.",
  956. "flexible",
  957. "security",
  958. "comment",
  959. "module",
  960. "flask",
  961. "graph",
  962. "flash",
  963. "apache",
  964. "change",
  965. "window",
  966. "space",
  967. "lambda",
  968. "sheet",
  969. "bookmark",
  970. "carousel",
  971. "friend",
  972. "objective",
  973. "jekyll",
  974. "bootstrap",
  975. "first",
  976. "article",
  977. "gwt_",
  978. "gwt-",
  979. "gwt.",
  980. "classic",
  981. "media",
  982. "websocket",
  983. "touch",
  984. "desktop",
  985. "real",
  986. "read",
  987. "recorder",
  988. "moved",
  989. "storage",
  990. "validator",
  991. "add-on",
  992. "pusher",
  993. "scs_",
  994. "scs-",
  995. "scs.",
  996. "inline",
  997. "asp_",
  998. "asp-",
  999. "asp.",
  1000. "timeline",
  1001. "base",
  1002. "encoding",
  1003. "ffmpeg",
  1004. "kindle",
  1005. "tinymce",
  1006. "pretty",
  1007. "jpa_",
  1008. "jpa-",
  1009. "jpa.",
  1010. "used",
  1011. "user",
  1012. "required",
  1013. "webhook",
  1014. "download",
  1015. "resque",
  1016. "espresso",
  1017. "cloud",
  1018. "mongo",
  1019. "benchmark",
  1020. "pure",
  1021. "cakephp",
  1022. "modx",
  1023. "mode",
  1024. "reactive",
  1025. "fuel",
  1026. "written",
  1027. "flickr",
  1028. "mail",
  1029. "brunch",
  1030. "meteor",
  1031. "dynamic",
  1032. "neo_",
  1033. "neo-",
  1034. "neo.",
  1035. "new_",
  1036. "new-",
  1037. "new.",
  1038. "net_",
  1039. "net-",
  1040. "net.",
  1041. "typo",
  1042. "type",
  1043. "keyboard",
  1044. "erlang",
  1045. "adobe",
  1046. "logging",
  1047. "ckeditor",
  1048. "message",
  1049. "iso_",
  1050. "iso-",
  1051. "iso.",
  1052. "hook",
  1053. "ldap",
  1054. "folder",
  1055. "reference",
  1056. "railscast",
  1057. "www_",
  1058. "www-",
  1059. "www.",
  1060. "tracker",
  1061. "azure",
  1062. "fork",
  1063. "form",
  1064. "digital",
  1065. "exporter",
  1066. "skin",
  1067. "string",
  1068. "template",
  1069. "designer",
  1070. "gollum",
  1071. "fluent",
  1072. "entity",
  1073. "language",
  1074. "alfred",
  1075. "summary",
  1076. "wiki",
  1077. "kernel",
  1078. "calendar",
  1079. "plupload",
  1080. "symfony",
  1081. "foundry",
  1082. "remote",
  1083. "talk",
  1084. "search",
  1085. "dev_",
  1086. "dev-",
  1087. "dev.",
  1088. "del_",
  1089. "del-",
  1090. "del.",
  1091. "token",
  1092. "idea",
  1093. "sencha",
  1094. "selector",
  1095. "interface",
  1096. "create",
  1097. "fun_",
  1098. "fun-",
  1099. "fun.",
  1100. "groovy",
  1101. "query",
  1102. "grail",
  1103. "red_",
  1104. "red-",
  1105. "red.",
  1106. "laravel",
  1107. "monkey",
  1108. "slack",
  1109. "supported",
  1110. "instant",
  1111. "value",
  1112. "center",
  1113. "latest",
  1114. "work",
  1115. "but_",
  1116. "but-",
  1117. "but.",
  1118. "bug_",
  1119. "bug-",
  1120. "bug.",
  1121. "virtual",
  1122. "tweet",
  1123. "statsd",
  1124. "studio",
  1125. "path",
  1126. "real-time",
  1127. "frontend",
  1128. "notifier",
  1129. "coding",
  1130. "tool",
  1131. "firmware",
  1132. "flow",
  1133. "random",
  1134. "mediawiki",
  1135. "bosh",
  1136. "been",
  1137. "beer",
  1138. "lightbox",
  1139. "theory",
  1140. "origin",
  1141. "redmine",
  1142. "hub_",
  1143. "hub-",
  1144. "hub.",
  1145. "require",
  1146. "pro_",
  1147. "pro-",
  1148. "pro.",
  1149. "ant_",
  1150. "ant-",
  1151. "ant.",
  1152. "any_",
  1153. "any-",
  1154. "any.",
  1155. "recipe",
  1156. "closure",
  1157. "mapper",
  1158. "event",
  1159. "todo",
  1160. "model",
  1161. "redi",
  1162. "provider",
  1163. "rvm_",
  1164. "rvm-",
  1165. "rvm.",
  1166. "program",
  1167. "memcached",
  1168. "rail",
  1169. "silex",
  1170. "foreman",
  1171. "activity",
  1172. "license",
  1173. "strategy",
  1174. "batch",
  1175. "streaming",
  1176. "fast",
  1177. "use_",
  1178. "use-",
  1179. "use.",
  1180. "usb_",
  1181. "usb-",
  1182. "usb.",
  1183. "impres",
  1184. "academy",
  1185. "slider",
  1186. "please",
  1187. "layer",
  1188. "cros",
  1189. "now_",
  1190. "now-",
  1191. "now.",
  1192. "miner",
  1193. "extension",
  1194. "own_",
  1195. "own-",
  1196. "own.",
  1197. "app_",
  1198. "app-",
  1199. "app.",
  1200. "debian",
  1201. "symphony",
  1202. "example",
  1203. "feature",
  1204. "serie",
  1205. "tree",
  1206. "project",
  1207. "runner",
  1208. "entry",
  1209. "leetcode",
  1210. "layout",
  1211. "webrtc",
  1212. "logic",
  1213. "login",
  1214. "worker",
  1215. "toolkit",
  1216. "mocha",
  1217. "support",
  1218. "back",
  1219. "inside",
  1220. "device",
  1221. "jenkin",
  1222. "contact",
  1223. "fake",
  1224. "awesome",
  1225. "ocaml",
  1226. "bit_",
  1227. "bit-",
  1228. "bit.",
  1229. "drive",
  1230. "screen",
  1231. "prototype",
  1232. "gist",
  1233. "binary",
  1234. "nosql",
  1235. "rest",
  1236. "overview",
  1237. "dart",
  1238. "dark",
  1239. "emac",
  1240. "mongoid",
  1241. "solarized",
  1242. "homepage",
  1243. "emulator",
  1244. "commander",
  1245. "django",
  1246. "yandex",
  1247. "gradle",
  1248. "xcode",
  1249. "writer",
  1250. "crm_",
  1251. "crm-",
  1252. "crm.",
  1253. "jade",
  1254. "startup",
  1255. "error",
  1256. "using",
  1257. "format",
  1258. "name",
  1259. "spring",
  1260. "parser",
  1261. "scratch",
  1262. "magic",
  1263. "try_",
  1264. "try-",
  1265. "try.",
  1266. "rack",
  1267. "directive",
  1268. "challenge",
  1269. "slim",
  1270. "counter",
  1271. "element",
  1272. "chosen",
  1273. "doc_",
  1274. "doc-",
  1275. "doc.",
  1276. "meta",
  1277. "should",
  1278. "button",
  1279. "packet",
  1280. "stream",
  1281. "hardware",
  1282. "android",
  1283. "infinite",
  1284. "password",
  1285. "software",
  1286. "ghost",
  1287. "xamarin",
  1288. "spec",
  1289. "chef",
  1290. "interview",
  1291. "hubot",
  1292. "mvc_",
  1293. "mvc-",
  1294. "mvc.",
  1295. "exercise",
  1296. "leaflet",
  1297. "launcher",
  1298. "air_",
  1299. "air-",
  1300. "air.",
  1301. "photo",
  1302. "board",
  1303. "boxen",
  1304. "way_",
  1305. "way-",
  1306. "way.",
  1307. "computing",
  1308. "welcome",
  1309. "notepad",
  1310. "portfolio",
  1311. "cat_",
  1312. "cat-",
  1313. "cat.",
  1314. "can_",
  1315. "can-",
  1316. "can.",
  1317. "magento",
  1318. "yaml",
  1319. "domain",
  1320. "card",
  1321. "yii_",
  1322. "yii-",
  1323. "yii.",
  1324. "checker",
  1325. "browser",
  1326. "upgrade",
  1327. "only",
  1328. "progres",
  1329. "aura",
  1330. "ruby_",
  1331. "ruby-",
  1332. "ruby.",
  1333. "polymer",
  1334. "util",
  1335. "lite",
  1336. "hackathon",
  1337. "rule",
  1338. "log_",
  1339. "log-",
  1340. "log.",
  1341. "opengl",
  1342. "stanford",
  1343. "skeleton",
  1344. "history",
  1345. "inspector",
  1346. "help",
  1347. "soon",
  1348. "selenium",
  1349. "lab_",
  1350. "lab-",
  1351. "lab.",
  1352. "scheme",
  1353. "schema",
  1354. "look",
  1355. "ready",
  1356. "leveldb",
  1357. "docker",
  1358. "game",
  1359. "minimal",
  1360. "logstash",
  1361. "messaging",
  1362. "within",
  1363. "heroku",
  1364. "mongodb",
  1365. "kata",
  1366. "suite",
  1367. "picker",
  1368. "win_",
  1369. "win-",
  1370. "win.",
  1371. "wip_",
  1372. "wip-",
  1373. "wip.",
  1374. "panel",
  1375. "started",
  1376. "starter",
  1377. "front-end",
  1378. "detector",
  1379. "deploy",
  1380. "editing",
  1381. "based",
  1382. "admin",
  1383. "capture",
  1384. "spree",
  1385. "page",
  1386. "bundle",
  1387. "goal",
  1388. "rpg_",
  1389. "rpg-",
  1390. "rpg.",
  1391. "setup",
  1392. "side",
  1393. "mean",
  1394. "reader",
  1395. "cookbook",
  1396. "mini",
  1397. "modern",
  1398. "seed",
  1399. "dom_",
  1400. "dom-",
  1401. "dom.",
  1402. "doc_",
  1403. "doc-",
  1404. "doc.",
  1405. "dot_",
  1406. "dot-",
  1407. "dot.",
  1408. "syntax",
  1409. "sugar",
  1410. "loader",
  1411. "website",
  1412. "make",
  1413. "kit_",
  1414. "kit-",
  1415. "kit.",
  1416. "protocol",
  1417. "human",
  1418. "daemon",
  1419. "golang",
  1420. "manager",
  1421. "countdown",
  1422. "connector",
  1423. "swagger",
  1424. "map_",
  1425. "map-",
  1426. "map.",
  1427. "mac_",
  1428. "mac-",
  1429. "mac.",
  1430. "man_",
  1431. "man-",
  1432. "man.",
  1433. "orm_",
  1434. "orm-",
  1435. "orm.",
  1436. "org_",
  1437. "org-",
  1438. "org.",
  1439. "little",
  1440. "zsh_",
  1441. "zsh-",
  1442. "zsh.",
  1443. "shop",
  1444. "show",
  1445. "workshop",
  1446. "money",
  1447. "grid",
  1448. "server",
  1449. "octopres",
  1450. "svn_",
  1451. "svn-",
  1452. "svn.",
  1453. "ember",
  1454. "embed",
  1455. "general",
  1456. "file",
  1457. "important",
  1458. "dropbox",
  1459. "portable",
  1460. "public",
  1461. "docpad",
  1462. "fish",
  1463. "sbt_",
  1464. "sbt-",
  1465. "sbt.",
  1466. "done",
  1467. "para",
  1468. "network",
  1469. "common",
  1470. "readme",
  1471. "popup",
  1472. "simple",
  1473. "purpose",
  1474. "mirror",
  1475. "single",
  1476. "cordova",
  1477. "exchange",
  1478. "object",
  1479. "design",
  1480. "gateway",
  1481. "account",
  1482. "lamp",
  1483. "intellij",
  1484. "math",
  1485. "mit_",
  1486. "mit-",
  1487. "mit.",
  1488. "control",
  1489. "enhanced",
  1490. "emitter",
  1491. "multi",
  1492. "add_",
  1493. "add-",
  1494. "add.",
  1495. "about",
  1496. "socket",
  1497. "preview",
  1498. "vagrant",
  1499. "cli_",
  1500. "cli-",
  1501. "cli.",
  1502. "powerful",
  1503. "top_",
  1504. "top-",
  1505. "top.",
  1506. "radio",
  1507. "watch",
  1508. "fluid",
  1509. "amazon",
  1510. "report",
  1511. "couchbase",
  1512. "automatic",
  1513. "detection",
  1514. "sprite",
  1515. "pyramid",
  1516. "portal",
  1517. "advanced",
  1518. "plu_",
  1519. "plu-",
  1520. "plu.",
  1521. "runtime",
  1522. "git_",
  1523. "git-",
  1524. "git.",
  1525. "uri_",
  1526. "uri-",
  1527. "uri.",
  1528. "haml",
  1529. "node",
  1530. "sql_",
  1531. "sql-",
  1532. "sql.",
  1533. "cool",
  1534. "core",
  1535. "obsolete",
  1536. "handler",
  1537. "iphone",
  1538. "extractor",
  1539. "array",
  1540. "copy",
  1541. "nlp_",
  1542. "nlp-",
  1543. "nlp.",
  1544. "reveal",
  1545. "pop_",
  1546. "pop-",
  1547. "pop.",
  1548. "engine",
  1549. "parse",
  1550. "check",
  1551. "html",
  1552. "nest",
  1553. "all_",
  1554. "all-",
  1555. "all.",
  1556. "chinese",
  1557. "buildpack",
  1558. "what",
  1559. "tag_",
  1560. "tag-",
  1561. "tag.",
  1562. "proxy",
  1563. "style",
  1564. "cookie",
  1565. "feed",
  1566. "restful",
  1567. "compiler",
  1568. "creating",
  1569. "prelude",
  1570. "context",
  1571. "java",
  1572. "rspec",
  1573. "mock",
  1574. "backbone",
  1575. "light",
  1576. "spotify",
  1577. "flex",
  1578. "related",
  1579. "shell",
  1580. "which",
  1581. "clas",
  1582. "webapp",
  1583. "swift",
  1584. "ansible",
  1585. "unity",
  1586. "console",
  1587. "tumblr",
  1588. "export",
  1589. "campfire",
  1590. "conway'",
  1591. "made",
  1592. "riak",
  1593. "hero",
  1594. "here",
  1595. "unix",
  1596. "unit",
  1597. "glas",
  1598. "smtp",
  1599. "how_",
  1600. "how-",
  1601. "how.",
  1602. "hot_",
  1603. "hot-",
  1604. "hot.",
  1605. "debug",
  1606. "release",
  1607. "diff",
  1608. "player",
  1609. "easy",
  1610. "right",
  1611. "old_",
  1612. "old-",
  1613. "old.",
  1614. "animate",
  1615. "time",
  1616. "push",
  1617. "explorer",
  1618. "course",
  1619. "training",
  1620. "nette",
  1621. "router",
  1622. "draft",
  1623. "structure",
  1624. "note",
  1625. "salt",
  1626. "where",
  1627. "spark",
  1628. "trello",
  1629. "power",
  1630. "method",
  1631. "social",
  1632. "via_",
  1633. "via-",
  1634. "via.",
  1635. "vim_",
  1636. "vim-",
  1637. "vim.",
  1638. "select",
  1639. "webkit",
  1640. "github",
  1641. "ftp_",
  1642. "ftp-",
  1643. "ftp.",
  1644. "creator",
  1645. "mongoose",
  1646. "led_",
  1647. "led-",
  1648. "led.",
  1649. "movie",
  1650. "currently",
  1651. "pdf_",
  1652. "pdf-",
  1653. "pdf.",
  1654. "load",
  1655. "markdown",
  1656. "phalcon",
  1657. "input",
  1658. "custom",
  1659. "atom",
  1660. "oracle",
  1661. "phonegap",
  1662. "ubuntu",
  1663. "great",
  1664. "rdf_",
  1665. "rdf-",
  1666. "rdf.",
  1667. "popcorn",
  1668. "firefox",
  1669. "zip_",
  1670. "zip-",
  1671. "zip.",
  1672. "cuda",
  1673. "dotfile",
  1674. "static",
  1675. "openwrt",
  1676. "viewer",
  1677. "powered",
  1678. "graphic",
  1679. "les_",
  1680. "les-",
  1681. "les.",
  1682. "doe_",
  1683. "doe-",
  1684. "doe.",
  1685. "maven",
  1686. "word",
  1687. "eclipse",
  1688. "lab_",
  1689. "lab-",
  1690. "lab.",
  1691. "hacking",
  1692. "steam",
  1693. "analytic",
  1694. "option",
  1695. "abstract",
  1696. "archive",
  1697. "reality",
  1698. "switcher",
  1699. "club",
  1700. "write",
  1701. "kafka",
  1702. "arduino",
  1703. "angular",
  1704. "online",
  1705. "title",
  1706. "don't",
  1707. "contao",
  1708. "notice",
  1709. "analyzer",
  1710. "learning",
  1711. "zend",
  1712. "external",
  1713. "staging",
  1714. "busines",
  1715. "tdd_",
  1716. "tdd-",
  1717. "tdd.",
  1718. "scanner",
  1719. "building",
  1720. "snippet",
  1721. "modular",
  1722. "bower",
  1723. "stm_",
  1724. "stm-",
  1725. "stm.",
  1726. "lib_",
  1727. "lib-",
  1728. "lib.",
  1729. "alpha",
  1730. "mobile",
  1731. "clean",
  1732. "linux",
  1733. "nginx",
  1734. "manifest",
  1735. "some",
  1736. "raspberry",
  1737. "gnome",
  1738. "ide_",
  1739. "ide-",
  1740. "ide.",
  1741. "block",
  1742. "statistic",
  1743. "info",
  1744. "drag",
  1745. "youtube",
  1746. "koan",
  1747. "facebook",
  1748. "paperclip",
  1749. "art_",
  1750. "art-",
  1751. "art.",
  1752. "quality",
  1753. "tab_",
  1754. "tab-",
  1755. "tab.",
  1756. "need",
  1757. "dojo",
  1758. "shield",
  1759. "computer",
  1760. "stat",
  1761. "state",
  1762. "twitter",
  1763. "utility",
  1764. "converter",
  1765. "hosting",
  1766. "devise",
  1767. "liferay",
  1768. "updated",
  1769. "force",
  1770. "tip_",
  1771. "tip-",
  1772. "tip.",
  1773. "behavior",
  1774. "active",
  1775. "call",
  1776. "answer",
  1777. "deck",
  1778. "better",
  1779. "principle",
  1780. "ches",
  1781. "bar_",
  1782. "bar-",
  1783. "bar.",
  1784. "reddit",
  1785. "three",
  1786. "haxe",
  1787. "just",
  1788. "plug-in",
  1789. "agile",
  1790. "manual",
  1791. "tetri",
  1792. "super",
  1793. "beta",
  1794. "parsing",
  1795. "doctrine",
  1796. "minecraft",
  1797. "useful",
  1798. "perl",
  1799. "sharing",
  1800. "agent",
  1801. "switch",
  1802. "view",
  1803. "dash",
  1804. "channel",
  1805. "repo",
  1806. "pebble",
  1807. "profiler",
  1808. "warning",
  1809. "cluster",
  1810. "running",
  1811. "markup",
  1812. "evented",
  1813. "mod_",
  1814. "mod-",
  1815. "mod.",
  1816. "share",
  1817. "csv_",
  1818. "csv-",
  1819. "csv.",
  1820. "response",
  1821. "good",
  1822. "house",
  1823. "connect",
  1824. "built",
  1825. "build",
  1826. "find",
  1827. "ipython",
  1828. "webgl",
  1829. "big_",
  1830. "big-",
  1831. "big.",
  1832. "google",
  1833. "scala",
  1834. "sdl_",
  1835. "sdl-",
  1836. "sdl.",
  1837. "sdk_",
  1838. "sdk-",
  1839. "sdk.",
  1840. "native",
  1841. "day_",
  1842. "day-",
  1843. "day.",
  1844. "puppet",
  1845. "text",
  1846. "routing",
  1847. "helper",
  1848. "linkedin",
  1849. "crawler",
  1850. "host",
  1851. "guard",
  1852. "merchant",
  1853. "poker",
  1854. "over",
  1855. "writing",
  1856. "free",
  1857. "classe",
  1858. "component",
  1859. "craft",
  1860. "nodej",
  1861. "phoenix",
  1862. "longer",
  1863. "quick",
  1864. "lazy",
  1865. "memory",
  1866. "clone",
  1867. "hacker",
  1868. "middleman",
  1869. "factory",
  1870. "motion",
  1871. "multiple",
  1872. "tornado",
  1873. "hack",
  1874. "ssh_",
  1875. "ssh-",
  1876. "ssh.",
  1877. "review",
  1878. "vimrc",
  1879. "driver",
  1880. "driven",
  1881. "blog",
  1882. "particle",
  1883. "table",
  1884. "intro",
  1885. "importer",
  1886. "thrift",
  1887. "xmpp",
  1888. "framework",
  1889. "refresh",
  1890. "react",
  1891. "font",
  1892. "librarie",
  1893. "variou",
  1894. "formatter",
  1895. "analysi",
  1896. "karma",
  1897. "scroll",
  1898. "tut_",
  1899. "tut-",
  1900. "tut.",
  1901. "apple",
  1902. "tag_",
  1903. "tag-",
  1904. "tag.",
  1905. "tab_",
  1906. "tab-",
  1907. "tab.",
  1908. "category",
  1909. "ionic",
  1910. "cache",
  1911. "homebrew",
  1912. "reverse",
  1913. "english",
  1914. "getting",
  1915. "shipping",
  1916. "clojure",
  1917. "boot",
  1918. "book",
  1919. "branch",
  1920. "combination",
  1921. "combo",
  1922. ]
  1923. [[rules]]
  1924. description = "GitHub App Token"
  1925. id = "github-app-token"
  1926. regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
  1927. keywords = [
  1928. "ghu_","ghs_",
  1929. ]
  1930. [[rules]]
  1931. description = "GitHub Fine-Grained Personal Access Token"
  1932. id = "github-fine-grained-pat"
  1933. regex = '''github_pat_[0-9a-zA-Z_]{82}'''
  1934. keywords = [
  1935. "github_pat_",
  1936. ]
  1937. [[rules]]
  1938. description = "GitHub OAuth Access Token"
  1939. id = "github-oauth"
  1940. regex = '''gho_[0-9a-zA-Z]{36}'''
  1941. keywords = [
  1942. "gho_",
  1943. ]
  1944. [[rules]]
  1945. description = "GitHub Personal Access Token"
  1946. id = "github-pat"
  1947. regex = '''ghp_[0-9a-zA-Z]{36}'''
  1948. keywords = [
  1949. "ghp_",
  1950. ]
  1951. [[rules]]
  1952. description = "GitHub Refresh Token"
  1953. id = "github-refresh-token"
  1954. regex = '''ghr_[0-9a-zA-Z]{36}'''
  1955. keywords = [
  1956. "ghr_",
  1957. ]
  1958. [[rules]]
  1959. description = "GitLab Personal Access Token"
  1960. id = "gitlab-pat"
  1961. regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
  1962. keywords = [
  1963. "glpat-",
  1964. ]
  1965. [[rules]]
  1966. description = "GitLab Pipeline Trigger Token"
  1967. id = "gitlab-ptt"
  1968. regex = '''glptt-[0-9a-f]{40}'''
  1969. keywords = [
  1970. "glptt-",
  1971. ]
  1972. [[rules]]
  1973. description = "GitLab Runner Registration Token"
  1974. id = "gitlab-rrt"
  1975. regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
  1976. keywords = [
  1977. "gr1348941",
  1978. ]
  1979. [[rules]]
  1980. description = "Gitter Access Token"
  1981. id = "gitter-access-token"
  1982. regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1983. secretGroup = 1
  1984. keywords = [
  1985. "gitter",
  1986. ]
  1987. [[rules]]
  1988. description = "GoCardless API token"
  1989. id = "gocardless-api-token"
  1990. regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1991. secretGroup = 1
  1992. keywords = [
  1993. "live_","gocardless",
  1994. ]
  1995. [[rules]]
  1996. description = "Grafana api key (or Grafana cloud api key)"
  1997. id = "grafana-api-key"
  1998. regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1999. secretGroup = 1
  2000. keywords = [
  2001. "eyjrijoi",
  2002. ]
  2003. [[rules]]
  2004. description = "Grafana cloud api token"
  2005. id = "grafana-cloud-api-token"
  2006. regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2007. secretGroup = 1
  2008. keywords = [
  2009. "glc_",
  2010. ]
  2011. [[rules]]
  2012. description = "Grafana service account token"
  2013. id = "grafana-service-account-token"
  2014. regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2015. secretGroup = 1
  2016. keywords = [
  2017. "glsa_",
  2018. ]
  2019. [[rules]]
  2020. description = "HashiCorp Terraform user/org API token"
  2021. id = "hashicorp-tf-api-token"
  2022. regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
  2023. keywords = [
  2024. "atlasv1",
  2025. ]
  2026. [[rules]]
  2027. description = "Heroku API Key"
  2028. id = "heroku-api-key"
  2029. regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2030. secretGroup = 1
  2031. keywords = [
  2032. "heroku",
  2033. ]
  2034. [[rules]]
  2035. description = "HubSpot API Token"
  2036. id = "hubspot-api-key"
  2037. regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2038. secretGroup = 1
  2039. keywords = [
  2040. "hubspot",
  2041. ]
  2042. [[rules]]
  2043. description = "Intercom API Token"
  2044. id = "intercom-api-key"
  2045. regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2046. secretGroup = 1
  2047. keywords = [
  2048. "intercom",
  2049. ]
  2050. [[rules]]
  2051. description = "JSON Web Token"
  2052. id = "jwt"
  2053. regex = '''(?i)\b(ey[0-9a-z]{30,34}\.ey[0-9a-z-\/_]{30,500}\.[0-9a-zA-Z-\/_]{10,200}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2054. keywords = [
  2055. "ey",
  2056. ]
  2057. [[rules]]
  2058. description = "Kraken Access Token"
  2059. id = "kraken-access-token"
  2060. regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2061. secretGroup = 1
  2062. keywords = [
  2063. "kraken",
  2064. ]
  2065. [[rules]]
  2066. description = "Kucoin Access Token"
  2067. id = "kucoin-access-token"
  2068. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2069. secretGroup = 1
  2070. keywords = [
  2071. "kucoin",
  2072. ]
  2073. [[rules]]
  2074. description = "Kucoin Secret Key"
  2075. id = "kucoin-secret-key"
  2076. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2077. secretGroup = 1
  2078. keywords = [
  2079. "kucoin",
  2080. ]
  2081. [[rules]]
  2082. description = "Launchdarkly Access Token"
  2083. id = "launchdarkly-access-token"
  2084. regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2085. secretGroup = 1
  2086. keywords = [
  2087. "launchdarkly",
  2088. ]
  2089. [[rules]]
  2090. description = "Linear API Token"
  2091. id = "linear-api-key"
  2092. regex = '''lin_api_(?i)[a-z0-9]{40}'''
  2093. keywords = [
  2094. "lin_api_",
  2095. ]
  2096. [[rules]]
  2097. description = "Linear Client Secret"
  2098. id = "linear-client-secret"
  2099. regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2100. secretGroup = 1
  2101. keywords = [
  2102. "linear",
  2103. ]
  2104. [[rules]]
  2105. description = "LinkedIn Client ID"
  2106. id = "linkedin-client-id"
  2107. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2108. secretGroup = 1
  2109. keywords = [
  2110. "linkedin","linked-in",
  2111. ]
  2112. [[rules]]
  2113. description = "LinkedIn Client secret"
  2114. id = "linkedin-client-secret"
  2115. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2116. secretGroup = 1
  2117. keywords = [
  2118. "linkedin","linked-in",
  2119. ]
  2120. [[rules]]
  2121. description = "Lob API Key"
  2122. id = "lob-api-key"
  2123. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2124. secretGroup = 1
  2125. keywords = [
  2126. "test_","live_",
  2127. ]
  2128. [[rules]]
  2129. description = "Lob Publishable API Key"
  2130. id = "lob-pub-api-key"
  2131. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2132. secretGroup = 1
  2133. keywords = [
  2134. "test_pub","live_pub","_pub",
  2135. ]
  2136. [[rules]]
  2137. description = "Mailchimp API key"
  2138. id = "mailchimp-api-key"
  2139. regex = '''(?i)(?:mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2140. secretGroup = 1
  2141. keywords = [
  2142. "mailchimp",
  2143. ]
  2144. [[rules]]
  2145. description = "Mailgun private API token"
  2146. id = "mailgun-private-api-token"
  2147. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2148. secretGroup = 1
  2149. keywords = [
  2150. "mailgun",
  2151. ]
  2152. [[rules]]
  2153. description = "Mailgun public validation key"
  2154. id = "mailgun-pub-key"
  2155. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2156. secretGroup = 1
  2157. keywords = [
  2158. "mailgun",
  2159. ]
  2160. [[rules]]
  2161. description = "Mailgun webhook signing key"
  2162. id = "mailgun-signing-key"
  2163. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2164. secretGroup = 1
  2165. keywords = [
  2166. "mailgun",
  2167. ]
  2168. [[rules]]
  2169. description = "MapBox API token"
  2170. id = "mapbox-api-token"
  2171. regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2172. secretGroup = 1
  2173. keywords = [
  2174. "mapbox",
  2175. ]
  2176. [[rules]]
  2177. description = "Mattermost Access Token"
  2178. id = "mattermost-access-token"
  2179. regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2180. secretGroup = 1
  2181. keywords = [
  2182. "mattermost",
  2183. ]
  2184. [[rules]]
  2185. description = "MessageBird API token"
  2186. id = "messagebird-api-token"
  2187. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2188. secretGroup = 1
  2189. keywords = [
  2190. "messagebird","message-bird","message_bird",
  2191. ]
  2192. [[rules]]
  2193. description = "MessageBird client ID"
  2194. id = "messagebird-client-id"
  2195. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2196. secretGroup = 1
  2197. keywords = [
  2198. "messagebird","message-bird","message_bird",
  2199. ]
  2200. [[rules]]
  2201. description = "Microsoft Teams Webhook"
  2202. id = "microsoft-teams-webhook"
  2203. regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
  2204. keywords = [
  2205. "webhook.office.com","webhookb2","incomingwebhook",
  2206. ]
  2207. [[rules]]
  2208. description = "Netlify Access Token"
  2209. id = "netlify-access-token"
  2210. regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2211. secretGroup = 1
  2212. keywords = [
  2213. "netlify",
  2214. ]
  2215. [[rules]]
  2216. description = "New Relic ingest browser API token"
  2217. id = "new-relic-browser-api-token"
  2218. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2219. secretGroup = 1
  2220. keywords = [
  2221. "nrjs-",
  2222. ]
  2223. [[rules]]
  2224. description = "New Relic user API ID"
  2225. id = "new-relic-user-api-id"
  2226. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2227. secretGroup = 1
  2228. keywords = [
  2229. "new-relic","newrelic","new_relic",
  2230. ]
  2231. [[rules]]
  2232. description = "New Relic user API Key"
  2233. id = "new-relic-user-api-key"
  2234. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2235. secretGroup = 1
  2236. keywords = [
  2237. "nrak",
  2238. ]
  2239. [[rules]]
  2240. description = "npm access token"
  2241. id = "npm-access-token"
  2242. regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2243. secretGroup = 1
  2244. keywords = [
  2245. "npm_",
  2246. ]
  2247. [[rules]]
  2248. description = "Nytimes Access Token"
  2249. id = "nytimes-access-token"
  2250. regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2251. secretGroup = 1
  2252. keywords = [
  2253. "nytimes","new-york-times","newyorktimes",
  2254. ]
  2255. [[rules]]
  2256. description = "Okta Access Token"
  2257. id = "okta-access-token"
  2258. regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2259. secretGroup = 1
  2260. keywords = [
  2261. "okta",
  2262. ]
  2263. [[rules]]
  2264. description = "Plaid API Token"
  2265. id = "plaid-api-token"
  2266. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2267. secretGroup = 1
  2268. keywords = [
  2269. "plaid",
  2270. ]
  2271. [[rules]]
  2272. description = "Plaid Client ID"
  2273. id = "plaid-client-id"
  2274. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2275. secretGroup = 1
  2276. keywords = [
  2277. "plaid",
  2278. ]
  2279. [[rules]]
  2280. description = "Plaid Secret key"
  2281. id = "plaid-secret-key"
  2282. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2283. secretGroup = 1
  2284. keywords = [
  2285. "plaid",
  2286. ]
  2287. [[rules]]
  2288. description = "PlanetScale API token"
  2289. id = "planetscale-api-token"
  2290. regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2291. secretGroup = 1
  2292. keywords = [
  2293. "pscale_tkn_",
  2294. ]
  2295. [[rules]]
  2296. description = "PlanetScale OAuth token"
  2297. id = "planetscale-oauth-token"
  2298. regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2299. secretGroup = 1
  2300. keywords = [
  2301. "pscale_oauth_",
  2302. ]
  2303. [[rules]]
  2304. description = "PlanetScale password"
  2305. id = "planetscale-password"
  2306. regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2307. secretGroup = 1
  2308. keywords = [
  2309. "pscale_pw_",
  2310. ]
  2311. [[rules]]
  2312. description = "Postman API token"
  2313. id = "postman-api-token"
  2314. regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2315. secretGroup = 1
  2316. keywords = [
  2317. "pmak-",
  2318. ]
  2319. [[rules]]
  2320. description = "Prefect API token"
  2321. id = "prefect-api-token"
  2322. regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2323. secretGroup = 1
  2324. keywords = [
  2325. "pnu_",
  2326. ]
  2327. [[rules]]
  2328. description = "Private Key"
  2329. id = "private-key"
  2330. regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
  2331. keywords = [
  2332. "-----begin",
  2333. ]
  2334. [[rules]]
  2335. description = "Pulumi API token"
  2336. id = "pulumi-api-token"
  2337. regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2338. secretGroup = 1
  2339. keywords = [
  2340. "pul-",
  2341. ]
  2342. [[rules]]
  2343. description = "PyPI upload token"
  2344. id = "pypi-upload-token"
  2345. regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
  2346. keywords = [
  2347. "pypi-ageichlwas5vcmc",
  2348. ]
  2349. [[rules]]
  2350. description = "RapidAPI Access Token"
  2351. id = "rapidapi-access-token"
  2352. regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2353. secretGroup = 1
  2354. keywords = [
  2355. "rapidapi",
  2356. ]
  2357. [[rules]]
  2358. description = "Readme API token"
  2359. id = "readme-api-token"
  2360. regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2361. secretGroup = 1
  2362. keywords = [
  2363. "rdme_",
  2364. ]
  2365. [[rules]]
  2366. description = "Rubygem API token"
  2367. id = "rubygems-api-token"
  2368. regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2369. secretGroup = 1
  2370. keywords = [
  2371. "rubygems_",
  2372. ]
  2373. [[rules]]
  2374. description = "Sendbird Access ID"
  2375. id = "sendbird-access-id"
  2376. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2377. secretGroup = 1
  2378. keywords = [
  2379. "sendbird",
  2380. ]
  2381. [[rules]]
  2382. description = "Sendbird Access Token"
  2383. id = "sendbird-access-token"
  2384. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2385. secretGroup = 1
  2386. keywords = [
  2387. "sendbird",
  2388. ]
  2389. [[rules]]
  2390. description = "SendGrid API token"
  2391. id = "sendgrid-api-token"
  2392. regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2393. secretGroup = 1
  2394. keywords = [
  2395. "sg.",
  2396. ]
  2397. [[rules]]
  2398. description = "Sendinblue API token"
  2399. id = "sendinblue-api-token"
  2400. regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2401. secretGroup = 1
  2402. keywords = [
  2403. "xkeysib-",
  2404. ]
  2405. [[rules]]
  2406. description = "Sentry Access Token"
  2407. id = "sentry-access-token"
  2408. regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2409. secretGroup = 1
  2410. keywords = [
  2411. "sentry",
  2412. ]
  2413. [[rules]]
  2414. description = "Shippo API token"
  2415. id = "shippo-api-token"
  2416. regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2417. secretGroup = 1
  2418. keywords = [
  2419. "shippo_",
  2420. ]
  2421. [[rules]]
  2422. description = "Shopify access token"
  2423. id = "shopify-access-token"
  2424. regex = '''shpat_[a-fA-F0-9]{32}'''
  2425. keywords = [
  2426. "shpat_",
  2427. ]
  2428. [[rules]]
  2429. description = "Shopify custom access token"
  2430. id = "shopify-custom-access-token"
  2431. regex = '''shpca_[a-fA-F0-9]{32}'''
  2432. keywords = [
  2433. "shpca_",
  2434. ]
  2435. [[rules]]
  2436. description = "Shopify private app access token"
  2437. id = "shopify-private-app-access-token"
  2438. regex = '''shppa_[a-fA-F0-9]{32}'''
  2439. keywords = [
  2440. "shppa_",
  2441. ]
  2442. [[rules]]
  2443. description = "Shopify shared secret"
  2444. id = "shopify-shared-secret"
  2445. regex = '''shpss_[a-fA-F0-9]{32}'''
  2446. keywords = [
  2447. "shpss_",
  2448. ]
  2449. [[rules]]
  2450. description = "Sidekiq Secret"
  2451. id = "sidekiq-secret"
  2452. regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2453. secretGroup = 1
  2454. keywords = [
  2455. "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
  2456. ]
  2457. [[rules]]
  2458. description = "Sidekiq Sensitive URL"
  2459. id = "sidekiq-sensitive-url"
  2460. regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
  2461. secretGroup = 2
  2462. keywords = [
  2463. "gems.contribsys.com","enterprise.contribsys.com",
  2464. ]
  2465. [[rules]]
  2466. description = "Slack token"
  2467. id = "slack-access-token"
  2468. regex = '''xox[baprs]-([0-9a-zA-Z]{10,48})'''
  2469. keywords = [
  2470. "xoxb","xoxa","xoxp","xoxr","xoxs",
  2471. ]
  2472. [[rules]]
  2473. description = "Slack Webhook"
  2474. id = "slack-web-hook"
  2475. regex = '''https:\/\/hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{44,46}'''
  2476. keywords = [
  2477. "hooks.slack.com",
  2478. ]
  2479. [[rules]]
  2480. description = "Square Access Token"
  2481. id = "square-access-token"
  2482. regex = '''(?i)\b(sq0atp-[0-9A-Za-z\-_]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2483. keywords = [
  2484. "sq0atp-",
  2485. ]
  2486. [[rules]]
  2487. description = "Squarespace Access Token"
  2488. id = "squarespace-access-token"
  2489. regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2490. secretGroup = 1
  2491. keywords = [
  2492. "squarespace",
  2493. ]
  2494. [[rules]]
  2495. description = "Stripe Access Token"
  2496. id = "stripe-access-token"
  2497. regex = '''(?i)(sk|pk)_(test|live)_[0-9a-z]{10,32}'''
  2498. keywords = [
  2499. "sk_test","pk_test","sk_live","pk_live",
  2500. ]
  2501. [[rules]]
  2502. description = "SumoLogic Access ID"
  2503. id = "sumologic-access-id"
  2504. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2505. secretGroup = 1
  2506. keywords = [
  2507. "sumo",
  2508. ]
  2509. [[rules]]
  2510. description = "SumoLogic Access Token"
  2511. id = "sumologic-access-token"
  2512. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2513. secretGroup = 1
  2514. keywords = [
  2515. "sumo",
  2516. ]
  2517. [[rules]]
  2518. description = "Telegram Bot API Token"
  2519. id = "telegram-bot-api-token"
  2520. regex = '''(?i)(?:^|[^0-9])([0-9]{5,16}:A[a-zA-Z0-9_\-]{34})(?:$|[^a-zA-Z0-9_\-])'''
  2521. secretGroup = 1
  2522. keywords = [
  2523. "telegram","api","bot","token","url",
  2524. ]
  2525. [[rules]]
  2526. description = "Travis CI Access Token"
  2527. id = "travisci-access-token"
  2528. regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2529. secretGroup = 1
  2530. keywords = [
  2531. "travis",
  2532. ]
  2533. [[rules]]
  2534. description = "Twilio API Key"
  2535. id = "twilio-api-key"
  2536. regex = '''SK[0-9a-fA-F]{32}'''
  2537. keywords = [
  2538. "twilio",
  2539. ]
  2540. [[rules]]
  2541. description = "Twitch API token"
  2542. id = "twitch-api-token"
  2543. regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2544. secretGroup = 1
  2545. keywords = [
  2546. "twitch",
  2547. ]
  2548. [[rules]]
  2549. description = "Twitter Access Secret"
  2550. id = "twitter-access-secret"
  2551. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2552. secretGroup = 1
  2553. keywords = [
  2554. "twitter",
  2555. ]
  2556. [[rules]]
  2557. description = "Twitter Access Token"
  2558. id = "twitter-access-token"
  2559. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2560. secretGroup = 1
  2561. keywords = [
  2562. "twitter",
  2563. ]
  2564. [[rules]]
  2565. description = "Twitter API Key"
  2566. id = "twitter-api-key"
  2567. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2568. secretGroup = 1
  2569. keywords = [
  2570. "twitter",
  2571. ]
  2572. [[rules]]
  2573. description = "Twitter API Secret"
  2574. id = "twitter-api-secret"
  2575. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2576. secretGroup = 1
  2577. keywords = [
  2578. "twitter",
  2579. ]
  2580. [[rules]]
  2581. description = "Twitter Bearer Token"
  2582. id = "twitter-bearer-token"
  2583. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2584. secretGroup = 1
  2585. keywords = [
  2586. "twitter",
  2587. ]
  2588. [[rules]]
  2589. description = "Typeform API token"
  2590. id = "typeform-api-token"
  2591. regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2592. secretGroup = 1
  2593. keywords = [
  2594. "tfp_",
  2595. ]
  2596. [[rules]]
  2597. description = "Vault Batch Token"
  2598. id = "vault-batch-token"
  2599. regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2600. keywords = [
  2601. "hvb",
  2602. ]
  2603. [[rules]]
  2604. description = "Vault Service Token"
  2605. id = "vault-service-token"
  2606. regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2607. keywords = [
  2608. "hvs",
  2609. ]
  2610. [[rules]]
  2611. description = "Yandex Access Token"
  2612. id = "yandex-access-token"
  2613. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2614. secretGroup = 1
  2615. keywords = [
  2616. "yandex",
  2617. ]
  2618. [[rules]]
  2619. description = "Yandex API Key"
  2620. id = "yandex-api-key"
  2621. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2622. secretGroup = 1
  2623. keywords = [
  2624. "yandex",
  2625. ]
  2626. [[rules]]
  2627. description = "Yandex AWS Access Token"
  2628. id = "yandex-aws-access-token"
  2629. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2630. secretGroup = 1
  2631. keywords = [
  2632. "yandex",
  2633. ]
  2634. [[rules]]
  2635. description = "Zendesk Secret Key"
  2636. id = "zendesk-secret-key"
  2637. regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2638. secretGroup = 1
  2639. keywords = [
  2640. "zendesk",
  2641. ]