gitleaks.toml 60 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903
  1. # This file has been auto-generated. Do not edit manually.
  2. # If you would like to contribute new rules, please use
  3. # cmd/generate/config/main.go and follow the contributing guidelines
  4. # at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
  5. # This is the default gitleaks configuration file.
  6. # Rules and allowlists are defined within this file.
  7. # Rules instruct gitleaks on what should be considered a secret.
  8. # Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
  9. title = "gitleaks config"
  10. [allowlist]
  11. description = "global allow lists"
  12. paths = [
  13. '''gitleaks.toml''',
  14. '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
  15. '''(go.mod|go.sum)$''',
  16. '''gradle.lockfile''',
  17. '''node_modules''',
  18. '''package-lock.json''',
  19. '''pnpm-lock.yaml''',
  20. '''Database.refactorlog''',
  21. '''vendor''',
  22. ]
  23. [[rules]]
  24. id = "adafruit-api-key"
  25. description = "Adafruit API Key"
  26. regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  27. secretGroup = 1
  28. keywords = [
  29. "adafruit",
  30. ]
  31. [[rules]]
  32. id = "adobe-client-id"
  33. description = "Adobe Client ID (OAuth Web)"
  34. regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  35. secretGroup = 1
  36. keywords = [
  37. "adobe",
  38. ]
  39. [[rules]]
  40. id = "adobe-client-secret"
  41. description = "Adobe Client Secret"
  42. regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  43. keywords = [
  44. "p8e-",
  45. ]
  46. [[rules]]
  47. id = "age secret key"
  48. description = "Age secret key"
  49. regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
  50. keywords = [
  51. "age-secret-key-1",
  52. ]
  53. [[rules]]
  54. id = "airtable-api-key"
  55. description = "Airtable API Key"
  56. regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  57. secretGroup = 1
  58. keywords = [
  59. "airtable",
  60. ]
  61. [[rules]]
  62. id = "algolia-api-key"
  63. description = "Algolia API Key"
  64. regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  65. keywords = [
  66. "algolia",
  67. ]
  68. [[rules]]
  69. id = "alibaba-access-key-id"
  70. description = "Alibaba AccessKey ID"
  71. regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  72. keywords = [
  73. "ltai",
  74. ]
  75. [[rules]]
  76. id = "alibaba-secret-key"
  77. description = "Alibaba Secret Key"
  78. regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  79. secretGroup = 1
  80. keywords = [
  81. "alibaba",
  82. ]
  83. [[rules]]
  84. id = "asana-client-id"
  85. description = "Asana Client ID"
  86. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  87. secretGroup = 1
  88. keywords = [
  89. "asana",
  90. ]
  91. [[rules]]
  92. id = "asana-client-secret"
  93. description = "Asana Client Secret"
  94. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  95. secretGroup = 1
  96. keywords = [
  97. "asana",
  98. ]
  99. [[rules]]
  100. id = "atlassian-api-token"
  101. description = "Atlassian API token"
  102. regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  103. secretGroup = 1
  104. keywords = [
  105. "atlassian","confluence","jira",
  106. ]
  107. [[rules]]
  108. id = "authress-service-client-access-key"
  109. description = "Authress Service Client Access Key"
  110. regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  111. secretGroup = 1
  112. keywords = [
  113. "sc_","ext_","scauth_","authress_",
  114. ]
  115. [[rules]]
  116. id = "aws-access-token"
  117. description = "AWS"
  118. regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}'''
  119. keywords = [
  120. "akia","agpa","aida","aroa","aipa","anpa","anva","asia",
  121. ]
  122. [[rules]]
  123. id = "beamer-api-token"
  124. description = "Beamer API token"
  125. regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  126. secretGroup = 1
  127. keywords = [
  128. "beamer",
  129. ]
  130. [[rules]]
  131. id = "bitbucket-client-id"
  132. description = "Bitbucket Client ID"
  133. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  134. secretGroup = 1
  135. keywords = [
  136. "bitbucket",
  137. ]
  138. [[rules]]
  139. id = "bitbucket-client-secret"
  140. description = "Bitbucket Client Secret"
  141. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  142. secretGroup = 1
  143. keywords = [
  144. "bitbucket",
  145. ]
  146. [[rules]]
  147. id = "bittrex-access-key"
  148. description = "Bittrex Access Key"
  149. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  150. secretGroup = 1
  151. keywords = [
  152. "bittrex",
  153. ]
  154. [[rules]]
  155. id = "bittrex-secret-key"
  156. description = "Bittrex Secret Key"
  157. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  158. secretGroup = 1
  159. keywords = [
  160. "bittrex",
  161. ]
  162. [[rules]]
  163. id = "clojars-api-token"
  164. description = "Clojars API token"
  165. regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
  166. keywords = [
  167. "clojars",
  168. ]
  169. [[rules]]
  170. id = "codecov-access-token"
  171. description = "Codecov Access Token"
  172. regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  173. secretGroup = 1
  174. keywords = [
  175. "codecov",
  176. ]
  177. [[rules]]
  178. id = "coinbase-access-token"
  179. description = "Coinbase Access Token"
  180. regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  181. secretGroup = 1
  182. keywords = [
  183. "coinbase",
  184. ]
  185. [[rules]]
  186. id = "confluent-access-token"
  187. description = "Confluent Access Token"
  188. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  189. secretGroup = 1
  190. keywords = [
  191. "confluent",
  192. ]
  193. [[rules]]
  194. id = "confluent-secret-key"
  195. description = "Confluent Secret Key"
  196. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  197. secretGroup = 1
  198. keywords = [
  199. "confluent",
  200. ]
  201. [[rules]]
  202. id = "contentful-delivery-api-token"
  203. description = "Contentful delivery API token"
  204. regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  205. secretGroup = 1
  206. keywords = [
  207. "contentful",
  208. ]
  209. [[rules]]
  210. id = "databricks-api-token"
  211. description = "Databricks API token"
  212. regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  213. keywords = [
  214. "dapi",
  215. ]
  216. [[rules]]
  217. id = "datadog-access-token"
  218. description = "Datadog Access Token"
  219. regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  220. secretGroup = 1
  221. keywords = [
  222. "datadog",
  223. ]
  224. [[rules]]
  225. id = "defined-networking-api-token"
  226. description = "Defined Networking API token"
  227. regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  228. secretGroup = 1
  229. keywords = [
  230. "dnkey",
  231. ]
  232. [[rules]]
  233. id = "digitalocean-access-token"
  234. description = "DigitalOcean OAuth Access Token"
  235. regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  236. secretGroup = 1
  237. keywords = [
  238. "doo_v1_",
  239. ]
  240. [[rules]]
  241. id = "digitalocean-pat"
  242. description = "DigitalOcean Personal Access Token"
  243. regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  244. secretGroup = 1
  245. keywords = [
  246. "dop_v1_",
  247. ]
  248. [[rules]]
  249. id = "digitalocean-refresh-token"
  250. description = "DigitalOcean OAuth Refresh Token"
  251. regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  252. secretGroup = 1
  253. keywords = [
  254. "dor_v1_",
  255. ]
  256. [[rules]]
  257. id = "discord-api-token"
  258. description = "Discord API key"
  259. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  260. secretGroup = 1
  261. keywords = [
  262. "discord",
  263. ]
  264. [[rules]]
  265. id = "discord-client-id"
  266. description = "Discord client ID"
  267. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  268. secretGroup = 1
  269. keywords = [
  270. "discord",
  271. ]
  272. [[rules]]
  273. id = "discord-client-secret"
  274. description = "Discord client secret"
  275. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  276. secretGroup = 1
  277. keywords = [
  278. "discord",
  279. ]
  280. [[rules]]
  281. id = "doppler-api-token"
  282. description = "Doppler API token"
  283. regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
  284. keywords = [
  285. "doppler",
  286. ]
  287. [[rules]]
  288. id = "droneci-access-token"
  289. description = "Droneci Access Token"
  290. regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  291. secretGroup = 1
  292. keywords = [
  293. "droneci",
  294. ]
  295. [[rules]]
  296. id = "dropbox-api-token"
  297. description = "Dropbox API secret"
  298. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  299. secretGroup = 1
  300. keywords = [
  301. "dropbox",
  302. ]
  303. [[rules]]
  304. id = "dropbox-long-lived-api-token"
  305. description = "Dropbox long lived API token"
  306. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  307. keywords = [
  308. "dropbox",
  309. ]
  310. [[rules]]
  311. id = "dropbox-short-lived-api-token"
  312. description = "Dropbox short lived API token"
  313. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  314. keywords = [
  315. "dropbox",
  316. ]
  317. [[rules]]
  318. id = "duffel-api-token"
  319. description = "Duffel API token"
  320. regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
  321. keywords = [
  322. "duffel",
  323. ]
  324. [[rules]]
  325. id = "dynatrace-api-token"
  326. description = "Dynatrace API token"
  327. regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
  328. keywords = [
  329. "dynatrace",
  330. ]
  331. [[rules]]
  332. id = "easypost-api-token"
  333. description = "EasyPost API token"
  334. regex = '''\bEZAK(?i)[a-z0-9]{54}'''
  335. keywords = [
  336. "ezak",
  337. ]
  338. [[rules]]
  339. id = "easypost-test-api-token"
  340. description = "EasyPost test API token"
  341. regex = '''\bEZTK(?i)[a-z0-9]{54}'''
  342. keywords = [
  343. "eztk",
  344. ]
  345. [[rules]]
  346. id = "etsy-access-token"
  347. description = "Etsy Access Token"
  348. regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  349. secretGroup = 1
  350. keywords = [
  351. "etsy",
  352. ]
  353. [[rules]]
  354. id = "facebook"
  355. description = "Facebook Access Token"
  356. regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  357. secretGroup = 1
  358. keywords = [
  359. "facebook",
  360. ]
  361. [[rules]]
  362. id = "fastly-api-token"
  363. description = "Fastly API key"
  364. regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  365. secretGroup = 1
  366. keywords = [
  367. "fastly",
  368. ]
  369. [[rules]]
  370. id = "finicity-api-token"
  371. description = "Finicity API token"
  372. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  373. secretGroup = 1
  374. keywords = [
  375. "finicity",
  376. ]
  377. [[rules]]
  378. id = "finicity-client-secret"
  379. description = "Finicity Client Secret"
  380. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  381. secretGroup = 1
  382. keywords = [
  383. "finicity",
  384. ]
  385. [[rules]]
  386. id = "finnhub-access-token"
  387. description = "Finnhub Access Token"
  388. regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  389. secretGroup = 1
  390. keywords = [
  391. "finnhub",
  392. ]
  393. [[rules]]
  394. id = "flickr-access-token"
  395. description = "Flickr Access Token"
  396. regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  397. secretGroup = 1
  398. keywords = [
  399. "flickr",
  400. ]
  401. [[rules]]
  402. id = "flutterwave-encryption-key"
  403. description = "Flutterwave Encryption Key"
  404. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
  405. keywords = [
  406. "flwseck_test",
  407. ]
  408. [[rules]]
  409. id = "flutterwave-public-key"
  410. description = "Finicity Public Key"
  411. regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
  412. keywords = [
  413. "flwpubk_test",
  414. ]
  415. [[rules]]
  416. id = "flutterwave-secret-key"
  417. description = "Flutterwave Secret Key"
  418. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
  419. keywords = [
  420. "flwseck_test",
  421. ]
  422. [[rules]]
  423. id = "frameio-api-token"
  424. description = "Frame.io API token"
  425. regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
  426. keywords = [
  427. "fio-u-",
  428. ]
  429. [[rules]]
  430. id = "freshbooks-access-token"
  431. description = "Freshbooks Access Token"
  432. regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  433. secretGroup = 1
  434. keywords = [
  435. "freshbooks",
  436. ]
  437. [[rules]]
  438. id = "gcp-api-key"
  439. description = "GCP API key"
  440. regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  441. secretGroup = 1
  442. keywords = [
  443. "aiza",
  444. ]
  445. [[rules]]
  446. id = "generic-api-key"
  447. description = "Generic API Key"
  448. regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  449. secretGroup = 1
  450. entropy = 3.5
  451. keywords = [
  452. "key","api","token","secret","client","passwd","password","auth","access",
  453. ]
  454. [rules.allowlist]
  455. stopwords = [
  456. "client",
  457. "endpoint",
  458. "vpn",
  459. "_ec2_",
  460. "aws_",
  461. "authorize",
  462. "author",
  463. "define",
  464. "config",
  465. "credential",
  466. "setting",
  467. "sample",
  468. "xxxxxx",
  469. "000000",
  470. "buffer",
  471. "delete",
  472. "aaaaaa",
  473. "fewfwef",
  474. "getenv",
  475. "env_",
  476. "system",
  477. "example",
  478. "ecdsa",
  479. "sha256",
  480. "sha1",
  481. "sha2",
  482. "md5",
  483. "alert",
  484. "wizard",
  485. "target",
  486. "onboard",
  487. "welcome",
  488. "page",
  489. "exploit",
  490. "experiment",
  491. "expire",
  492. "rabbitmq",
  493. "scraper",
  494. "widget",
  495. "music",
  496. "dns_",
  497. "dns-",
  498. "yahoo",
  499. "want",
  500. "json",
  501. "action",
  502. "script",
  503. "fix_",
  504. "fix-",
  505. "develop",
  506. "compas",
  507. "stripe",
  508. "service",
  509. "master",
  510. "metric",
  511. "tech",
  512. "gitignore",
  513. "rich",
  514. "open",
  515. "stack",
  516. "irc_",
  517. "irc-",
  518. "sublime",
  519. "kohana",
  520. "has_",
  521. "has-",
  522. "fabric",
  523. "wordpres",
  524. "role",
  525. "osx_",
  526. "osx-",
  527. "boost",
  528. "addres",
  529. "queue",
  530. "working",
  531. "sandbox",
  532. "internet",
  533. "print",
  534. "vision",
  535. "tracking",
  536. "being",
  537. "generator",
  538. "traffic",
  539. "world",
  540. "pull",
  541. "rust",
  542. "watcher",
  543. "small",
  544. "auth",
  545. "full",
  546. "hash",
  547. "more",
  548. "install",
  549. "auto",
  550. "complete",
  551. "learn",
  552. "paper",
  553. "installer",
  554. "research",
  555. "acces",
  556. "last",
  557. "binding",
  558. "spine",
  559. "into",
  560. "chat",
  561. "algorithm",
  562. "resource",
  563. "uploader",
  564. "video",
  565. "maker",
  566. "next",
  567. "proc",
  568. "lock",
  569. "robot",
  570. "snake",
  571. "patch",
  572. "matrix",
  573. "drill",
  574. "terminal",
  575. "term",
  576. "stuff",
  577. "genetic",
  578. "generic",
  579. "identity",
  580. "audit",
  581. "pattern",
  582. "audio",
  583. "web_",
  584. "web-",
  585. "crud",
  586. "problem",
  587. "statu",
  588. "cms-",
  589. "cms_",
  590. "arch",
  591. "coffee",
  592. "workflow",
  593. "changelog",
  594. "another",
  595. "uiview",
  596. "content",
  597. "kitchen",
  598. "gnu_",
  599. "gnu-",
  600. "gnu.",
  601. "conf",
  602. "couchdb",
  603. "client",
  604. "opencv",
  605. "rendering",
  606. "update",
  607. "concept",
  608. "varnish",
  609. "gui_",
  610. "gui-",
  611. "gui.",
  612. "version",
  613. "shared",
  614. "extra",
  615. "product",
  616. "still",
  617. "not_",
  618. "not-",
  619. "not.",
  620. "drop",
  621. "ring",
  622. "png_",
  623. "png-",
  624. "png.",
  625. "actively",
  626. "import",
  627. "output",
  628. "backup",
  629. "start",
  630. "embedded",
  631. "registry",
  632. "pool",
  633. "semantic",
  634. "instagram",
  635. "bash",
  636. "system",
  637. "ninja",
  638. "drupal",
  639. "jquery",
  640. "polyfill",
  641. "physic",
  642. "league",
  643. "guide",
  644. "pack",
  645. "synopsi",
  646. "sketch",
  647. "injection",
  648. "svg_",
  649. "svg-",
  650. "svg.",
  651. "friendly",
  652. "wave",
  653. "convert",
  654. "manage",
  655. "camera",
  656. "link",
  657. "slide",
  658. "timer",
  659. "wrapper",
  660. "gallery",
  661. "url_",
  662. "url-",
  663. "url.",
  664. "todomvc",
  665. "requirej",
  666. "party",
  667. "http",
  668. "payment",
  669. "async",
  670. "library",
  671. "home",
  672. "coco",
  673. "gaia",
  674. "display",
  675. "universal",
  676. "func",
  677. "metadata",
  678. "hipchat",
  679. "under",
  680. "room",
  681. "config",
  682. "personal",
  683. "realtime",
  684. "resume",
  685. "database",
  686. "testing",
  687. "tiny",
  688. "basic",
  689. "forum",
  690. "meetup",
  691. "yet_",
  692. "yet-",
  693. "yet.",
  694. "cento",
  695. "dead",
  696. "fluentd",
  697. "editor",
  698. "utilitie",
  699. "run_",
  700. "run-",
  701. "run.",
  702. "box_",
  703. "box-",
  704. "box.",
  705. "bot_",
  706. "bot-",
  707. "bot.",
  708. "making",
  709. "sample",
  710. "group",
  711. "monitor",
  712. "ajax",
  713. "parallel",
  714. "cassandra",
  715. "ultimate",
  716. "site",
  717. "get_",
  718. "get-",
  719. "get.",
  720. "gen_",
  721. "gen-",
  722. "gen.",
  723. "gem_",
  724. "gem-",
  725. "gem.",
  726. "extended",
  727. "image",
  728. "knife",
  729. "asset",
  730. "nested",
  731. "zero",
  732. "plugin",
  733. "bracket",
  734. "mule",
  735. "mozilla",
  736. "number",
  737. "act_",
  738. "act-",
  739. "act.",
  740. "map_",
  741. "map-",
  742. "map.",
  743. "micro",
  744. "debug",
  745. "openshift",
  746. "chart",
  747. "expres",
  748. "backend",
  749. "task",
  750. "source",
  751. "translate",
  752. "jbos",
  753. "composer",
  754. "sqlite",
  755. "profile",
  756. "mustache",
  757. "mqtt",
  758. "yeoman",
  759. "have",
  760. "builder",
  761. "smart",
  762. "like",
  763. "oauth",
  764. "school",
  765. "guideline",
  766. "captcha",
  767. "filter",
  768. "bitcoin",
  769. "bridge",
  770. "color",
  771. "toolbox",
  772. "discovery",
  773. "new_",
  774. "new-",
  775. "new.",
  776. "dashboard",
  777. "when",
  778. "setting",
  779. "level",
  780. "post",
  781. "standard",
  782. "port",
  783. "platform",
  784. "yui_",
  785. "yui-",
  786. "yui.",
  787. "grunt",
  788. "animation",
  789. "haskell",
  790. "icon",
  791. "latex",
  792. "cheat",
  793. "lua_",
  794. "lua-",
  795. "lua.",
  796. "gulp",
  797. "case",
  798. "author",
  799. "without",
  800. "simulator",
  801. "wifi",
  802. "directory",
  803. "lisp",
  804. "list",
  805. "flat",
  806. "adventure",
  807. "story",
  808. "storm",
  809. "gpu_",
  810. "gpu-",
  811. "gpu.",
  812. "store",
  813. "caching",
  814. "attention",
  815. "solr",
  816. "logger",
  817. "demo",
  818. "shortener",
  819. "hadoop",
  820. "finder",
  821. "phone",
  822. "pipeline",
  823. "range",
  824. "textmate",
  825. "showcase",
  826. "app_",
  827. "app-",
  828. "app.",
  829. "idiomatic",
  830. "edit",
  831. "our_",
  832. "our-",
  833. "our.",
  834. "out_",
  835. "out-",
  836. "out.",
  837. "sentiment",
  838. "linked",
  839. "why_",
  840. "why-",
  841. "why.",
  842. "local",
  843. "cube",
  844. "gmail",
  845. "job_",
  846. "job-",
  847. "job.",
  848. "rpc_",
  849. "rpc-",
  850. "rpc.",
  851. "contest",
  852. "tcp_",
  853. "tcp-",
  854. "tcp.",
  855. "usage",
  856. "buildout",
  857. "weather",
  858. "transfer",
  859. "automated",
  860. "sphinx",
  861. "issue",
  862. "sas_",
  863. "sas-",
  864. "sas.",
  865. "parallax",
  866. "jasmine",
  867. "addon",
  868. "machine",
  869. "solution",
  870. "dsl_",
  871. "dsl-",
  872. "dsl.",
  873. "episode",
  874. "menu",
  875. "theme",
  876. "best",
  877. "adapter",
  878. "debugger",
  879. "chrome",
  880. "tutorial",
  881. "life",
  882. "step",
  883. "people",
  884. "joomla",
  885. "paypal",
  886. "developer",
  887. "solver",
  888. "team",
  889. "current",
  890. "love",
  891. "visual",
  892. "date",
  893. "data",
  894. "canva",
  895. "container",
  896. "future",
  897. "xml_",
  898. "xml-",
  899. "xml.",
  900. "twig",
  901. "nagio",
  902. "spatial",
  903. "original",
  904. "sync",
  905. "archived",
  906. "refinery",
  907. "science",
  908. "mapping",
  909. "gitlab",
  910. "play",
  911. "ext_",
  912. "ext-",
  913. "ext.",
  914. "session",
  915. "impact",
  916. "set_",
  917. "set-",
  918. "set.",
  919. "see_",
  920. "see-",
  921. "see.",
  922. "migration",
  923. "commit",
  924. "community",
  925. "shopify",
  926. "what'",
  927. "cucumber",
  928. "statamic",
  929. "mysql",
  930. "location",
  931. "tower",
  932. "line",
  933. "code",
  934. "amqp",
  935. "hello",
  936. "send",
  937. "index",
  938. "high",
  939. "notebook",
  940. "alloy",
  941. "python",
  942. "field",
  943. "document",
  944. "soap",
  945. "edition",
  946. "email",
  947. "php_",
  948. "php-",
  949. "php.",
  950. "command",
  951. "transport",
  952. "official",
  953. "upload",
  954. "study",
  955. "secure",
  956. "angularj",
  957. "akka",
  958. "scalable",
  959. "package",
  960. "request",
  961. "con_",
  962. "con-",
  963. "con.",
  964. "flexible",
  965. "security",
  966. "comment",
  967. "module",
  968. "flask",
  969. "graph",
  970. "flash",
  971. "apache",
  972. "change",
  973. "window",
  974. "space",
  975. "lambda",
  976. "sheet",
  977. "bookmark",
  978. "carousel",
  979. "friend",
  980. "objective",
  981. "jekyll",
  982. "bootstrap",
  983. "first",
  984. "article",
  985. "gwt_",
  986. "gwt-",
  987. "gwt.",
  988. "classic",
  989. "media",
  990. "websocket",
  991. "touch",
  992. "desktop",
  993. "real",
  994. "read",
  995. "recorder",
  996. "moved",
  997. "storage",
  998. "validator",
  999. "add-on",
  1000. "pusher",
  1001. "scs_",
  1002. "scs-",
  1003. "scs.",
  1004. "inline",
  1005. "asp_",
  1006. "asp-",
  1007. "asp.",
  1008. "timeline",
  1009. "base",
  1010. "encoding",
  1011. "ffmpeg",
  1012. "kindle",
  1013. "tinymce",
  1014. "pretty",
  1015. "jpa_",
  1016. "jpa-",
  1017. "jpa.",
  1018. "used",
  1019. "user",
  1020. "required",
  1021. "webhook",
  1022. "download",
  1023. "resque",
  1024. "espresso",
  1025. "cloud",
  1026. "mongo",
  1027. "benchmark",
  1028. "pure",
  1029. "cakephp",
  1030. "modx",
  1031. "mode",
  1032. "reactive",
  1033. "fuel",
  1034. "written",
  1035. "flickr",
  1036. "mail",
  1037. "brunch",
  1038. "meteor",
  1039. "dynamic",
  1040. "neo_",
  1041. "neo-",
  1042. "neo.",
  1043. "new_",
  1044. "new-",
  1045. "new.",
  1046. "net_",
  1047. "net-",
  1048. "net.",
  1049. "typo",
  1050. "type",
  1051. "keyboard",
  1052. "erlang",
  1053. "adobe",
  1054. "logging",
  1055. "ckeditor",
  1056. "message",
  1057. "iso_",
  1058. "iso-",
  1059. "iso.",
  1060. "hook",
  1061. "ldap",
  1062. "folder",
  1063. "reference",
  1064. "railscast",
  1065. "www_",
  1066. "www-",
  1067. "www.",
  1068. "tracker",
  1069. "azure",
  1070. "fork",
  1071. "form",
  1072. "digital",
  1073. "exporter",
  1074. "skin",
  1075. "string",
  1076. "template",
  1077. "designer",
  1078. "gollum",
  1079. "fluent",
  1080. "entity",
  1081. "language",
  1082. "alfred",
  1083. "summary",
  1084. "wiki",
  1085. "kernel",
  1086. "calendar",
  1087. "plupload",
  1088. "symfony",
  1089. "foundry",
  1090. "remote",
  1091. "talk",
  1092. "search",
  1093. "dev_",
  1094. "dev-",
  1095. "dev.",
  1096. "del_",
  1097. "del-",
  1098. "del.",
  1099. "token",
  1100. "idea",
  1101. "sencha",
  1102. "selector",
  1103. "interface",
  1104. "create",
  1105. "fun_",
  1106. "fun-",
  1107. "fun.",
  1108. "groovy",
  1109. "query",
  1110. "grail",
  1111. "red_",
  1112. "red-",
  1113. "red.",
  1114. "laravel",
  1115. "monkey",
  1116. "slack",
  1117. "supported",
  1118. "instant",
  1119. "value",
  1120. "center",
  1121. "latest",
  1122. "work",
  1123. "but_",
  1124. "but-",
  1125. "but.",
  1126. "bug_",
  1127. "bug-",
  1128. "bug.",
  1129. "virtual",
  1130. "tweet",
  1131. "statsd",
  1132. "studio",
  1133. "path",
  1134. "real-time",
  1135. "frontend",
  1136. "notifier",
  1137. "coding",
  1138. "tool",
  1139. "firmware",
  1140. "flow",
  1141. "random",
  1142. "mediawiki",
  1143. "bosh",
  1144. "been",
  1145. "beer",
  1146. "lightbox",
  1147. "theory",
  1148. "origin",
  1149. "redmine",
  1150. "hub_",
  1151. "hub-",
  1152. "hub.",
  1153. "require",
  1154. "pro_",
  1155. "pro-",
  1156. "pro.",
  1157. "ant_",
  1158. "ant-",
  1159. "ant.",
  1160. "any_",
  1161. "any-",
  1162. "any.",
  1163. "recipe",
  1164. "closure",
  1165. "mapper",
  1166. "event",
  1167. "todo",
  1168. "model",
  1169. "redi",
  1170. "provider",
  1171. "rvm_",
  1172. "rvm-",
  1173. "rvm.",
  1174. "program",
  1175. "memcached",
  1176. "rail",
  1177. "silex",
  1178. "foreman",
  1179. "activity",
  1180. "license",
  1181. "strategy",
  1182. "batch",
  1183. "streaming",
  1184. "fast",
  1185. "use_",
  1186. "use-",
  1187. "use.",
  1188. "usb_",
  1189. "usb-",
  1190. "usb.",
  1191. "impres",
  1192. "academy",
  1193. "slider",
  1194. "please",
  1195. "layer",
  1196. "cros",
  1197. "now_",
  1198. "now-",
  1199. "now.",
  1200. "miner",
  1201. "extension",
  1202. "own_",
  1203. "own-",
  1204. "own.",
  1205. "app_",
  1206. "app-",
  1207. "app.",
  1208. "debian",
  1209. "symphony",
  1210. "example",
  1211. "feature",
  1212. "serie",
  1213. "tree",
  1214. "project",
  1215. "runner",
  1216. "entry",
  1217. "leetcode",
  1218. "layout",
  1219. "webrtc",
  1220. "logic",
  1221. "login",
  1222. "worker",
  1223. "toolkit",
  1224. "mocha",
  1225. "support",
  1226. "back",
  1227. "inside",
  1228. "device",
  1229. "jenkin",
  1230. "contact",
  1231. "fake",
  1232. "awesome",
  1233. "ocaml",
  1234. "bit_",
  1235. "bit-",
  1236. "bit.",
  1237. "drive",
  1238. "screen",
  1239. "prototype",
  1240. "gist",
  1241. "binary",
  1242. "nosql",
  1243. "rest",
  1244. "overview",
  1245. "dart",
  1246. "dark",
  1247. "emac",
  1248. "mongoid",
  1249. "solarized",
  1250. "homepage",
  1251. "emulator",
  1252. "commander",
  1253. "django",
  1254. "yandex",
  1255. "gradle",
  1256. "xcode",
  1257. "writer",
  1258. "crm_",
  1259. "crm-",
  1260. "crm.",
  1261. "jade",
  1262. "startup",
  1263. "error",
  1264. "using",
  1265. "format",
  1266. "name",
  1267. "spring",
  1268. "parser",
  1269. "scratch",
  1270. "magic",
  1271. "try_",
  1272. "try-",
  1273. "try.",
  1274. "rack",
  1275. "directive",
  1276. "challenge",
  1277. "slim",
  1278. "counter",
  1279. "element",
  1280. "chosen",
  1281. "doc_",
  1282. "doc-",
  1283. "doc.",
  1284. "meta",
  1285. "should",
  1286. "button",
  1287. "packet",
  1288. "stream",
  1289. "hardware",
  1290. "android",
  1291. "infinite",
  1292. "password",
  1293. "software",
  1294. "ghost",
  1295. "xamarin",
  1296. "spec",
  1297. "chef",
  1298. "interview",
  1299. "hubot",
  1300. "mvc_",
  1301. "mvc-",
  1302. "mvc.",
  1303. "exercise",
  1304. "leaflet",
  1305. "launcher",
  1306. "air_",
  1307. "air-",
  1308. "air.",
  1309. "photo",
  1310. "board",
  1311. "boxen",
  1312. "way_",
  1313. "way-",
  1314. "way.",
  1315. "computing",
  1316. "welcome",
  1317. "notepad",
  1318. "portfolio",
  1319. "cat_",
  1320. "cat-",
  1321. "cat.",
  1322. "can_",
  1323. "can-",
  1324. "can.",
  1325. "magento",
  1326. "yaml",
  1327. "domain",
  1328. "card",
  1329. "yii_",
  1330. "yii-",
  1331. "yii.",
  1332. "checker",
  1333. "browser",
  1334. "upgrade",
  1335. "only",
  1336. "progres",
  1337. "aura",
  1338. "ruby_",
  1339. "ruby-",
  1340. "ruby.",
  1341. "polymer",
  1342. "util",
  1343. "lite",
  1344. "hackathon",
  1345. "rule",
  1346. "log_",
  1347. "log-",
  1348. "log.",
  1349. "opengl",
  1350. "stanford",
  1351. "skeleton",
  1352. "history",
  1353. "inspector",
  1354. "help",
  1355. "soon",
  1356. "selenium",
  1357. "lab_",
  1358. "lab-",
  1359. "lab.",
  1360. "scheme",
  1361. "schema",
  1362. "look",
  1363. "ready",
  1364. "leveldb",
  1365. "docker",
  1366. "game",
  1367. "minimal",
  1368. "logstash",
  1369. "messaging",
  1370. "within",
  1371. "heroku",
  1372. "mongodb",
  1373. "kata",
  1374. "suite",
  1375. "picker",
  1376. "win_",
  1377. "win-",
  1378. "win.",
  1379. "wip_",
  1380. "wip-",
  1381. "wip.",
  1382. "panel",
  1383. "started",
  1384. "starter",
  1385. "front-end",
  1386. "detector",
  1387. "deploy",
  1388. "editing",
  1389. "based",
  1390. "admin",
  1391. "capture",
  1392. "spree",
  1393. "page",
  1394. "bundle",
  1395. "goal",
  1396. "rpg_",
  1397. "rpg-",
  1398. "rpg.",
  1399. "setup",
  1400. "side",
  1401. "mean",
  1402. "reader",
  1403. "cookbook",
  1404. "mini",
  1405. "modern",
  1406. "seed",
  1407. "dom_",
  1408. "dom-",
  1409. "dom.",
  1410. "doc_",
  1411. "doc-",
  1412. "doc.",
  1413. "dot_",
  1414. "dot-",
  1415. "dot.",
  1416. "syntax",
  1417. "sugar",
  1418. "loader",
  1419. "website",
  1420. "make",
  1421. "kit_",
  1422. "kit-",
  1423. "kit.",
  1424. "protocol",
  1425. "human",
  1426. "daemon",
  1427. "golang",
  1428. "manager",
  1429. "countdown",
  1430. "connector",
  1431. "swagger",
  1432. "map_",
  1433. "map-",
  1434. "map.",
  1435. "mac_",
  1436. "mac-",
  1437. "mac.",
  1438. "man_",
  1439. "man-",
  1440. "man.",
  1441. "orm_",
  1442. "orm-",
  1443. "orm.",
  1444. "org_",
  1445. "org-",
  1446. "org.",
  1447. "little",
  1448. "zsh_",
  1449. "zsh-",
  1450. "zsh.",
  1451. "shop",
  1452. "show",
  1453. "workshop",
  1454. "money",
  1455. "grid",
  1456. "server",
  1457. "octopres",
  1458. "svn_",
  1459. "svn-",
  1460. "svn.",
  1461. "ember",
  1462. "embed",
  1463. "general",
  1464. "file",
  1465. "important",
  1466. "dropbox",
  1467. "portable",
  1468. "public",
  1469. "docpad",
  1470. "fish",
  1471. "sbt_",
  1472. "sbt-",
  1473. "sbt.",
  1474. "done",
  1475. "para",
  1476. "network",
  1477. "common",
  1478. "readme",
  1479. "popup",
  1480. "simple",
  1481. "purpose",
  1482. "mirror",
  1483. "single",
  1484. "cordova",
  1485. "exchange",
  1486. "object",
  1487. "design",
  1488. "gateway",
  1489. "account",
  1490. "lamp",
  1491. "intellij",
  1492. "math",
  1493. "mit_",
  1494. "mit-",
  1495. "mit.",
  1496. "control",
  1497. "enhanced",
  1498. "emitter",
  1499. "multi",
  1500. "add_",
  1501. "add-",
  1502. "add.",
  1503. "about",
  1504. "socket",
  1505. "preview",
  1506. "vagrant",
  1507. "cli_",
  1508. "cli-",
  1509. "cli.",
  1510. "powerful",
  1511. "top_",
  1512. "top-",
  1513. "top.",
  1514. "radio",
  1515. "watch",
  1516. "fluid",
  1517. "amazon",
  1518. "report",
  1519. "couchbase",
  1520. "automatic",
  1521. "detection",
  1522. "sprite",
  1523. "pyramid",
  1524. "portal",
  1525. "advanced",
  1526. "plu_",
  1527. "plu-",
  1528. "plu.",
  1529. "runtime",
  1530. "git_",
  1531. "git-",
  1532. "git.",
  1533. "uri_",
  1534. "uri-",
  1535. "uri.",
  1536. "haml",
  1537. "node",
  1538. "sql_",
  1539. "sql-",
  1540. "sql.",
  1541. "cool",
  1542. "core",
  1543. "obsolete",
  1544. "handler",
  1545. "iphone",
  1546. "extractor",
  1547. "array",
  1548. "copy",
  1549. "nlp_",
  1550. "nlp-",
  1551. "nlp.",
  1552. "reveal",
  1553. "pop_",
  1554. "pop-",
  1555. "pop.",
  1556. "engine",
  1557. "parse",
  1558. "check",
  1559. "html",
  1560. "nest",
  1561. "all_",
  1562. "all-",
  1563. "all.",
  1564. "chinese",
  1565. "buildpack",
  1566. "what",
  1567. "tag_",
  1568. "tag-",
  1569. "tag.",
  1570. "proxy",
  1571. "style",
  1572. "cookie",
  1573. "feed",
  1574. "restful",
  1575. "compiler",
  1576. "creating",
  1577. "prelude",
  1578. "context",
  1579. "java",
  1580. "rspec",
  1581. "mock",
  1582. "backbone",
  1583. "light",
  1584. "spotify",
  1585. "flex",
  1586. "related",
  1587. "shell",
  1588. "which",
  1589. "clas",
  1590. "webapp",
  1591. "swift",
  1592. "ansible",
  1593. "unity",
  1594. "console",
  1595. "tumblr",
  1596. "export",
  1597. "campfire",
  1598. "conway'",
  1599. "made",
  1600. "riak",
  1601. "hero",
  1602. "here",
  1603. "unix",
  1604. "unit",
  1605. "glas",
  1606. "smtp",
  1607. "how_",
  1608. "how-",
  1609. "how.",
  1610. "hot_",
  1611. "hot-",
  1612. "hot.",
  1613. "debug",
  1614. "release",
  1615. "diff",
  1616. "player",
  1617. "easy",
  1618. "right",
  1619. "old_",
  1620. "old-",
  1621. "old.",
  1622. "animate",
  1623. "time",
  1624. "push",
  1625. "explorer",
  1626. "course",
  1627. "training",
  1628. "nette",
  1629. "router",
  1630. "draft",
  1631. "structure",
  1632. "note",
  1633. "salt",
  1634. "where",
  1635. "spark",
  1636. "trello",
  1637. "power",
  1638. "method",
  1639. "social",
  1640. "via_",
  1641. "via-",
  1642. "via.",
  1643. "vim_",
  1644. "vim-",
  1645. "vim.",
  1646. "select",
  1647. "webkit",
  1648. "github",
  1649. "ftp_",
  1650. "ftp-",
  1651. "ftp.",
  1652. "creator",
  1653. "mongoose",
  1654. "led_",
  1655. "led-",
  1656. "led.",
  1657. "movie",
  1658. "currently",
  1659. "pdf_",
  1660. "pdf-",
  1661. "pdf.",
  1662. "load",
  1663. "markdown",
  1664. "phalcon",
  1665. "input",
  1666. "custom",
  1667. "atom",
  1668. "oracle",
  1669. "phonegap",
  1670. "ubuntu",
  1671. "great",
  1672. "rdf_",
  1673. "rdf-",
  1674. "rdf.",
  1675. "popcorn",
  1676. "firefox",
  1677. "zip_",
  1678. "zip-",
  1679. "zip.",
  1680. "cuda",
  1681. "dotfile",
  1682. "static",
  1683. "openwrt",
  1684. "viewer",
  1685. "powered",
  1686. "graphic",
  1687. "les_",
  1688. "les-",
  1689. "les.",
  1690. "doe_",
  1691. "doe-",
  1692. "doe.",
  1693. "maven",
  1694. "word",
  1695. "eclipse",
  1696. "lab_",
  1697. "lab-",
  1698. "lab.",
  1699. "hacking",
  1700. "steam",
  1701. "analytic",
  1702. "option",
  1703. "abstract",
  1704. "archive",
  1705. "reality",
  1706. "switcher",
  1707. "club",
  1708. "write",
  1709. "kafka",
  1710. "arduino",
  1711. "angular",
  1712. "online",
  1713. "title",
  1714. "don't",
  1715. "contao",
  1716. "notice",
  1717. "analyzer",
  1718. "learning",
  1719. "zend",
  1720. "external",
  1721. "staging",
  1722. "busines",
  1723. "tdd_",
  1724. "tdd-",
  1725. "tdd.",
  1726. "scanner",
  1727. "building",
  1728. "snippet",
  1729. "modular",
  1730. "bower",
  1731. "stm_",
  1732. "stm-",
  1733. "stm.",
  1734. "lib_",
  1735. "lib-",
  1736. "lib.",
  1737. "alpha",
  1738. "mobile",
  1739. "clean",
  1740. "linux",
  1741. "nginx",
  1742. "manifest",
  1743. "some",
  1744. "raspberry",
  1745. "gnome",
  1746. "ide_",
  1747. "ide-",
  1748. "ide.",
  1749. "block",
  1750. "statistic",
  1751. "info",
  1752. "drag",
  1753. "youtube",
  1754. "koan",
  1755. "facebook",
  1756. "paperclip",
  1757. "art_",
  1758. "art-",
  1759. "art.",
  1760. "quality",
  1761. "tab_",
  1762. "tab-",
  1763. "tab.",
  1764. "need",
  1765. "dojo",
  1766. "shield",
  1767. "computer",
  1768. "stat",
  1769. "state",
  1770. "twitter",
  1771. "utility",
  1772. "converter",
  1773. "hosting",
  1774. "devise",
  1775. "liferay",
  1776. "updated",
  1777. "force",
  1778. "tip_",
  1779. "tip-",
  1780. "tip.",
  1781. "behavior",
  1782. "active",
  1783. "call",
  1784. "answer",
  1785. "deck",
  1786. "better",
  1787. "principle",
  1788. "ches",
  1789. "bar_",
  1790. "bar-",
  1791. "bar.",
  1792. "reddit",
  1793. "three",
  1794. "haxe",
  1795. "just",
  1796. "plug-in",
  1797. "agile",
  1798. "manual",
  1799. "tetri",
  1800. "super",
  1801. "beta",
  1802. "parsing",
  1803. "doctrine",
  1804. "minecraft",
  1805. "useful",
  1806. "perl",
  1807. "sharing",
  1808. "agent",
  1809. "switch",
  1810. "view",
  1811. "dash",
  1812. "channel",
  1813. "repo",
  1814. "pebble",
  1815. "profiler",
  1816. "warning",
  1817. "cluster",
  1818. "running",
  1819. "markup",
  1820. "evented",
  1821. "mod_",
  1822. "mod-",
  1823. "mod.",
  1824. "share",
  1825. "csv_",
  1826. "csv-",
  1827. "csv.",
  1828. "response",
  1829. "good",
  1830. "house",
  1831. "connect",
  1832. "built",
  1833. "build",
  1834. "find",
  1835. "ipython",
  1836. "webgl",
  1837. "big_",
  1838. "big-",
  1839. "big.",
  1840. "google",
  1841. "scala",
  1842. "sdl_",
  1843. "sdl-",
  1844. "sdl.",
  1845. "sdk_",
  1846. "sdk-",
  1847. "sdk.",
  1848. "native",
  1849. "day_",
  1850. "day-",
  1851. "day.",
  1852. "puppet",
  1853. "text",
  1854. "routing",
  1855. "helper",
  1856. "linkedin",
  1857. "crawler",
  1858. "host",
  1859. "guard",
  1860. "merchant",
  1861. "poker",
  1862. "over",
  1863. "writing",
  1864. "free",
  1865. "classe",
  1866. "component",
  1867. "craft",
  1868. "nodej",
  1869. "phoenix",
  1870. "longer",
  1871. "quick",
  1872. "lazy",
  1873. "memory",
  1874. "clone",
  1875. "hacker",
  1876. "middleman",
  1877. "factory",
  1878. "motion",
  1879. "multiple",
  1880. "tornado",
  1881. "hack",
  1882. "ssh_",
  1883. "ssh-",
  1884. "ssh.",
  1885. "review",
  1886. "vimrc",
  1887. "driver",
  1888. "driven",
  1889. "blog",
  1890. "particle",
  1891. "table",
  1892. "intro",
  1893. "importer",
  1894. "thrift",
  1895. "xmpp",
  1896. "framework",
  1897. "refresh",
  1898. "react",
  1899. "font",
  1900. "librarie",
  1901. "variou",
  1902. "formatter",
  1903. "analysi",
  1904. "karma",
  1905. "scroll",
  1906. "tut_",
  1907. "tut-",
  1908. "tut.",
  1909. "apple",
  1910. "tag_",
  1911. "tag-",
  1912. "tag.",
  1913. "tab_",
  1914. "tab-",
  1915. "tab.",
  1916. "category",
  1917. "ionic",
  1918. "cache",
  1919. "homebrew",
  1920. "reverse",
  1921. "english",
  1922. "getting",
  1923. "shipping",
  1924. "clojure",
  1925. "boot",
  1926. "book",
  1927. "branch",
  1928. "combination",
  1929. "combo",
  1930. ]
  1931. [[rules]]
  1932. id = "github-app-token"
  1933. description = "GitHub App Token"
  1934. regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
  1935. keywords = [
  1936. "ghu_","ghs_",
  1937. ]
  1938. [[rules]]
  1939. id = "github-fine-grained-pat"
  1940. description = "GitHub Fine-Grained Personal Access Token"
  1941. regex = '''github_pat_[0-9a-zA-Z_]{82}'''
  1942. keywords = [
  1943. "github_pat_",
  1944. ]
  1945. [[rules]]
  1946. id = "github-oauth"
  1947. description = "GitHub OAuth Access Token"
  1948. regex = '''gho_[0-9a-zA-Z]{36}'''
  1949. keywords = [
  1950. "gho_",
  1951. ]
  1952. [[rules]]
  1953. id = "github-pat"
  1954. description = "GitHub Personal Access Token"
  1955. regex = '''ghp_[0-9a-zA-Z]{36}'''
  1956. keywords = [
  1957. "ghp_",
  1958. ]
  1959. [[rules]]
  1960. id = "github-refresh-token"
  1961. description = "GitHub Refresh Token"
  1962. regex = '''ghr_[0-9a-zA-Z]{36}'''
  1963. keywords = [
  1964. "ghr_",
  1965. ]
  1966. [[rules]]
  1967. id = "gitlab-pat"
  1968. description = "GitLab Personal Access Token"
  1969. regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
  1970. keywords = [
  1971. "glpat-",
  1972. ]
  1973. [[rules]]
  1974. id = "gitlab-ptt"
  1975. description = "GitLab Pipeline Trigger Token"
  1976. regex = '''glptt-[0-9a-f]{40}'''
  1977. keywords = [
  1978. "glptt-",
  1979. ]
  1980. [[rules]]
  1981. id = "gitlab-rrt"
  1982. description = "GitLab Runner Registration Token"
  1983. regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
  1984. keywords = [
  1985. "gr1348941",
  1986. ]
  1987. [[rules]]
  1988. id = "gitter-access-token"
  1989. description = "Gitter Access Token"
  1990. regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1991. secretGroup = 1
  1992. keywords = [
  1993. "gitter",
  1994. ]
  1995. [[rules]]
  1996. id = "gocardless-api-token"
  1997. description = "GoCardless API token"
  1998. regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1999. secretGroup = 1
  2000. keywords = [
  2001. "live_","gocardless",
  2002. ]
  2003. [[rules]]
  2004. id = "grafana-api-key"
  2005. description = "Grafana api key (or Grafana cloud api key)"
  2006. regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2007. secretGroup = 1
  2008. keywords = [
  2009. "eyjrijoi",
  2010. ]
  2011. [[rules]]
  2012. id = "grafana-cloud-api-token"
  2013. description = "Grafana cloud api token"
  2014. regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2015. secretGroup = 1
  2016. keywords = [
  2017. "glc_",
  2018. ]
  2019. [[rules]]
  2020. id = "grafana-service-account-token"
  2021. description = "Grafana service account token"
  2022. regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2023. secretGroup = 1
  2024. keywords = [
  2025. "glsa_",
  2026. ]
  2027. [[rules]]
  2028. id = "hashicorp-tf-api-token"
  2029. description = "HashiCorp Terraform user/org API token"
  2030. regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
  2031. keywords = [
  2032. "atlasv1",
  2033. ]
  2034. [[rules]]
  2035. id = "heroku-api-key"
  2036. description = "Heroku API Key"
  2037. regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2038. secretGroup = 1
  2039. keywords = [
  2040. "heroku",
  2041. ]
  2042. [[rules]]
  2043. id = "hubspot-api-key"
  2044. description = "HubSpot API Token"
  2045. regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2046. secretGroup = 1
  2047. keywords = [
  2048. "hubspot",
  2049. ]
  2050. [[rules]]
  2051. id = "intercom-api-key"
  2052. description = "Intercom API Token"
  2053. regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2054. secretGroup = 1
  2055. keywords = [
  2056. "intercom",
  2057. ]
  2058. [[rules]]
  2059. id = "jfrog-api-key"
  2060. description = "JFrog API Key"
  2061. regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2062. secretGroup = 1
  2063. keywords = [
  2064. "jfrog","artifactory","bintray","xray",
  2065. ]
  2066. [[rules]]
  2067. id = "jfrog-identity-token"
  2068. description = "JFrog Identity Token"
  2069. regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2070. secretGroup = 1
  2071. keywords = [
  2072. "jfrog","artifactory","bintray","xray",
  2073. ]
  2074. [[rules]]
  2075. id = "jwt"
  2076. description = "JSON Web Token"
  2077. regex = '''(?i)\b(ey[0-9a-z]{30,34}\.ey[0-9a-z-\/_]{30,500}\.[0-9a-zA-Z-\/_]{10,200}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2078. keywords = [
  2079. "ey",
  2080. ]
  2081. [[rules]]
  2082. id = "kraken-access-token"
  2083. description = "Kraken Access Token"
  2084. regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2085. secretGroup = 1
  2086. keywords = [
  2087. "kraken",
  2088. ]
  2089. [[rules]]
  2090. id = "kucoin-access-token"
  2091. description = "Kucoin Access Token"
  2092. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2093. secretGroup = 1
  2094. keywords = [
  2095. "kucoin",
  2096. ]
  2097. [[rules]]
  2098. id = "kucoin-secret-key"
  2099. description = "Kucoin Secret Key"
  2100. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2101. secretGroup = 1
  2102. keywords = [
  2103. "kucoin",
  2104. ]
  2105. [[rules]]
  2106. id = "launchdarkly-access-token"
  2107. description = "Launchdarkly Access Token"
  2108. regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2109. secretGroup = 1
  2110. keywords = [
  2111. "launchdarkly",
  2112. ]
  2113. [[rules]]
  2114. id = "linear-api-key"
  2115. description = "Linear API Token"
  2116. regex = '''lin_api_(?i)[a-z0-9]{40}'''
  2117. keywords = [
  2118. "lin_api_",
  2119. ]
  2120. [[rules]]
  2121. id = "linear-client-secret"
  2122. description = "Linear Client Secret"
  2123. regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2124. secretGroup = 1
  2125. keywords = [
  2126. "linear",
  2127. ]
  2128. [[rules]]
  2129. id = "linkedin-client-id"
  2130. description = "LinkedIn Client ID"
  2131. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2132. secretGroup = 1
  2133. keywords = [
  2134. "linkedin","linked-in",
  2135. ]
  2136. [[rules]]
  2137. id = "linkedin-client-secret"
  2138. description = "LinkedIn Client secret"
  2139. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2140. secretGroup = 1
  2141. keywords = [
  2142. "linkedin","linked-in",
  2143. ]
  2144. [[rules]]
  2145. id = "lob-api-key"
  2146. description = "Lob API Key"
  2147. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2148. secretGroup = 1
  2149. keywords = [
  2150. "test_","live_",
  2151. ]
  2152. [[rules]]
  2153. id = "lob-pub-api-key"
  2154. description = "Lob Publishable API Key"
  2155. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2156. secretGroup = 1
  2157. keywords = [
  2158. "test_pub","live_pub","_pub",
  2159. ]
  2160. [[rules]]
  2161. id = "mailchimp-api-key"
  2162. description = "Mailchimp API key"
  2163. regex = '''(?i)(?:mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2164. secretGroup = 1
  2165. keywords = [
  2166. "mailchimp",
  2167. ]
  2168. [[rules]]
  2169. id = "mailgun-private-api-token"
  2170. description = "Mailgun private API token"
  2171. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2172. secretGroup = 1
  2173. keywords = [
  2174. "mailgun",
  2175. ]
  2176. [[rules]]
  2177. id = "mailgun-pub-key"
  2178. description = "Mailgun public validation key"
  2179. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2180. secretGroup = 1
  2181. keywords = [
  2182. "mailgun",
  2183. ]
  2184. [[rules]]
  2185. id = "mailgun-signing-key"
  2186. description = "Mailgun webhook signing key"
  2187. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2188. secretGroup = 1
  2189. keywords = [
  2190. "mailgun",
  2191. ]
  2192. [[rules]]
  2193. id = "mapbox-api-token"
  2194. description = "MapBox API token"
  2195. regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2196. secretGroup = 1
  2197. keywords = [
  2198. "mapbox",
  2199. ]
  2200. [[rules]]
  2201. id = "mattermost-access-token"
  2202. description = "Mattermost Access Token"
  2203. regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2204. secretGroup = 1
  2205. keywords = [
  2206. "mattermost",
  2207. ]
  2208. [[rules]]
  2209. id = "messagebird-api-token"
  2210. description = "MessageBird API token"
  2211. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2212. secretGroup = 1
  2213. keywords = [
  2214. "messagebird","message-bird","message_bird",
  2215. ]
  2216. [[rules]]
  2217. id = "messagebird-client-id"
  2218. description = "MessageBird client ID"
  2219. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2220. secretGroup = 1
  2221. keywords = [
  2222. "messagebird","message-bird","message_bird",
  2223. ]
  2224. [[rules]]
  2225. id = "microsoft-teams-webhook"
  2226. description = "Microsoft Teams Webhook"
  2227. regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
  2228. keywords = [
  2229. "webhook.office.com","webhookb2","incomingwebhook",
  2230. ]
  2231. [[rules]]
  2232. id = "netlify-access-token"
  2233. description = "Netlify Access Token"
  2234. regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2235. secretGroup = 1
  2236. keywords = [
  2237. "netlify",
  2238. ]
  2239. [[rules]]
  2240. id = "new-relic-browser-api-token"
  2241. description = "New Relic ingest browser API token"
  2242. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2243. secretGroup = 1
  2244. keywords = [
  2245. "nrjs-",
  2246. ]
  2247. [[rules]]
  2248. id = "new-relic-user-api-id"
  2249. description = "New Relic user API ID"
  2250. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2251. secretGroup = 1
  2252. keywords = [
  2253. "new-relic","newrelic","new_relic",
  2254. ]
  2255. [[rules]]
  2256. id = "new-relic-user-api-key"
  2257. description = "New Relic user API Key"
  2258. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2259. secretGroup = 1
  2260. keywords = [
  2261. "nrak",
  2262. ]
  2263. [[rules]]
  2264. id = "npm-access-token"
  2265. description = "npm access token"
  2266. regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2267. secretGroup = 1
  2268. keywords = [
  2269. "npm_",
  2270. ]
  2271. [[rules]]
  2272. id = "nytimes-access-token"
  2273. description = "Nytimes Access Token"
  2274. regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2275. secretGroup = 1
  2276. keywords = [
  2277. "nytimes","new-york-times","newyorktimes",
  2278. ]
  2279. [[rules]]
  2280. id = "okta-access-token"
  2281. description = "Okta Access Token"
  2282. regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2283. secretGroup = 1
  2284. keywords = [
  2285. "okta",
  2286. ]
  2287. [[rules]]
  2288. id = "openai-api-key"
  2289. description = "OpenAI API Key"
  2290. regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2291. secretGroup = 1
  2292. keywords = [
  2293. "t3blbkfj",
  2294. ]
  2295. [[rules]]
  2296. id = "plaid-api-token"
  2297. description = "Plaid API Token"
  2298. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2299. secretGroup = 1
  2300. keywords = [
  2301. "plaid",
  2302. ]
  2303. [[rules]]
  2304. id = "plaid-client-id"
  2305. description = "Plaid Client ID"
  2306. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2307. secretGroup = 1
  2308. keywords = [
  2309. "plaid",
  2310. ]
  2311. [[rules]]
  2312. id = "plaid-secret-key"
  2313. description = "Plaid Secret key"
  2314. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2315. secretGroup = 1
  2316. keywords = [
  2317. "plaid",
  2318. ]
  2319. [[rules]]
  2320. id = "planetscale-api-token"
  2321. description = "PlanetScale API token"
  2322. regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2323. secretGroup = 1
  2324. keywords = [
  2325. "pscale_tkn_",
  2326. ]
  2327. [[rules]]
  2328. id = "planetscale-oauth-token"
  2329. description = "PlanetScale OAuth token"
  2330. regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2331. secretGroup = 1
  2332. keywords = [
  2333. "pscale_oauth_",
  2334. ]
  2335. [[rules]]
  2336. id = "planetscale-password"
  2337. description = "PlanetScale password"
  2338. regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2339. secretGroup = 1
  2340. keywords = [
  2341. "pscale_pw_",
  2342. ]
  2343. [[rules]]
  2344. id = "postman-api-token"
  2345. description = "Postman API token"
  2346. regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2347. secretGroup = 1
  2348. keywords = [
  2349. "pmak-",
  2350. ]
  2351. [[rules]]
  2352. id = "prefect-api-token"
  2353. description = "Prefect API token"
  2354. regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2355. secretGroup = 1
  2356. keywords = [
  2357. "pnu_",
  2358. ]
  2359. [[rules]]
  2360. id = "private-key"
  2361. description = "Private Key"
  2362. regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
  2363. keywords = [
  2364. "-----begin",
  2365. ]
  2366. [[rules]]
  2367. id = "pulumi-api-token"
  2368. description = "Pulumi API token"
  2369. regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2370. secretGroup = 1
  2371. keywords = [
  2372. "pul-",
  2373. ]
  2374. [[rules]]
  2375. id = "pypi-upload-token"
  2376. description = "PyPI upload token"
  2377. regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
  2378. keywords = [
  2379. "pypi-ageichlwas5vcmc",
  2380. ]
  2381. [[rules]]
  2382. id = "rapidapi-access-token"
  2383. description = "RapidAPI Access Token"
  2384. regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2385. secretGroup = 1
  2386. keywords = [
  2387. "rapidapi",
  2388. ]
  2389. [[rules]]
  2390. id = "readme-api-token"
  2391. description = "Readme API token"
  2392. regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2393. secretGroup = 1
  2394. keywords = [
  2395. "rdme_",
  2396. ]
  2397. [[rules]]
  2398. id = "rubygems-api-token"
  2399. description = "Rubygem API token"
  2400. regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2401. secretGroup = 1
  2402. keywords = [
  2403. "rubygems_",
  2404. ]
  2405. [[rules]]
  2406. id = "sendbird-access-id"
  2407. description = "Sendbird Access ID"
  2408. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2409. secretGroup = 1
  2410. keywords = [
  2411. "sendbird",
  2412. ]
  2413. [[rules]]
  2414. id = "sendbird-access-token"
  2415. description = "Sendbird Access Token"
  2416. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2417. secretGroup = 1
  2418. keywords = [
  2419. "sendbird",
  2420. ]
  2421. [[rules]]
  2422. id = "sendgrid-api-token"
  2423. description = "SendGrid API token"
  2424. regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2425. secretGroup = 1
  2426. keywords = [
  2427. "sg.",
  2428. ]
  2429. [[rules]]
  2430. id = "sendinblue-api-token"
  2431. description = "Sendinblue API token"
  2432. regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2433. secretGroup = 1
  2434. keywords = [
  2435. "xkeysib-",
  2436. ]
  2437. [[rules]]
  2438. id = "sentry-access-token"
  2439. description = "Sentry Access Token"
  2440. regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2441. secretGroup = 1
  2442. keywords = [
  2443. "sentry",
  2444. ]
  2445. [[rules]]
  2446. id = "shippo-api-token"
  2447. description = "Shippo API token"
  2448. regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2449. secretGroup = 1
  2450. keywords = [
  2451. "shippo_",
  2452. ]
  2453. [[rules]]
  2454. id = "shopify-access-token"
  2455. description = "Shopify access token"
  2456. regex = '''shpat_[a-fA-F0-9]{32}'''
  2457. keywords = [
  2458. "shpat_",
  2459. ]
  2460. [[rules]]
  2461. id = "shopify-custom-access-token"
  2462. description = "Shopify custom access token"
  2463. regex = '''shpca_[a-fA-F0-9]{32}'''
  2464. keywords = [
  2465. "shpca_",
  2466. ]
  2467. [[rules]]
  2468. id = "shopify-private-app-access-token"
  2469. description = "Shopify private app access token"
  2470. regex = '''shppa_[a-fA-F0-9]{32}'''
  2471. keywords = [
  2472. "shppa_",
  2473. ]
  2474. [[rules]]
  2475. id = "shopify-shared-secret"
  2476. description = "Shopify shared secret"
  2477. regex = '''shpss_[a-fA-F0-9]{32}'''
  2478. keywords = [
  2479. "shpss_",
  2480. ]
  2481. [[rules]]
  2482. id = "sidekiq-secret"
  2483. description = "Sidekiq Secret"
  2484. regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2485. secretGroup = 1
  2486. keywords = [
  2487. "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
  2488. ]
  2489. [[rules]]
  2490. id = "sidekiq-sensitive-url"
  2491. description = "Sidekiq Sensitive URL"
  2492. regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
  2493. secretGroup = 2
  2494. keywords = [
  2495. "gems.contribsys.com","enterprise.contribsys.com",
  2496. ]
  2497. [[rules]]
  2498. id = "slack-app-token"
  2499. description = "Slack App-level token"
  2500. regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
  2501. keywords = [
  2502. "xapp",
  2503. ]
  2504. [[rules]]
  2505. id = "slack-bot-token"
  2506. description = "Slack Bot token"
  2507. regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
  2508. keywords = [
  2509. "xoxb",
  2510. ]
  2511. [[rules]]
  2512. id = "slack-config-access-token"
  2513. description = "Slack Configuration access token"
  2514. regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
  2515. keywords = [
  2516. "xoxe.xoxb-","xoxe.xoxp-",
  2517. ]
  2518. [[rules]]
  2519. id = "slack-config-refresh-token"
  2520. description = "Slack Configuration refresh token"
  2521. regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
  2522. keywords = [
  2523. "xoxe-",
  2524. ]
  2525. [[rules]]
  2526. id = "slack-legacy-bot-token"
  2527. description = "Slack Legacy bot token"
  2528. regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
  2529. keywords = [
  2530. "xoxb",
  2531. ]
  2532. [[rules]]
  2533. id = "slack-legacy-token"
  2534. description = "Slack Legacy token"
  2535. regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
  2536. keywords = [
  2537. "xoxo","xoxs",
  2538. ]
  2539. [[rules]]
  2540. id = "slack-legacy-workspace-token"
  2541. description = "Slack Legacy Workspace token"
  2542. regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
  2543. keywords = [
  2544. "xoxa","xoxr",
  2545. ]
  2546. [[rules]]
  2547. id = "slack-user-token"
  2548. description = "Slack User"
  2549. regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
  2550. keywords = [
  2551. "xoxp-","xoxe-",
  2552. ]
  2553. [[rules]]
  2554. id = "slack-webhook-url"
  2555. description = "Slack Webhook"
  2556. regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
  2557. keywords = [
  2558. "hooks.slack.com",
  2559. ]
  2560. [[rules]]
  2561. id = "snyk-api-token"
  2562. description = "Snyk API token"
  2563. regex = '''(?i)(?:snyk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2564. secretGroup = 1
  2565. keywords = [
  2566. "snyk",
  2567. ]
  2568. [[rules]]
  2569. id = "square-access-token"
  2570. description = "Square Access Token"
  2571. regex = '''(?i)\b(sq0atp-[0-9A-Za-z\-_]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2572. keywords = [
  2573. "sq0atp-",
  2574. ]
  2575. [[rules]]
  2576. id = "squarespace-access-token"
  2577. description = "Squarespace Access Token"
  2578. regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2579. secretGroup = 1
  2580. keywords = [
  2581. "squarespace",
  2582. ]
  2583. [[rules]]
  2584. id = "stripe-access-token"
  2585. description = "Stripe Access Token"
  2586. regex = '''(?i)(sk|pk)_(test|live)_[0-9a-z]{10,32}'''
  2587. keywords = [
  2588. "sk_test","pk_test","sk_live","pk_live",
  2589. ]
  2590. [[rules]]
  2591. id = "sumologic-access-id"
  2592. description = "SumoLogic Access ID"
  2593. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2594. secretGroup = 1
  2595. entropy = 3
  2596. keywords = [
  2597. "sumo",
  2598. ]
  2599. [rules.allowlist]
  2600. regexTarget = "line"
  2601. regexes = [
  2602. "sumOf",
  2603. ]
  2604. [[rules]]
  2605. id = "sumologic-access-token"
  2606. description = "SumoLogic Access Token"
  2607. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2608. secretGroup = 1
  2609. entropy = 3
  2610. keywords = [
  2611. "sumo",
  2612. ]
  2613. [[rules]]
  2614. id = "telegram-bot-api-token"
  2615. description = "Telegram Bot API Token"
  2616. regex = '''(?i)(?:^|[^0-9])([0-9]{5,16}:A[a-zA-Z0-9_\-]{34})(?:$|[^a-zA-Z0-9_\-])'''
  2617. secretGroup = 1
  2618. keywords = [
  2619. "telegram","api","bot","token","url",
  2620. ]
  2621. [[rules]]
  2622. id = "travisci-access-token"
  2623. description = "Travis CI Access Token"
  2624. regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2625. secretGroup = 1
  2626. keywords = [
  2627. "travis",
  2628. ]
  2629. [[rules]]
  2630. id = "twilio-api-key"
  2631. description = "Twilio API Key"
  2632. regex = '''SK[0-9a-fA-F]{32}'''
  2633. keywords = [
  2634. "twilio",
  2635. ]
  2636. [[rules]]
  2637. id = "twitch-api-token"
  2638. description = "Twitch API token"
  2639. regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2640. secretGroup = 1
  2641. keywords = [
  2642. "twitch",
  2643. ]
  2644. [[rules]]
  2645. id = "twitter-access-secret"
  2646. description = "Twitter Access Secret"
  2647. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2648. secretGroup = 1
  2649. keywords = [
  2650. "twitter",
  2651. ]
  2652. [[rules]]
  2653. id = "twitter-access-token"
  2654. description = "Twitter Access Token"
  2655. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2656. secretGroup = 1
  2657. keywords = [
  2658. "twitter",
  2659. ]
  2660. [[rules]]
  2661. id = "twitter-api-key"
  2662. description = "Twitter API Key"
  2663. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2664. secretGroup = 1
  2665. keywords = [
  2666. "twitter",
  2667. ]
  2668. [[rules]]
  2669. id = "twitter-api-secret"
  2670. description = "Twitter API Secret"
  2671. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2672. secretGroup = 1
  2673. keywords = [
  2674. "twitter",
  2675. ]
  2676. [[rules]]
  2677. id = "twitter-bearer-token"
  2678. description = "Twitter Bearer Token"
  2679. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2680. secretGroup = 1
  2681. keywords = [
  2682. "twitter",
  2683. ]
  2684. [[rules]]
  2685. id = "typeform-api-token"
  2686. description = "Typeform API token"
  2687. regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2688. secretGroup = 1
  2689. keywords = [
  2690. "tfp_",
  2691. ]
  2692. [[rules]]
  2693. id = "vault-batch-token"
  2694. description = "Vault Batch Token"
  2695. regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2696. keywords = [
  2697. "hvb",
  2698. ]
  2699. [[rules]]
  2700. id = "vault-service-token"
  2701. description = "Vault Service Token"
  2702. regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2703. keywords = [
  2704. "hvs",
  2705. ]
  2706. [[rules]]
  2707. id = "yandex-access-token"
  2708. description = "Yandex Access Token"
  2709. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2710. secretGroup = 1
  2711. keywords = [
  2712. "yandex",
  2713. ]
  2714. [[rules]]
  2715. id = "yandex-api-key"
  2716. description = "Yandex API Key"
  2717. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2718. secretGroup = 1
  2719. keywords = [
  2720. "yandex",
  2721. ]
  2722. [[rules]]
  2723. id = "yandex-aws-access-token"
  2724. description = "Yandex AWS Access Token"
  2725. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2726. secretGroup = 1
  2727. keywords = [
  2728. "yandex",
  2729. ]
  2730. [[rules]]
  2731. id = "zendesk-secret-key"
  2732. description = "Zendesk Secret Key"
  2733. regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2734. secretGroup = 1
  2735. keywords = [
  2736. "zendesk",
  2737. ]