gitleaks.toml 61 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928
  1. # This file has been auto-generated. Do not edit manually.
  2. # If you would like to contribute new rules, please use
  3. # cmd/generate/config/main.go and follow the contributing guidelines
  4. # at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
  5. # This is the default gitleaks configuration file.
  6. # Rules and allowlists are defined within this file.
  7. # Rules instruct gitleaks on what should be considered a secret.
  8. # Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
  9. title = "gitleaks config"
  10. [allowlist]
  11. description = "global allow lists"
  12. paths = [
  13. '''gitleaks.toml''',
  14. '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
  15. '''(go.mod|go.sum)$''',
  16. '''gradle.lockfile''',
  17. '''node_modules''',
  18. '''package-lock.json''',
  19. '''yarn.lock''',
  20. '''pnpm-lock.yaml''',
  21. '''Database.refactorlog''',
  22. '''vendor''',
  23. ]
  24. [[rules]]
  25. id = "adafruit-api-key"
  26. description = "Adafruit API Key"
  27. regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  28. secretGroup = 1
  29. keywords = [
  30. "adafruit",
  31. ]
  32. [[rules]]
  33. id = "adobe-client-id"
  34. description = "Adobe Client ID (OAuth Web)"
  35. regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  36. secretGroup = 1
  37. keywords = [
  38. "adobe",
  39. ]
  40. [[rules]]
  41. id = "adobe-client-secret"
  42. description = "Adobe Client Secret"
  43. regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  44. keywords = [
  45. "p8e-",
  46. ]
  47. [[rules]]
  48. id = "age secret key"
  49. description = "Age secret key"
  50. regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
  51. keywords = [
  52. "age-secret-key-1",
  53. ]
  54. [[rules]]
  55. id = "airtable-api-key"
  56. description = "Airtable API Key"
  57. regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  58. secretGroup = 1
  59. keywords = [
  60. "airtable",
  61. ]
  62. [[rules]]
  63. id = "algolia-api-key"
  64. description = "Algolia API Key"
  65. regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  66. keywords = [
  67. "algolia",
  68. ]
  69. [[rules]]
  70. id = "alibaba-access-key-id"
  71. description = "Alibaba AccessKey ID"
  72. regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  73. keywords = [
  74. "ltai",
  75. ]
  76. [[rules]]
  77. id = "alibaba-secret-key"
  78. description = "Alibaba Secret Key"
  79. regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  80. secretGroup = 1
  81. keywords = [
  82. "alibaba",
  83. ]
  84. [[rules]]
  85. id = "asana-client-id"
  86. description = "Asana Client ID"
  87. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  88. secretGroup = 1
  89. keywords = [
  90. "asana",
  91. ]
  92. [[rules]]
  93. id = "asana-client-secret"
  94. description = "Asana Client Secret"
  95. regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  96. secretGroup = 1
  97. keywords = [
  98. "asana",
  99. ]
  100. [[rules]]
  101. id = "atlassian-api-token"
  102. description = "Atlassian API token"
  103. regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  104. secretGroup = 1
  105. keywords = [
  106. "atlassian","confluence","jira",
  107. ]
  108. [[rules]]
  109. id = "authress-service-client-access-key"
  110. description = "Authress Service Client Access Key"
  111. regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  112. secretGroup = 1
  113. keywords = [
  114. "sc_","ext_","scauth_","authress_",
  115. ]
  116. [[rules]]
  117. id = "aws-access-token"
  118. description = "AWS"
  119. regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}'''
  120. keywords = [
  121. "akia","agpa","aida","aroa","aipa","anpa","anva","asia",
  122. ]
  123. [[rules]]
  124. id = "beamer-api-token"
  125. description = "Beamer API token"
  126. regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  127. secretGroup = 1
  128. keywords = [
  129. "beamer",
  130. ]
  131. [[rules]]
  132. id = "bitbucket-client-id"
  133. description = "Bitbucket Client ID"
  134. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  135. secretGroup = 1
  136. keywords = [
  137. "bitbucket",
  138. ]
  139. [[rules]]
  140. id = "bitbucket-client-secret"
  141. description = "Bitbucket Client Secret"
  142. regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  143. secretGroup = 1
  144. keywords = [
  145. "bitbucket",
  146. ]
  147. [[rules]]
  148. id = "bittrex-access-key"
  149. description = "Bittrex Access Key"
  150. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  151. secretGroup = 1
  152. keywords = [
  153. "bittrex",
  154. ]
  155. [[rules]]
  156. id = "bittrex-secret-key"
  157. description = "Bittrex Secret Key"
  158. regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  159. secretGroup = 1
  160. keywords = [
  161. "bittrex",
  162. ]
  163. [[rules]]
  164. id = "clojars-api-token"
  165. description = "Clojars API token"
  166. regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
  167. keywords = [
  168. "clojars",
  169. ]
  170. [[rules]]
  171. id = "codecov-access-token"
  172. description = "Codecov Access Token"
  173. regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  174. secretGroup = 1
  175. keywords = [
  176. "codecov",
  177. ]
  178. [[rules]]
  179. id = "coinbase-access-token"
  180. description = "Coinbase Access Token"
  181. regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  182. secretGroup = 1
  183. keywords = [
  184. "coinbase",
  185. ]
  186. [[rules]]
  187. id = "confluent-access-token"
  188. description = "Confluent Access Token"
  189. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  190. secretGroup = 1
  191. keywords = [
  192. "confluent",
  193. ]
  194. [[rules]]
  195. id = "confluent-secret-key"
  196. description = "Confluent Secret Key"
  197. regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  198. secretGroup = 1
  199. keywords = [
  200. "confluent",
  201. ]
  202. [[rules]]
  203. id = "contentful-delivery-api-token"
  204. description = "Contentful delivery API token"
  205. regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  206. secretGroup = 1
  207. keywords = [
  208. "contentful",
  209. ]
  210. [[rules]]
  211. id = "databricks-api-token"
  212. description = "Databricks API token"
  213. regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  214. keywords = [
  215. "dapi",
  216. ]
  217. [[rules]]
  218. id = "datadog-access-token"
  219. description = "Datadog Access Token"
  220. regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  221. secretGroup = 1
  222. keywords = [
  223. "datadog",
  224. ]
  225. [[rules]]
  226. id = "defined-networking-api-token"
  227. description = "Defined Networking API token"
  228. regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  229. secretGroup = 1
  230. keywords = [
  231. "dnkey",
  232. ]
  233. [[rules]]
  234. id = "digitalocean-access-token"
  235. description = "DigitalOcean OAuth Access Token"
  236. regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  237. secretGroup = 1
  238. keywords = [
  239. "doo_v1_",
  240. ]
  241. [[rules]]
  242. id = "digitalocean-pat"
  243. description = "DigitalOcean Personal Access Token"
  244. regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  245. secretGroup = 1
  246. keywords = [
  247. "dop_v1_",
  248. ]
  249. [[rules]]
  250. id = "digitalocean-refresh-token"
  251. description = "DigitalOcean OAuth Refresh Token"
  252. regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  253. secretGroup = 1
  254. keywords = [
  255. "dor_v1_",
  256. ]
  257. [[rules]]
  258. id = "discord-api-token"
  259. description = "Discord API key"
  260. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  261. secretGroup = 1
  262. keywords = [
  263. "discord",
  264. ]
  265. [[rules]]
  266. id = "discord-client-id"
  267. description = "Discord client ID"
  268. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  269. secretGroup = 1
  270. keywords = [
  271. "discord",
  272. ]
  273. [[rules]]
  274. id = "discord-client-secret"
  275. description = "Discord client secret"
  276. regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  277. secretGroup = 1
  278. keywords = [
  279. "discord",
  280. ]
  281. [[rules]]
  282. id = "doppler-api-token"
  283. description = "Doppler API token"
  284. regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
  285. keywords = [
  286. "doppler",
  287. ]
  288. [[rules]]
  289. id = "droneci-access-token"
  290. description = "Droneci Access Token"
  291. regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  292. secretGroup = 1
  293. keywords = [
  294. "droneci",
  295. ]
  296. [[rules]]
  297. id = "dropbox-api-token"
  298. description = "Dropbox API secret"
  299. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  300. secretGroup = 1
  301. keywords = [
  302. "dropbox",
  303. ]
  304. [[rules]]
  305. id = "dropbox-long-lived-api-token"
  306. description = "Dropbox long lived API token"
  307. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  308. keywords = [
  309. "dropbox",
  310. ]
  311. [[rules]]
  312. id = "dropbox-short-lived-api-token"
  313. description = "Dropbox short lived API token"
  314. regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  315. keywords = [
  316. "dropbox",
  317. ]
  318. [[rules]]
  319. id = "duffel-api-token"
  320. description = "Duffel API token"
  321. regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
  322. keywords = [
  323. "duffel",
  324. ]
  325. [[rules]]
  326. id = "dynatrace-api-token"
  327. description = "Dynatrace API token"
  328. regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
  329. keywords = [
  330. "dynatrace",
  331. ]
  332. [[rules]]
  333. id = "easypost-api-token"
  334. description = "EasyPost API token"
  335. regex = '''\bEZAK(?i)[a-z0-9]{54}'''
  336. keywords = [
  337. "ezak",
  338. ]
  339. [[rules]]
  340. id = "easypost-test-api-token"
  341. description = "EasyPost test API token"
  342. regex = '''\bEZTK(?i)[a-z0-9]{54}'''
  343. keywords = [
  344. "eztk",
  345. ]
  346. [[rules]]
  347. id = "etsy-access-token"
  348. description = "Etsy Access Token"
  349. regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  350. secretGroup = 1
  351. keywords = [
  352. "etsy",
  353. ]
  354. [[rules]]
  355. id = "facebook"
  356. description = "Facebook Access Token"
  357. regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  358. secretGroup = 1
  359. keywords = [
  360. "facebook",
  361. ]
  362. [[rules]]
  363. id = "fastly-api-token"
  364. description = "Fastly API key"
  365. regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  366. secretGroup = 1
  367. keywords = [
  368. "fastly",
  369. ]
  370. [[rules]]
  371. id = "finicity-api-token"
  372. description = "Finicity API token"
  373. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  374. secretGroup = 1
  375. keywords = [
  376. "finicity",
  377. ]
  378. [[rules]]
  379. id = "finicity-client-secret"
  380. description = "Finicity Client Secret"
  381. regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  382. secretGroup = 1
  383. keywords = [
  384. "finicity",
  385. ]
  386. [[rules]]
  387. id = "finnhub-access-token"
  388. description = "Finnhub Access Token"
  389. regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  390. secretGroup = 1
  391. keywords = [
  392. "finnhub",
  393. ]
  394. [[rules]]
  395. id = "flickr-access-token"
  396. description = "Flickr Access Token"
  397. regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  398. secretGroup = 1
  399. keywords = [
  400. "flickr",
  401. ]
  402. [[rules]]
  403. id = "flutterwave-encryption-key"
  404. description = "Flutterwave Encryption Key"
  405. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
  406. keywords = [
  407. "flwseck_test",
  408. ]
  409. [[rules]]
  410. id = "flutterwave-public-key"
  411. description = "Finicity Public Key"
  412. regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
  413. keywords = [
  414. "flwpubk_test",
  415. ]
  416. [[rules]]
  417. id = "flutterwave-secret-key"
  418. description = "Flutterwave Secret Key"
  419. regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
  420. keywords = [
  421. "flwseck_test",
  422. ]
  423. [[rules]]
  424. id = "frameio-api-token"
  425. description = "Frame.io API token"
  426. regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
  427. keywords = [
  428. "fio-u-",
  429. ]
  430. [[rules]]
  431. id = "freshbooks-access-token"
  432. description = "Freshbooks Access Token"
  433. regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  434. secretGroup = 1
  435. keywords = [
  436. "freshbooks",
  437. ]
  438. [[rules]]
  439. id = "gcp-api-key"
  440. description = "GCP API key"
  441. regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  442. secretGroup = 1
  443. keywords = [
  444. "aiza",
  445. ]
  446. [[rules]]
  447. id = "generic-api-key"
  448. description = "Generic API Key"
  449. regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  450. secretGroup = 1
  451. entropy = 3.5
  452. keywords = [
  453. "key","api","token","secret","client","passwd","password","auth","access",
  454. ]
  455. [rules.allowlist]
  456. stopwords = [
  457. "client",
  458. "endpoint",
  459. "vpn",
  460. "_ec2_",
  461. "aws_",
  462. "authorize",
  463. "author",
  464. "define",
  465. "config",
  466. "credential",
  467. "setting",
  468. "sample",
  469. "xxxxxx",
  470. "000000",
  471. "buffer",
  472. "delete",
  473. "aaaaaa",
  474. "fewfwef",
  475. "getenv",
  476. "env_",
  477. "system",
  478. "example",
  479. "ecdsa",
  480. "sha256",
  481. "sha1",
  482. "sha2",
  483. "md5",
  484. "alert",
  485. "wizard",
  486. "target",
  487. "onboard",
  488. "welcome",
  489. "page",
  490. "exploit",
  491. "experiment",
  492. "expire",
  493. "rabbitmq",
  494. "scraper",
  495. "widget",
  496. "music",
  497. "dns_",
  498. "dns-",
  499. "yahoo",
  500. "want",
  501. "json",
  502. "action",
  503. "script",
  504. "fix_",
  505. "fix-",
  506. "develop",
  507. "compas",
  508. "stripe",
  509. "service",
  510. "master",
  511. "metric",
  512. "tech",
  513. "gitignore",
  514. "rich",
  515. "open",
  516. "stack",
  517. "irc_",
  518. "irc-",
  519. "sublime",
  520. "kohana",
  521. "has_",
  522. "has-",
  523. "fabric",
  524. "wordpres",
  525. "role",
  526. "osx_",
  527. "osx-",
  528. "boost",
  529. "addres",
  530. "queue",
  531. "working",
  532. "sandbox",
  533. "internet",
  534. "print",
  535. "vision",
  536. "tracking",
  537. "being",
  538. "generator",
  539. "traffic",
  540. "world",
  541. "pull",
  542. "rust",
  543. "watcher",
  544. "small",
  545. "auth",
  546. "full",
  547. "hash",
  548. "more",
  549. "install",
  550. "auto",
  551. "complete",
  552. "learn",
  553. "paper",
  554. "installer",
  555. "research",
  556. "acces",
  557. "last",
  558. "binding",
  559. "spine",
  560. "into",
  561. "chat",
  562. "algorithm",
  563. "resource",
  564. "uploader",
  565. "video",
  566. "maker",
  567. "next",
  568. "proc",
  569. "lock",
  570. "robot",
  571. "snake",
  572. "patch",
  573. "matrix",
  574. "drill",
  575. "terminal",
  576. "term",
  577. "stuff",
  578. "genetic",
  579. "generic",
  580. "identity",
  581. "audit",
  582. "pattern",
  583. "audio",
  584. "web_",
  585. "web-",
  586. "crud",
  587. "problem",
  588. "statu",
  589. "cms-",
  590. "cms_",
  591. "arch",
  592. "coffee",
  593. "workflow",
  594. "changelog",
  595. "another",
  596. "uiview",
  597. "content",
  598. "kitchen",
  599. "gnu_",
  600. "gnu-",
  601. "gnu.",
  602. "conf",
  603. "couchdb",
  604. "client",
  605. "opencv",
  606. "rendering",
  607. "update",
  608. "concept",
  609. "varnish",
  610. "gui_",
  611. "gui-",
  612. "gui.",
  613. "version",
  614. "shared",
  615. "extra",
  616. "product",
  617. "still",
  618. "not_",
  619. "not-",
  620. "not.",
  621. "drop",
  622. "ring",
  623. "png_",
  624. "png-",
  625. "png.",
  626. "actively",
  627. "import",
  628. "output",
  629. "backup",
  630. "start",
  631. "embedded",
  632. "registry",
  633. "pool",
  634. "semantic",
  635. "instagram",
  636. "bash",
  637. "system",
  638. "ninja",
  639. "drupal",
  640. "jquery",
  641. "polyfill",
  642. "physic",
  643. "league",
  644. "guide",
  645. "pack",
  646. "synopsi",
  647. "sketch",
  648. "injection",
  649. "svg_",
  650. "svg-",
  651. "svg.",
  652. "friendly",
  653. "wave",
  654. "convert",
  655. "manage",
  656. "camera",
  657. "link",
  658. "slide",
  659. "timer",
  660. "wrapper",
  661. "gallery",
  662. "url_",
  663. "url-",
  664. "url.",
  665. "todomvc",
  666. "requirej",
  667. "party",
  668. "http",
  669. "payment",
  670. "async",
  671. "library",
  672. "home",
  673. "coco",
  674. "gaia",
  675. "display",
  676. "universal",
  677. "func",
  678. "metadata",
  679. "hipchat",
  680. "under",
  681. "room",
  682. "config",
  683. "personal",
  684. "realtime",
  685. "resume",
  686. "database",
  687. "testing",
  688. "tiny",
  689. "basic",
  690. "forum",
  691. "meetup",
  692. "yet_",
  693. "yet-",
  694. "yet.",
  695. "cento",
  696. "dead",
  697. "fluentd",
  698. "editor",
  699. "utilitie",
  700. "run_",
  701. "run-",
  702. "run.",
  703. "box_",
  704. "box-",
  705. "box.",
  706. "bot_",
  707. "bot-",
  708. "bot.",
  709. "making",
  710. "sample",
  711. "group",
  712. "monitor",
  713. "ajax",
  714. "parallel",
  715. "cassandra",
  716. "ultimate",
  717. "site",
  718. "get_",
  719. "get-",
  720. "get.",
  721. "gen_",
  722. "gen-",
  723. "gen.",
  724. "gem_",
  725. "gem-",
  726. "gem.",
  727. "extended",
  728. "image",
  729. "knife",
  730. "asset",
  731. "nested",
  732. "zero",
  733. "plugin",
  734. "bracket",
  735. "mule",
  736. "mozilla",
  737. "number",
  738. "act_",
  739. "act-",
  740. "act.",
  741. "map_",
  742. "map-",
  743. "map.",
  744. "micro",
  745. "debug",
  746. "openshift",
  747. "chart",
  748. "expres",
  749. "backend",
  750. "task",
  751. "source",
  752. "translate",
  753. "jbos",
  754. "composer",
  755. "sqlite",
  756. "profile",
  757. "mustache",
  758. "mqtt",
  759. "yeoman",
  760. "have",
  761. "builder",
  762. "smart",
  763. "like",
  764. "oauth",
  765. "school",
  766. "guideline",
  767. "captcha",
  768. "filter",
  769. "bitcoin",
  770. "bridge",
  771. "color",
  772. "toolbox",
  773. "discovery",
  774. "new_",
  775. "new-",
  776. "new.",
  777. "dashboard",
  778. "when",
  779. "setting",
  780. "level",
  781. "post",
  782. "standard",
  783. "port",
  784. "platform",
  785. "yui_",
  786. "yui-",
  787. "yui.",
  788. "grunt",
  789. "animation",
  790. "haskell",
  791. "icon",
  792. "latex",
  793. "cheat",
  794. "lua_",
  795. "lua-",
  796. "lua.",
  797. "gulp",
  798. "case",
  799. "author",
  800. "without",
  801. "simulator",
  802. "wifi",
  803. "directory",
  804. "lisp",
  805. "list",
  806. "flat",
  807. "adventure",
  808. "story",
  809. "storm",
  810. "gpu_",
  811. "gpu-",
  812. "gpu.",
  813. "store",
  814. "caching",
  815. "attention",
  816. "solr",
  817. "logger",
  818. "demo",
  819. "shortener",
  820. "hadoop",
  821. "finder",
  822. "phone",
  823. "pipeline",
  824. "range",
  825. "textmate",
  826. "showcase",
  827. "app_",
  828. "app-",
  829. "app.",
  830. "idiomatic",
  831. "edit",
  832. "our_",
  833. "our-",
  834. "our.",
  835. "out_",
  836. "out-",
  837. "out.",
  838. "sentiment",
  839. "linked",
  840. "why_",
  841. "why-",
  842. "why.",
  843. "local",
  844. "cube",
  845. "gmail",
  846. "job_",
  847. "job-",
  848. "job.",
  849. "rpc_",
  850. "rpc-",
  851. "rpc.",
  852. "contest",
  853. "tcp_",
  854. "tcp-",
  855. "tcp.",
  856. "usage",
  857. "buildout",
  858. "weather",
  859. "transfer",
  860. "automated",
  861. "sphinx",
  862. "issue",
  863. "sas_",
  864. "sas-",
  865. "sas.",
  866. "parallax",
  867. "jasmine",
  868. "addon",
  869. "machine",
  870. "solution",
  871. "dsl_",
  872. "dsl-",
  873. "dsl.",
  874. "episode",
  875. "menu",
  876. "theme",
  877. "best",
  878. "adapter",
  879. "debugger",
  880. "chrome",
  881. "tutorial",
  882. "life",
  883. "step",
  884. "people",
  885. "joomla",
  886. "paypal",
  887. "developer",
  888. "solver",
  889. "team",
  890. "current",
  891. "love",
  892. "visual",
  893. "date",
  894. "data",
  895. "canva",
  896. "container",
  897. "future",
  898. "xml_",
  899. "xml-",
  900. "xml.",
  901. "twig",
  902. "nagio",
  903. "spatial",
  904. "original",
  905. "sync",
  906. "archived",
  907. "refinery",
  908. "science",
  909. "mapping",
  910. "gitlab",
  911. "play",
  912. "ext_",
  913. "ext-",
  914. "ext.",
  915. "session",
  916. "impact",
  917. "set_",
  918. "set-",
  919. "set.",
  920. "see_",
  921. "see-",
  922. "see.",
  923. "migration",
  924. "commit",
  925. "community",
  926. "shopify",
  927. "what'",
  928. "cucumber",
  929. "statamic",
  930. "mysql",
  931. "location",
  932. "tower",
  933. "line",
  934. "code",
  935. "amqp",
  936. "hello",
  937. "send",
  938. "index",
  939. "high",
  940. "notebook",
  941. "alloy",
  942. "python",
  943. "field",
  944. "document",
  945. "soap",
  946. "edition",
  947. "email",
  948. "php_",
  949. "php-",
  950. "php.",
  951. "command",
  952. "transport",
  953. "official",
  954. "upload",
  955. "study",
  956. "secure",
  957. "angularj",
  958. "akka",
  959. "scalable",
  960. "package",
  961. "request",
  962. "con_",
  963. "con-",
  964. "con.",
  965. "flexible",
  966. "security",
  967. "comment",
  968. "module",
  969. "flask",
  970. "graph",
  971. "flash",
  972. "apache",
  973. "change",
  974. "window",
  975. "space",
  976. "lambda",
  977. "sheet",
  978. "bookmark",
  979. "carousel",
  980. "friend",
  981. "objective",
  982. "jekyll",
  983. "bootstrap",
  984. "first",
  985. "article",
  986. "gwt_",
  987. "gwt-",
  988. "gwt.",
  989. "classic",
  990. "media",
  991. "websocket",
  992. "touch",
  993. "desktop",
  994. "real",
  995. "read",
  996. "recorder",
  997. "moved",
  998. "storage",
  999. "validator",
  1000. "add-on",
  1001. "pusher",
  1002. "scs_",
  1003. "scs-",
  1004. "scs.",
  1005. "inline",
  1006. "asp_",
  1007. "asp-",
  1008. "asp.",
  1009. "timeline",
  1010. "base",
  1011. "encoding",
  1012. "ffmpeg",
  1013. "kindle",
  1014. "tinymce",
  1015. "pretty",
  1016. "jpa_",
  1017. "jpa-",
  1018. "jpa.",
  1019. "used",
  1020. "user",
  1021. "required",
  1022. "webhook",
  1023. "download",
  1024. "resque",
  1025. "espresso",
  1026. "cloud",
  1027. "mongo",
  1028. "benchmark",
  1029. "pure",
  1030. "cakephp",
  1031. "modx",
  1032. "mode",
  1033. "reactive",
  1034. "fuel",
  1035. "written",
  1036. "flickr",
  1037. "mail",
  1038. "brunch",
  1039. "meteor",
  1040. "dynamic",
  1041. "neo_",
  1042. "neo-",
  1043. "neo.",
  1044. "new_",
  1045. "new-",
  1046. "new.",
  1047. "net_",
  1048. "net-",
  1049. "net.",
  1050. "typo",
  1051. "type",
  1052. "keyboard",
  1053. "erlang",
  1054. "adobe",
  1055. "logging",
  1056. "ckeditor",
  1057. "message",
  1058. "iso_",
  1059. "iso-",
  1060. "iso.",
  1061. "hook",
  1062. "ldap",
  1063. "folder",
  1064. "reference",
  1065. "railscast",
  1066. "www_",
  1067. "www-",
  1068. "www.",
  1069. "tracker",
  1070. "azure",
  1071. "fork",
  1072. "form",
  1073. "digital",
  1074. "exporter",
  1075. "skin",
  1076. "string",
  1077. "template",
  1078. "designer",
  1079. "gollum",
  1080. "fluent",
  1081. "entity",
  1082. "language",
  1083. "alfred",
  1084. "summary",
  1085. "wiki",
  1086. "kernel",
  1087. "calendar",
  1088. "plupload",
  1089. "symfony",
  1090. "foundry",
  1091. "remote",
  1092. "talk",
  1093. "search",
  1094. "dev_",
  1095. "dev-",
  1096. "dev.",
  1097. "del_",
  1098. "del-",
  1099. "del.",
  1100. "token",
  1101. "idea",
  1102. "sencha",
  1103. "selector",
  1104. "interface",
  1105. "create",
  1106. "fun_",
  1107. "fun-",
  1108. "fun.",
  1109. "groovy",
  1110. "query",
  1111. "grail",
  1112. "red_",
  1113. "red-",
  1114. "red.",
  1115. "laravel",
  1116. "monkey",
  1117. "slack",
  1118. "supported",
  1119. "instant",
  1120. "value",
  1121. "center",
  1122. "latest",
  1123. "work",
  1124. "but_",
  1125. "but-",
  1126. "but.",
  1127. "bug_",
  1128. "bug-",
  1129. "bug.",
  1130. "virtual",
  1131. "tweet",
  1132. "statsd",
  1133. "studio",
  1134. "path",
  1135. "real-time",
  1136. "frontend",
  1137. "notifier",
  1138. "coding",
  1139. "tool",
  1140. "firmware",
  1141. "flow",
  1142. "random",
  1143. "mediawiki",
  1144. "bosh",
  1145. "been",
  1146. "beer",
  1147. "lightbox",
  1148. "theory",
  1149. "origin",
  1150. "redmine",
  1151. "hub_",
  1152. "hub-",
  1153. "hub.",
  1154. "require",
  1155. "pro_",
  1156. "pro-",
  1157. "pro.",
  1158. "ant_",
  1159. "ant-",
  1160. "ant.",
  1161. "any_",
  1162. "any-",
  1163. "any.",
  1164. "recipe",
  1165. "closure",
  1166. "mapper",
  1167. "event",
  1168. "todo",
  1169. "model",
  1170. "redi",
  1171. "provider",
  1172. "rvm_",
  1173. "rvm-",
  1174. "rvm.",
  1175. "program",
  1176. "memcached",
  1177. "rail",
  1178. "silex",
  1179. "foreman",
  1180. "activity",
  1181. "license",
  1182. "strategy",
  1183. "batch",
  1184. "streaming",
  1185. "fast",
  1186. "use_",
  1187. "use-",
  1188. "use.",
  1189. "usb_",
  1190. "usb-",
  1191. "usb.",
  1192. "impres",
  1193. "academy",
  1194. "slider",
  1195. "please",
  1196. "layer",
  1197. "cros",
  1198. "now_",
  1199. "now-",
  1200. "now.",
  1201. "miner",
  1202. "extension",
  1203. "own_",
  1204. "own-",
  1205. "own.",
  1206. "app_",
  1207. "app-",
  1208. "app.",
  1209. "debian",
  1210. "symphony",
  1211. "example",
  1212. "feature",
  1213. "serie",
  1214. "tree",
  1215. "project",
  1216. "runner",
  1217. "entry",
  1218. "leetcode",
  1219. "layout",
  1220. "webrtc",
  1221. "logic",
  1222. "login",
  1223. "worker",
  1224. "toolkit",
  1225. "mocha",
  1226. "support",
  1227. "back",
  1228. "inside",
  1229. "device",
  1230. "jenkin",
  1231. "contact",
  1232. "fake",
  1233. "awesome",
  1234. "ocaml",
  1235. "bit_",
  1236. "bit-",
  1237. "bit.",
  1238. "drive",
  1239. "screen",
  1240. "prototype",
  1241. "gist",
  1242. "binary",
  1243. "nosql",
  1244. "rest",
  1245. "overview",
  1246. "dart",
  1247. "dark",
  1248. "emac",
  1249. "mongoid",
  1250. "solarized",
  1251. "homepage",
  1252. "emulator",
  1253. "commander",
  1254. "django",
  1255. "yandex",
  1256. "gradle",
  1257. "xcode",
  1258. "writer",
  1259. "crm_",
  1260. "crm-",
  1261. "crm.",
  1262. "jade",
  1263. "startup",
  1264. "error",
  1265. "using",
  1266. "format",
  1267. "name",
  1268. "spring",
  1269. "parser",
  1270. "scratch",
  1271. "magic",
  1272. "try_",
  1273. "try-",
  1274. "try.",
  1275. "rack",
  1276. "directive",
  1277. "challenge",
  1278. "slim",
  1279. "counter",
  1280. "element",
  1281. "chosen",
  1282. "doc_",
  1283. "doc-",
  1284. "doc.",
  1285. "meta",
  1286. "should",
  1287. "button",
  1288. "packet",
  1289. "stream",
  1290. "hardware",
  1291. "android",
  1292. "infinite",
  1293. "password",
  1294. "software",
  1295. "ghost",
  1296. "xamarin",
  1297. "spec",
  1298. "chef",
  1299. "interview",
  1300. "hubot",
  1301. "mvc_",
  1302. "mvc-",
  1303. "mvc.",
  1304. "exercise",
  1305. "leaflet",
  1306. "launcher",
  1307. "air_",
  1308. "air-",
  1309. "air.",
  1310. "photo",
  1311. "board",
  1312. "boxen",
  1313. "way_",
  1314. "way-",
  1315. "way.",
  1316. "computing",
  1317. "welcome",
  1318. "notepad",
  1319. "portfolio",
  1320. "cat_",
  1321. "cat-",
  1322. "cat.",
  1323. "can_",
  1324. "can-",
  1325. "can.",
  1326. "magento",
  1327. "yaml",
  1328. "domain",
  1329. "card",
  1330. "yii_",
  1331. "yii-",
  1332. "yii.",
  1333. "checker",
  1334. "browser",
  1335. "upgrade",
  1336. "only",
  1337. "progres",
  1338. "aura",
  1339. "ruby_",
  1340. "ruby-",
  1341. "ruby.",
  1342. "polymer",
  1343. "util",
  1344. "lite",
  1345. "hackathon",
  1346. "rule",
  1347. "log_",
  1348. "log-",
  1349. "log.",
  1350. "opengl",
  1351. "stanford",
  1352. "skeleton",
  1353. "history",
  1354. "inspector",
  1355. "help",
  1356. "soon",
  1357. "selenium",
  1358. "lab_",
  1359. "lab-",
  1360. "lab.",
  1361. "scheme",
  1362. "schema",
  1363. "look",
  1364. "ready",
  1365. "leveldb",
  1366. "docker",
  1367. "game",
  1368. "minimal",
  1369. "logstash",
  1370. "messaging",
  1371. "within",
  1372. "heroku",
  1373. "mongodb",
  1374. "kata",
  1375. "suite",
  1376. "picker",
  1377. "win_",
  1378. "win-",
  1379. "win.",
  1380. "wip_",
  1381. "wip-",
  1382. "wip.",
  1383. "panel",
  1384. "started",
  1385. "starter",
  1386. "front-end",
  1387. "detector",
  1388. "deploy",
  1389. "editing",
  1390. "based",
  1391. "admin",
  1392. "capture",
  1393. "spree",
  1394. "page",
  1395. "bundle",
  1396. "goal",
  1397. "rpg_",
  1398. "rpg-",
  1399. "rpg.",
  1400. "setup",
  1401. "side",
  1402. "mean",
  1403. "reader",
  1404. "cookbook",
  1405. "mini",
  1406. "modern",
  1407. "seed",
  1408. "dom_",
  1409. "dom-",
  1410. "dom.",
  1411. "doc_",
  1412. "doc-",
  1413. "doc.",
  1414. "dot_",
  1415. "dot-",
  1416. "dot.",
  1417. "syntax",
  1418. "sugar",
  1419. "loader",
  1420. "website",
  1421. "make",
  1422. "kit_",
  1423. "kit-",
  1424. "kit.",
  1425. "protocol",
  1426. "human",
  1427. "daemon",
  1428. "golang",
  1429. "manager",
  1430. "countdown",
  1431. "connector",
  1432. "swagger",
  1433. "map_",
  1434. "map-",
  1435. "map.",
  1436. "mac_",
  1437. "mac-",
  1438. "mac.",
  1439. "man_",
  1440. "man-",
  1441. "man.",
  1442. "orm_",
  1443. "orm-",
  1444. "orm.",
  1445. "org_",
  1446. "org-",
  1447. "org.",
  1448. "little",
  1449. "zsh_",
  1450. "zsh-",
  1451. "zsh.",
  1452. "shop",
  1453. "show",
  1454. "workshop",
  1455. "money",
  1456. "grid",
  1457. "server",
  1458. "octopres",
  1459. "svn_",
  1460. "svn-",
  1461. "svn.",
  1462. "ember",
  1463. "embed",
  1464. "general",
  1465. "file",
  1466. "important",
  1467. "dropbox",
  1468. "portable",
  1469. "public",
  1470. "docpad",
  1471. "fish",
  1472. "sbt_",
  1473. "sbt-",
  1474. "sbt.",
  1475. "done",
  1476. "para",
  1477. "network",
  1478. "common",
  1479. "readme",
  1480. "popup",
  1481. "simple",
  1482. "purpose",
  1483. "mirror",
  1484. "single",
  1485. "cordova",
  1486. "exchange",
  1487. "object",
  1488. "design",
  1489. "gateway",
  1490. "account",
  1491. "lamp",
  1492. "intellij",
  1493. "math",
  1494. "mit_",
  1495. "mit-",
  1496. "mit.",
  1497. "control",
  1498. "enhanced",
  1499. "emitter",
  1500. "multi",
  1501. "add_",
  1502. "add-",
  1503. "add.",
  1504. "about",
  1505. "socket",
  1506. "preview",
  1507. "vagrant",
  1508. "cli_",
  1509. "cli-",
  1510. "cli.",
  1511. "powerful",
  1512. "top_",
  1513. "top-",
  1514. "top.",
  1515. "radio",
  1516. "watch",
  1517. "fluid",
  1518. "amazon",
  1519. "report",
  1520. "couchbase",
  1521. "automatic",
  1522. "detection",
  1523. "sprite",
  1524. "pyramid",
  1525. "portal",
  1526. "advanced",
  1527. "plu_",
  1528. "plu-",
  1529. "plu.",
  1530. "runtime",
  1531. "git_",
  1532. "git-",
  1533. "git.",
  1534. "uri_",
  1535. "uri-",
  1536. "uri.",
  1537. "haml",
  1538. "node",
  1539. "sql_",
  1540. "sql-",
  1541. "sql.",
  1542. "cool",
  1543. "core",
  1544. "obsolete",
  1545. "handler",
  1546. "iphone",
  1547. "extractor",
  1548. "array",
  1549. "copy",
  1550. "nlp_",
  1551. "nlp-",
  1552. "nlp.",
  1553. "reveal",
  1554. "pop_",
  1555. "pop-",
  1556. "pop.",
  1557. "engine",
  1558. "parse",
  1559. "check",
  1560. "html",
  1561. "nest",
  1562. "all_",
  1563. "all-",
  1564. "all.",
  1565. "chinese",
  1566. "buildpack",
  1567. "what",
  1568. "tag_",
  1569. "tag-",
  1570. "tag.",
  1571. "proxy",
  1572. "style",
  1573. "cookie",
  1574. "feed",
  1575. "restful",
  1576. "compiler",
  1577. "creating",
  1578. "prelude",
  1579. "context",
  1580. "java",
  1581. "rspec",
  1582. "mock",
  1583. "backbone",
  1584. "light",
  1585. "spotify",
  1586. "flex",
  1587. "related",
  1588. "shell",
  1589. "which",
  1590. "clas",
  1591. "webapp",
  1592. "swift",
  1593. "ansible",
  1594. "unity",
  1595. "console",
  1596. "tumblr",
  1597. "export",
  1598. "campfire",
  1599. "conway'",
  1600. "made",
  1601. "riak",
  1602. "hero",
  1603. "here",
  1604. "unix",
  1605. "unit",
  1606. "glas",
  1607. "smtp",
  1608. "how_",
  1609. "how-",
  1610. "how.",
  1611. "hot_",
  1612. "hot-",
  1613. "hot.",
  1614. "debug",
  1615. "release",
  1616. "diff",
  1617. "player",
  1618. "easy",
  1619. "right",
  1620. "old_",
  1621. "old-",
  1622. "old.",
  1623. "animate",
  1624. "time",
  1625. "push",
  1626. "explorer",
  1627. "course",
  1628. "training",
  1629. "nette",
  1630. "router",
  1631. "draft",
  1632. "structure",
  1633. "note",
  1634. "salt",
  1635. "where",
  1636. "spark",
  1637. "trello",
  1638. "power",
  1639. "method",
  1640. "social",
  1641. "via_",
  1642. "via-",
  1643. "via.",
  1644. "vim_",
  1645. "vim-",
  1646. "vim.",
  1647. "select",
  1648. "webkit",
  1649. "github",
  1650. "ftp_",
  1651. "ftp-",
  1652. "ftp.",
  1653. "creator",
  1654. "mongoose",
  1655. "led_",
  1656. "led-",
  1657. "led.",
  1658. "movie",
  1659. "currently",
  1660. "pdf_",
  1661. "pdf-",
  1662. "pdf.",
  1663. "load",
  1664. "markdown",
  1665. "phalcon",
  1666. "input",
  1667. "custom",
  1668. "atom",
  1669. "oracle",
  1670. "phonegap",
  1671. "ubuntu",
  1672. "great",
  1673. "rdf_",
  1674. "rdf-",
  1675. "rdf.",
  1676. "popcorn",
  1677. "firefox",
  1678. "zip_",
  1679. "zip-",
  1680. "zip.",
  1681. "cuda",
  1682. "dotfile",
  1683. "static",
  1684. "openwrt",
  1685. "viewer",
  1686. "powered",
  1687. "graphic",
  1688. "les_",
  1689. "les-",
  1690. "les.",
  1691. "doe_",
  1692. "doe-",
  1693. "doe.",
  1694. "maven",
  1695. "word",
  1696. "eclipse",
  1697. "lab_",
  1698. "lab-",
  1699. "lab.",
  1700. "hacking",
  1701. "steam",
  1702. "analytic",
  1703. "option",
  1704. "abstract",
  1705. "archive",
  1706. "reality",
  1707. "switcher",
  1708. "club",
  1709. "write",
  1710. "kafka",
  1711. "arduino",
  1712. "angular",
  1713. "online",
  1714. "title",
  1715. "don't",
  1716. "contao",
  1717. "notice",
  1718. "analyzer",
  1719. "learning",
  1720. "zend",
  1721. "external",
  1722. "staging",
  1723. "busines",
  1724. "tdd_",
  1725. "tdd-",
  1726. "tdd.",
  1727. "scanner",
  1728. "building",
  1729. "snippet",
  1730. "modular",
  1731. "bower",
  1732. "stm_",
  1733. "stm-",
  1734. "stm.",
  1735. "lib_",
  1736. "lib-",
  1737. "lib.",
  1738. "alpha",
  1739. "mobile",
  1740. "clean",
  1741. "linux",
  1742. "nginx",
  1743. "manifest",
  1744. "some",
  1745. "raspberry",
  1746. "gnome",
  1747. "ide_",
  1748. "ide-",
  1749. "ide.",
  1750. "block",
  1751. "statistic",
  1752. "info",
  1753. "drag",
  1754. "youtube",
  1755. "koan",
  1756. "facebook",
  1757. "paperclip",
  1758. "art_",
  1759. "art-",
  1760. "art.",
  1761. "quality",
  1762. "tab_",
  1763. "tab-",
  1764. "tab.",
  1765. "need",
  1766. "dojo",
  1767. "shield",
  1768. "computer",
  1769. "stat",
  1770. "state",
  1771. "twitter",
  1772. "utility",
  1773. "converter",
  1774. "hosting",
  1775. "devise",
  1776. "liferay",
  1777. "updated",
  1778. "force",
  1779. "tip_",
  1780. "tip-",
  1781. "tip.",
  1782. "behavior",
  1783. "active",
  1784. "call",
  1785. "answer",
  1786. "deck",
  1787. "better",
  1788. "principle",
  1789. "ches",
  1790. "bar_",
  1791. "bar-",
  1792. "bar.",
  1793. "reddit",
  1794. "three",
  1795. "haxe",
  1796. "just",
  1797. "plug-in",
  1798. "agile",
  1799. "manual",
  1800. "tetri",
  1801. "super",
  1802. "beta",
  1803. "parsing",
  1804. "doctrine",
  1805. "minecraft",
  1806. "useful",
  1807. "perl",
  1808. "sharing",
  1809. "agent",
  1810. "switch",
  1811. "view",
  1812. "dash",
  1813. "channel",
  1814. "repo",
  1815. "pebble",
  1816. "profiler",
  1817. "warning",
  1818. "cluster",
  1819. "running",
  1820. "markup",
  1821. "evented",
  1822. "mod_",
  1823. "mod-",
  1824. "mod.",
  1825. "share",
  1826. "csv_",
  1827. "csv-",
  1828. "csv.",
  1829. "response",
  1830. "good",
  1831. "house",
  1832. "connect",
  1833. "built",
  1834. "build",
  1835. "find",
  1836. "ipython",
  1837. "webgl",
  1838. "big_",
  1839. "big-",
  1840. "big.",
  1841. "google",
  1842. "scala",
  1843. "sdl_",
  1844. "sdl-",
  1845. "sdl.",
  1846. "sdk_",
  1847. "sdk-",
  1848. "sdk.",
  1849. "native",
  1850. "day_",
  1851. "day-",
  1852. "day.",
  1853. "puppet",
  1854. "text",
  1855. "routing",
  1856. "helper",
  1857. "linkedin",
  1858. "crawler",
  1859. "host",
  1860. "guard",
  1861. "merchant",
  1862. "poker",
  1863. "over",
  1864. "writing",
  1865. "free",
  1866. "classe",
  1867. "component",
  1868. "craft",
  1869. "nodej",
  1870. "phoenix",
  1871. "longer",
  1872. "quick",
  1873. "lazy",
  1874. "memory",
  1875. "clone",
  1876. "hacker",
  1877. "middleman",
  1878. "factory",
  1879. "motion",
  1880. "multiple",
  1881. "tornado",
  1882. "hack",
  1883. "ssh_",
  1884. "ssh-",
  1885. "ssh.",
  1886. "review",
  1887. "vimrc",
  1888. "driver",
  1889. "driven",
  1890. "blog",
  1891. "particle",
  1892. "table",
  1893. "intro",
  1894. "importer",
  1895. "thrift",
  1896. "xmpp",
  1897. "framework",
  1898. "refresh",
  1899. "react",
  1900. "font",
  1901. "librarie",
  1902. "variou",
  1903. "formatter",
  1904. "analysi",
  1905. "karma",
  1906. "scroll",
  1907. "tut_",
  1908. "tut-",
  1909. "tut.",
  1910. "apple",
  1911. "tag_",
  1912. "tag-",
  1913. "tag.",
  1914. "tab_",
  1915. "tab-",
  1916. "tab.",
  1917. "category",
  1918. "ionic",
  1919. "cache",
  1920. "homebrew",
  1921. "reverse",
  1922. "english",
  1923. "getting",
  1924. "shipping",
  1925. "clojure",
  1926. "boot",
  1927. "book",
  1928. "branch",
  1929. "combination",
  1930. "combo",
  1931. ]
  1932. [[rules]]
  1933. id = "github-app-token"
  1934. description = "GitHub App Token"
  1935. regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
  1936. keywords = [
  1937. "ghu_","ghs_",
  1938. ]
  1939. [[rules]]
  1940. id = "github-fine-grained-pat"
  1941. description = "GitHub Fine-Grained Personal Access Token"
  1942. regex = '''github_pat_[0-9a-zA-Z_]{82}'''
  1943. keywords = [
  1944. "github_pat_",
  1945. ]
  1946. [[rules]]
  1947. id = "github-oauth"
  1948. description = "GitHub OAuth Access Token"
  1949. regex = '''gho_[0-9a-zA-Z]{36}'''
  1950. keywords = [
  1951. "gho_",
  1952. ]
  1953. [[rules]]
  1954. id = "github-pat"
  1955. description = "GitHub Personal Access Token"
  1956. regex = '''ghp_[0-9a-zA-Z]{36}'''
  1957. keywords = [
  1958. "ghp_",
  1959. ]
  1960. [[rules]]
  1961. id = "github-refresh-token"
  1962. description = "GitHub Refresh Token"
  1963. regex = '''ghr_[0-9a-zA-Z]{36}'''
  1964. keywords = [
  1965. "ghr_",
  1966. ]
  1967. [[rules]]
  1968. id = "gitlab-pat"
  1969. description = "GitLab Personal Access Token"
  1970. regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
  1971. keywords = [
  1972. "glpat-",
  1973. ]
  1974. [[rules]]
  1975. id = "gitlab-ptt"
  1976. description = "GitLab Pipeline Trigger Token"
  1977. regex = '''glptt-[0-9a-f]{40}'''
  1978. keywords = [
  1979. "glptt-",
  1980. ]
  1981. [[rules]]
  1982. id = "gitlab-rrt"
  1983. description = "GitLab Runner Registration Token"
  1984. regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
  1985. keywords = [
  1986. "gr1348941",
  1987. ]
  1988. [[rules]]
  1989. id = "gitter-access-token"
  1990. description = "Gitter Access Token"
  1991. regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  1992. secretGroup = 1
  1993. keywords = [
  1994. "gitter",
  1995. ]
  1996. [[rules]]
  1997. id = "gocardless-api-token"
  1998. description = "GoCardless API token"
  1999. regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2000. secretGroup = 1
  2001. keywords = [
  2002. "live_","gocardless",
  2003. ]
  2004. [[rules]]
  2005. id = "grafana-api-key"
  2006. description = "Grafana api key (or Grafana cloud api key)"
  2007. regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2008. secretGroup = 1
  2009. keywords = [
  2010. "eyjrijoi",
  2011. ]
  2012. [[rules]]
  2013. id = "grafana-cloud-api-token"
  2014. description = "Grafana cloud api token"
  2015. regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2016. secretGroup = 1
  2017. keywords = [
  2018. "glc_",
  2019. ]
  2020. [[rules]]
  2021. id = "grafana-service-account-token"
  2022. description = "Grafana service account token"
  2023. regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2024. secretGroup = 1
  2025. keywords = [
  2026. "glsa_",
  2027. ]
  2028. [[rules]]
  2029. id = "hashicorp-tf-api-token"
  2030. description = "HashiCorp Terraform user/org API token"
  2031. regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
  2032. keywords = [
  2033. "atlasv1",
  2034. ]
  2035. [[rules]]
  2036. id = "heroku-api-key"
  2037. description = "Heroku API Key"
  2038. regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2039. secretGroup = 1
  2040. keywords = [
  2041. "heroku",
  2042. ]
  2043. [[rules]]
  2044. id = "hubspot-api-key"
  2045. description = "HubSpot API Token"
  2046. regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2047. secretGroup = 1
  2048. keywords = [
  2049. "hubspot",
  2050. ]
  2051. [[rules]]
  2052. id = "huggingface-access-token"
  2053. description = "Hugging Face Access token"
  2054. regex = '''(?:^|[\\'"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\'"` <])'''
  2055. secretGroup = 1
  2056. entropy = 1
  2057. keywords = [
  2058. "hf_",
  2059. ]
  2060. [[rules]]
  2061. id = "huggingface-organization-api-token"
  2062. description = "Hugging Face Organization API token"
  2063. regex = '''(?:^|[\\'"` >=:\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\'"` <\),])'''
  2064. secretGroup = 1
  2065. entropy = 2
  2066. keywords = [
  2067. "api_org_",
  2068. ]
  2069. [[rules]]
  2070. id = "intercom-api-key"
  2071. description = "Intercom API Token"
  2072. regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2073. secretGroup = 1
  2074. keywords = [
  2075. "intercom",
  2076. ]
  2077. [[rules]]
  2078. id = "jfrog-api-key"
  2079. description = "JFrog API Key"
  2080. regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2081. secretGroup = 1
  2082. keywords = [
  2083. "jfrog","artifactory","bintray","xray",
  2084. ]
  2085. [[rules]]
  2086. id = "jfrog-identity-token"
  2087. description = "JFrog Identity Token"
  2088. regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2089. secretGroup = 1
  2090. keywords = [
  2091. "jfrog","artifactory","bintray","xray",
  2092. ]
  2093. [[rules]]
  2094. id = "jwt"
  2095. description = "JSON Web Token"
  2096. regex = '''\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2097. keywords = [
  2098. "ey",
  2099. ]
  2100. [[rules]]
  2101. id = "kraken-access-token"
  2102. description = "Kraken Access Token"
  2103. regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2104. secretGroup = 1
  2105. keywords = [
  2106. "kraken",
  2107. ]
  2108. [[rules]]
  2109. id = "kucoin-access-token"
  2110. description = "Kucoin Access Token"
  2111. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2112. secretGroup = 1
  2113. keywords = [
  2114. "kucoin",
  2115. ]
  2116. [[rules]]
  2117. id = "kucoin-secret-key"
  2118. description = "Kucoin Secret Key"
  2119. regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2120. secretGroup = 1
  2121. keywords = [
  2122. "kucoin",
  2123. ]
  2124. [[rules]]
  2125. id = "launchdarkly-access-token"
  2126. description = "Launchdarkly Access Token"
  2127. regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2128. secretGroup = 1
  2129. keywords = [
  2130. "launchdarkly",
  2131. ]
  2132. [[rules]]
  2133. id = "linear-api-key"
  2134. description = "Linear API Token"
  2135. regex = '''lin_api_(?i)[a-z0-9]{40}'''
  2136. keywords = [
  2137. "lin_api_",
  2138. ]
  2139. [[rules]]
  2140. id = "linear-client-secret"
  2141. description = "Linear Client Secret"
  2142. regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2143. secretGroup = 1
  2144. keywords = [
  2145. "linear",
  2146. ]
  2147. [[rules]]
  2148. id = "linkedin-client-id"
  2149. description = "LinkedIn Client ID"
  2150. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2151. secretGroup = 1
  2152. keywords = [
  2153. "linkedin","linked-in",
  2154. ]
  2155. [[rules]]
  2156. id = "linkedin-client-secret"
  2157. description = "LinkedIn Client secret"
  2158. regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2159. secretGroup = 1
  2160. keywords = [
  2161. "linkedin","linked-in",
  2162. ]
  2163. [[rules]]
  2164. id = "lob-api-key"
  2165. description = "Lob API Key"
  2166. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2167. secretGroup = 1
  2168. keywords = [
  2169. "test_","live_",
  2170. ]
  2171. [[rules]]
  2172. id = "lob-pub-api-key"
  2173. description = "Lob Publishable API Key"
  2174. regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2175. secretGroup = 1
  2176. keywords = [
  2177. "test_pub","live_pub","_pub",
  2178. ]
  2179. [[rules]]
  2180. id = "mailchimp-api-key"
  2181. description = "Mailchimp API key"
  2182. regex = '''(?i)(?:mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us20)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2183. secretGroup = 1
  2184. keywords = [
  2185. "mailchimp",
  2186. ]
  2187. [[rules]]
  2188. id = "mailgun-private-api-token"
  2189. description = "Mailgun private API token"
  2190. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2191. secretGroup = 1
  2192. keywords = [
  2193. "mailgun",
  2194. ]
  2195. [[rules]]
  2196. id = "mailgun-pub-key"
  2197. description = "Mailgun public validation key"
  2198. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2199. secretGroup = 1
  2200. keywords = [
  2201. "mailgun",
  2202. ]
  2203. [[rules]]
  2204. id = "mailgun-signing-key"
  2205. description = "Mailgun webhook signing key"
  2206. regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2207. secretGroup = 1
  2208. keywords = [
  2209. "mailgun",
  2210. ]
  2211. [[rules]]
  2212. id = "mapbox-api-token"
  2213. description = "MapBox API token"
  2214. regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2215. secretGroup = 1
  2216. keywords = [
  2217. "mapbox",
  2218. ]
  2219. [[rules]]
  2220. id = "mattermost-access-token"
  2221. description = "Mattermost Access Token"
  2222. regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2223. secretGroup = 1
  2224. keywords = [
  2225. "mattermost",
  2226. ]
  2227. [[rules]]
  2228. id = "messagebird-api-token"
  2229. description = "MessageBird API token"
  2230. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2231. secretGroup = 1
  2232. keywords = [
  2233. "messagebird","message-bird","message_bird",
  2234. ]
  2235. [[rules]]
  2236. id = "messagebird-client-id"
  2237. description = "MessageBird client ID"
  2238. regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2239. secretGroup = 1
  2240. keywords = [
  2241. "messagebird","message-bird","message_bird",
  2242. ]
  2243. [[rules]]
  2244. id = "microsoft-teams-webhook"
  2245. description = "Microsoft Teams Webhook"
  2246. regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
  2247. keywords = [
  2248. "webhook.office.com","webhookb2","incomingwebhook",
  2249. ]
  2250. [[rules]]
  2251. id = "netlify-access-token"
  2252. description = "Netlify Access Token"
  2253. regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2254. secretGroup = 1
  2255. keywords = [
  2256. "netlify",
  2257. ]
  2258. [[rules]]
  2259. id = "new-relic-browser-api-token"
  2260. description = "New Relic ingest browser API token"
  2261. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2262. secretGroup = 1
  2263. keywords = [
  2264. "nrjs-",
  2265. ]
  2266. [[rules]]
  2267. id = "new-relic-user-api-id"
  2268. description = "New Relic user API ID"
  2269. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2270. secretGroup = 1
  2271. keywords = [
  2272. "new-relic","newrelic","new_relic",
  2273. ]
  2274. [[rules]]
  2275. id = "new-relic-user-api-key"
  2276. description = "New Relic user API Key"
  2277. regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2278. secretGroup = 1
  2279. keywords = [
  2280. "nrak",
  2281. ]
  2282. [[rules]]
  2283. id = "npm-access-token"
  2284. description = "npm access token"
  2285. regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2286. secretGroup = 1
  2287. keywords = [
  2288. "npm_",
  2289. ]
  2290. [[rules]]
  2291. id = "nytimes-access-token"
  2292. description = "Nytimes Access Token"
  2293. regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2294. secretGroup = 1
  2295. keywords = [
  2296. "nytimes","new-york-times","newyorktimes",
  2297. ]
  2298. [[rules]]
  2299. id = "okta-access-token"
  2300. description = "Okta Access Token"
  2301. regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2302. secretGroup = 1
  2303. keywords = [
  2304. "okta",
  2305. ]
  2306. [[rules]]
  2307. id = "openai-api-key"
  2308. description = "OpenAI API Key"
  2309. regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2310. secretGroup = 1
  2311. keywords = [
  2312. "t3blbkfj",
  2313. ]
  2314. [[rules]]
  2315. id = "plaid-api-token"
  2316. description = "Plaid API Token"
  2317. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2318. secretGroup = 1
  2319. keywords = [
  2320. "plaid",
  2321. ]
  2322. [[rules]]
  2323. id = "plaid-client-id"
  2324. description = "Plaid Client ID"
  2325. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2326. secretGroup = 1
  2327. entropy = 3.5
  2328. keywords = [
  2329. "plaid",
  2330. ]
  2331. [[rules]]
  2332. id = "plaid-secret-key"
  2333. description = "Plaid Secret key"
  2334. regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2335. secretGroup = 1
  2336. entropy = 3.5
  2337. keywords = [
  2338. "plaid",
  2339. ]
  2340. [[rules]]
  2341. id = "planetscale-api-token"
  2342. description = "PlanetScale API token"
  2343. regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2344. secretGroup = 1
  2345. keywords = [
  2346. "pscale_tkn_",
  2347. ]
  2348. [[rules]]
  2349. id = "planetscale-oauth-token"
  2350. description = "PlanetScale OAuth token"
  2351. regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2352. secretGroup = 1
  2353. keywords = [
  2354. "pscale_oauth_",
  2355. ]
  2356. [[rules]]
  2357. id = "planetscale-password"
  2358. description = "PlanetScale password"
  2359. regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2360. secretGroup = 1
  2361. keywords = [
  2362. "pscale_pw_",
  2363. ]
  2364. [[rules]]
  2365. id = "postman-api-token"
  2366. description = "Postman API token"
  2367. regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2368. secretGroup = 1
  2369. keywords = [
  2370. "pmak-",
  2371. ]
  2372. [[rules]]
  2373. id = "prefect-api-token"
  2374. description = "Prefect API token"
  2375. regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2376. secretGroup = 1
  2377. keywords = [
  2378. "pnu_",
  2379. ]
  2380. [[rules]]
  2381. id = "private-key"
  2382. description = "Private Key"
  2383. regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
  2384. keywords = [
  2385. "-----begin",
  2386. ]
  2387. [[rules]]
  2388. id = "pulumi-api-token"
  2389. description = "Pulumi API token"
  2390. regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2391. secretGroup = 1
  2392. keywords = [
  2393. "pul-",
  2394. ]
  2395. [[rules]]
  2396. id = "pypi-upload-token"
  2397. description = "PyPI upload token"
  2398. regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
  2399. keywords = [
  2400. "pypi-ageichlwas5vcmc",
  2401. ]
  2402. [[rules]]
  2403. id = "rapidapi-access-token"
  2404. description = "RapidAPI Access Token"
  2405. regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2406. secretGroup = 1
  2407. keywords = [
  2408. "rapidapi",
  2409. ]
  2410. [[rules]]
  2411. id = "readme-api-token"
  2412. description = "Readme API token"
  2413. regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2414. secretGroup = 1
  2415. keywords = [
  2416. "rdme_",
  2417. ]
  2418. [[rules]]
  2419. id = "rubygems-api-token"
  2420. description = "Rubygem API token"
  2421. regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2422. secretGroup = 1
  2423. keywords = [
  2424. "rubygems_",
  2425. ]
  2426. [[rules]]
  2427. id = "sendbird-access-id"
  2428. description = "Sendbird Access ID"
  2429. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2430. secretGroup = 1
  2431. keywords = [
  2432. "sendbird",
  2433. ]
  2434. [[rules]]
  2435. id = "sendbird-access-token"
  2436. description = "Sendbird Access Token"
  2437. regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2438. secretGroup = 1
  2439. keywords = [
  2440. "sendbird",
  2441. ]
  2442. [[rules]]
  2443. id = "sendgrid-api-token"
  2444. description = "SendGrid API token"
  2445. regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2446. secretGroup = 1
  2447. keywords = [
  2448. "sg.",
  2449. ]
  2450. [[rules]]
  2451. id = "sendinblue-api-token"
  2452. description = "Sendinblue API token"
  2453. regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2454. secretGroup = 1
  2455. keywords = [
  2456. "xkeysib-",
  2457. ]
  2458. [[rules]]
  2459. id = "sentry-access-token"
  2460. description = "Sentry Access Token"
  2461. regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2462. secretGroup = 1
  2463. keywords = [
  2464. "sentry",
  2465. ]
  2466. [[rules]]
  2467. id = "shippo-api-token"
  2468. description = "Shippo API token"
  2469. regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2470. secretGroup = 1
  2471. keywords = [
  2472. "shippo_",
  2473. ]
  2474. [[rules]]
  2475. id = "shopify-access-token"
  2476. description = "Shopify access token"
  2477. regex = '''shpat_[a-fA-F0-9]{32}'''
  2478. keywords = [
  2479. "shpat_",
  2480. ]
  2481. [[rules]]
  2482. id = "shopify-custom-access-token"
  2483. description = "Shopify custom access token"
  2484. regex = '''shpca_[a-fA-F0-9]{32}'''
  2485. keywords = [
  2486. "shpca_",
  2487. ]
  2488. [[rules]]
  2489. id = "shopify-private-app-access-token"
  2490. description = "Shopify private app access token"
  2491. regex = '''shppa_[a-fA-F0-9]{32}'''
  2492. keywords = [
  2493. "shppa_",
  2494. ]
  2495. [[rules]]
  2496. id = "shopify-shared-secret"
  2497. description = "Shopify shared secret"
  2498. regex = '''shpss_[a-fA-F0-9]{32}'''
  2499. keywords = [
  2500. "shpss_",
  2501. ]
  2502. [[rules]]
  2503. id = "sidekiq-secret"
  2504. description = "Sidekiq Secret"
  2505. regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2506. secretGroup = 1
  2507. keywords = [
  2508. "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
  2509. ]
  2510. [[rules]]
  2511. id = "sidekiq-sensitive-url"
  2512. description = "Sidekiq Sensitive URL"
  2513. regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
  2514. secretGroup = 2
  2515. keywords = [
  2516. "gems.contribsys.com","enterprise.contribsys.com",
  2517. ]
  2518. [[rules]]
  2519. id = "slack-app-token"
  2520. description = "Slack App-level token"
  2521. regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
  2522. keywords = [
  2523. "xapp",
  2524. ]
  2525. [[rules]]
  2526. id = "slack-bot-token"
  2527. description = "Slack Bot token"
  2528. regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
  2529. keywords = [
  2530. "xoxb",
  2531. ]
  2532. [[rules]]
  2533. id = "slack-config-access-token"
  2534. description = "Slack Configuration access token"
  2535. regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
  2536. keywords = [
  2537. "xoxe.xoxb-","xoxe.xoxp-",
  2538. ]
  2539. [[rules]]
  2540. id = "slack-config-refresh-token"
  2541. description = "Slack Configuration refresh token"
  2542. regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
  2543. keywords = [
  2544. "xoxe-",
  2545. ]
  2546. [[rules]]
  2547. id = "slack-legacy-bot-token"
  2548. description = "Slack Legacy bot token"
  2549. regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
  2550. keywords = [
  2551. "xoxb",
  2552. ]
  2553. [[rules]]
  2554. id = "slack-legacy-token"
  2555. description = "Slack Legacy token"
  2556. regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
  2557. keywords = [
  2558. "xoxo","xoxs",
  2559. ]
  2560. [[rules]]
  2561. id = "slack-legacy-workspace-token"
  2562. description = "Slack Legacy Workspace token"
  2563. regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
  2564. keywords = [
  2565. "xoxa","xoxr",
  2566. ]
  2567. [[rules]]
  2568. id = "slack-user-token"
  2569. description = "Slack User"
  2570. regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
  2571. keywords = [
  2572. "xoxp-","xoxe-",
  2573. ]
  2574. [[rules]]
  2575. id = "slack-webhook-url"
  2576. description = "Slack Webhook"
  2577. regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
  2578. keywords = [
  2579. "hooks.slack.com",
  2580. ]
  2581. [[rules]]
  2582. id = "snyk-api-token"
  2583. description = "Snyk API token"
  2584. regex = '''(?i)(?:snyk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2585. secretGroup = 1
  2586. keywords = [
  2587. "snyk",
  2588. ]
  2589. [[rules]]
  2590. id = "square-access-token"
  2591. description = "Square Access Token"
  2592. regex = '''(?i)\b(sq0atp-[0-9A-Za-z\-_]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2593. keywords = [
  2594. "sq0atp-",
  2595. ]
  2596. [[rules]]
  2597. id = "squarespace-access-token"
  2598. description = "Squarespace Access Token"
  2599. regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2600. secretGroup = 1
  2601. keywords = [
  2602. "squarespace",
  2603. ]
  2604. [[rules]]
  2605. id = "stripe-access-token"
  2606. description = "Stripe Access Token"
  2607. regex = '''(?i)(sk|pk)_(test|live)_[0-9a-z]{10,32}'''
  2608. keywords = [
  2609. "sk_test","pk_test","sk_live","pk_live",
  2610. ]
  2611. [[rules]]
  2612. id = "sumologic-access-id"
  2613. description = "SumoLogic Access ID"
  2614. regex = '''(?i:(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3})(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2615. secretGroup = 1
  2616. entropy = 3
  2617. keywords = [
  2618. "sumo",
  2619. ]
  2620. [rules.allowlist]
  2621. regexTarget = "line"
  2622. regexes = [
  2623. "sumOf",
  2624. ]
  2625. [[rules]]
  2626. id = "sumologic-access-token"
  2627. description = "SumoLogic Access Token"
  2628. regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2629. secretGroup = 1
  2630. entropy = 3
  2631. keywords = [
  2632. "sumo",
  2633. ]
  2634. [[rules]]
  2635. id = "telegram-bot-api-token"
  2636. description = "Telegram Bot API Token"
  2637. regex = '''(?i)(?:^|[^0-9])([0-9]{5,16}:A[a-zA-Z0-9_\-]{34})(?:$|[^a-zA-Z0-9_\-])'''
  2638. secretGroup = 1
  2639. keywords = [
  2640. "telegram","api","bot","token","url",
  2641. ]
  2642. [[rules]]
  2643. id = "travisci-access-token"
  2644. description = "Travis CI Access Token"
  2645. regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2646. secretGroup = 1
  2647. keywords = [
  2648. "travis",
  2649. ]
  2650. [[rules]]
  2651. id = "twilio-api-key"
  2652. description = "Twilio API Key"
  2653. regex = '''SK[0-9a-fA-F]{32}'''
  2654. keywords = [
  2655. "twilio",
  2656. ]
  2657. [[rules]]
  2658. id = "twitch-api-token"
  2659. description = "Twitch API token"
  2660. regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2661. secretGroup = 1
  2662. keywords = [
  2663. "twitch",
  2664. ]
  2665. [[rules]]
  2666. id = "twitter-access-secret"
  2667. description = "Twitter Access Secret"
  2668. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2669. secretGroup = 1
  2670. keywords = [
  2671. "twitter",
  2672. ]
  2673. [[rules]]
  2674. id = "twitter-access-token"
  2675. description = "Twitter Access Token"
  2676. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2677. secretGroup = 1
  2678. keywords = [
  2679. "twitter",
  2680. ]
  2681. [[rules]]
  2682. id = "twitter-api-key"
  2683. description = "Twitter API Key"
  2684. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2685. secretGroup = 1
  2686. keywords = [
  2687. "twitter",
  2688. ]
  2689. [[rules]]
  2690. id = "twitter-api-secret"
  2691. description = "Twitter API Secret"
  2692. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2693. secretGroup = 1
  2694. keywords = [
  2695. "twitter",
  2696. ]
  2697. [[rules]]
  2698. id = "twitter-bearer-token"
  2699. description = "Twitter Bearer Token"
  2700. regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2701. secretGroup = 1
  2702. keywords = [
  2703. "twitter",
  2704. ]
  2705. [[rules]]
  2706. id = "typeform-api-token"
  2707. description = "Typeform API token"
  2708. regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2709. secretGroup = 1
  2710. keywords = [
  2711. "tfp_",
  2712. ]
  2713. [[rules]]
  2714. id = "vault-batch-token"
  2715. description = "Vault Batch Token"
  2716. regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2717. keywords = [
  2718. "hvb",
  2719. ]
  2720. [[rules]]
  2721. id = "vault-service-token"
  2722. description = "Vault Service Token"
  2723. regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2724. keywords = [
  2725. "hvs",
  2726. ]
  2727. [[rules]]
  2728. id = "yandex-access-token"
  2729. description = "Yandex Access Token"
  2730. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2731. secretGroup = 1
  2732. keywords = [
  2733. "yandex",
  2734. ]
  2735. [[rules]]
  2736. id = "yandex-api-key"
  2737. description = "Yandex API Key"
  2738. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2739. secretGroup = 1
  2740. keywords = [
  2741. "yandex",
  2742. ]
  2743. [[rules]]
  2744. id = "yandex-aws-access-token"
  2745. description = "Yandex AWS Access Token"
  2746. regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2747. secretGroup = 1
  2748. keywords = [
  2749. "yandex",
  2750. ]
  2751. [[rules]]
  2752. id = "zendesk-secret-key"
  2753. description = "Zendesk Secret Key"
  2754. regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
  2755. secretGroup = 1
  2756. keywords = [
  2757. "zendesk",
  2758. ]