Tentative-leaks-checker.bcheck

metadata:
 language: v2-beta
 name: "Information Disclosure Secret Finder - tentative"
 description: "Detects secret patterns in responses."
 author: "bugswagger, xelkomy, juba0x00, xhzeem"
 tags: "secret, bugswagger"

given response then

 if {latest.response} matches "ec2-[0-9a-z._-]+.compute(-1)?.amazonaws.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS EC2 External secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[0-9a-z._-]+.compute(-1)?.internal" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS EC2 Internal secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[0-9a-z._-]+.elb.amazonaws.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS ELB secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[0-9a-z._-]+.cache.amazonaws.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS ElasticCache secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS MWS ID secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "AWS client ID secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:algolia).{0,40}\b([A-Z0-9]{10})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Algoliaadminkey - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:algolia).{0,40}\b([a-zA-Z0-9]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Algoliaadminkey - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "arn:aws:sns:[a-z0-9\-]+:[0-9]+:[A-Za-z0-9\-_]+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Amazon SNS Topic secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:\s|=|:|\"|^)AKC[a-zA-Z0-9]{10,}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Artifactory API Token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:\s|=|:|\"|^)AP[\dABCDEF][a-zA-Z0-9]{8,}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Artifactory Password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:auth0).{0,40}\b([a-zA-Z0-9_-]{32,60})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Auth0oauth - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(bearer).+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Bearer token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:blogger).{0,40}\b([0-9A-Za-z-]{39})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Blogger secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:circle).{0,40}([a-fA-F0-9]{40})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Circleci secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:cloudflare).{0,40}\b([A-Za-z0-9_-]{40})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Cloudflareapitoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:customer).{0,40}\b([a-z0-9A-Z]{20})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Customerio secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:datadog).{0,40}\b([a-zA-Z-0-9]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Datadogtoken - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:datadog).{0,40}\b([a-zA-Z-0-9]{40})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Datadogtoken - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:debounce).{0,40}\b([a-zA-Z0-9]{13})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Debounce secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:8x8).{0,40}\b([a-zA-Z0-9_]{18,30})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Eightxeight - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:etsy).{0,40}\b([a-zA-Z-0-9]{24})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Etsyapikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "FCM Server Key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "FCM_server_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[fF][aA][cC][eE][bB][oO][oO][kK].*['|\"][0-9a-f]{32}['|\"]" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Facebook OAuth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:facebook).{0,40}\b([A-Za-z0-9]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Facebookoauth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[a-z0-9.-]+\.firebaseio\.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Firebase Database Detect - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[a-z0-9.-]+\.firebaseapp\.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Firebase Database Detect - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:float).{0,40}\b([a-zA-Z0-9-._+=]{59,60})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Float secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "TOKEN[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1688 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "API[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1689 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "SECRET[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1691 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "AUTHORIZATION[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1692 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "PASSWORD[\\-|_|A-Z0-9]*(\'|\")?(:|=)(\'|\")?[\\-|_|A-Z0-9]{10}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1693 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(A|a)(P|p)(Ii)[\-|_|A-Za-z0-9]*(\''|\")?( )*(:|=)( )*(\''|\")?[0-9A-Za-z\-_]+(\''|\")?" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1695 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[a-z0-9.-]+\.s3-[a-z0-9-]\.amazonaws\.com" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1707 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[a-z0-9.-]+\.s3-website[.-](eu|ap|us|ca|sa|cn)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1708 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "branchio_secret" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1715 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "google_cm" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1731 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "google_maps_key" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1732 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailjet" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1737 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapbox_access_token" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1738 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "slack_webhook" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1749 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "square_secret" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1750 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "twilio_sid_token" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1753 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "zapier_webhook" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1762 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3-[a-z0-9-]+\.amazonaws\.com/[a-z0-9._-]+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic - 1765 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[sS][eE][cC][rR][eE][tT].*['|\"][0-9a-zA-Z]{32,45}['|\"]" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic Secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(webhook).+(secret|token|key).+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Generic webhook secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[gG][iI][tT][hH][uU][bB].*['|\"][0-9a-zA-Z]{35,40}['|\"]" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "GitHub secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:github).{0,40}\b([0-9]{6})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Githubapp - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:gitlab).{0,40}\b([a-zA-Z0-9\-=_]{20,22})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Gitlab secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:harvest).{0,40}\b([0-9]{4,9})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Harvest - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:hive).{0,40}\b([0-9a-z]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Hive - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:host).{0,40}\b([a-z0-9]{14})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:hunter).{0,40}\b([a-z0-9_-]{40})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Hunter secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:intercom).{0,40}\b([a-zA-Z0-9\W\S]{59}\=)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Intercom secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:jira).{0,40}\b([a-zA-Z-0-9]{5,24}\.[a-zA-Z-0-9]{3,16}\.[a-zA-Z-0-9]{3,16})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Jiratoken - 3 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:less).{0,40}\b([a-zA-Z0-9-]{57})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Lessannoyingcrm secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:m3o).{0,40}\b([0-9A-Za-z]{48})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "M3o secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(mailgun|mg)[0-9a-z]{32}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Mailgun API key - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:manifest).{0,40}\b([a-zA-z0-9]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Manifest secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "https://outlook\.office\.com/webhook/[A-Za-z0-9\-@]+/IncomingWebhook/[A-Za-z0-9\-]+/[A-Za-z0-9\-]+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Microsoft Teams Webhook secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:freshworks).{0,40}\b([a-z0-9A-Z-]{22})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Myfreshworks - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:nytimes).{0,40}\b([a-z0-9A-Z-]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Nytimes secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "\b([A-Za-z0-9_\.]{7}-[A-Za-z0-9_\.]{72})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Paypaloauth - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "\b([A-Za-z0-9_\.]{69}-[A-Za-z0-9_\.]{10})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Paypaloauth - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:key).{0,40}\b([a-z0-9]{20})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Pusherchannelkey - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(REDIS_URL).+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "REDIS_URL secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:rev).{0,40}\b([0-9a-zA-Z\-]{27}[ \r\n]{1})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Rev - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:revamp).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Revampcrm - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:ronin).{0,40}\b([0-9Aa-zA-Z]{3,32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Roninapp - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "data-shoppable-auth-token.+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Shoppable Service Auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:shutterstock).{0,40}\b([0-9a-zA-Z]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Shutterstock - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:shutterstock).{0,40}\b([0-9a-zA-Z]{16})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Shutterstock - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "xoxp-[0-9A-Za-z\-]{72}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Slack User token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sq0(atp|csp)-[0-9a-z-_]{22,43}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Square API Key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:survey).{0,40}\b([a-z0-9A-Z-]{36})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Surveyanyplace - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:survey).{0,40}\b([a-z0-9A-Z]{32})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Surveyanyplace - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:swell).{0,40}\b([a-zA-Z0-9]{6,24})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Swell - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[tT][wW][iI][tT][tT][eE][rR].*[1-9][0-9]+-[0-9a-zA-Z]{40}" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Twitter Access Token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[tT][wW][iI][tT][tT][eE][rR].*['|\"][0-9a-zA-Z]{35,44}['|\"]" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Twitter OAuth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "\b[a-zA-Z]{1,10}:?\/\/[-.%\w{}]{1,50}:([-.%\S]{3,50})@[-.%\w\/:]+\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Uri secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:youtube).{0,40}\b([a-zA-Z-0-9_]{39})\b" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Youtubeapikey - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "https://(?:www.)?hooks\.zapier\.com/hooks/catch/[A-Za-z0-9]+/[A-Za-z0-9]+/" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Zapier Webhook secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "https://creator\.zoho\.com/api/[A-Za-z0-9/\-_\.]+\?authtoken=[A-Za-z0-9]+" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "Zoho Webhook secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "access[_-]?key[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "access_key_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "access[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "access_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "account[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "account_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "admin[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "admin_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "adzerk[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "adzerk_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?admin[_-]?key[_-]?1(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_admin_key_1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?admin[_-]?key[_-]?2(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_admin_key_2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?admin[_-]?key[_-]?mcm(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_admin_key_mcm secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?api[_-]?key[_-]?mcm(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_api_key_mcm secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?api[_-]?key[_-]?search(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_api_key_search secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?search[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_search_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?search[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_search_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "algolia[_-]?search[_-]?key[_-]?1(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "algolia_search_key_1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "alias[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "alias_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "alicloud[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "alicloud_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "alicloud[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "alicloud_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "amazon[_-]?bucket[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "amazon_bucket_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "anaconda[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "anaconda_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "android[_-]?docs[_-]?deploy[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "android_docs_deploy_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aos[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aos_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aos[_-]?sec(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aos_sec secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "api[_-]?key[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "api_key_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "api[_-]?key[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "api_key_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "api[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "api_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "apiary[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "apiary_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "apigw[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "apigw_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "apikey[:](?:['\"]?[a-zA-Z0-9-_|]+['\"]?)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "apikey_patterns secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "app[_-]?bucket[_-]?perm(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "app_bucket_perm secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "app[_-]?report[_-]?token[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "app_report_token_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "app[_-]?secrete(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "app_secrete secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "app[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "app_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "appclientsecret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "appclientsecret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "apple[_-]?id[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "apple_id_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "argos[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "argos_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(artifactory.{0,50}(\"|')?[a-zA-Z0-9=]{112}(\"|')?)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifactory secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifactory[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifactory_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifacts[_-]?aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifacts_aws_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifacts[_-]?aws[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifacts_aws_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifacts[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifacts_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifacts[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifacts_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "artifacts[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "artifacts_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "assistant[_-]?iam[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "assistant_iam_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "auth0[_-]?api[_-]?clientsecret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "auth0_api_clientsecret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "auth0[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "auth0_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "author[_-]?email[_-]?addr(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "author_email_addr secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "author[_-]?npm[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "author_npm_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?access(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_access secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_access_key_id - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?config[_-]?accesskeyid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_config_accesskeyid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?config[_-]?secretaccesskey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_config_secretaccesskey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:accesskeyid|secretaccesskey|aws_access_key_id|aws_secret_access_key)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_patterns secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?secrets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_secrets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?ses[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_ses_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "aws[_-]?ses[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "aws_ses_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "awsaccesskeyid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "awsaccesskeyid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "awscn[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "awscn_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "awscn[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "awscn_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "awssecretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "awssecretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "b2[_-]?app[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "b2_app_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "b2[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "b2_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintray[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintray_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintray[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintray_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintray[_-]?gpg[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintray_gpg_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintray[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintray_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintray[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintray_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bintraykey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bintraykey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?auth(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?pass[_-]?prod(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_pass_prod secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?pwd(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_pwd secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bluemix[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bluemix_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "brackets[_-]?repo[_-]?oauth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "brackets_repo_oauth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "browser[_-]?stack[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "browser_stack_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "browserstack[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "browserstack_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bucketeer[_-]?aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bucketeer_aws_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bucketeer[_-]?aws[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bucketeer_aws_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "built[_-]?branch[_-]?deploy[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "built_branch_deploy_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bundlesize[_-]?github[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bundlesize_github_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bx[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bx_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "bx[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "bx_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cache[_-]?s3[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cache_s3_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cargo[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cargo_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cattle[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cattle_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cattle[_-]?agent[_-]?instance[_-]?auth(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cattle_agent_instance_auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cattle[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cattle_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "censys[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "censys_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "certificate[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "certificate_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cf[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cf_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cheverny[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cheverny_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ci[_-]?user[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ci_user_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "claimr[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "claimr_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "claimr[_-]?db(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "claimr_db secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "claimr[_-]?superuser(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "claimr_superuser secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "claimr[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "claimr_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cli[_-]?e2e[_-]?cma[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cli_e2e_cma_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "clojars[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "clojars_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?archived[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_archived_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?audited[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_audited_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?instance(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_instance secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?order[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_order_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?parsed[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_parsed_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?processed[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_processed_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudant[_-]?service[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudant_service_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudflare[_-]?auth[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudflare_auth_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudflare[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudflare_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudinary[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudinary_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cloudinary[_-]?url[_-]?staging(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cloudinary_url_staging secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "clu[_-]?repo[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "clu_repo_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "clu[_-]?ssh[_-]?private[_-]?key[_-]?base64(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "clu_ssh_private_key_base64 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cn[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cn_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cn[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cn_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cocoapods[_-]?trunk[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cocoapods_trunk_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cocoapods[_-]?trunk[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cocoapods_trunk_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "codacy[_-]?project[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "codacy_project_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(codeclima.{0,50}(\"|')?[0-9a-f]{64}(\"|')?)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "codeclimate secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "codeclimate[_-]?repo[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "codeclimate_repo_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "codecov[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "codecov_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "coding[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "coding_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "conekta[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "conekta_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "consumerkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "consumerkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?cma[_-]?test[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_cma_test_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?integration[_-]?management[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_integration_management_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?php[_-]?management[_-]?test[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_php_management_test_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?test[_-]?org[_-]?cma[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_test_org_cma_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "contentful[_-]?v2[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "contentful_v2_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "conversation[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "conversation_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "conversation[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "conversation_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cos[_-]?secrets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cos_secrets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "coveralls[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "coveralls_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "coveralls[_-]?repo[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "coveralls_repo_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "coveralls[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "coveralls_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "coverity[_-]?scan[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "coverity_scan_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "cypress[_-]?record[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "cypress_record_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "danger[_-]?github[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "danger_github_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "database[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "database_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "database[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "database_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "database[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "database_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "database[_-]?port(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "database_port secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "database[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "database_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "datadog[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "datadog_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "datadog[_-]?app[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "datadog_app_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "db[_-]?connection(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "db_connection secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "db[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "db_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "db[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "db_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "db[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "db_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "db[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "db_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ddg[_-]?test[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ddg_test_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ddg[_-]?test[_-]?email[_-]?pw(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ddg_test_email_pw secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ddgc[_-]?github[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ddgc_github_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "deploy[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "deploy_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "deploy[_-]?secure(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "deploy_secure secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "deploy[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "deploy_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "deploy[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "deploy_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "dgpg[_-]?passphrase(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "dgpg_passphrase secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "digitalocean[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "digitalocean_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "digitalocean[_-]?ssh[_-]?key[_-]?body(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "digitalocean_ssh_key_body secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "digitalocean[_-]?ssh[_-]?key[_-]?ids(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "digitalocean_ssh_key_ids secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "docker[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "docker_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "docker[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "docker_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "docker[_-]?postgres[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "docker_postgres_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "dockerhubpassword(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "dockerhubpassword secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "dsonar[_-]?login(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "dsonar_login secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "dsonar[_-]?projectkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "dsonar_projectkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "elastic[_-]?cloud[_-]?auth(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "elastic_cloud_auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "elasticsearch[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "elasticsearch_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "encryption[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "encryption_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "end[_-]?user[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "end_user_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "env[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "env_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "env[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "env_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "env[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "env_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "env[_-]?sonatype[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "env_sonatype_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "eureka[_-]?awssecretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "eureka_awssecretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "exp[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "exp_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "facebook_oauth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "file[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "file_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "firebase[_-]?project[_-]?develop(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "firebase_project_develop secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "flask[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "flask_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "flickr[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "flickr_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "flickr[_-]?api[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "flickr_api_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "fossa[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "fossa_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ftp[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ftp_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ftp[_-]?login(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ftp_login secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ftp[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ftp_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ftp[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ftp_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ftp[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ftp_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gcloud[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gcloud_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gcloud[_-]?project(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gcloud_project secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gcloud[_-]?service[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gcloud_service_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gcr[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gcr_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gcs[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gcs_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?next[_-]?oauth[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_next_oauth_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?next[_-]?unstable[_-]?oauth[_-]?client[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_next_unstable_oauth_client_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?next[_-]?unstable[_-]?oauth[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_next_unstable_oauth_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?oauth[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_oauth_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?oauth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_oauth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?repo[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_repo_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gh[_-]?unstable[_-]?oauth[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gh_unstable_oauth_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ghb[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ghb_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ghost[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ghost_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?author[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_author_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?author[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_author_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?committer[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_committer_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?committer[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_committer_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "git[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "git_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_access_token - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "[a-zA-Z0-9_-]*:[a-zA-Z0-9_-]+@github.com*" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_access_token - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?auth(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?deploy[_-]?hb[_-]?doc[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_deploy_hb_doc_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?deployment[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_deployment_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?hunter[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_hunter_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?hunter[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_hunter_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?oauth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_oauth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?pwd(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_pwd secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?release[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_release_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "github[_-]?repo(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "github_repo secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gitlab[_-]?user[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gitlab_user_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gogs[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gogs_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "google[_-]?account[_-]?type(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "google_account_type secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "google[_-]?client[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "google_client_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(?:google_client_id|google_client_secret|google_client_token)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "google_patterns secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "google[_-]?private[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "google_private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "([0-9]{12}-[a-z0-9]{32}.apps.googleusercontent.com)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "google_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?key[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_key_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?keyname(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_keyname secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?ownertrust(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_ownertrust secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?passphrase(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_passphrase secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?private[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gpg[_-]?secret[_-]?keys(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gpg_secret_keys secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gradle[_-]?publish[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gradle_publish_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gradle[_-]?publish[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gradle_publish_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gradle[_-]?signing[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gradle_signing_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gradle[_-]?signing[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gradle_signing_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "gren[_-]?github[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "gren_github_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "grgit[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "grgit_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hab[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hab_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hab[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hab_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hb[_-]?codesign[_-]?gpg[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hb_codesign_gpg_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hb[_-]?codesign[_-]?key[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hb_codesign_key_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "heroku[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "heroku_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "([h|H][e|E][r|R][o|O][k|K][u|U].{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "heroku_api_key_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "heroku[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "heroku_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "heroku[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "heroku_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hockey.{0,50}(\"|')?[0-9a-f]{32}(\"|')?" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hockeyapp secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hockeyapp[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hockeyapp_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "homebrew[_-]?github[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "homebrew_github_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "hub[_-]?dxia2[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "hub_dxia2_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ij[_-]?repo[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ij_repo_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ij[_-]?repo[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ij_repo_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "index[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "index_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "integration[_-]?test[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "integration_test_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "integration[_-]?test[_-]?appid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "integration_test_appid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "internal[_-]?secrets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "internal_secrets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ios[_-]?docs[_-]?deploy[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ios_docs_deploy_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "itest[_-]?gh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "itest_gh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql: jdbc:mysql(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "jdbc secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "jdbc[_-]?databaseurl(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "jdbc_databaseurl secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "jdbc[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "jdbc_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "jwt[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "jwt_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kafka[_-]?admin[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kafka_admin_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kafka[_-]?instance[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kafka_instance_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kafka[_-]?rest[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kafka_rest_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "keystore[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "keystore_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kovan[_-]?private[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kovan_private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kubecfg[_-]?s3[_-]?path(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kubecfg_s3_path secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kubeconfig(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kubeconfig secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "kxoltsn3vogdop92m(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "kxoltsn3vogdop92m secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "leanplum[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "leanplum_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lektor[_-]?deploy[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lektor_deploy_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lektor[_-]?deploy[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lektor_deploy_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lighthouse[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lighthouse_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "linux[_-]?signing[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "linux_signing_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ll[_-]?publish[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ll_publish_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ll[_-]?shared[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ll_shared_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "looker[_-]?test[_-]?runner[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "looker_test_runner_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lottie[_-]?happo[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lottie_happo_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lottie[_-]?happo[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lottie_happo_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lottie[_-]?s3[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lottie_s3_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lottie[_-]?upload[_-]?cert[_-]?key[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lottie_upload_cert_key_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "lottie[_-]?upload[_-]?cert[_-]?key[_-]?store[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "lottie_upload_cert_key_store_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "magento[_-]?auth[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "magento_auth_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "magento[_-]?auth[_-]?username (=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "magento_auth_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "magento[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "magento_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mail[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mail_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailchimp[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailchimp_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailchimp[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailchimp_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailer[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailer_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(key-[0-9a-f]{32})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailgun[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailgun[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailgun[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailgun[_-]?pub[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun_pub_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mailgun[_-]?pub[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mailgun_pub_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "manage[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "manage_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "manage[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "manage_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "management[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "management_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "managementapiaccesstoken(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "managementapiaccesstoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mandrill[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mandrill_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "manifest[_-]?app[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "manifest_app_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "manifest[_-]?app[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "manifest_app_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapbox[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mapbox_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapbox[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mapbox_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapbox[_-]?aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mapbox_aws_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapbox[_-]?aws[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mapbox_aws_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mapboxaccesstoken(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mapboxaccesstoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mg[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mg_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mh[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mh_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mh[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mh_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mile[_-]?zero[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mile_zero_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "minio[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "minio_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "minio[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "minio_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "multi[_-]?bob[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "multi_bob_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "multi[_-]?connect[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "multi_connect_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "multi[_-]?disconnect[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "multi_disconnect_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "multi[_-]?workflow[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "multi_workflow_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "multi[_-]?workspace[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "multi_workspace_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "my[_-]?secret[_-]?env(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "my_secret_env secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysql_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql[_-]?hostname(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysql_hostname secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysql_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysql_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysql[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysql_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysqlmasteruser(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysqlmasteruser secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "mysqlsecret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "mysqlsecret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "nativeevents(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "nativeevents secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "new[_-]?relic[_-]?beta[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "new_relic_beta_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "nexus[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "nexus_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "nexuspassword(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "nexuspassword secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ngrok[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ngrok_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ngrok[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ngrok_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "node[_-]?env(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "node_env secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "node[_-]?pre[_-]?gyp[_-]?accesskeyid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "node_pre_gyp_accesskeyid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "node[_-]?pre[_-]?gyp[_-]?github[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "node_pre_gyp_github_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "node[_-]?pre[_-]?gyp[_-]?secretaccesskey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "node_pre_gyp_secretaccesskey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "non[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "non_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "now[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "now_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "npm[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "npm_token - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(oy2[a-z0-9]{43})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "nuget_api_key - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "nuget[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "nuget_api_key - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "numbers[_-]?service[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "numbers_service_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "oauth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "oauth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "object[_-]?storage[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "object_storage_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "object[_-]?storage[_-]?region[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "object_storage_region_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "object[_-]?store[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "object_store_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "object[_-]?store[_-]?creds(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "object_store_creds secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "oc[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "oc_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "octest[_-]?app[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "octest_app_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "octest[_-]?app[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "octest_app_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "octest[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "octest_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ofta[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ofta_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ofta[_-]?region(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ofta_region secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ofta[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ofta_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "okta[_-]?client[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "okta_client_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "okta[_-]?oauth2[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "okta_oauth2_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "okta[_-]?oauth2[_-]?clientsecret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "okta_oauth2_clientsecret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "omise[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "omise_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "omise[_-]?pkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "omise_pkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "omise[_-]?pubkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "omise_pubkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "omise[_-]?skey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "omise_skey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "onesignal[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "onesignal_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "onesignal[_-]?user[_-]?auth[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "onesignal_user_auth_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "open[_-]?whisk[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "open_whisk_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "openwhisk[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "openwhisk_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "os[_-]?auth[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "os_auth_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "os[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "os_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ossrh[_-]?jira[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ossrh_jira_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ossrh[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ossrh_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ossrh[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ossrh_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ossrh[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ossrh_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ossrh[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ossrh_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(https://outlook.office.com/webhook/[0-9a-f-]{36}@)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "outlook_team secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "packagecloud[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "packagecloud_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pagerduty[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pagerduty_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "parse[_-]?js[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "parse_js_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "passwordtravis(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "passwordtravis secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(access_token$production$[0-9a-z]{16}$[0-9a-f]{32})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "paypal_braintree_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "paypal[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "paypal_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "percy[_-]?project(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "percy_project secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "percy[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "percy_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "personal[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "personal_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "personal[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "personal_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pg[_-]?database(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pg_database secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pg[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pg_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "places[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "places_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "places[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "places_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "plotly[_-]?apikey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "plotly_apikey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "plugin[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "plugin_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "postgres[_-]?env[_-]?postgres[_-]?db(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "postgres_env_postgres_db secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "postgres[_-]?env[_-]?postgres[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "postgres_env_postgres_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "postgresql[_-]?db(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "postgresql_db secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "postgresql[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "postgresql_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "prebuild[_-]?auth(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "prebuild_auth secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "preferred[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "preferred_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pring[_-]?mail[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pring_mail_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "-----(?:(?:BEGIN|END) )(?:(?:EC|PGP|DSA|RSA|OPENSSH).)?PRIVATE.KEY(.BLOCK)?-----" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "private[_-]?signing[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "private_signing_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "prod[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "prod_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "prod[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "prod_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "prod[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "prod_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "project[_-]?config(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "project_config secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "publish[_-]?access(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "publish_access secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "publish[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "publish_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "publish[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "publish_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pushover[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pushover_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "pypi[_-]?passowrd(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "pypi_passowrd secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "qiita[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "qiita_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "quip[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "quip_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "randrmusicapiaccesstoken(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "randrmusicapiaccesstoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "redis[_-]?stunnel[_-]?urls(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "redis_stunnel_urls secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "refresh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "refresh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "registry[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "registry_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "registry[_-]?secure(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "registry_secure secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "release[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "release_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "reporting[_-]?webdav[_-]?pwd(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "reporting_webdav_pwd secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "reporting[_-]?webdav[_-]?url(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "reporting_webdav_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "repotoken(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "repotoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "rest[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "rest_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "rinkeby[_-]?private[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "rinkeby_private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ropsten[_-]?private[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ropsten_private_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "route53[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "route53_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "rtd[_-]?key[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "rtd_key_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "rtd[_-]?store[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "rtd_store_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?bucket[_-]?name[_-]?app[_-]?logs(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_bucket_name_app_logs secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?bucket[_-]?name[_-]?assets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_bucket_name_assets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?external[_-]?3[_-]?amazonaws[_-]?com(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_external_3_amazonaws_com secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?key[_-]?app[_-]?logs(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_key_app_logs secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?key[_-]?assets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_key_assets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?secret[_-]?app[_-]?logs(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_secret_app_logs secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?secret[_-]?assets(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_secret_assets secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "s3[_-]?user[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "s3_user_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sacloud[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sacloud_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sacloud[_-]?access[_-]?token[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sacloud_access_token_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sacloud[_-]?api(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sacloud_api secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "salesforce[_-]?bulk[_-]?test[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "salesforce_bulk_test_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "salesforce[_-]?bulk[_-]?test[_-]?security[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "salesforce_bulk_test_security_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sandbox[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sandbox_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sandbox[_-]?aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sandbox_aws_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sandbox[_-]?aws[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sandbox_aws_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sauce[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sauce_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(sauce.{0,50}(\"|')?[0-9a-f-]{36}(\"|')?)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sauce_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "scrutinizer[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "scrutinizer_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sdr[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sdr_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?0(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_0 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?1(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?10(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_10 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?11(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_11 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?2(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?3(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_3 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?4(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_4 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?5(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_5 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?6(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_6 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?7(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_7 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?8(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_8 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?9(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_9 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secret[_-]?key[_-]?base(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secret_key_base secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secretaccesskey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secretaccesskey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "secretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "secretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "segment[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "segment_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "selion[_-]?log[_-]?level[_-]?dev(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "selion_log_level_dev secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "selion[_-]?selenium[_-]?host(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "selion_selenium_host secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid - 2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid_api_key - 1 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendgrid[_-]?username(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendgrid_username secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sendwithus[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sendwithus_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sentry[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sentry_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sentry[_-]?default[_-]?org(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sentry_default_org secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sentry[_-]?endpoint(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sentry_endpoint secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sentry[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sentry_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "service[_-]?account[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "service_account_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ses[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ses_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ses[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ses_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "setdstaccesskey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "setdstaccesskey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "setdstsecretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "setdstsecretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "setsecretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "setsecretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "signing[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "signing_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "signing[_-]?key[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "signing_key_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "signing[_-]?key[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "signing_key_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "signing[_-]?key[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "signing_key_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(hooks.slack.com/services/T[A-Z0-9]{8}/B[A-Z0-9]{8}/[a-zA-Z0-9]{1,})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "slack_webhook_url secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "slash[_-]?developer[_-]?space(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "slash_developer_space secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "slash[_-]?developer[_-]?space[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "slash_developer_space_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "slate[_-]?user[_-]?email(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "slate_user_email secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "snoowrap[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "snoowrap_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "snoowrap[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "snoowrap_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "snoowrap[_-]?refresh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "snoowrap_refresh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "snyk[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "snyk_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "snyk[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "snyk_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "socrata[_-]?app[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "socrata_app_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "socrata[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "socrata_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonar[_-]?organization[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonar_organization_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonar[_-]?project[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonar_project_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonar[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonar_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(sonar.{0,50}(\"|')?[0-9a-f]{40}(\"|')?)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonarqube_docs_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?gpg[_-]?key[_-]?name(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_gpg_key_name secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?gpg[_-]?passphrase(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_gpg_passphrase secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?nexus[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_nexus_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?token[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_token_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatype[_-]?token[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatype_token_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sonatypepassword(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sonatypepassword secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "soundcloud[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "soundcloud_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "soundcloud[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "soundcloud_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "spaces[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "spaces_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "spaces[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "spaces_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "spotify[_-]?api[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "spotify_api_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "spotify[_-]?api[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "spotify_api_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "spring[_-]?mail[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "spring_mail_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sqsaccesskey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sqsaccesskey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sqssecretkey(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sqssecretkey secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(sq0[a-z]{3}-[0-9A-Za-z-_]{20,50})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "square_app_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "square[_-]?reader[_-]?sdk[_-]?repository[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "square_reader_sdk_repository_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "srcclr[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "srcclr_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(sshpass -p.*['|\"])" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ssh_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "sshpass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "sshpass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "ssmtp[_-]?config(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "ssmtp_config secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "staging[_-]?base[_-]?url[_-]?runscope(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "staging_base_url_runscope secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "star[_-]?test[_-]?aws[_-]?access[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "star_test_aws_access_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "star[_-]?test[_-]?bucket(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "star_test_bucket secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "star[_-]?test[_-]?location(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "star_test_location secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "star[_-]?test[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "star_test_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "starship[_-]?account[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "starship_account_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "starship[_-]?auth[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "starship_auth_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "stormpath[_-]?api[_-]?key[_-]?id(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stormpath_api_key_id secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "stormpath[_-]?api[_-]?key[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stormpath_api_key_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "strip[_-]?publishable[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "strip_publishable_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "strip[_-]?secret[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "strip_secret_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "stripe[_-]?private(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stripe_private secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "stripe[_-]?public(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stripe_public secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(rk_live_[0-9a-zA-Z]{24,34})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stripe_restricted_api secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "(sk_live_[0-9a-zA-Z]{24,34})" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "stripe_standard_api secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "surge[_-]?login(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "surge_login secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "surge[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "surge_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "svn[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "svn_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "tesco[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "tesco_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "test[_-]?github[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "test_github_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "test[_-]?test(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "test_test secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "tester[_-]?keys[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "tester_keys_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "thera[_-]?oss[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "thera_oss_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "token[_-]?core[_-]?java(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "token_core_java secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?access[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_access_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?api[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_api_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?branch(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_branch secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?com[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_com_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?e2e[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_e2e_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?gh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_gh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "travis[_-]?pull[_-]?request(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "travis_pull_request secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "trex[_-]?client[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "trex_client_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "trex[_-]?okta[_-]?client[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "trex_okta_client_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "twilio[_-]?configuration[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "twilio_configuration_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "twilio[_-]?sid(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "twilio_sid secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "twine[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "twine_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "unity[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "unity_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "unity[_-]?serial(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "unity_serial secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "urban[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "urban_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "urban[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "urban_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "us[_-]?east[_-]?1[_-]?elb[_-]?amazonaws[_-]?com(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "us_east_1_elb_amazonaws_com secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "user[_-]?assets[_-]?secret[_-]?access[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "user_assets_secret_access_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "usertravis(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "usertravis secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "v[_-]?sfdc[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "v_sfdc_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "v[_-]?sfdc[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "v_sfdc_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "vip[_-]?github[_-]?build[_-]?repo[_-]?deploy[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "vip_github_build_repo_deploy_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "vip[_-]?github[_-]?deploy[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "vip_github_deploy_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "vip[_-]?github[_-]?deploy[_-]?key[_-]?pass(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "vip_github_deploy_key_pass secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "visual[_-]?recognition[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "visual_recognition_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "vscetoken(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "vscetoken secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wakatime[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wakatime_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "watson[_-]?conversation[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "watson_conversation_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "watson[_-]?device[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "watson_device_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "watson[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "watson_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?basic[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_basic_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?basic[_-]?password[_-]?2(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_basic_password_2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?basic[_-]?password[_-]?3(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_basic_password_3 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?basic[_-]?password[_-]?4(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_basic_password_4 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?basic[_-]?password[_-]?5(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_basic_password_5 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?fb[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_fb_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?fb[_-]?password[_-]?2(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_fb_password_2 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?fb[_-]?password[_-]?3(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_fb_password_3 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "widget[_-]?test[_-]?server(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "widget_test_server secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wincert[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wincert_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wordpress[_-]?db[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wordpress_db_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wordpress[_-]?db[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wordpress_db_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpjm[_-]?phpunit[_-]?google[_-]?geocode[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpjm_phpunit_google_geocode_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wporg[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wporg_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?db[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_db_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?db[_-]?user(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_db_user secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?prepare[_-]?dir(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_prepare_dir secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?report[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_report_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?ssh[_-]?connect(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_ssh_connect secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "wpt[_-]?ssh[_-]?private[_-]?key[_-]?base64(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "wpt_ssh_private_key_base64 secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "www[_-]?googleapis[_-]?com(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "www_googleapis_com secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yangshun[_-]?gh[_-]?password(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yangshun_gh_password secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yangshun[_-]?gh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yangshun_gh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?account[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_account_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?account[_-]?refresh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_account_refresh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?partner[_-]?client[_-]?secret(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_partner_client_secret secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?partner[_-]?refresh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_partner_refresh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "yt[_-]?server[_-]?api[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "yt_server_api_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "zendesk[_-]?travis[_-]?github(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "zendesk_travis_github secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "zensonatypepassword(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "zensonatypepassword secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "zhuliang[_-]?gh[_-]?token(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "zhuliang_gh_token secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if

 if {latest.response} matches "zopim[_-]?account[_-]?key(=| =|:| :)" then
      report issue and continue:
        severity: medium
        confidence: tentative
        detail: "zopim_account_key secret pattern detected in the response."
        remediation: "Review and remove unnecessary exposure of secrets."
 end if