From 0c79989dbf8696514cd93273e8165b33300b2f2d Mon Sep 17 00:00:00 2001 From: Pablo Santiago Date: Mon, 15 Mar 2021 13:07:14 +0100 Subject: [PATCH 1/2] New keywords in the denylist --- detect_secrets/plugins/keyword.py | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/detect_secrets/plugins/keyword.py b/detect_secrets/plugins/keyword.py index 4002e8c03..4173276bf 100644 --- a/detect_secrets/plugins/keyword.py +++ b/detect_secrets/plugins/keyword.py @@ -40,15 +40,23 @@ # Note: All values here should be lowercase DENYLIST = ( - 'apikey', - 'api_key', - 'aws_secret_access_key', - 'db_pass', + 'api_?key', + 'auth_?key', + 'service_?key', + 'account_?key', + 'db_?key', + 'database_?key', + 'priv_?key', + 'private_?key', + 'client_?key', + 'db_?pass', + 'database_?pass', + 'key_?pass', 'password', 'passwd', - 'private_key', 'secret', - 'secrete', + 'contraseƱa', + 'contrasena', ) # Includes ], ', " as closing CLOSING = r'[]\'"]{0,2}' From 8a509d6fb13b12aeaf9940bd3b4af3bbdaa4145e Mon Sep 17 00:00:00 2001 From: Pablo Santiago Date: Mon, 15 Mar 2021 14:53:09 +0100 Subject: [PATCH 2/2] Pwd keyword --- detect_secrets/plugins/keyword.py | 1 + 1 file changed, 1 insertion(+) diff --git a/detect_secrets/plugins/keyword.py b/detect_secrets/plugins/keyword.py index 4173276bf..d14f1cb0d 100644 --- a/detect_secrets/plugins/keyword.py +++ b/detect_secrets/plugins/keyword.py @@ -54,6 +54,7 @@ 'key_?pass', 'password', 'passwd', + 'pwd', 'secret', 'contraseƱa', 'contrasena',