Skip to content

willfarrell/secret-patterns

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

secret-patterns

RegExp patterns for code secrets. This project is meant to be used by popular repository scanners that search for embedded secrets.

Scanners

Getting Started

common

Collection variables containing popular snippets used in patterns. You can use ${quote} in the patterns.json as a short hand.

patterns.json

Collection of Regexp patterns for various types of secrets

allowed.json

Collection of allowed strings. ie fake/examples secrets

Testings

Just run npm test. This will also run the build script prior to testing.

Build

Just run npm run build.

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

Versioning

We use SemVer for versioning. For the versions available, see the tags on this repository.

Authors

See also the list of contributors who participated in this project.

License

This project is licensed under the MIT License - see the LICENSE file for details

Acknowledgments

TODO:

  • .pgpass / pgpass.conf pattern "PostgreSQL PGPASS File": "[^:]+:[0-9]{2,6}:[a-z][a-z0-9_]+:[^:]+:[^:]+",
  • list of files that should be ignored/skipped
  • make npm package
  • add docs on how to curl file one needs w/ version tag

About

RegExp patterns for code secrets

Resources

License

Stars

Watchers

Forks

Packages

No packages published