custom-pattern-secrets

Custom Secret Scanning Patterns repository.

Patterns

Commonly Used Secrets / Passwords

• Common Passwords Shortlist

Configuration Secrets

• Hardcoded Database Passwords

• Hardcoded Spring SQL passwords

• Django Secret Key

• GitHub Actions SHA Checker

• .NET Configuration file

• .NET MachineKey

Database passwords

• Database Connection String (1)

• Database Connection String (2)

• Database Connection String (3)

• TSQL CREATE LOGIN/USER

Generic Secrets / Passwords

• Generic Passwords

• UUIDs

• Bearer Tokens

JWT

• JWT

Password stores

• Arc

Personally identifiable information (PII)

• Credit Cards

• Credit Cards - Visa

• Credit Cards - MasterCard

• Credit Cards - American Express

• Credit Cards - Discover

• IBAN

RSA Keys

• Generic RSA keys

• SSH Private Keys

• GPG Private Key

URI / URL Custom Patterns

• Hardcoded Internal Emails

• Hardcoded Internal URLs

• Hardcoded URI Passwords

• Routable IPv4 Addresses

• GitHub Container Registry typos

Vendors

• Azure SQL Connection String

• Grafana API token

• SendGrid (deprecated)

• Sentry Auth Token

• Sentry API Key

• Sentry DSN secret

• Sentry webpack plugin token

• Sentry Terraform provider token

• Okta token

• DataDog API key

• DataDog APP key