| SECRET DETECTOR | REGEX | CATEGORY | SEVERITY | | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | -------- | | SSH public key DSA | (^.\*(-\|_)(dsa\|dss\|ed25519))\|(ecdsa-sha2-nistp256) | PublicKey | HIGH | | SSH public key RSA | ^.\*(-\|_)rsa | PublicKey | HIGH | | Typeform API Token | (?i)(?Ptypeform[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}(?Ptfp_[a-z0-9\\-_\\.=]{59}) | Typeform | LOW | | Twitch API Token | (?i)(?Ptwitch[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{30})['\\"] | Twitch | LOW | | LinkedIn Client Id | (?i)(?Plinkedin[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{14})['\\"] | LinkedIn | LOW | | LinkedIn Client Secret | (?i)(?Plinkedin[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z]{16})['\\"] | LinkedIn | LOW | | Shippo API Token | shippo_(live\|test)_[a-f0-9]{40} | Shippo | LOW | | Sendinblue API Token | xkeysib-[a-f0-9]{64}\\-(?i)[a-z0-9]{16} | Sendinblue | LOW | | SendGrid API Token | SG\\.(?i)[a-z0-9_\\-\\.]{66} | SendGrid | MEDIUM | | RubyGems API Token | rubygems_[a-f0-9]{48} | RubyGems | MEDIUM | | Pulumi API Token | pul-[a-f0-9]{40} | Pulumi | HIGH | | Postman API Token | PMAK-(?i)[a-f0-9]{24}\\-[a-f0-9]{34} | Postman | MEDIUM | | Planetscale API Token | pscale_tkn_(?i)[a-z0-9\\-_\\.]{43} | Planetscale | MEDIUM | | Planetscale Password | pscale_pw_(?i)[a-z0-9\\-_\\.]{43} | Planetscale | MEDIUM | | Npm Access Token | ['\\"](npm_(?i)[a-z0-9]{36})['\\"] | Npm | CRITICAL | | New Relic Ingest Browser API Token | ['\\"](NRJS-[a-f0-9]{19})['\\"] | NewRelic | MEDIUM | | NewRelic User API Id | (?i)(?Pnewrelic[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[A-Z0-9]{64})['\\"] | NewRelic | MEDIUM | | NewRelic User API Key | ['\\"](NRAK-[A-Z0-9]{27})['\\"] | NewRelic | MEDIUM | | MessageBird API Client ID | (?i)(?Pmessagebird[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-h0-9]{8}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{12})['\\"] | MessageBird | MEDIUM | | MessageBird API Token | (?i)(?Pmessagebird[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{25})['\\"] | MessageBird | MEDIUM | | Mapbox API Token | (?i)(pk\\.[a-z0-9]{60}\\.[a-z0-9]{22}) | Mapbox | MEDIUM | | Mailgun Webhook Signing Key | (?i)(?Pmailgun[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})['\\"] | Mailgun | MEDIUM | | Mailgun Private API Token | (?i)(?Pmailgun[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P(pub)?key-[a-f0-9]{32})['\\"] | Mailgun | MEDIUM | | Mailchimp API Key | (?i)(?Pmailchimp[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{32}-us20)['\\"] | Mailchimp | MEDIUM | | Lob Publishable API Key | (?i)(?Plob[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P(test\|live)_pub_[a-f0-9]{31})['\\"] | Lob | LOW | | Lob API Key | (?i)(?Plob[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P(live\|test)_[a-f0-9]{35})['\\"] | Lob | LOW | | Linear client Secret/ID | (?i)(?Plinear[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{32})['\\"] | Linear | MEDIUM | | Linear API Token | lin_api_(?i)[a-z0-9]{40} | Linear | MEDIUM | | Ionic API Token | (?i)(ionic[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](ion_[a-z0-9]{42})['\\"] | Ionic | MEDIUM | | Intercom client Secret/ID | (?i)(?Pintercom[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-h0-9]{8}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{12})['\\"] | Intercom | LOW | | Intercom API Token | (?i)(?Pintercom[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9=_]{60})['\\"] | Intercom | LOW | | HubSpot API Token | (?i)(?Phubspot[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-h0-9]{8}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{4}-[a-h0-9]{12})['\\"] | HubSpot | LOW | | HashiCorp Terraform user/org API Token | ['\\"](?i)[a-z0-9]{14}\\.atlasv1\\.[a-z0-9\\-_=]{60,70}['\\"] | HashiCorp | MEDIUM | | Grafana API Token | ['\\"]eyJrIjoi(?i)[a-z0-9\\-_=]{72,92}['\\"] | Grafana | MEDIUM | | GoCardless API Token | ['\\"]live_(?i)[a-z0-9\\-_=]{40}['\\"] | GoCardless | MEDIUM | | Frame.io API Token | fio-u-(?i)[a-z0-9\\-_=]{64} | Frameio | LOW | | Flutterwave Encrypted Key | FLWSECK_TEST[a-h0-9]{12} | Flutterwave | MEDIUM | | Flutterwave Public/Secret Key | FLW(PUB\|SEC)K_TEST-(?i)[a-h0-9]{32}-X | Flutterwave | MEDIUM | | Finicity API Token | (?i)(?Pfinicity[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{32})['\\"] | Finicity | MEDIUM | | Finicity Client Secret | (?i)(?Pfinicity[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{20})['\\"] | Finicity | MEDIUM | | Fastly API Token | (?i)(?Pfastly[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9\\-=_]{32})['\\"] | Fastly | MEDIUM | | Easypost API Token | ['\\"]EZ[AT]K(?i)[a-z0-9]{54}['\\"] | Easypost | LOW | | Dynatrace API Token | ['\\"]dt0c01\\.(?i)[a-z0-9]{24}\\.[a-z0-9]{64}['\\"] | Dynatrace | MEDIUM | | Duffle API Token | ['\\"]duffel_(test\|live)_(?i)[a-z0-9_-]{43}['\\"] | Duffel | LOW | | Dropbox Long Lived API Token | (?i)(dropbox[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"][a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43}['\\"] | Dropbox | HIGH | | Dropbox Short Lived API Token | (?i)(dropbox[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](sl\\.[a-z0-9\\-=_]{135})['\\"] | Dropbox | HIGH | | Dropbox API secret/key | (?i)(dropbox[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"]([a-z0-9]{15})['\\"] | Dropbox | HIGH | | Doppler API Token | ['\\"](dp\\.pt\\.)(?i)[a-z0-9]{43}['\\"] | Doppler | MEDIUM | | Discord Client Secret | (?i)(?Pdiscord[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9=_\\-]{32})['\\"] | Discord | MEDIUM | | Discord Client Id | (?i)(?Pdiscord[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[0-9]{18})['\\"] | Discord | MEDIUM | | Discord API Token | (?i)(?Pdiscord[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-h0-9]{64})['\\"] | Discord | MEDIUM | | Databricks API Token | dapi[a-h0-9]{32} | Databricks | MEDIUM | | Contentful delivery API token | (?i)(?Pcontentful[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9\\-=_]{43})['\\"] | ContentfulDelivery | LOW | | Clojars API Token | (CLOJARS_)(?i)[a-z0-9]{60} | Clojars | MEDIUM | | Beamer API Token | (?i)(?Pbeamer[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?Pb_[a-z0-9=_\\-]{44})['\\"] | Beamer | LOW | | Bitbucket Client Secret | (?i)(?Pbitbucket[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9_\\-]{64})['\\"] | Bitbucket | HIGH | | Bitbucket Client Id | (?i)(?Pbitbucket[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{32})['\\"] | Bitbucket | HIGH | | Atlassian API Token | (?i)(?Patlassian[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{24})['\\"] | Atlassian | HIGH | | Asana Client Secret | (?i)(?Pasana[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{32})['\\"] | Asana | MEDIUM | | Asana Client Id | (?i)(?Pasana[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[0-9]{16})['\\"] | Asana | MEDIUM | | Alibaba Secret Key | (?i)(?Palibaba[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-z0-9]{30})['\\"] | Alibaba | HIGH | | Alibaba AccessKey Id | ([^0-9a-z]\|^)(?P(LTAI)(?i)[a-z0-9]{20})([^0-9a-z]\|$) | Alibaba | HIGH | | Adobe Client Secret | (p8e-)(?i)[a-z0-9]{32} | Adobe | LOW | | Adobe Client ID (Oauth Web) | (?i)(?Padobe[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{32})['\\"] | Adobe | LOW | | Twitter Token | (?i)(?Ptwitter[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{35,44})['\\"] | Twitter | LOW | | Facebook Token | (?i)(?Pfacebook[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[a-f0-9]{32})['\\"] | Facebook | LOW | | Age Secret Key | AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58} | Age | MEDIUM | | Twilio API Key | SK[0-9a-fA-F]{32} | Twilio | MEDIUM | | Slack Webhook | https:\\/\\/hooks.slack.com\\/services\\/[A-Za-z0-9+\\/]{44,48} | Slack | MEDIUM | | Heroku API Key | (?i)(?Pheroku[a-z0-9 \_ .\\-,]{0,25})(=\|>\|:=\|\\\|\\\|:\|<=\|=>\|:).{0,5}['\\"](?P[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})['\\"] | Heroku | HIGH | | Google (GCP) Service-account | \\"type\\": \\"service_account\\" | Google | CRITICAL | | Pypi Upload Token | pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\\-_]{50,1000} | PyPi | HIGH | | Stripe Secret Key | (?i)sk_(test\|live)_[0-9a-z]{10,32} | Stripe | CRITICAL | | Stripe Publishable Key | (?i)pk_(test\|live)_[0-9a-z]{10,32} | Stripe | LOW | | Slack Token | xox[baprs]-([0-9a-zA-Z]{10,48}) | Slack | HIGH | | Shopify Token | shp(ss\|at\|ca\|pa)_[a-fA-F0-9]{32} | Shopify | HIGH | | Private Key | (?i)-----\\s\*?BEGIN[ A-Z0-9_-]\*?PRIVATE KEY( BLOCK)?\\s\*?-----[\\s]\*?(?P[\\sA-Za-z0-9=+/\\\\\\r\\n]+)[\\s]\*?-----\\s\*?END[ A-Z0-9_-]\*? PRIVATE KEY( BLOCK)?\\s\*?----- | AsymmetricPrivateKey | HIGH | | GitLab Personal Access Token | glpat-[0-9a-zA-Z\\-\\_]{20} | Github | CRITICAL | | Github Refresh Token | ghr_[0-9a-zA-Z]{76} | Github | CRITICAL | | Github App Token | (ghu\|ghs)_[0-9a-zA-Z]{36} | Github | CRITICAL | | GitHub OAuth Access Token | gho_[0-9a-zA-Z]{36} | Github | CRITICAL | | GitHub Personal Access Token | ghp_[0-9a-zA-Z]{36} | Github | CRITICAL | | AWS Account Id | (?i)(^\|\\s+)["']?(aws)?_?account_?(id)?["']?\\s\*(:\|=>\|=)\\s\*["']?(?P[0-9]{4}\\-?[0-9]{4}\\-?[0-9]{4})["']?(\\s+\|$) | AWS | HIGH | | AWS Secret Access Key | (?i)(^\|\\s+)["']?(aws)?_?(secret)?_?(access)?_?key["']?\\s\*(:\|=>\|=)\\s\*["']?(?P[A-Za-z0-9\\/\\+=]{40})["']?(\\s+\|$) | AWS | CRITICAL | | AWS Access Key Id | ["']?(?P(A3T[A-Z0-9]\|AKIA\|AGPA\|AIDA\|AROA\|AIPA\|ANPA\|ANVA\|ASIA)[A-Z0-9]{16})["']?(\\s+\|$) | AWS | CRITICAL |