AWS Access Key ID

description: Detects AWS Access Key IDs which start with AKIA, ASIA, AIDA, AGPA, AROA, AIPA, ANPA, or ANVA

type: regex

severity: high

confidence: high

keywords: AKIA ASIA AIDA AGPA AROA AIPA ANPA ANVA aws


AWS Secret Access Key

description: Detects AWS Secret Access Keys (40-character base64 strings near AWS context)

severity: critical


Azure Storage Account Key

description: Detects Azure Storage account access keys


Database Connection String

description: Detects database connection strings with embedded credentials

confidence: medium

keywords: connection_string jdbc mongodb mysql postgres sqlserver password pwd


Datadog API Key

description: Detects Datadog API keys


Discord Bot Token

description: Detects Discord bot tokens


Docker Hub Access Token

description: Detects Docker Hub personal access tokens

keywords: dckr_pat docker dockerhub


GCP Service Account Key

description: Detects Google Cloud Platform service account JSON keys


Generic API Key

description: Detects generic API keys in configuration

severity: medium

confidence: low


Generic Password

description: Detects passwords in configuration files

keywords: password passwd pwd secret


GitHub App Installation Token

description: Detects GitHub App installation access tokens


GitHub Personal Access Token

description: Detects GitHub Personal Access Tokens (classic and fine-grained)


GitLab Personal Access Token

description: Detects GitLab personal access tokens

keywords: glpat- gitlab


Heroku API Key

description: Detects Heroku API keys


JWT Secret Key

description: Detects JWT secret keys in configuration


Mailchimp API Key

description: Detects Mailchimp API keys


NPM Access Token

description: Detects NPM access tokens


NuGet API Key

description: Detects NuGet API keys


EC Private Key

description: Detects EC (Elliptic Curve) private keys

pattern: -----BEGIN EC PRIVATE KEY-----

keywords:
EC PRIVATE KEY
-----BEGIN


Generic Private Key

description: Detects generic PKCS#8 private keys

pattern: -----BEGIN PRIVATE KEY-----

keywords:
PRIVATE KEY
-----BEGIN


OpenSSH Private Key

description: Detects OpenSSH private keys

pattern: -----BEGIN OPENSSH PRIVATE KEY-----

keywords:
OPENSSH PRIVATE KEY
-----BEGIN


RSA Private Key

description: Detects RSA private keys

pattern: -----BEGIN RSA PRIVATE KEY-----

keywords:
RSA PRIVATE KEY
-----BEGIN


PyPI API Token

description: Detects PyPI API tokens

keywords: pypi- pypi


SendGrid API Key

description: Detects SendGrid API keys

keywords: SG. sendgrid


Slack Token

description: Detects Slack bot, user, and workspace tokens

keywords: xoxb- xoxa- xoxp- xoxr- xoxs- slack


Slack Webhook URL

description: Detects Slack incoming webhook URLs


Stripe Restricted API Key

description: Detects Stripe restricted API keys


Stripe Secret API Key

description: Detects Stripe secret API keys


Telegram Bot Token

description: Detects Telegram bot tokens

keywords: telegram bot


Twilio API Key

description: Detects Twilio API keys and auth tokens

keywords: SK twilio