custom-pattern-secrets

Custom Secret Scanning Patterns repository.

Patterns

Commonly Used Secrets / Passwords

Common Passwords Shortlist

Configuration Secrets

Hardcoded Database Passwords
Hardcoded Spring SQL passwords
Django Secret Key
GitHub Actions SHA Checker
.NET Configuration file
.NET MachineKey

Database passwords

Database Connection String (full string)
Database Connection String (1)
Database Connection String (2)
Database Connection String (3)
TSQL CREATE LOGIN/USER
SQLAlchemy Database Connection String
MongoDB connection string
JDBC Database Connection String

Generic Secrets / Passwords

Generic Passwords (fewer FPs)
Generic Password with hex encoded secrets
Generic Password with Base64 encoded secrets
Generic Password with URI-safe Base64 encoded secrets
UUIDs
Bearer Tokens
OAuth client secret and ID pair

JWT

JWT

Password stores

Arc

Personally identifiable information (PII)

Credit Cards
Credit Cards - Visa
Credit Cards - MasterCard
Credit Cards - American Express
Credit Cards - Discover
IBAN
Norwegian national identity number/D number

RSA Keys

Generic RSA keys
SSH Private Keys
GPG Private Key

URI / URL Custom Patterns

Hardcoded Internal Emails
Hardcoded Internal URLs
Hardcoded URI Passwords
Routable IPv4 Addresses
GitHub Container Registry typos

Vendors