{"id":19652697,"url":"https://github.com/advanced-security/secret-scanning-custom-patterns","last_synced_at":"2026-03-02T08:31:51.940Z","repository":{"id":37894031,"uuid":"375032559","full_name":"advanced-security/secret-scanning-custom-patterns","owner":"advanced-security","description":"Examples of Custom Secret Scanning Patterns","archived":false,"fork":false,"pushed_at":"2024-04-19T18:20:40.000Z","size":4254,"stargazers_count":113,"open_issues_count":8,"forks_count":19,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-04-20T15:36:11.529Z","etag":null,"topics":["github-advanced-security","regex","regex-patterns","secret-scanning"],"latest_commit_sha":null,"homepage":"","language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/advanced-security.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":"SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-06-08T14:09:10.000Z","updated_at":"2024-04-23T11:53:42.015Z","dependencies_parsed_at":"2024-01-15T16:47:48.092Z","dependency_job_id":"13b335cb-b2b5-4d14-99ec-100fa1060b67","html_url":"https://github.com/advanced-security/secret-scanning-custom-patterns","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/advanced-security%2Fsecret-scanning-custom-patterns","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/advanced-security%2Fsecret-scanning-custom-patterns/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/advanced-security%2Fsecret-scanning-custom-patterns/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/advanced-security%2Fsecret-scanning-custom-patterns/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/advanced-security","download_url":"https://codeload.github.com/advanced-security/secret-scanning-custom-patterns/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240961107,"owners_count":19885259,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["github-advanced-security","regex","regex-patterns","secret-scanning"],"created_at":"2024-11-11T15:11:47.246Z","updated_at":"2026-03-02T08:31:46.904Z","avatar_url":"https://github.com/advanced-security.png","language":"HTML","funding_links":[],"categories":["Secret Scanning Custom Patterns"],"sub_categories":[],"readme":"# custom-pattern-secrets\n\nCustom Secret Scanning Patterns repository.\n\n## Patterns\n\n\n\n### [Commonly Used Secrets / Passwords](./common)\n\n\n\n- Common Passwords Shortlist\n  \n\n### [Configuration Secrets](./configs)\n\n\n\n- Hardcoded Database Passwords\n\n- Hardcoded Spring SQL passwords\n\n- Django Secret Key\n\n- GitHub Actions SHA Checker\n\n- .NET Configuration file\n\n- .NET MachineKey\n  \n\n### [Database passwords](./database)\n\n\n\n- Database Connection String (full string)\n\n- Database Connection String (1)\n\n- Database Connection String (2)\n\n- Database Connection String (3)\n\n- TSQL CREATE LOGIN/USER\n\n- SQLAlchemy Database Connection String\n\n- MongoDB connection string\n\n- JDBC Database Connection String\n  \n\n### [Generic Secrets / Passwords](./generic)\n\n\n\n- Generic Passwords (fewer FPs)\n\n- Generic Password with hex encoded secrets\n\n- Generic Password with Base64 encoded secrets\n\n- Generic Password with URI-safe Base64 encoded secrets\n\n- UUIDs\n\n- Bearer Tokens\n\n- OAuth client secret and ID pair\n  \n\n### [JWT](./jwt)\n\n\n\n- JWT\n  \n\n### [Password stores](./password_store)\n\n\n\n- Arc\n  \n\n### [Personally identifiable information (PII)](./pii)\n\n\n\n- Credit Cards\n\n- Credit Cards - Visa\n\n- Credit Cards - MasterCard\n\n- Credit Cards - American Express\n\n- Credit Cards - Discover\n\n- IBAN\n\n- Norwegian national identity number/D number\n  \n\n### [RSA Keys](./rsa)\n\n\n\n- Generic RSA keys\n\n- SSH Private Keys\n\n- GPG Private Key\n  \n\n### [URI / URL Custom Patterns](./uri)\n\n\n\n- Hardcoded Internal Emails\n\n- Hardcoded Internal URLs\n\n- Hardcoded URI Passwords\n\n- Routable IPv4 Addresses\n\n- GitHub Container Registry typos\n  \n\n### [Vendors](./vendors)\n\n\n\n- Azure SQL Connection String\n\n- Grafana API token\n\n- SendGrid (deprecated)\n\n- Sentry Auth Token\n\n- Sentry API Key\n\n- Sentry DSN secret\n\n- Sentry webpack plugin token\n\n- Sentry Terraform provider token\n\n- Okta token\n\n- Okta API key (precise)\n\n- DataDog API key\n\n- DataDog APP key\n\n- Microsoft Teams incoming webhook\n\n- LaunchDarkly API key\n\n- PagerDuty API/Service key\n\n- Flickr OAuth token\n\n- Flickr API key\n\n- BrowserStack access key\n\n- BrowserStack access key (imprecise)\n\n- BrowserStack token (URL)\n\n- Vercel Access Token (imprecise)\n\n- Vercel Access Token\n\n- Vercel CLI token\n\n- Vercel OAuth client secrets\n\n- UUIDv4 Bearer token (maybe Heroku)\n\n- Azure client secret\n\n- Google private key id (or older API key)\n\n- OpenStack password/API key\n\n- AlienVault OTX API key\n\n- Apollo.io API key\n\n- ClickUp API key\n\n- Amazon MWS Auth Token\n\n- Jenkins API token\n\n- AWS S3 presigned URL\n\n- Azure Access Key (legacy format)\n\n- Azure Shared Access Signature (SAS) Token\n\n- CircleCI API token\n  ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadvanced-security%2Fsecret-scanning-custom-patterns","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fadvanced-security%2Fsecret-scanning-custom-patterns","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadvanced-security%2Fsecret-scanning-custom-patterns/lists"}