{"id":13469215,"url":"https://github.com/mazen160/secrets-patterns-db","last_synced_at":"2025-05-16T08:05:06.317Z","repository":{"id":65767503,"uuid":"598684695","full_name":"mazen160/secrets-patterns-db","owner":"mazen160","description":"Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.","archived":false,"fork":false,"pushed_at":"2025-05-14T22:18:06.000Z","size":179,"stargazers_count":1140,"open_issues_count":2,"forks_count":139,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-05-14T22:31:45.221Z","etag":null,"topics":["gitleaks","regex","regular-expression","regular-expressions","secrets","secrets-detection","trufflehog","trufflehog3"],"latest_commit_sha":null,"homepage":"https://mazinahmed.net/blog/secrets-patterns-db/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc-by-sa-4.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mazen160.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-02-07T15:57:57.000Z","updated_at":"2025-05-14T22:18:10.000Z","dependencies_parsed_at":"2024-07-31T15:10:30.386Z","dependency_job_id":"57bbada4-1c64-45b1-befc-ca6dc5c3ce7d","html_url":"https://github.com/mazen160/secrets-patterns-db","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mazen160%2Fsecrets-patterns-db","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mazen160%2Fsecrets-patterns-db/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mazen160%2Fsecrets-patterns-db/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mazen160%2Fsecrets-patterns-db/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mazen160","download_url":"https://codeload.github.com/mazen160/secrets-patterns-db/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254493378,"owners_count":22080126,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["gitleaks","regex","regular-expression","regular-expressions","secrets","secrets-detection","trufflehog","trufflehog3"],"created_at":"2024-07-31T15:01:29.440Z","updated_at":"2025-05-16T08:05:01.306Z","avatar_url":"https://github.com/mazen160.png","language":"Python","readme":"# 🗄️ Secrets Patterns Database 🗄️\n\nThe largest open-source database for detecting secrets, API keys, passwords, tokens, and more. Use secrets-patterns-db to feed your secret scanning engine with regex patterns for identifying secrets.\n\n---\n\n# 🚀 Features\n\n- Over 1600 regular expressions for detecting secrets, passwords, API keys, tokens, and more.\n- Format agnostic. A Single format that supports secret detection tools, including Trufflehog and Gitleaks.\n- Tested and reviewed Regular expressions.\n- Categorized by confidence levels of each pattern.\n- All regular expressions are tested against ReDos attacks.\n\n# ❔ Why?\n\nThere are limited resources online for Regular Expressions patterns for secrets. TruffleHog offers ~700 as built-in rules. GitLeaks offers ~60 rules. While it's a good start, it's not enough. There's a lot of work that needs to be done for maintenance and keeping up with new secrets patterns.\n\nI have collected and curated Regular Expressions Patterns for Secrets, API Tokens, Keys, and Passwords. I'm open-sourcing the database I built (Secrets-Patterns-DB), and hope that security teams contribute to it!\n\nThe Secrets-Patterns-DB contains over 1600 Regular Expressions. I have also written scripts to validate Regexes against ReDoS attacks, and CI jobs to load and validate Regexes, and I also manually cleaned-up invalid ones.\n\nIt's in Beta. There’s a lot of room for improvement on the project. I'm looking forward to your Pull Requests and Issues on Github to enhance Secrets-Patterns-DB for everyone.\n\nAre you planning to enhance your secrets detection in your AppSec program? Please take some time to contribute to the project! :pray:\n\n---\n\n# 💻 Contribution\n\nContribution is always welcome! Please feel free to report issues on Github and create Pull Requestss for new features.\n\n## 📌 Ideas to Start on\n\n# Using\nFor Trufflehog v2\n$\u003e ./convert-rules.py --db ../db/rules-stable.yml --type trufflehog\nFor Gitleaks\n$\u003e ./convert-rules.py --db ../db/rules-stable.yml --type  gitleaks\n\nOptional:\n--export - Set filename, extension will be added by type (gitleaks = toml, trufflehog = json)\n\nWould like to contribute to secrets-patterns-db? Here are some ideas that you may start with:\n\n- Support severity\n- Categorize patterns by type?\n- Categorize patterns by tags?\n- Support more tools?\n\n---\n\n# 📄 License\n\nThis work is licensed under a Creative Commons Attribution 4.0 International License.\n\n# 💚 Author\n\n**Mazin Ahmed**\n\n- **Website**: [https://mazinahmed.net](https://mazinahmed.net)\n- **Email**: `mazin [at] mazinahmed [dot] net`\n- **Twitter**: [https://twitter.com/mazen160](https://twitter.com/mazen160)\n- **Linkedin**: [http://linkedin.com/in/infosecmazinahmed](http://linkedin.com/in/infosecmazinahmed)\n","funding_links":[],"categories":["Python","漏洞扫描","Tools"],"sub_categories":["Defense Evasion"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmazen160%2Fsecrets-patterns-db","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmazen160%2Fsecrets-patterns-db","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmazen160%2Fsecrets-patterns-db/lists"}