Skip to content

Commit c836cb2

Browse files
aegilopsaegilops
committed
Updated README.md
1 parent f2d6c76 commit c836cb2

File tree

11 files changed

+306
-811
lines changed

11 files changed

+306
-811
lines changed

‎common/README.md‎

Lines changed: 21 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -25,45 +25,54 @@ _version: v0.1_
2525

2626
<details>
2727
<summary>Pattern Format</summary>
28-
<p>
2928

3029
```regex
3130
(?i)[!?%$@.*+_#-]*(1234?)?(p[@a][s5]{2}w[o0]rd|[a3@]dm[i1!]n|t[e3]mp(ora(ry|l))|[a4@]m[e3]r[i1!l]c[a4@]|[i1!]nd[i1!][a4@]|mumb[a4@][i1!]|123456(7|78|789|7890|78910)|((?-i)((abcd?e?f?|123|456|xyz|321|654|1?[qg]az|2?wsx|3?edc|4?rfv|5?tgb|6?yhn|za[qg]1?|xsw2?|cde3?|vfr4?|bgt5?|nhy6?|[qg]wer?|asdf?|zxcv?|1[qg]2w|3e4r|dog|ca[tr]|red|lol|azer?|qqq|www|zzz|xxx|yyy)[!?%$@.*+_#'-]?)+)|([qg][uw]|az)erty(uiop)?|m[o0]nk[e3][yi]|l[e3]tm[e3][i1!]n|dr[a4@]g[o0]n|0{6}|1{6}|2{6}|3{6}|4{6}|5{6}|6{6}|7{6}|8{6}|9{6}|b[a4@][s5$]k?[e3]t?b[a4@][l1!]{1,2}|[s5][o0]cc[e3@]r|[i1!]?l[o0]v[e3](y[o0]u|u|m[e3])?|tru[s5$]tn[o0](1|!|one)|[s5$]un[s5$]h[i1!]n[e3]|m[a4@][s5$]t[e3]r|w[e3][l1!]c[o0]m[e3]|[s5$]h[a4@]d[o0]w|[a4@][s5$]hl[e3]y|f[o0]{1,2}tb[a4@]l{1,2}|j[e3][s5$]u[s5$]|m[i1!]ch[a4@][e@]l|n[i1!]nj[a4@]|mu[s5$]t[a@]ng|chrys[l1!][e3@]r|t[o0]y[o0]t[a4@]|w[i1!]nt[e3]r|spr[i1!]ng|summ[e3]r|f[a4@]ll|[a4@]utumn)[!?%$@.*+_#-]*\d*[!?%$]*
3231
```
3332

34-
</p>
3533
</details>
3634

3735
<details>
3836
<summary>Start Pattern</summary>
39-
<p>
4037

4138
```regex
4239
(\b|\A)[a-zA-z][a-zA-Z0-9_-]+[A-Za-z][\t ]*(={1,3}|:)[\t ]*(b?["'])?
4340
```
4441

45-
</p>
4642
</details><details>
4743
<summary>End Pattern</summary>
48-
<p>
4944

5045
```regex
5146
\z|[\r\n'"]
5247
```
5348

54-
</p>
5549
</details>
5650

5751
<details>
5852
<summary>Additional Matches</summary>
59-
<p>
53+
6054
Add these additional matches to the [Secret Scanning Custom Pattern](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#example-of-a-custom-pattern-specified-using-additional-requirements).
6155

6256

63-
- Not Match: ```^red'?$```
64-
- Not Match: ```^(master|shadow|password|\$PASSWORD|MASTER|www\.)$```
65-
- Not Match: ```^\#[0-9]+$```
66-
- Not Match: ```^.{20,}```
57+
- Not Match:
58+
59+
```regex
60+
^red'?$
61+
```
62+
- Not Match:
63+
64+
```regex
65+
^(master|shadow|password|\$PASSWORD|MASTER|www\.)$
66+
```
67+
- Not Match:
68+
69+
```regex
70+
^\#[0-9]+$
71+
```
72+
- Not Match:
73+
74+
```regex
75+
^.{20,}
76+
```
6777

68-
</p>
6978
</details>

‎configs/README.md‎

Lines changed: 32 additions & 52 deletions
Original file line numberDiff line numberDiff line change
@@ -23,33 +23,27 @@ _version: v0.1_
2323

2424
<details>
2525
<summary>Pattern Format</summary>
26-
<p>
2726

2827
```regex
2928
[^\r\n\p{Cc}]+
3029
```
3130

32-
</p>
3331
</details>
3432

3533
<details>
3634
<summary>Start Pattern</summary>
37-
<p>
3835

3936
```regex
4037
(?:[^0-9A-Za-z]|\A)(?i)(?:postgres|mysql|mysql_root)_password[\t ]*[=:][\t ]*['"]
4138
```
4239

43-
</p>
4440
</details><details>
4541
<summary>End Pattern</summary>
46-
<p>
4742

4843
```regex
4944
\z|[\r\n'"]
5045
```
5146

52-
</p>
5347
</details>
5448

5549
## Hardcoded Spring SQL passwords
@@ -63,33 +57,27 @@ _version: v0.1_
6357

6458
<details>
6559
<summary>Pattern Format</summary>
66-
<p>
6760

6861
```regex
6962
[^\r\n'"\p{Cc}]+
7063
```
7164

72-
</p>
7365
</details>
7466

7567
<details>
7668
<summary>Start Pattern</summary>
77-
<p>
7869

7970
```regex
8071
(?:spring\.datasource|jdbc)\.password[ \t]*=[ \t]*['"]?
8172
```
8273

83-
</p>
8474
</details><details>
8575
<summary>End Pattern</summary>
86-
<p>
8776

8877
```regex
8978
\z|['"\r\n]
9079
```
9180

92-
</p>
9381
</details>
9482

9583
## Django Secret Key
@@ -106,33 +94,27 @@ _version: v0.1_
10694

10795
<details>
10896
<summary>Pattern Format</summary>
109-
<p>
11097

11198
```regex
11299
[^\r\n"']+
113100
```
114101

115-
</p>
116102
</details>
117103

118104
<details>
119105
<summary>Start Pattern</summary>
120-
<p>
121106

122107
```regex
123108
\bSECRET_KEY[ \t]*=[ \t]*["']
124109
```
125110

126-
</p>
127111
</details><details>
128112
<summary>End Pattern</summary>
129-
<p>
130113

131114
```regex
132115
['"]
133116
```
134117

135-
</p>
136118
</details>
137119

138120
## YAML Static Password Fields
@@ -154,48 +136,61 @@ _version: v0.1_
154136

155137
<details>
156138
<summary>Pattern Format</summary>
157-
<p>
158139

159140
```regex
160141
[^\r\n'"]+
161142
```
162143

163-
</p>
164144
</details>
165145

166146
<details>
167147
<summary>Start Pattern</summary>
168-
<p>
169148

170149
```regex
171150
(?:\n|\A)[ \t]*(?:secret|service_pass(wd|word|code|phrase)|pass(?:wd|word|code|phrase)?|key)[ \t]*:[ \t]*['"]?
172151
```
173152

174-
</p>
175153
</details><details>
176154
<summary>End Pattern</summary>
177-
<p>
178155

179156
```regex
180157
['"\r\n]|\z
181158
```
182159

183-
</p>
184160
</details>
185161

186162
<details>
187163
<summary>Additional Matches</summary>
188-
<p>
164+
189165
Add these additional matches to the [Secret Scanning Custom Pattern](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#example-of-a-custom-pattern-specified-using-additional-requirements).
190166

191167

192-
- Not Match: ```^(?:keyPassphrase|password|key|[ \t]+|\$\{[A-Za-z0-9_-]+\}|(?:str|string|int|bool)( +#.*)?),?$```
193-
- Not Match: ```^(?:.* = )?(?:None|[Tt]rue|[Ff]alse|[Nn]ull|Default(?:Type)?|Event|[A-Z]+_KEY|VERSION|NAME|update|destroy|(?:dis|en)ableEventListeners|\.\.\.),?$```
194-
- Not Match: ```^(?:(?:this|self|obj)\.)(?:[A-Za-z_]+\,|[A-Za-z_].*)$```
195-
- Not Match: ```^(?:[a-zA-Z_]+(?:\(\))?\.)*[a-zA-Z_]+\(\)$```
196-
- Not Match: ```^\s*(?:typing\.)?(?:[Tt]uple|[Ll]ist|[Dd]ict|Callable|Iterable|Sequence|Optional|Union)\[.*$```
168+
- Not Match:
169+
170+
```regex
171+
^(?:keyPassphrase|password|key|[ \t]+|\$\{[A-Za-z0-9_-]+\}|(?:str|string|int|bool)( +#.*)?),?$
172+
```
173+
- Not Match:
174+
175+
```regex
176+
^(?:.* = )?(?:None|[Tt]rue|[Ff]alse|[Nn]ull|Default(?:Type)?|Event|[A-Z]+_KEY|VERSION|NAME|update|destroy|(?:dis|en)ableEventListeners|\.\.\.),?$
177+
```
178+
- Not Match:
179+
180+
```regex
181+
^(?:(?:this|self|obj)\.)(?:[A-Za-z_]+\,|[A-Za-z_].*)$
182+
```
183+
- Not Match:
184+
185+
```regex
186+
^(?:[a-zA-Z_]+(?:\(\))?\.)*[a-zA-Z_]+\(\)$
187+
```
188+
- Not Match:
189+
190+
```regex
191+
^\s*(?:typing\.)?(?:[Tt]uple|[Ll]ist|[Dd]ict|Callable|Iterable|Sequence|Optional|Union)\[.*$
192+
```
197193

198-
</p>
199194
</details>
200195

201196
## GitHub Actions SHA Checker
@@ -218,44 +213,41 @@ _version: v0.1_
218213

219214
<details>
220215
<summary>Pattern Format</summary>
221-
<p>
222216

223217
```regex
224218
[a-z0-9_-]{1,39}\/[a-z0-9_-]{1,100}@[a-z0-9._-]{1,39}
225219
```
226220

227-
</p>
228221
</details>
229222

230223
<details>
231224
<summary>Start Pattern</summary>
232-
<p>
233225

234226
```regex
235227
\buses:[ \t]{1,5}
236228
```
237229

238-
</p>
239230
</details><details>
240231
<summary>End Pattern</summary>
241-
<p>
242232

243233
```regex
244234
\s|\z
245235
```
246236

247-
</p>
248237
</details>
249238

250239
<details>
251240
<summary>Additional Matches</summary>
252-
<p>
241+
253242
Add these additional matches to the [Secret Scanning Custom Pattern](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#example-of-a-custom-pattern-specified-using-additional-requirements).
254243

255244

256-
- Not Match: ```^(actions|github|advanced-security)/```
245+
- Not Match:
246+
247+
```regex
248+
^(actions|github|advanced-security)/
249+
```
257250

258-
</p>
259251
</details>
260252

261253
## .NET Configuration file
@@ -272,33 +264,27 @@ _version: v0.1_
272264

273265
<details>
274266
<summary>Pattern Format</summary>
275-
<p>
276267

277268
```regex
278269
[^"\x00\x08]+
279270
```
280271

281-
</p>
282272
</details>
283273

284274
<details>
285275
<summary>Start Pattern</summary>
286-
<p>
287276

288277
```regex
289278
<add\s+key="[^"]*(?i)(password|secret|pass(?:wd|word|code|phrase)?|key|token)"\s+value="
290279
```
291280

292-
</p>
293281
</details><details>
294282
<summary>End Pattern</summary>
295-
<p>
296283

297284
```regex
298285
\"
299286
```
300287

301-
</p>
302288
</details>
303289

304290
## .NET MachineKey
@@ -315,31 +301,25 @@ _version: v0.1_
315301

316302
<details>
317303
<summary>Pattern Format</summary>
318-
<p>
319304

320305
```regex
321306
[A-Fa-f0-9]+
322307
```
323308

324-
</p>
325309
</details>
326310

327311
<details>
328312
<summary>Start Pattern</summary>
329-
<p>
330313

331314
```regex
332315
<machineKey\s+[^>]*(validation|decryption)Key="
333316
```
334317

335-
</p>
336318
</details><details>
337319
<summary>End Pattern</summary>
338-
<p>
339320

340321
```regex
341322
\"
342323
```
343324

344-
</p>
345325
</details>

0 commit comments

Comments
 (0)