example_regex_config.json

{
  "filename_patterns": [
    "(^|/)\\.env(\\..*)?$",
    "(^|/)(id_rsa|id_dsa|id_ecdsa|id_ed25519)$",
    "(^|/)(authorized_keys)$",
    "(^|/)(kubeconfig|\\.kube/config)$",
    "(^|/)\\.aws/credentials$",
    "(^|/)\\.npmrc$",
    "(^|/)\\.pypirc$",
    "(^|/)\\.dockercfg$",
    "(^|/)(config\\.json|settings\\.json)$",
    "(^|/)(credential|credentials)([._-]|$)",
    "(^|/)(secret|secrets)([._-]|$)",
    "(^|/)(api[_-]?key|apikey)([._-]|$)",
    "(^|/)(token|tokens)([._-]|$)",
    "(^|/)(pass(word)?|passwd)([._-]|$)",
    "(^|/).*private([._-]|)key.*",
    "\\.(pem|key|ppk|pfx|p12)$",
    "\\.(kdbx|rdp)$",
    "\\.(vhd|vhdx|vmdk|qcow2|img|iso|ova|ovf)$",
    "\\.(bak|old|orig|backup)$",
    "\\.(sql|sqlite|db|dmp)$",
    "\\.(zip|7z|rar|tar|tgz|gz)$"
  ],
  "content_patterns": [
    "AKIA[0-9A-Z]{16}",
    "ASIA[0-9A-Z]{16}",
    "(?i)aws(.{0,20})?(secret|access)[_-]?key['\\\"\\s:=]+[A-Za-z0-9/+=]{16,}",
    "AIza[0-9A-Za-z\\-_]{35}",
    "ya29\\.[0-9A-Za-z\\-_]+",
    "(?i)ghp_[A-Za-z0-9]{20,}",
    "(?i)github_pat_[A-Za-z0-9_]{20,}",
    "(?i)glpat-[A-Za-z0-9\\-_]{20,}",
    "(?i)xox[baprs]-[A-Za-z0-9-]{10,48}",
    "(?i)sk_(live|test)_[A-Za-z0-9]{16,}",
    "(?i)rk_(live|test)_[A-Za-z0-9]{16,}",
    "(?i)SG\\.[A-Za-z0-9_\\-]{16,}\\.[A-Za-z0-9_\\-]{16,}",
    "(?i)eyJ[A-Za-z0-9_\\-]{10,}\\.[A-Za-z0-9_\\-]{10,}\\.[A-Za-z0-9_\\-]{10,}",
    "-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----",
    "(?i)authorization:\\s*basic\\s+[A-Za-z0-9\\+/=]{12,}",
    "(?i)bearer\\s+[A-Za-z0-9\\-\\._~\\+\\/]+=*",
    "(?i)\\b(api[_-]?key|apikey)\\b\\s*[:=]\\s*['\\\"]?[A-Za-z0-9_\\-\\.=\\/\\+]{20,}['\\\"]?",
    "(?i)\\b(token|access[_-]?token|refresh[_-]?token)\\b\\s*[:=]\\s*['\\\"]?[A-Za-z0-9_\\-\\.=\\/\\+]{20,}['\\\"]?",
    "(?i)\\b(client[_-]?secret|secret)\\b\\s*[:=]\\s*['\\\"]?[A-Za-z0-9_\\-\\.=\\/\\+]{16,}['\\\"]?",
    "(?i)\\b(pass(word)?|passwd)\\b\\s*[:=]\\s*['\\\"]?[^\\s'\\\";]{10,}['\\\"]?"
  ]
}