trufflehog-rules.json

{
  "Slack Token": "(xox[pboa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
  "RSA private key": "-----BEGIN RSA PRIVATE KEY-----[^[]",
  "SSH (OPENSSH) private key": "-----BEGIN OPENSSH PRIVATE KEY-----[^[]",
  "SSH (DSA) private key": "-----BEGIN DSA PRIVATE KEY-----[^[]",
  "SSH (EC) private key": "-----BEGIN EC PRIVATE KEY-----[^[]",
  "PGP private key block": "-----BEGIN PGP PRIVATE KEY BLOCK-----[^[]",
  "Facebook Oauth": "[fF][aA][cC][eE][bB][oO][oO][kK].*['\"][0-9a-f]{32}['\"]",
  "Twitter Oauth": "[tT][wW][iI][tT][tT][eE][rR].*['\"][0-9a-zA-Z]{35,44}['\"]",
  "GitHub": "[gG][iI][tT][hH][uU][bB].*['\"][0-9a-zA-Z]{35,40}['\"]",
  "Google Oauth": "(\"client_secret\":\"[a-zA-Z0-9-_]{24}\")",
  "AWS API Key": "AKIA(?!IOSFODNN7EXAMPLE)[0-9A-Z]{16}",
  "Heroku API Key": "[hH][eE][rR][oO][kK][uU].*[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}",
  "Generic Secret": "[sS][eE][cC][rR][eE][tT].*['\"][0-9a-zA-Z]{32,45}['\"]",
  "Generic API Key": "[aA][pP][iI][_]?[kK][eE][yY].*['\"][0-9a-zA-Z]{32,45}['\"]",
  "Slack Webhook": "https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}",
  "Google (GCP) Service-account": "\"type\": \"service_account\"",
  "Twilio API Key": "SK[a-z0-9]{32}",
  "AWS Secret": "(?:\"|')?(?:AWS|aws|Aws)?_?(?:SECRET|secret|Secret)?_?(?:ACCESS|access|Access)?_?(?:KEY|key|Key)(?:\"|')?\\s*(?:\\:|=>|=)\\s*(?:\"|')?[A-Za-z0-9/\\+=]{40}(?:\"|')?"
}