kingfisher/data/rules
Mick Grove 7d9d3be132 - Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans.
- Created Linux and Windows specific installer script
- Updated diff-focused scanning so --branch-root-commit can be provided alongside --branch, letting you diff from a chosen commit while targeting a specific branch tip (still defaulting back to the --branch ref when the commit is omitted).
2025-10-25 17:12:51 -07:00
..
adafruitio.yml feat(adafruitio): improve pattern matching 2025-07-13 17:09:15 -07:00
adobe.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
age.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
ai21.yml Updating GitHub Action to generate Docker image. Added rules for Diffbot, ai21, baseten. Fixed supabase rule. Added 'alg' to JWT validation output 2025-07-18 15:26:18 -07:00
airbrake.yml added rule for Vercel 2025-08-13 15:35:04 -07:00
airtable.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
aiven.yml fixed aiven regex to pass test 2025-08-14 10:17:16 -07:00
algolia.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
alibaba.yml Added validation for Alibaba rule 2025-07-09 15:03:07 -07:00
anthropic.yml updated anthropic rule 2025-10-23 15:02:30 -07:00
anypoint.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
apify.yml - New rules: Telegram bot token, OpenWeatherMap, Apify 2025-08-01 16:56:04 -07:00
artifactory.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
asana.yml added rule for Vercel 2025-08-13 15:35:04 -07:00
assemblyai.yml - Now generating DEB and RPM packages 2025-07-21 15:21:10 -07:00
atlassian.yml added rule for Vercel 2025-08-13 15:35:04 -07:00
auth0.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
authress.yml removed serde_utils and added Authress rule 2025-08-16 07:35:52 -07:00
aws.yml updated rule for AWS Secret Access key 2025-09-10 13:29:19 -07:00
azure.yml fixed example in rule 2025-08-18 23:32:15 -07:00
azuredevops.yml Added first-class Azure Repos support, including CLI commands, enumeration, and documentation updates 2025-10-04 23:12:28 -07:00
azureopenai.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
azuresearchquery.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
azurestorage.yml - Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key 2025-08-18 22:56:34 -07:00
baremetrics.yml added more rules 2025-08-16 14:54:01 -07:00
baseten.yml Fixed Gitlab support. Added pre-commit and pre-receive installation scripts. 2025-07-23 19:57:33 -07:00
beamer.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
bitbucket.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
bitly.yml fix ci build error 2025-08-31 10:27:16 -07:00
blynk.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
buildkite.yml WIP: Adding support for scanning Docker images 2025-07-27 12:20:20 -07:00
cerebras.yml changes in response to code review 2025-08-27 15:43:31 -07:00
circleci.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
ciscomeraki.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
clarifai.yml Fixed validation logic for clarifai rule 2025-08-06 21:31:02 -07:00
clearbit.yml - Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key 2025-08-18 22:56:34 -07:00
clickhouse.yml added more rules 2025-08-16 14:54:01 -07:00
clojars.yml added more rules 2025-08-16 14:54:01 -07:00
cloudflare.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
cloudsight.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
codacy.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
codeclimate.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
codecov.yml added more rules 2025-08-16 14:54:01 -07:00
cohere.yml Added rules for Cohere and Stability.ai 2025-07-17 13:18:54 -07:00
coinbase.yml bug fixes in response to code review. Also added support for ed25519 coinbase cdp api keys 2025-07-31 18:29:21 -07:00
confluent.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
contentful.yml added more rules 2025-08-16 14:54:01 -07:00
coze.yml - Use system TLS root certificates to support self-hosted GitLab instances with internal CAs 2025-08-05 14:45:51 -07:00
crates.io.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
credentials.yml refactored output reporting and formatting logic 2025-08-04 08:58:06 -07:00
curl.yml added more rules 2025-08-16 14:54:01 -07:00
databricks.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
datadog.yml - Improved performance of tree-sitter parsing 2025-10-03 17:22:28 -07:00
deepgram.yml - Now generating DEB and RPM packages 2025-07-21 15:21:10 -07:00
deepseek.yml added rules for deepseek, xai. Removed branding. Added a NOTICE file 2025-06-30 17:04:29 -07:00
dependency_track.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
diffbot.yml - Improved rules: github oauth2, diffbot, mailchimp, aws 2025-08-29 17:24:26 -07:00
digitalocean.yml fix(digitalocean): regex is case-sensitive 2025-07-13 17:27:44 -07:00
discord.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
django.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
docker.yml fix ci build error 2025-08-31 10:27:16 -07:00
dockerhub.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
doppler.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
droneci.yml Added rules for twitter, wireguard, onepassword, droneci 2025-06-26 21:24:07 -07:00
dropbox.yml added more rules 2025-08-16 14:54:01 -07:00
duffel.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
dynatrace.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
easypost.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
elevenlabs.yml Added ElevenLabs rule 2025-07-25 10:31:17 -07:00
facebook.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
fastly.yml added rule for Vercel 2025-08-13 15:35:04 -07:00
figma.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
fileio.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
finicity.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
finnhub.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
firecrawl.yml added more rules 2025-08-16 20:23:27 -07:00
fireworksai.yml changes in response to code review 2025-08-27 15:43:31 -07:00
flickr.yml fix ci build error 2025-08-31 10:27:16 -07:00
flyio.yml added more rules 2025-08-16 14:54:01 -07:00
frame.io.yml Fixed some rules. Added rules for mandrill, mapbox, microsoft teams, stripe 2025-06-25 15:12:42 -07:00
frameio.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
freshbooks.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
friendli.yml added rules for cerbras, friendli, fireworks.ai 2025-08-27 11:25:39 -07:00
gcp.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
generic.yml Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance 2025-08-30 16:44:55 -07:00
gitalk.yml added more rules 2025-08-16 20:36:22 -07:00
github.yml - Improved rules: github oauth2, diffbot, mailchimp, aws 2025-08-29 17:24:26 -07:00
gitlab.yml Fixed Gitlab rule which was incorrectly identifying certain tokens as valid 2025-07-02 15:20:50 -07:00
gitter.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
gocardless.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
google.yml Added rule for Google Gemini AI 2025-07-17 11:07:44 -07:00
googleoauth2.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
gradle.yml Added gradle and grafana rules 2025-06-25 08:39:10 -07:00
grafana.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
groq.yml New rule: Groq 2025-08-01 17:07:13 -07:00
hashes.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
hashicorp.yml added more rules 2025-08-16 20:23:27 -07:00
heroku.yml added rule for Vercel 2025-08-13 15:35:04 -07:00
http.yml added more rules 2025-08-16 20:23:27 -07:00
hubspot.yml added more rules 2025-08-16 20:23:27 -07:00
huggingface.yml Added rules for huggingface, ibm cloud, intercom, and ipstack 2025-06-25 14:07:11 -07:00
ibm.yml Fixed malformed rules. Now validating that response_matcher is present in validation section of all rules 2025-06-25 22:17:37 -07:00
infracost.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
intercom.yml - Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key 2025-08-18 22:56:34 -07:00
ionic.yml Added rules for huggingface, ibm cloud, intercom, and ipstack 2025-06-25 14:07:11 -07:00
ipstack.yml Added rules for huggingface, ibm cloud, intercom, and ipstack 2025-06-25 14:07:11 -07:00
jenkins.yml Added rules for line 2025-06-25 14:22:37 -07:00
jina.yml added more rules 2025-08-16 20:36:22 -07:00
jira.yml JWT tokens without both 'iss' and 'aud' are no longer reported as active credentials 2025-08-07 17:21:16 -07:00
jwt.yml updated jwt rule 2025-09-04 23:31:34 -07:00
kagi.yml added more rules 2025-08-16 20:23:27 -07:00
kickbox.yml - Added rules for clearbit, kickbox, azure container registry, improved Azure Storage key 2025-08-18 22:56:34 -07:00
langchain.yml - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-21 15:39:04 -07:00
launchdarkly.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
line.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
linear.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
linkedin.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
lob.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
mailchimp.yml - Improved rules: github oauth2, diffbot, mailchimp, aws 2025-08-29 17:24:26 -07:00
mailgun.yml added ollama rule 2025-08-26 10:22:18 -07:00
mandrill.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
mapbox.yml Added netlify, netrc, newrelic, ngrok, npm, and nuget rules 2025-06-25 15:46:33 -07:00
mattermost.yml - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-21 15:39:04 -07:00
maxmind.yml added tests for --branch and --since-commit feature 2025-10-23 17:27:40 -07:00
messagebird.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
microsoft_teams.yml Fixed malformed rules. Now validating that response_matcher is present in validation section of all rules 2025-06-25 22:17:37 -07:00
microsoftteamswebhook.yml updated anthropic rule 2025-10-23 15:02:30 -07:00
mistral.yml Added support for HTTP request bodies in rule validation. Added mistral and perplexity rule 2025-07-08 17:49:12 -07:00
mongodb.yml - Enabled MongoDB URI validation 2025-09-09 16:45:02 -07:00
mysql.yaml preparing for v1.12 2025-06-24 17:17:16 -07:00
nasa.yml Introduced flag – skip files/dirs whose path resembles tests (, , , , ), reducing noise. 2025-06-28 09:16:42 -07:00
netlify.yml Added ruels for sonarcloud, sonarqube, sourcegraph 2025-06-28 08:34:15 -07:00
netrc.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
newrelic.yml Added netlify, netrc, newrelic, ngrok, npm, and nuget rules 2025-06-25 15:46:33 -07:00
ngrok.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
notion.yml fixed failing tests 2025-08-21 16:13:03 -07:00
npm.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
nuget.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
nvidia.yml changes in response to code review 2025-08-27 15:43:31 -07:00
nytimes.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
odbc.yml Added rules for twitter, wireguard, onepassword, droneci 2025-06-26 21:24:07 -07:00
okta.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
ollama.yml added ollama rule 2025-08-26 10:22:18 -07:00
onepassword.yml Fixed GitHub organization and GitLab group scans when using '--git-history=none' 2025-08-07 16:13:57 -07:00
openai.yml Update data/rules/openai.yml 2025-08-01 15:31:29 -07:00
openweathermap.yml - New rules: Telegram bot token, OpenWeatherMap, Apify 2025-08-01 16:56:04 -07:00
opsgenie.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
pagerdutyapikey.yml Fixed bug in Makefile hen setting PROJECT_NAME 2025-07-21 22:52:05 -07:00
particle.io.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
pastebin.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
paypal.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
pem.yml - Improved rules: AWS, pem 2025-08-22 16:16:00 -07:00
perplexity.yml Added PR review suggestions 2025-07-09 16:00:54 -07:00
phpmailer.yml added more rules 2025-08-16 20:23:27 -07:00
planetscale.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
postgres.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
postman.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
postmark.yml added more rules 2025-08-16 20:23:27 -07:00
prefect.yml - Added provider-specific kingfisher scan subcommands (for example kingfisher scan github …) that translate into the legacy flags under the hood. The new layout keeps backwards compatibility while removing the wall of provider options from kingfisher scan --help. 2025-10-22 16:24:09 -07:00
privkey.yml Dropped the “prevalidated” flag from rule definitions and validation logic so every finding now flows through the standard active/inactive/unknown pipeline, simplifying rule configuration and preventing special‑case bypasses 2025-08-13 08:22:53 -07:00
psexec.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
pubnub.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:55:35 -07:00
pulumi.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:55:35 -07:00
pypi.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
rabbitmq.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
react.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
readme.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:55:35 -07:00
recaptcha.yml - New rules: Telegram bot token, OpenWeatherMap, Apify 2025-08-01 16:56:04 -07:00
replicate.yml fixed issues found by pr review 2025-07-17 15:19:03 -07:00
rubygems.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:55:35 -07:00
runway.yml Added rule for Runway 2025-07-17 13:52:26 -07:00
salesforce.yml Added rules for readme, rubygems, salesforce, segment, snyk, pulumi, pubnub 2025-06-26 15:37:51 -07:00
sauce.yml Fix changes in response to code review 2025-08-30 20:07:31 -07:00
scale.yml - Now generating DEB and RPM packages 2025-07-21 15:21:10 -07:00
scalingo.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
segment.yml Added rules for readme, rubygems, salesforce, segment, snyk, pulumi, pubnub 2025-06-26 15:37:51 -07:00
sendbird.yml - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-21 15:39:04 -07:00
sendgrid.yml added rules for nasa, teamcity 2025-06-28 09:05:19 -07:00
sendinblue.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
sentry.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
shippo.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
shodan.yml - Improved rules: github oauth2, diffbot, mailchimp, aws 2025-08-29 17:24:26 -07:00
shopify.yml Added rules for shopify, truenas 2025-06-28 08:44:36 -07:00
slack.yml Fix: HTML detection now requires both HTML content-type and html tag, fixing webhook false negatives 2025-06-27 15:28:34 -07:00
snyk.yml Fixed Snyk rule 2025-06-26 15:46:14 -07:00
sonarcloud.yml Added ruels for sonarcloud, sonarqube, sourcegraph 2025-06-28 08:34:15 -07:00
sonarqube.yml Added ruels for sonarcloud, sonarqube, sourcegraph 2025-06-28 08:34:15 -07:00
sourcegraph.yml Added test to prevent this and similar issues 2025-06-29 22:51:49 -07:00
square.yml added rules for nasa, teamcity 2025-06-28 09:05:19 -07:00
stabilityai.yml Added rules for Cohere and Stability.ai 2025-07-17 11:30:36 -07:00
stackhawk.yml - Added '--repo-artifacts' flag to scan repository issues, gists/snippets, and wikis when cloning via '--git-url' 2025-08-21 15:39:04 -07:00
stripe.yml Improved Updater text. Cleaned up more rules and the examples included with them. 2025-06-26 14:29:36 -07:00
supabase.yml fixing github action failure for linux-arm6 when making deb 2025-08-05 18:06:09 -07:00
tailscale.yml fixed test 2025-08-13 09:20:36 -07:00
tavily.yml added more rules 2025-08-16 20:23:27 -07:00
teamcity.yml added rules for nasa, teamcity 2025-06-28 09:05:19 -07:00
telegram.yml - New rules: Telegram bot token, OpenWeatherMap, Apify 2025-08-01 16:56:04 -07:00
thingsboard.yml added more rules 2025-08-16 20:23:27 -07:00
togetherai.yml added rules for together.ai 2025-08-27 12:20:44 -07:00
travisci.yml Populate the finding path from git blob metadata so history-derived secrets display their file location instead of an empty path 2025-09-24 10:06:47 -07:00
truenas.yml added more rules 2025-08-16 20:23:27 -07:00
twilio.yml Updated formatting of several rules 2025-06-26 11:31:41 -07:00
twitch.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
twitter.yml - --quiet now suppresses scan summaries and rule statistics unless --rule-stats is explicitly provided 2025-08-09 15:52:00 -07:00
typeform.yml - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. 2025-10-20 18:23:12 -07:00
uri.yml preparing for v1.12 2025-06-24 17:17:16 -07:00
vercel.yml - Fixed local filesystem scans to keep open_path_as_is enabled when opening Git repositories and only disable it for diff-based scans. 2025-10-25 17:12:51 -07:00
vmware.yml updating s3 feature 2025-08-03 20:59:58 -07:00
weightsandbiases.yml changes in response to code review 2025-08-27 15:43:31 -07:00
wireguard.yml Added rules for twitter, wireguard, onepassword, droneci 2025-06-26 21:24:07 -07:00
xAI.yml added rules for deepseek, xai. Removed branding. Added a NOTICE file 2025-06-30 17:04:29 -07:00
zhipu.yml added rules for zhipu 2025-08-27 12:43:41 -07:00

rules:
  - name: ReadMe API Key
    id: kingfisher.readme.1
    pattern: |
      (?x)(?i)
      \b
      (
        rdme_(?P<RDMVAL>[a-z0-9]{70})
      )
    min_entropy: 3.3
    confidence: medium
    examples:
      - rdme_abcdefghijklmnopqrstuvwxyzabcdef1234567890abcdef1234567890abcdef123456
      - rdme_xn8s9he60fb31e9d290403d2707cce88fa820042d425fc6eb2baed4191dd88a5405987
    references:
      - https://docs.readme.com/main/reference/getproject-1
    validation:
      type: Http
      content:
        request:
          headers:
            Authorization: "Bearer {{ TOKEN }}"
            Accept: application/json
          method: GET
          response_matcher:
            - report_response: true
            - status:
                - 200
              type: StatusMatch
          url: https://api.readme.com/v2/projects/me