picket-aws-access-key-pairAWS
Detected an AWS access key ID paired with a secret access key.
Validation: offline:aws-access-key-pair
Revocation: revocation:aws-iam-access-key
Tags: access-key, aws, picket, secret-access-key
Rule Catalog
This page is generated from the embedded Gitleaks-compatible rules and every built-in Picket rule pack exposed by PicketConfigLoader.LoadBuiltInRulePack().
Positive and negative example values are intentionally summarized as counts rather than printed.
Summary
Section titled “Summary”| Catalog | Rules | Notes |
|---|---|---|
| Gitleaks-compatible default | 222 | Embedded strict-compatibility rules used by Gitleaks-compatible commands. |
| Picket-native additions | 30 | All built-in native rules, including opt-in packs. |
picket-default |
25 | High-confidence rules enabled by the native default profile. |
picket-strict |
3 | Broader opt-in rules with medium-confidence heuristics. |
picket-experimental |
2 | Opt-in detectors under active tuning. |
Native providers
AWS, Anthropic, Azure, Database, Docker, GCP, GitHub, Groq, HTTP, JWK, Kubernetes, MCP, OpenAI, Sourcegraph, npm, xAI
Native validation templates
live:github-rest-user-v1, offline:anthropic-oauth-token, offline:aws-access-key-pair, offline:azure-storage-connection-string, offline:claude-code-session-url, offline:codex-access-token, offline:codex-refresh-token, offline:database-connection-url, offline:docker-registry-auth, offline:gcp-api-key, offline:gcp-service-account-key-json, offline:github-app-token, offline:github-classic-token, offline:github-fine-grained-pat, offline:groq-api-key, offline:jwk-private-key, offline:kubernetes-secret, offline:mcp-server-credential, offline:npm-auth-token, offline:npm-basic-auth, offline:openai-api-key, offline:sourcegraph-access-token, offline:xai-api-key
Native revocation templates
revocation:aws-iam-access-key, revocation:azure-storage-account-key, revocation:gcp-api-key, revocation:gcp-service-account-key, revocation:github-credentials-api
Picket-Native Rules
Section titled “Picket-Native Rules”picket-default
Section titled “picket-default”Enabled by the native default profile.
picket-anthropic-oauth-access-tokenAnthropic
Detected an Anthropic OAuth access token.
Validation: offline:anthropic-oauth-token
Revocation: -
Tags: access-token, anthropic, claude, oauth, picket
picket-anthropic-oauth-refresh-tokenAnthropic
Detected an Anthropic OAuth refresh token.
Validation: offline:anthropic-oauth-token
Revocation: -
Tags: anthropic, claude, oauth, picket, refresh-token
picket-claude-code-session-urlAnthropic
Detected a Claude Code Remote Control session URL.
Validation: offline:claude-code-session-url
Revocation: -
Tags: anthropic, claude-code, picket, remote-control, session
picket-azure-storage-connection-stringAzure
Detected an Azure Storage connection string with an account key.
Validation: offline:azure-storage-connection-string
Revocation: revocation:azure-storage-account-key
Tags: azure, connection-string, picket, storage
picket-database-connection-urlDatabase
Detected a database connection URL with embedded user credentials.
Validation: offline:database-connection-url
Revocation: -
Tags: connection-string, connection-url, database, picket
picket-docker-registry-authDocker
Detected Docker registry credentials in an auth configuration.
Validation: offline:docker-registry-auth
Revocation: -
Tags: basic-auth, docker, picket, registry, structured
picket-gcp-service-account-keyGCP
Detected a Google Cloud service account key JSON document.
Validation: offline:gcp-service-account-key-json
Revocation: revocation:gcp-service-account-key
Tags: gcp, google, json, picket, service-account
picket-google-api-keyGCP
Detected a Google API key.
Validation: offline:gcp-api-key
Revocation: revocation:gcp-api-key
Tags: api-key, gcp, google, picket
picket-github-app-tokenGitHub
Detected a GitHub App user or server token.
Validation: live:github-rest-user-v1, offline:github-app-token
Revocation: revocation:github-credentials-api
Tags: github, github-app, picket, token
picket-github-fine-grained-personal-access-tokenGitHub
Detected a GitHub fine-grained personal access token.
Validation: live:github-rest-user-v1, offline:github-fine-grained-pat
Revocation: revocation:github-credentials-api
Tags: fine-grained, github, personal-access-token, picket
picket-github-oauth-tokenGitHub
Detected a GitHub OAuth access token.
Validation: live:github-rest-user-v1, offline:github-classic-token
Revocation: revocation:github-credentials-api
Tags: github, oauth, picket, token
picket-github-personal-access-tokenGitHub
Detected a GitHub personal access token.
Validation: live:github-rest-user-v1, offline:github-classic-token
Revocation: revocation:github-credentials-api
Tags: github, personal-access-token, picket
picket-github-refresh-tokenGitHub
Detected a GitHub refresh token.
Validation: live:github-rest-user-v1, offline:github-classic-token
Revocation: revocation:github-credentials-api
Tags: github, picket, refresh-token
picket-groq-api-keyGroq
Detected a Groq API key.
Validation: offline:groq-api-key
Revocation: -
Tags: api-key, groq, picket
picket-jwk-private-keyJWK
Detected private key material in a JSON Web Key.
Validation: offline:jwk-private-key
Revocation: -
Tags: jwk, picket, private-key, structured
picket-kubernetes-secretKubernetes
Detected a value in a Kubernetes Secret resource.
Validation: offline:kubernetes-secret
Revocation: -
Tags: kubernetes, picket, secret, structured, yaml
picket-mcp-server-credentialMCP
Detected a credential in a Model Context Protocol server configuration.
Validation: offline:mcp-server-credential
Revocation: -
Tags: credential, json, mcp, picket, structured
picket-openai-api-keyOpenAI
Detected an OpenAI API key.
Validation: offline:openai-api-key
Revocation: -
Tags: api-key, chatgpt, openai, picket
picket-openai-codex-access-tokenOpenAI
Detected a Codex OAuth access token.
Validation: offline:codex-access-token
Revocation: -
Tags: access-token, codex, oauth, openai, picket, structured
picket-openai-codex-refresh-tokenOpenAI
Detected a Codex OAuth refresh token.
Validation: offline:codex-refresh-token
Revocation: -
Tags: codex, oauth, openai, picket, refresh-token, structured
picket-sourcegraph-access-tokenSourcegraph
Detected a Sourcegraph access token.
Validation: offline:sourcegraph-access-token
Revocation: -
Tags: access-token, picket, sourcegraph
picket-npm-auth-tokennpm
Detected an npm authentication token in npm configuration.
Validation: offline:npm-auth-token
Revocation: -
Tags: auth-token, npm, picket, structured
picket-npm-basic-authnpm
Detected npm basic authentication credentials in npm configuration.
Validation: offline:npm-basic-auth
Revocation: -
Tags: basic-auth, npm, picket, structured
picket-xai-api-keyxAI
Detected an xAI API key.
Validation: offline:xai-api-key
Revocation: -
Tags: api-key, grok, picket, xai
picket-strict
Section titled “picket-strict”Added with --rule-pack picket-strict.
picket-strict-azure-sas-signatureAzure
Detected a signature in an Azure shared access signature query string.
Validation: -
Revocation: -
Tags: azure, picket, sas, signature, strict
picket-strict-connection-string-passwordDatabase
Detected a password embedded in a semicolon-delimited connection string.
Validation: -
Revocation: -
Tags: connection-string, password, picket, strict
picket-strict-basic-authorizationHTTP
Detected an HTTP Basic authorization credential.
Validation: -
Revocation: -
Tags: basic-auth, http, picket, strict
picket-experimental
Section titled “picket-experimental”Added with --rule-pack picket-experimental.
picket-experimental-bearer-tokenHTTP
Detected an opaque bearer token in an HTTP authorization header.
Validation: -
Revocation: -
Tags: bearer-token, experimental, http, picket
picket-experimental-session-cookieHTTP
Detected an opaque session or authentication token in an HTTP cookie header.
Validation: -
Revocation: -
Tags: cookie, experimental, http, picket, session
Gitleaks-Compatible Rules
Section titled “Gitleaks-Compatible Rules”1password-secret-keyGitleaks-compatible
Uncovered a possible 1Password secret key, potentially compromising access to secrets in vaults.
Tags: -
Keywords: a3-
1password-service-account-tokenGitleaks-compatible
Uncovered a possible 1Password service account token, potentially compromising access to secrets in vaults.
Tags: -
Keywords: ops_
adafruit-api-keyGitleaks-compatible
Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure.
Tags: -
Keywords: adafruit
adobe-client-idGitleaks-compatible
Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches.
Tags: -
Keywords: adobe
adobe-client-secretGitleaks-compatible
Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation.
Tags: -
Keywords: p8e-
age-secret-keyGitleaks-compatible
Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information.
Tags: -
Keywords: age-secret-key-1
airtable-api-keyGitleaks-compatible
Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration.
Tags: -
Keywords: airtable
airtable-personnal-access-tokenGitleaks-compatible
Uncovered a possible Airtable Personal AccessToken, potentially compromising database access and leading to data leakage or alteration.
Tags: -
Keywords: airtable
algolia-api-keyGitleaks-compatible
Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms.
Tags: -
Keywords: algolia
alibaba-access-key-idGitleaks-compatible
Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise.
Tags: -
Keywords: ltai
alibaba-secret-keyGitleaks-compatible
Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud.
Tags: -
Keywords: alibaba
anthropic-admin-api-keyGitleaks-compatible
Detected an Anthropic Admin API Key, risking unauthorized access to administrative functions and sensitive AI model configurations.
Tags: -
Keywords: sk-ant-admin01
anthropic-api-keyGitleaks-compatible
Identified an Anthropic API Key, which may compromise AI assistant integrations and expose sensitive data to unauthorized access.
Tags: -
Keywords: sk-ant-api03
artifactory-api-keyGitleaks-compatible
Detected an Artifactory api key, posing a risk unauthorized access to the central repository.
Tags: -
Keywords: akcp
artifactory-reference-tokenGitleaks-compatible
Detected an Artifactory reference token, posing a risk of impersonation and unauthorized access to the central repository.
Tags: -
Keywords: cmvmd
asana-client-idGitleaks-compatible
Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information.
Tags: -
Keywords: asana
asana-client-secretGitleaks-compatible
Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access.
Tags: -
Keywords: asana
atlassian-api-tokenGitleaks-compatible
Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality.
Tags: -
Keywords: atatt3, atlassian, confluence, jira
authress-service-client-access-keyGitleaks-compatible
Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data.
Tags: -
Keywords: authress_, ext_, sc_, scauth_
aws-access-tokenGitleaks-compatible
Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms.
Tags: -
Keywords: a3t, abia, acca, akia, asia
aws-amazon-bedrock-api-key-long-livedGitleaks-compatible
Identified a pattern that may indicate long-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
Tags: -
Keywords: absk
aws-amazon-bedrock-api-key-short-livedGitleaks-compatible
Identified a pattern that may indicate short-lived Amazon Bedrock API keys, risking unauthorized Amazon Bedrock usage
Tags: -
Keywords: bedrock-api-key-
azure-ad-client-secretGitleaks-compatible
Azure AD Client Secret
Tags: -
Keywords: q~
beamer-api-tokenGitleaks-compatible
Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates.
Tags: -
Keywords: beamer
bitbucket-client-idGitleaks-compatible
Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure.
Tags: -
Keywords: bitbucket
bitbucket-client-secretGitleaks-compatible
Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access.
Tags: -
Keywords: bitbucket
bittrex-access-keyGitleaks-compatible
Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss.
Tags: -
Keywords: bittrex
bittrex-secret-keyGitleaks-compatible
Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security.
Tags: -
Keywords: bittrex
cisco-meraki-api-keyGitleaks-compatible
Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface.
Tags: -
Keywords: meraki
clickhouse-cloud-api-secret-keyGitleaks-compatible
Identified a pattern that may indicate clickhouse cloud API secret key, risking unauthorized clickhouse cloud api access and data breaches on ClickHouse Cloud platforms.
Tags: -
Keywords: 4b1d
clojars-api-tokenGitleaks-compatible
Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation.
Tags: -
Keywords: clojars_
cloudflare-api-keyGitleaks-compatible
Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security.
Tags: -
Keywords: cloudflare
cloudflare-global-api-keyGitleaks-compatible
Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security.
Tags: -
Keywords: cloudflare
cloudflare-origin-ca-keyGitleaks-compatible
Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security.
Tags: -
Keywords: cloudflare, v1.0-
codecov-access-tokenGitleaks-compatible
Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data.
Tags: -
Keywords: codecov
cohere-api-tokenGitleaks-compatible
Identified a Cohere Token, posing a risk of unauthorized access to AI services and data manipulation.
Tags: -
Keywords: co_api_key, cohere
coinbase-access-tokenGitleaks-compatible
Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions.
Tags: -
Keywords: coinbase
confluent-access-tokenGitleaks-compatible
Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow.
Tags: -
Keywords: confluent
confluent-secret-keyGitleaks-compatible
Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services.
Tags: -
Keywords: confluent
contentful-delivery-api-tokenGitleaks-compatible
Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity.
Tags: -
Keywords: contentful
curl-auth-headerGitleaks-compatible
Discovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.
Tags: -
Keywords: curl
curl-auth-userGitleaks-compatible
Discovered a potential basic authorization token provided in a curl command, which could compromise the curl accessed resource.
Tags: -
Keywords: curl
databricks-api-tokenGitleaks-compatible
Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing.
Tags: -
Keywords: dapi
datadog-access-tokenGitleaks-compatible
Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation.
Tags: -
Keywords: datadog
defined-networking-api-tokenGitleaks-compatible
Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches.
Tags: -
Keywords: dnkey
digitalocean-access-tokenGitleaks-compatible
Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise.
Tags: -
Keywords: doo_v1_
digitalocean-patGitleaks-compatible
Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy.
Tags: -
Keywords: dop_v1_
digitalocean-refresh-tokenGitleaks-compatible
Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation.
Tags: -
Keywords: dor_v1_
discord-api-tokenGitleaks-compatible
Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord.
Tags: -
Keywords: discord
discord-client-idGitleaks-compatible
Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications.
Tags: -
Keywords: discord
discord-client-secretGitleaks-compatible
Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.
Tags: -
Keywords: discord
doppler-api-tokenGitleaks-compatible
Discovered a Doppler API token, posing a risk to environment and secrets management security.
Tags: -
Keywords: dp.pt.
droneci-access-tokenGitleaks-compatible
Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows.
Tags: -
Keywords: droneci
dropbox-api-tokenGitleaks-compatible
Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage.
Tags: -
Keywords: dropbox
dropbox-long-lived-api-tokenGitleaks-compatible
Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data.
Tags: -
Keywords: dropbox
dropbox-short-lived-api-tokenGitleaks-compatible
Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation.
Tags: -
Keywords: dropbox
duffel-api-tokenGitleaks-compatible
Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data.
Tags: -
Keywords: duffel_
dynatrace-api-tokenGitleaks-compatible
Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure.
Tags: -
Keywords: dt0c01.
easypost-api-tokenGitleaks-compatible
Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure.
Tags: -
Keywords: ezak
easypost-test-api-tokenGitleaks-compatible
Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data.
Tags: -
Keywords: eztk
etsy-access-tokenGitleaks-compatible
Found an Etsy Access Token, potentially compromising Etsy shop management and customer data.
Tags: -
Keywords: etsy
facebook-access-tokenGitleaks-compatible
Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
Tags: -
Keywords: facebook
facebook-page-access-tokenGitleaks-compatible
Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
Tags: -
Keywords: eaac, eaam
facebook-secretGitleaks-compatible
Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure.
Tags: -
Keywords: facebook
fastly-api-tokenGitleaks-compatible
Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues.
Tags: -
Keywords: fastly
finicity-api-tokenGitleaks-compatible
Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations.
Tags: -
Keywords: finicity
finicity-client-secretGitleaks-compatible
Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches.
Tags: -
Keywords: finicity
finnhub-access-tokenGitleaks-compatible
Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics.
Tags: -
Keywords: finnhub
flickr-access-tokenGitleaks-compatible
Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage.
Tags: -
Keywords: flickr
flutterwave-encryption-keyGitleaks-compatible
Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information.
Tags: -
Keywords: flwseck_test
flutterwave-public-keyGitleaks-compatible
Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations.
Tags: -
Keywords: flwpubk_test
flutterwave-secret-keyGitleaks-compatible
Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches.
Tags: -
Keywords: flwseck_test
flyio-access-tokenGitleaks-compatible
Uncovered a Fly.io API key
Tags: -
Keywords: fm1, fm2_, fo1_
frameio-api-tokenGitleaks-compatible
Found a Frame.io API token, potentially compromising video collaboration and project management.
Tags: -
Keywords: fio-u-
freemius-secret-keyGitleaks-compatible
Detected a Freemius secret key, potentially exposing sensitive information.
Tags: -
Keywords: secret_key
freshbooks-access-tokenGitleaks-compatible
Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure.
Tags: -
Keywords: freshbooks
gcp-api-keyGitleaks-compatible
Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches.
Tags: -
Keywords: aiza
generic-api-keyGitleaks-compatible
Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
Tags: -
Keywords: access, api, auth, credential, creds, key, passwd, password, secret, token
github-app-tokenGitleaks-compatible
Identified a GitHub App Token, which may compromise GitHub application integrations and source code security.
Tags: -
Keywords: ghs_, ghu_
github-fine-grained-patGitleaks-compatible
Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation.
Tags: -
Keywords: github_pat_
github-oauthGitleaks-compatible
Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks.
Tags: -
Keywords: gho_
github-patGitleaks-compatible
Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure.
Tags: -
Keywords: ghp_
github-refresh-tokenGitleaks-compatible
Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services.
Tags: -
Keywords: ghr_
gitlab-cicd-job-tokenGitleaks-compatible
Identified a GitLab CI/CD Job Token, potential access to projects and some APIs on behalf of a user while the CI job is running.
Tags: -
Keywords: glcbt-
gitlab-deploy-tokenGitleaks-compatible
Identified a GitLab Deploy Token, risking access to repositories, packages and containers with write access.
Tags: -
Keywords: gldt-
gitlab-feature-flag-client-tokenGitleaks-compatible
Identified a GitLab feature flag client token, risks exposing user lists and features flags used by an application.
Tags: -
Keywords: glffct-
gitlab-feed-tokenGitleaks-compatible
Identified a GitLab feed token, risking exposure of user data.
Tags: -
Keywords: glft-
gitlab-incoming-mail-tokenGitleaks-compatible
Identified a GitLab incoming mail token, risking manipulation of data sent by mail.
Tags: -
Keywords: glimt-
gitlab-kubernetes-agent-tokenGitleaks-compatible
Identified a GitLab Kubernetes Agent token, risking access to repos and registry of projects connected via agent.
Tags: -
Keywords: glagent-
gitlab-oauth-app-secretGitleaks-compatible
Identified a GitLab OIDC Application Secret, risking access to apps using GitLab as authentication provider.
Tags: -
Keywords: gloas-
gitlab-patGitleaks-compatible
Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure.
Tags: -
Keywords: glpat-
gitlab-pat-routableGitleaks-compatible
Identified a GitLab Personal Access Token (routable), risking unauthorized access to GitLab repositories and codebase exposure.
Tags: -
Keywords: glpat-
gitlab-pttGitleaks-compatible
Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security.
Tags: -
Keywords: glptt-
gitlab-rrtGitleaks-compatible
Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
Tags: -
Keywords: gr1348941
gitlab-runner-authentication-tokenGitleaks-compatible
Discovered a GitLab Runner Authentication Token, posing a risk to CI/CD pipeline integrity and unauthorized access.
Tags: -
Keywords: glrt-
gitlab-runner-authentication-token-routableGitleaks-compatible
Discovered a GitLab Runner Authentication Token (Routable), posing a risk to CI/CD pipeline integrity and unauthorized access.
Tags: -
Keywords: glrt-
gitlab-scim-tokenGitleaks-compatible
Discovered a GitLab SCIM Token, posing a risk to unauthorized access for a organization or instance.
Tags: -
Keywords: glsoat-
gitlab-session-cookieGitleaks-compatible
Discovered a GitLab Session Cookie, posing a risk to unauthorized access to a user account.
Tags: -
Keywords: _gitlab_session=
gitter-access-tokenGitleaks-compatible
Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services.
Tags: -
Keywords: gitter
gocardless-api-tokenGitleaks-compatible
Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure.
Tags: -
Keywords: gocardless, live_
grafana-api-keyGitleaks-compatible
Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics.
Tags: -
Keywords: eyjrijoi
grafana-cloud-api-tokenGitleaks-compatible
Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure.
Tags: -
Keywords: glc_
grafana-service-account-tokenGitleaks-compatible
Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity.
Tags: -
Keywords: glsa_
harness-api-keyGitleaks-compatible
Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account.
Tags: -
Keywords: pat., sat.
hashicorp-tf-api-tokenGitleaks-compatible
Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches.
Tags: -
Keywords: atlasv1
hashicorp-tf-passwordGitleaks-compatible
Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches.
Tags: -
Keywords: administrator_login_password, password
heroku-api-keyGitleaks-compatible
Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
Tags: -
Keywords: heroku
heroku-api-key-v2Gitleaks-compatible
Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.
Tags: -
Keywords: hrku-aa
hubspot-api-keyGitleaks-compatible
Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations.
Tags: -
Keywords: hubspot
huggingface-access-tokenGitleaks-compatible
Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data.
Tags: -
Keywords: hf_
huggingface-organization-api-tokenGitleaks-compatible
Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data.
Tags: -
Keywords: api_org_
infracost-api-tokenGitleaks-compatible
Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data.
Tags: -
Keywords: ico-
intercom-api-keyGitleaks-compatible
Identified an Intercom API Token, which could compromise customer communication channels and data privacy.
Tags: -
Keywords: intercom
intra42-client-secretGitleaks-compatible
Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data.
Tags: -
Keywords: intra, s-s4t2af-, s-s4t2ud-
jfrog-api-keyGitleaks-compatible
Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines.
Tags: -
Keywords: artifactory, bintray, jfrog, xray
jfrog-identity-tokenGitleaks-compatible
Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts.
Tags: -
Keywords: artifactory, bintray, jfrog, xray
jwtGitleaks-compatible
Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data.
Tags: -
Keywords: ey
jwt-base64Gitleaks-compatible
Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information.
Tags: -
Keywords: zxlk
kraken-access-tokenGitleaks-compatible
Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security.
Tags: -
Keywords: kraken
kubernetes-secret-yamlGitleaks-compatible
Possible Kubernetes Secret detected, posing a risk of leaking credentials/tokens from your deployments
Tags: -
Keywords: secret
kucoin-access-tokenGitleaks-compatible
Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions.
Tags: -
Keywords: kucoin
kucoin-secret-keyGitleaks-compatible
Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches.
Tags: -
Keywords: kucoin
launchdarkly-access-tokenGitleaks-compatible
Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality.
Tags: -
Keywords: launchdarkly
linear-api-keyGitleaks-compatible
Detected a Linear API Token, posing a risk to project management tools and sensitive task data.
Tags: -
Keywords: lin_api_
linear-client-secretGitleaks-compatible
Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data.
Tags: -
Keywords: linear
linkedin-client-idGitleaks-compatible
Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure.
Tags: -
Keywords: linked-in, linked_in, linkedin
linkedin-client-secretGitleaks-compatible
Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data.
Tags: -
Keywords: linked-in, linked_in, linkedin
lob-api-keyGitleaks-compatible
Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services.
Tags: -
Keywords: live_, test_
lob-pub-api-keyGitleaks-compatible
Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations.
Tags: -
Keywords: _pub, live_pub, test_pub
looker-client-idGitleaks-compatible
Found a Looker Client ID, risking unauthorized access to a Looker account and exposing sensitive data.
Tags: -
Keywords: looker
looker-client-secretGitleaks-compatible
Found a Looker Client Secret, risking unauthorized access to a Looker account and exposing sensitive data.
Tags: -
Keywords: looker
mailchimp-api-keyGitleaks-compatible
Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data.
Tags: -
Keywords: mailchimp
mailgun-private-api-tokenGitleaks-compatible
Found a Mailgun private API token, risking unauthorized email service operations and data breaches.
Tags: -
Keywords: mailgun
mailgun-pub-keyGitleaks-compatible
Discovered a Mailgun public validation key, which could expose email verification processes and associated data.
Tags: -
Keywords: mailgun
mailgun-signing-keyGitleaks-compatible
Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity.
Tags: -
Keywords: mailgun
mapbox-api-tokenGitleaks-compatible
Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure.
Tags: -
Keywords: mapbox
mattermost-access-tokenGitleaks-compatible
Identified a Mattermost Access Token, which may compromise team communication channels and data privacy.
Tags: -
Keywords: mattermost
maxmind-license-keyGitleaks-compatible
Discovered a potential MaxMind license key.
Tags: -
Keywords: _mmk
messagebird-api-tokenGitleaks-compatible
Found a MessageBird API token, risking unauthorized access to communication platforms and message data.
Tags: -
Keywords: message-bird, message_bird, messagebird
messagebird-client-idGitleaks-compatible
Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data.
Tags: -
Keywords: message-bird, message_bird, messagebird
microsoft-teams-webhookGitleaks-compatible
Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks.
Tags: -
Keywords: incomingwebhook, webhook.office.com, webhookb2
netlify-access-tokenGitleaks-compatible
Detected a Netlify Access Token, potentially compromising web hosting services and site management.
Tags: -
Keywords: netlify
new-relic-browser-api-tokenGitleaks-compatible
Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics.
Tags: -
Keywords: nrjs-
new-relic-insert-keyGitleaks-compatible
Discovered a New Relic insight insert key, compromising data injection into the platform.
Tags: -
Keywords: nrii-
new-relic-user-api-idGitleaks-compatible
Found a New Relic user API ID, posing a risk to application monitoring services and data integrity.
Tags: -
Keywords: new-relic, new_relic, newrelic
new-relic-user-api-keyGitleaks-compatible
Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring.
Tags: -
Keywords: nrak
notion-api-tokenGitleaks-compatible
Notion API token
Tags: -
Keywords: ntn_
npm-access-tokenGitleaks-compatible
Uncovered an npm access token, potentially compromising package management and code repository access.
Tags: -
Keywords: npm_
nuget-config-passwordGitleaks-compatible
Identified a password within a Nuget config file, potentially compromising package management access.
Tags: -
Keywords: <add key=
nytimes-access-tokenGitleaks-compatible
Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services.
Tags: -
Keywords: new-york-times, newyorktimes, nytimes
octopus-deploy-api-keyGitleaks-compatible
Discovered a potential Octopus Deploy API key, risking application deployments and operational security.
Tags: -
Keywords: api-
okta-access-tokenGitleaks-compatible
Identified an Okta Access Token, which may compromise identity management services and user authentication data.
Tags: -
Keywords: okta
openai-api-keyGitleaks-compatible
Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.
Tags: -
Keywords: t3blbkfj
openshift-user-tokenGitleaks-compatible
Found an OpenShift user token, potentially compromising an OpenShift/Kubernetes cluster.
Tags: -
Keywords: sha256~
perplexity-api-keyGitleaks-compatible
Detected a Perplexity API key, which could lead to unauthorized access to Perplexity AI services and data exposure.
Tags: -
Keywords: pplx-
pkcs12-fileGitleaks-compatible
Found a PKCS #12 file, which commonly contain bundled private keys.
Tags: -
Keywords: -
plaid-api-tokenGitleaks-compatible
Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services.
Tags: -
Keywords: plaid
plaid-client-idGitleaks-compatible
Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches.
Tags: -
Keywords: plaid
plaid-secret-keyGitleaks-compatible
Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data.
Tags: -
Keywords: plaid
planetscale-api-tokenGitleaks-compatible
Identified a PlanetScale API token, potentially compromising database management and operations.
Tags: -
Keywords: pscale_tkn_
planetscale-oauth-tokenGitleaks-compatible
Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity.
Tags: -
Keywords: pscale_oauth_
planetscale-passwordGitleaks-compatible
Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches.
Tags: -
Keywords: pscale_pw_
postman-api-tokenGitleaks-compatible
Uncovered a Postman API token, potentially compromising API testing and development workflows.
Tags: -
Keywords: pmak-
prefect-api-tokenGitleaks-compatible
Detected a Prefect API token, risking unauthorized access to workflow management and automation services.
Tags: -
Keywords: pnu_
private-keyGitleaks-compatible
Identified a Private Key, which may compromise cryptographic security and sensitive data encryption.
Tags: -
Keywords: -----begin
privateai-api-tokenGitleaks-compatible
Identified a PrivateAI Token, posing a risk of unauthorized access to AI services and data manipulation.
Tags: -
Keywords: private-ai, private_ai, privateai
pulumi-api-tokenGitleaks-compatible
Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management.
Tags: -
Keywords: pul-
pypi-upload-tokenGitleaks-compatible
Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity.
Tags: -
Keywords: pypi-ageichlwas5vcmc
rapidapi-access-tokenGitleaks-compatible
Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services.
Tags: -
Keywords: rapidapi
readme-api-tokenGitleaks-compatible
Detected a Readme API token, risking unauthorized documentation management and content exposure.
Tags: -
Keywords: rdme_
rubygems-api-tokenGitleaks-compatible
Identified a Rubygem API token, potentially compromising Ruby library distribution and package management.
Tags: -
Keywords: rubygems_
scalingo-api-tokenGitleaks-compatible
Found a Scalingo API token, posing a risk to cloud platform services and application deployment security.
Tags: -
Keywords: tk-us-
sendbird-access-idGitleaks-compatible
Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations.
Tags: -
Keywords: sendbird
sendbird-access-tokenGitleaks-compatible
Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data.
Tags: -
Keywords: sendbird
sendgrid-api-tokenGitleaks-compatible
Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure.
Tags: -
Keywords: sg.
sendinblue-api-tokenGitleaks-compatible
Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy.
Tags: -
Keywords: xkeysib-
sentry-access-tokenGitleaks-compatible
Found a Sentry.io Access Token (old format), risking unauthorized access to error tracking services and sensitive application data.
Tags: -
Keywords: sentry
sentry-org-tokenGitleaks-compatible
Found a Sentry.io Organization Token, risking unauthorized access to error tracking services and sensitive application data.
Tags: -
Keywords: sntrys_eyjpyxqio
sentry-user-tokenGitleaks-compatible
Found a Sentry.io User Token, risking unauthorized access to error tracking services and sensitive application data.
Tags: -
Keywords: sntryu_
settlemint-application-access-tokenGitleaks-compatible
Found a Settlemint Application Access Token.
Tags: -
Keywords: sm_aat
settlemint-personal-access-tokenGitleaks-compatible
Found a Settlemint Personal Access Token.
Tags: -
Keywords: sm_pat
settlemint-service-access-tokenGitleaks-compatible
Found a Settlemint Service Access Token.
Tags: -
Keywords: sm_sat
shippo-api-tokenGitleaks-compatible
Discovered a Shippo API token, potentially compromising shipping services and customer order data.
Tags: -
Keywords: shippo_
shopify-access-tokenGitleaks-compatible
Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches.
Tags: -
Keywords: shpat_
shopify-custom-access-tokenGitleaks-compatible
Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security.
Tags: -
Keywords: shpca_
shopify-private-app-access-tokenGitleaks-compatible
Identified a Shopify private app access token, risking unauthorized access to private app data and store operations.
Tags: -
Keywords: shppa_
shopify-shared-secretGitleaks-compatible
Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security.
Tags: -
Keywords: shpss_
sidekiq-secretGitleaks-compatible
Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches.
Tags: -
Keywords: bundle_enterprise__contribsys__com, bundle_gems__contribsys__com
sidekiq-sensitive-urlGitleaks-compatible
Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details.
Tags: -
Keywords: enterprise.contribsys.com, gems.contribsys.com
slack-app-tokenGitleaks-compatible
Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data.
Tags: -
Keywords: xapp
slack-bot-tokenGitleaks-compatible
Identified a Slack Bot token, which may compromise bot integrations and communication channel security.
Tags: -
Keywords: xoxb
slack-config-access-tokenGitleaks-compatible
Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access.
Tags: -
Keywords: xoxe.xoxb-, xoxe.xoxp-
slack-config-refresh-tokenGitleaks-compatible
Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings.
Tags: -
Keywords: xoxe-
slack-legacy-bot-tokenGitleaks-compatible
Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure.
Tags: -
Keywords: xoxb
slack-legacy-tokenGitleaks-compatible
Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data.
Tags: -
Keywords: xoxo, xoxs
slack-legacy-workspace-tokenGitleaks-compatible
Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features.
Tags: -
Keywords: xoxa, xoxr
slack-user-tokenGitleaks-compatible
Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces.
Tags: -
Keywords: xoxe-, xoxp-
slack-webhook-urlGitleaks-compatible
Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels.
Tags: -
Keywords: hooks.slack.com
snyk-api-tokenGitleaks-compatible
Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security.
Tags: -
Keywords: snyk
sonar-api-tokenGitleaks-compatible
Uncovered a Sonar API token, potentially compromising software vulnerability scanning and code security.
Tags: -
Keywords: sonar
sourcegraph-access-tokenGitleaks-compatible
Sourcegraph is a code search and navigation engine.
Tags: -
Keywords: sgp_, sourcegraph
square-access-tokenGitleaks-compatible
Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.
Tags: -
Keywords: eaaa, sq0atp-
squarespace-access-tokenGitleaks-compatible
Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace.
Tags: -
Keywords: squarespace
stripe-access-tokenGitleaks-compatible
Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.
Tags: -
Keywords: rk_live, rk_prod, rk_test, sk_live, sk_prod, sk_test
sumologic-access-idGitleaks-compatible
Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity.
Tags: -
Keywords: sumo
sumologic-access-tokenGitleaks-compatible
Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights.
Tags: -
Keywords: sumo
telegram-bot-api-tokenGitleaks-compatible
Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram.
Tags: -
Keywords: telegr
travisci-access-tokenGitleaks-compatible
Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security.
Tags: -
Keywords: travis
twilio-api-keyGitleaks-compatible
Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data.
Tags: -
Keywords: sk
twitch-api-tokenGitleaks-compatible
Discovered a Twitch API token, which could compromise streaming services and account integrations.
Tags: -
Keywords: twitch
twitter-access-secretGitleaks-compatible
Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches.
Tags: -
Keywords: twitter
twitter-access-tokenGitleaks-compatible
Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure.
Tags: -
Keywords: twitter
twitter-api-keyGitleaks-compatible
Identified a Twitter API Key, which may compromise Twitter application integrations and user data security.
Tags: -
Keywords: twitter
twitter-api-secretGitleaks-compatible
Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access.
Tags: -
Keywords: twitter
twitter-bearer-tokenGitleaks-compatible
Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter.
Tags: -
Keywords: twitter
typeform-api-tokenGitleaks-compatible
Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection.
Tags: -
Keywords: tfp_
vault-batch-tokenGitleaks-compatible
Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data.
Tags: -
Keywords: hvb.
vault-service-tokenGitleaks-compatible
Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials.
Tags: -
Keywords: hvs., s.
yandex-access-tokenGitleaks-compatible
Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy.
Tags: -
Keywords: yandex
yandex-api-keyGitleaks-compatible
Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation.
Tags: -
Keywords: yandex
yandex-aws-access-tokenGitleaks-compatible
Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud.
Tags: -
Keywords: yandex
zendesk-secret-keyGitleaks-compatible
Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data.
Tags: -
Keywords: zendesk