{"rules":[{"id":"generic.secrets.security.detected-amazon-mws-auth-token.detected-amazon-mws-auth-token","pattern-regex":"amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}","languages":["regex"],"message":"Amazon MWS Auth Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","aws"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-amazon-mws-auth-token.detected-amazon-mws-auth-token","shortlink":"https://sg.run/PJzE","semgrep.dev":{"rule":{"r_id":9045,"rv_id":1262856,"rule_id":"lBU9bw","version_id":"K3TKkGj","url":"https://semgrep.dev/playground/r/K3TKkGj/generic.secrets.security.detected-amazon-mws-auth-token.detected-amazon-mws-auth-token","origin":"community","path":"generic.secrets.security.detected-amazon-mws-auth-token.detected-amazon-mws-auth-token"}}}},{"id":"generic.secrets.security.detected-artifactory-password.detected-artifactory-password","patterns":[{"pattern-regex":"(?<ITEM>\\bAP[\\dABCDEF][a-zA-Z0-9]{8,})"},{"pattern-regex":".*(?i)arti[-_]?factory.*"},{"pattern-not-regex":".*(?i)sha(1|2|3|118|256|512).*"},{"pattern-not-regex":"(?i)-----\\s*?BEGIN[ A-Z0-9_-]*? KEY( BLOCK)?-----[\\s\\S]*?-----\\s*?END[ A-Z0-9_-]*?\\s*?-----"},{"metavariable-analysis":{"analyzer":"entropy","metavariable":"$ITEM"}},{"pattern-not-regex":"(\\w|\\.|\\*)\\1{4}"}],"languages":["regex"],"paths":{"exclude":["*.svg","*go.sum","*package.json","*cargo.lock","*package-lock.json","*bundle.js","*pnpm-lock*","*Podfile.lock","**/*/openssl/*.h","*.xcscmblueprint"]},"message":"Artifactory token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/Yelp/detect-secrets/blob/master/detect_secrets/plugins/artifactory.py","category":"security","technology":["secrets","artifactory"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-artifactory-password.detected-artifactory-password","shortlink":"https://sg.run/J9KZ","semgrep.dev":{"rule":{"r_id":9046,"rv_id":1262857,"rule_id":"YGUR5K","version_id":"qkTR7BB","url":"https://semgrep.dev/playground/r/qkTR7BB/generic.secrets.security.detected-artifactory-password.detected-artifactory-password","origin":"community","path":"generic.secrets.security.detected-artifactory-password.detected-artifactory-password"}}}},{"id":"generic.secrets.security.detected-artifactory-token.detected-artifactory-token","patterns":[{"pattern-regex":"\\bAKC[a-zA-Z0-9]{10,}\n"},{"pattern-not-regex":"sha(128|256|512).*\n"},{"pattern-not-regex":"(?s)---BEGIN.*---\\Z"}],"languages":["regex"],"paths":{"exclude":["*.svg","*go.sum","*package.json","*package-lock.json","*bundle.js","*pnpm-lock*","*Podfile.lock","**/*/openssl/*.h","*.xcscmblueprint","*cargo.lock"]},"message":"Artifactory token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/Yelp/detect-secrets/blob/master/detect_secrets/plugins/artifactory.py","category":"security","technology":["secrets","artifactory"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-artifactory-token.detected-artifactory-token","shortlink":"https://sg.run/5Q2l","semgrep.dev":{"rule":{"r_id":9047,"rv_id":1262858,"rule_id":"6JUj3l","version_id":"l4TJR6J","url":"https://semgrep.dev/playground/r/l4TJR6J/generic.secrets.security.detected-artifactory-token.detected-artifactory-token","origin":"community","path":"generic.secrets.security.detected-artifactory-token.detected-artifactory-token"}}}},{"id":"generic.secrets.security.detected-aws-access-key-id-value.detected-aws-access-key-id-value","patterns":[{"pattern-regex":"\\b(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}\\b"},{"pattern-not-regex":"(?i)example|sample|test|fake"}],"languages":["regex"],"message":"AWS Access Key ID Value detected. This is a sensitive credential and should not be hardcoded here. Instead, read this value from an environment variable or keep it in a separate, private file.","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","aws"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-aws-access-key-id-value.detected-aws-access-key-id-value","shortlink":"https://sg.run/GeD1","semgrep.dev":{"rule":{"r_id":9048,"rv_id":1262859,"rule_id":"oqUevO","version_id":"YDTZenE","url":"https://semgrep.dev/playground/r/YDTZenE/generic.secrets.security.detected-aws-access-key-id-value.detected-aws-access-key-id-value","origin":"community","path":"generic.secrets.security.detected-aws-access-key-id-value.detected-aws-access-key-id-value"}}}},{"id":"generic.secrets.security.detected-aws-appsync-graphql-key.detected-aws-appsync-graphql-key","pattern-regex":"da2-[a-z0-9]{26}","languages":["regex"],"message":"AWS AppSync GraphQL Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","appsync"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-aws-appsync-graphql-key.detected-aws-appsync-graphql-key","shortlink":"https://sg.run/AvJ6","semgrep.dev":{"rule":{"r_id":9050,"rv_id":1262861,"rule_id":"pKUOoZ","version_id":"o5TbD9o","url":"https://semgrep.dev/playground/r/o5TbD9o/generic.secrets.security.detected-aws-appsync-graphql-key.detected-aws-appsync-graphql-key","origin":"community","path":"generic.secrets.security.detected-aws-appsync-graphql-key.detected-aws-appsync-graphql-key"}}}},{"id":"generic.secrets.security.detected-aws-secret-access-key.detected-aws-secret-access-key","patterns":[{"pattern-regex":"((\"|'|`)?((?i)aws)_?\\w*((?i)secret)_?\\w*(\"|'|`)?\\s{0,50}(:|=>|=)\\s{0,50}(\"|'|`)?[A-Za-z0-9/+=]{40}(\"|'|`)?)"},{"pattern-not-regex":"(?i)example|sample|test|fake|xxxxxx"}],"languages":["regex"],"message":"AWS Secret Access Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","aws"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-aws-secret-access-key.detected-aws-secret-access-key","shortlink":"https://sg.run/Bk39","semgrep.dev":{"rule":{"r_id":9051,"rv_id":1262862,"rule_id":"2ZUbe8","version_id":"zyTb2Dr","url":"https://semgrep.dev/playground/r/zyTb2Dr/generic.secrets.security.detected-aws-secret-access-key.detected-aws-secret-access-key","origin":"community","path":"generic.secrets.security.detected-aws-secret-access-key.detected-aws-secret-access-key"}}}},{"id":"generic.secrets.security.detected-aws-session-token.detected-aws-session-token","patterns":[{"pattern-regex":"((?i)AWS_SESSION_TOKEN)\\s*(:|=>|=)\\s*(?P<TOKEN>[A-Za-z0-9/+=]{16,})"},{"pattern-not-regex":"(?i)example|sample|test|fake"},{"metavariable-analysis":{"analyzer":"entropy","metavariable":"$TOKEN"}}],"languages":["regex"],"message":"AWS Session Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","aws"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-aws-session-token.detected-aws-session-token","shortlink":"https://sg.run/DoRW","semgrep.dev":{"rule":{"r_id":9052,"rv_id":1262863,"rule_id":"X5U8Er","version_id":"pZT03Lx","url":"https://semgrep.dev/playground/r/pZT03Lx/generic.secrets.security.detected-aws-session-token.detected-aws-session-token","origin":"community","path":"generic.secrets.security.detected-aws-session-token.detected-aws-session-token"}}}},{"id":"generic.secrets.security.detected-codeclimate.detected-codeclimate","pattern-regex":"(?i)codeclima.{0,50}[\"|'|`]?[0-9a-f]{64}[\"|'|`]?","languages":["regex"],"message":"CodeClimate detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","codeclimate"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-codeclimate.detected-codeclimate","shortlink":"https://sg.run/W8yz","semgrep.dev":{"rule":{"r_id":9053,"rv_id":1262865,"rule_id":"j2UvW7","version_id":"X0Tzy2o","url":"https://semgrep.dev/playground/r/X0Tzy2o/generic.secrets.security.detected-codeclimate.detected-codeclimate","origin":"community","path":"generic.secrets.security.detected-codeclimate.detected-codeclimate"}}}},{"id":"generic.secrets.security.detected-facebook-access-token.detected-facebook-access-token","pattern-either":[{"pattern-regex":"EAACEdEose0cBA[0-9A-Za-z]+"},{"pattern-regex":"EAAAACZAVC6ygB[0-9A-Za-z]+"},{"pattern-regex":"EAAAAZAw4[0-9A-Za-z]+"}],"languages":["regex"],"message":"Facebook Access Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","facebook"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-facebook-access-token.detected-facebook-access-token","shortlink":"https://sg.run/0QYJ","semgrep.dev":{"rule":{"r_id":9054,"rv_id":1262867,"rule_id":"10UKBL","version_id":"1QTyp7J","url":"https://semgrep.dev/playground/r/1QTyp7J/generic.secrets.security.detected-facebook-access-token.detected-facebook-access-token","origin":"community","path":"generic.secrets.security.detected-facebook-access-token.detected-facebook-access-token"}}}},{"id":"generic.secrets.security.detected-facebook-oauth.detected-facebook-oauth","pattern-regex":"[fF][aA][cC][eE][bB][oO][oO][kK].*[tT][oO][kK][eE][nN].*['|\"]?[0-9a-f]{32}['|\"]?","languages":["regex"],"message":"Facebook OAuth detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","facebook"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-facebook-oauth.detected-facebook-oauth","shortlink":"https://sg.run/Klq6","semgrep.dev":{"rule":{"r_id":9055,"rv_id":1262868,"rule_id":"9AU127","version_id":"9lT4b5N","url":"https://semgrep.dev/playground/r/9lT4b5N/generic.secrets.security.detected-facebook-oauth.detected-facebook-oauth","origin":"community","path":"generic.secrets.security.detected-facebook-oauth.detected-facebook-oauth"}}}},{"id":"generic.secrets.security.detected-picatic-api-key.detected-picatic-api-key","pattern-regex":"sk_live_[0-9a-z]{32}","languages":["regex"],"message":"Picatic API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","picatic"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-picatic-api-key.detected-picatic-api-key","shortlink":"https://sg.run/rdGA","semgrep.dev":{"rule":{"r_id":9069,"rv_id":1262887,"rule_id":"EwU274","version_id":"QkTGqwK","url":"https://semgrep.dev/playground/r/QkTGqwK/generic.secrets.security.detected-picatic-api-key.detected-picatic-api-key","origin":"community","path":"generic.secrets.security.detected-picatic-api-key.detected-picatic-api-key"}}}},{"id":"generic.secrets.security.detected-private-key.detected-private-key","patterns":[{"pattern-either":[{"patterns":[{"pattern":"-----BEGIN $TYPE PRIVATE KEY----- $KEY"},{"metavariable-regex":{"metavariable":"$TYPE","regex":"(?i)([dr]sa|ec|openssh|encrypted)?"}}]},{"patterns":[{"pattern":"-----BEGIN PRIVATE KEY-----\n$KEY\n"}]}]},{"metavariable-analysis":{"metavariable":"$KEY","analyzer":"entropy"}}],"languages":["generic"],"message":"Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file.","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-private-key.detected-private-key","shortlink":"https://sg.run/b7dr","semgrep.dev":{"rule":{"r_id":9070,"rv_id":1262888,"rule_id":"7KUQ0p","version_id":"3ZT4X4Y","url":"https://semgrep.dev/playground/r/3ZT4X4Y/generic.secrets.security.detected-private-key.detected-private-key","origin":"community","path":"generic.secrets.security.detected-private-key.detected-private-key"}}}},{"id":"generic.secrets.security.detected-sauce-token.detected-sauce-token","pattern-regex":"(?i)sauce.{0,50}(\\\\\\\"|'|`)?[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}(\\\\\\\"|'|`)?","languages":["regex"],"message":"Sauce Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","sauce"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-sauce-token.detected-sauce-token","shortlink":"https://sg.run/N4k1","semgrep.dev":{"rule":{"r_id":9071,"rv_id":1262889,"rule_id":"L1UyZ5","version_id":"44TEjER","url":"https://semgrep.dev/playground/r/44TEjER/generic.secrets.security.detected-sauce-token.detected-sauce-token","origin":"community","path":"generic.secrets.security.detected-sauce-token.detected-sauce-token"}}}},{"id":"generic.secrets.security.detected-slack-token.detected-slack-token","pattern-either":[{"pattern-regex":"(xox[pboa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})"},{"pattern-regex":"xox.-[0-9]{12}-[0-9]{12}-[0-9a-zA-Z]{24}"}],"languages":["regex"],"message":"Slack Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","references":["https://github.com/davidburkitt/python-secret-scanner/blob/335a1f6dab8de59cf39063e57aea39a58951e939/patterns.txt#L58"],"category":"security","technology":["secrets","slack"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-slack-token.detected-slack-token","shortlink":"https://sg.run/kXdz","semgrep.dev":{"rule":{"r_id":9072,"rv_id":1262891,"rule_id":"8GUjRA","version_id":"JdTzxz3","url":"https://semgrep.dev/playground/r/JdTzxz3/generic.secrets.security.detected-slack-token.detected-slack-token","origin":"community","path":"generic.secrets.security.detected-slack-token.detected-slack-token"}}}},{"id":"generic.secrets.security.detected-slack-webhook.detected-slack-webhook","patterns":[{"pattern-regex":"https://hooks\\.slack\\.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,10}/[a-zA-Z0-9_]{24}"},{"pattern-not":"https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX"}],"languages":["regex"],"message":"Slack Webhook detected","severity":"ERROR","metadata":{"references":["https://api.slack.com/messaging/webhooks"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","slack"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-slack-webhook.detected-slack-webhook","shortlink":"https://sg.run/weWX","semgrep.dev":{"rule":{"r_id":9073,"rv_id":1262892,"rule_id":"gxU1dy","version_id":"5PTo1oO","url":"https://semgrep.dev/playground/r/5PTo1oO/generic.secrets.security.detected-slack-webhook.detected-slack-webhook","origin":"community","path":"generic.secrets.security.detected-slack-webhook.detected-slack-webhook"}}}},{"id":"generic.secrets.security.detected-sonarqube-docs-api-key.detected-sonarqube-docs-api-key","pattern-regex":"(?i)sonar[a-z0-9_.-]{0,30}(token|key|login|password|pass|secret|auth)?\\s*[:=]\\s*(\\\\?[\"'`])?[0-9a-f]{40}\\b","languages":["regex"],"message":"SonarQube Docs API Key detected","severity":"ERROR","paths":{"exclude":["*.svg","*go.sum","*cargo.lock","*package.json","*yarn.lock","*package-lock.json","*bundle.js","*pnpm-lock*","*Podfile.lock","**/*/openssl/*.h","*.xcscmblueprint"]},"metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","sonarqube"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-sonarqube-docs-api-key.detected-sonarqube-docs-api-key","shortlink":"https://sg.run/x10P","semgrep.dev":{"rule":{"r_id":9074,"rv_id":1501837,"rule_id":"QrUzP1","version_id":"bZTQ72r","url":"https://semgrep.dev/playground/r/bZTQ72r/generic.secrets.security.detected-sonarqube-docs-api-key.detected-sonarqube-docs-api-key","origin":"community","path":"generic.secrets.security.detected-sonarqube-docs-api-key.detected-sonarqube-docs-api-key"}}}},{"id":"generic.secrets.security.detected-square-access-token.detected-square-access-token","pattern-regex":"sq0atp-[0-9A-Za-z\\-_]{22}","languages":["regex"],"message":"Square Access Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","square"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-square-access-token.detected-square-access-token","shortlink":"https://sg.run/OP3b","semgrep.dev":{"rule":{"r_id":9075,"rv_id":1262896,"rule_id":"3qUPqO","version_id":"BjTkZkz","url":"https://semgrep.dev/playground/r/BjTkZkz/generic.secrets.security.detected-square-access-token.detected-square-access-token","origin":"community","path":"generic.secrets.security.detected-square-access-token.detected-square-access-token"}}}},{"id":"generic.secrets.security.detected-square-oauth-secret.detected-square-oauth-secret","pattern-regex":"sq0csp-[0-9A-Za-z\\\\\\-_]{43}","languages":["regex"],"message":"Square OAuth Secret detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","references":["https://github.com/Yelp/detect-secrets/blob/master/tests/plugins/square_oauth_test.py"],"category":"security","technology":["secrets","square"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-square-oauth-secret.detected-square-oauth-secret","shortlink":"https://sg.run/eL7E","semgrep.dev":{"rule":{"r_id":9076,"rv_id":1262897,"rule_id":"4bUk4l","version_id":"DkTRbRG","url":"https://semgrep.dev/playground/r/DkTRbRG/generic.secrets.security.detected-square-oauth-secret.detected-square-oauth-secret","origin":"community","path":"generic.secrets.security.detected-square-oauth-secret.detected-square-oauth-secret"}}}},{"id":"generic.secrets.security.detected-ssh-password.detected-ssh-password","pattern-regex":"sshpass -p\\s*['|\\\\\\\"][^%]","languages":["regex"],"message":"SSH Password detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","ssh"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-ssh-password.detected-ssh-password","shortlink":"https://sg.run/vzDR","semgrep.dev":{"rule":{"r_id":9077,"rv_id":1262898,"rule_id":"PeUZ4d","version_id":"WrTqKqY","url":"https://semgrep.dev/playground/r/WrTqKqY/generic.secrets.security.detected-ssh-password.detected-ssh-password","origin":"community","path":"generic.secrets.security.detected-ssh-password.detected-ssh-password"}}}},{"id":"generic.secrets.security.detected-stripe-api-key.detected-stripe-api-key","pattern-regex":"sk_live_[0-9a-zA-Z]{24}","languages":["regex"],"message":"Stripe API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","stripe"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-stripe-api-key.detected-stripe-api-key","shortlink":"https://sg.run/dKd5","semgrep.dev":{"rule":{"r_id":9078,"rv_id":1262899,"rule_id":"JDUy0z","version_id":"0bTKzK1","url":"https://semgrep.dev/playground/r/0bTKzK1/generic.secrets.security.detected-stripe-api-key.detected-stripe-api-key","origin":"community","path":"generic.secrets.security.detected-stripe-api-key.detected-stripe-api-key"}}}},{"id":"generic.secrets.security.detected-stripe-restricted-api-key.detected-stripe-restricted-api-key","pattern-regex":"rk_live_[0-9a-zA-Z]{24}","languages":["regex"],"message":"Stripe Restricted API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","stripe"],"confidence":"MEDIUM","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"LOW","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-stripe-restricted-api-key.detected-stripe-restricted-api-key","shortlink":"https://sg.run/ZvdL","semgrep.dev":{"rule":{"r_id":9079,"rv_id":1262900,"rule_id":"5rUOWq","version_id":"K3TKkKj","url":"https://semgrep.dev/playground/r/K3TKkKj/generic.secrets.security.detected-stripe-restricted-api-key.detected-stripe-restricted-api-key","origin":"community","path":"generic.secrets.security.detected-stripe-restricted-api-key.detected-stripe-restricted-api-key"}}}},{"id":"generic.secrets.security.detected-telegram-bot-api-key.detected-telegram-bot-api-key","patterns":[{"pattern-regex":"[0-9]+:AA[0-9A-Za-z\\-_]{33}"},{"pattern-not-regex":"go\\.mod.*"},{"pattern-not-regex":"v[\\d]+\\.[\\d]+\\.[\\d]+.*"}],"languages":["regex"],"message":"Telegram Bot API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","telegram"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-telegram-bot-api-key.detected-telegram-bot-api-key","shortlink":"https://sg.run/nd4b","semgrep.dev":{"rule":{"r_id":9080,"rv_id":1262901,"rule_id":"GdU7Nl","version_id":"qkTR7RB","url":"https://semgrep.dev/playground/r/qkTR7RB/generic.secrets.security.detected-telegram-bot-api-key.detected-telegram-bot-api-key","origin":"community","path":"generic.secrets.security.detected-telegram-bot-api-key.detected-telegram-bot-api-key"}}}},{"id":"generic.secrets.security.detected-twilio-api-key.detected-twilio-api-key","pattern-regex":"SK[0-9a-fA-F]{32}","languages":["regex"],"message":"Twilio API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","twilio"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-twilio-api-key.detected-twilio-api-key","shortlink":"https://sg.run/Ek2o","semgrep.dev":{"rule":{"r_id":9081,"rv_id":1262902,"rule_id":"ReUgJn","version_id":"l4TJRJJ","url":"https://semgrep.dev/playground/r/l4TJRJJ/generic.secrets.security.detected-twilio-api-key.detected-twilio-api-key","origin":"community","path":"generic.secrets.security.detected-twilio-api-key.detected-twilio-api-key"}}}},{"id":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","patterns":[{"pattern":"$PROTOCOL://$...USERNAME:$...PASSWORD@$END"},{"metavariable-regex":{"metavariable":"$...USERNAME","regex":"\\A({?)([A-Za-z])([A-Za-z0-9_-]){5,31}(}?)\\Z"}},{"metavariable-regex":{"metavariable":"$...PASSWORD","regex":"(?!.*[\\s])(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])(?=.*[!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~]){6,32}"}},{"metavariable-regex":{"metavariable":"$PROTOCOL","regex":"(.*http.*)|(.*sql.*)|(.*ftp.*)|(.*smtp.*)"}}],"languages":["generic"],"message":"Username and password in URI detected","severity":"ERROR","metadata":{"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go"],"category":"security","technology":["secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","shortlink":"https://sg.run/8yA4","semgrep.dev":{"rule":{"r_id":9084,"rv_id":1262903,"rule_id":"DbUple","version_id":"YDTZeZE","url":"https://semgrep.dev/playground/r/YDTZeZE/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","origin":"community","path":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri"}}}},{"id":"generic.secrets.security.detected-etc-shadow.detected-etc-shadow","patterns":[{"pattern-regex":"^(\\s*)(?P<ROOT>root:[x!*]*:[0-9]*:[0-9]*)"},{"focus-metavariable":"$ROOT"}],"languages":["regex"],"message":"linux shadow file detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"category":"security","technology":["secrets"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-etc-shadow.detected-etc-shadow","shortlink":"https://sg.run/4ylL","semgrep.dev":{"rule":{"r_id":10044,"rv_id":1262866,"rule_id":"JDUP6p","version_id":"jQTn5yp","url":"https://semgrep.dev/playground/r/jQTn5yp/generic.secrets.security.detected-etc-shadow.detected-etc-shadow","origin":"community","path":"generic.secrets.security.detected-etc-shadow.detected-etc-shadow"}}}},{"id":"generic.secrets.security.detected-bcrypt-hash.detected-bcrypt-hash","pattern-regex":"\\$2[aby]?\\$[\\d]+\\$[./A-Za-z0-9]{53}","languages":["regex"],"message":"bcrypt hash detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"category":"security","technology":["secrets","bcrypt"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-bcrypt-hash.detected-bcrypt-hash","shortlink":"https://sg.run/3A8G","semgrep.dev":{"rule":{"r_id":10043,"rv_id":1262864,"rule_id":"PeUk0Q","version_id":"2KTv236","url":"https://semgrep.dev/playground/r/2KTv236/generic.secrets.security.detected-bcrypt-hash.detected-bcrypt-hash","origin":"community","path":"generic.secrets.security.detected-bcrypt-hash.detected-bcrypt-hash"}}}},{"id":"go.jwt-go.security.jwt.hardcoded-jwt-key","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","options":{"interfile":true},"metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"category":"security","technology":["jwt","secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","interfile":true,"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/go.jwt-go.security.jwt.hardcoded-jwt-key","shortlink":"https://sg.run/Rod2","semgrep.dev":{"rule":{"r_id":9093,"rv_id":1262920,"rule_id":"GdU7Ny","version_id":"pZT0305","url":"https://semgrep.dev/playground/r/pZT0305/go.jwt-go.security.jwt.hardcoded-jwt-key","origin":"community","path":"go.jwt-go.security.jwt.hardcoded-jwt-key"}}},"severity":"WARNING","languages":["go"],"mode":"taint","pattern-sources":[{"patterns":[{"pattern-inside":"[]byte(\"$F\")\n"}]}],"pattern-sinks":[{"patterns":[{"pattern-either":[{"pattern-inside":"$TOKEN.SignedString($F)\n"}]},{"focus-metavariable":"$F"}]}]},{"id":"java.java-jwt.security.jwt-hardcode.java-jwt-hardcoded-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"technology":["java","secrets","jwt"],"category":"security","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"LOW","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/java.java-jwt.security.jwt-hardcode.java-jwt-hardcoded-secret","shortlink":"https://sg.run/RoDK","semgrep.dev":{"rule":{"r_id":9149,"rv_id":1262980,"rule_id":"oqUeAn","version_id":"d6Tyx8j","url":"https://semgrep.dev/playground/r/d6Tyx8j/java.java-jwt.security.jwt-hardcode.java-jwt-hardcoded-secret","origin":"community","path":"java.java-jwt.security.jwt-hardcode.java-jwt-hardcoded-secret"}}},"languages":["java"],"severity":"WARNING","patterns":[{"pattern-either":[{"pattern":"(Algorithm $ALG) = $ALGO.$HMAC(\"$Y\");\n"},{"pattern":"$SECRET = \"$Y\";\n...\n(Algorithm $ALG) = $ALGO.$HMAC($SECRET);\n"},{"pattern":"class $CLASS {\n  ...\n  $TYPE $SECRET = \"$Y\";\n  ...\n  $RETURNTYPE $FUNC (...) {\n    ...\n    (Algorithm $ALG) = $ALGO.$HMAC($SECRET);\n    ...\n  }\n  ...\n}\n"}]},{"focus-metavariable":"$Y"},{"metavariable-regex":{"metavariable":"$HMAC","regex":"(HMAC384|HMAC256|HMAC512)"}}]},{"id":"javascript.express.security.audit.express-session-hardcoded-secret.express-session-hardcoded-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","options":{"interfile":true},"metadata":{"interfile":true,"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"category":"security","technology":["express","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-session-hardcoded-secret.express-session-hardcoded-secret","shortlink":"https://sg.run/LYvG","semgrep.dev":{"rule":{"r_id":22083,"rv_id":1263143,"rule_id":"10Uo39","version_id":"LjTkgle","url":"https://semgrep.dev/playground/r/LjTkgle/javascript.express.security.audit.express-session-hardcoded-secret.express-session-hardcoded-secret","origin":"community","path":"javascript.express.security.audit.express-session-hardcoded-secret.express-session-hardcoded-secret"}}},"languages":["javascript","typescript"],"severity":"WARNING","patterns":[{"pattern-either":[{"pattern-inside":"$SESSION = require('express-session');\n...\n"},{"pattern-inside":"import $SESSION from 'express-session'\n...\n"},{"pattern-inside":"import {..., $SESSION, ...} from 'express-session'\n...\n"},{"pattern-inside":"import * as $SESSION from 'express-session'\n...\n"}]},{"patterns":[{"pattern-either":[{"pattern-inside":"$APP.use($SESSION({...}))"},{"pattern":"$SECRET = $VALUE\n...\n$APP.use($SESSION($SECRET))\n"}]},{"pattern":"secret: '$Y'\n"}]}]},{"id":"javascript.express.security.express-jwt-hardcoded-secret.express-jwt-hardcoded-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","options":{"interfile":true},"metadata":{"interfile":true,"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"category":"security","technology":["express","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.express.security.express-jwt-hardcoded-secret.express-jwt-hardcoded-secret","shortlink":"https://sg.run/Do1d","semgrep.dev":{"rule":{"r_id":9252,"rv_id":1263166,"rule_id":"pKUOjy","version_id":"pZT03Q0","url":"https://semgrep.dev/playground/r/pZT03Q0/javascript.express.security.express-jwt-hardcoded-secret.express-jwt-hardcoded-secret","origin":"community","path":"javascript.express.security.express-jwt-hardcoded-secret.express-jwt-hardcoded-secret"}}},"languages":["javascript","typescript"],"severity":"WARNING","patterns":[{"pattern-either":[{"pattern-inside":"$JWT = require('express-jwt');\n...\n"},{"pattern-inside":"import $JWT from 'express-jwt';\n...\n"},{"pattern-inside":"import * as $JWT from 'express-jwt';\n...\n"},{"pattern-inside":"import { ..., $JWT, ... } from 'express-jwt';\n...\n"}]},{"pattern-either":[{"pattern":"$JWT({...,secret: \"$Y\",...},...)\n"},{"pattern":"$OPTS = \"$Y\";\n...\n$JWT({...,secret: $OPTS},...);\n"}]},{"focus-metavariable":"$Y"}]},{"id":"javascript.jose.security.jwt-hardcode.hardcoded-jwt-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"interfile":true,"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"asvs":{"section":"V3: Session Management Verification Requirements","control_id":"3.5.2 Static API keys or secret","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x12-V3-Session-management.md#v35-token-based-session-management","version":"4"},"category":"security","technology":["jose","jwt","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.jose.security.jwt-hardcode.hardcoded-jwt-secret","shortlink":"https://sg.run/Ro1g","semgrep.dev":{"rule":{"r_id":9293,"rv_id":1263182,"rule_id":"JDUyRl","version_id":"d6TyxbX","url":"https://semgrep.dev/playground/r/d6TyxbX/javascript.jose.security.jwt-hardcode.hardcoded-jwt-secret","origin":"community","path":"javascript.jose.security.jwt-hardcode.hardcoded-jwt-secret"}}},"languages":["javascript","typescript"],"severity":"WARNING","patterns":[{"pattern-inside":"$JOSE = require(\"jose\");\n...\n"},{"pattern-either":[{"pattern-inside":"var {JWT} = $JOSE;\n...\n"},{"pattern-inside":"var {JWK, JWT} = $JOSE;\n...\n"},{"pattern-inside":"const {JWT} = $JOSE;\n...\n"},{"pattern-inside":"const {JWK, JWT} = $JOSE;\n...\n"},{"pattern-inside":"let {JWT} = $JOSE;\n...\n"},{"pattern-inside":"let {JWK, JWT} = $JOSE;\n...\n"}]},{"pattern-either":[{"pattern":"JWT.verify($P, \"...\", ...);\n"},{"pattern":"JWT.sign($P, \"...\", ...);\n"},{"pattern":"JWT.verify($P, JWK.asKey(\"...\"), ...);     \n"},{"pattern":"$JWT.sign($P, JWK.asKey(\"...\"), ...);\n"}]}],"options":{"symbolic_propagation":true,"interfile":true}},{"id":"javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"asvs":{"section":"V3: Session Management Verification Requirements","control_id":"3.5.2 Static API keys or secret","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x12-V3-Session-management.md#v35-token-based-session-management","version":"4"},"category":"security","technology":["jwt","javascript","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret","shortlink":"https://sg.run/4xN9","semgrep.dev":{"rule":{"r_id":9300,"rv_id":1263189,"rule_id":"WAUon7","version_id":"gETB75D","url":"https://semgrep.dev/playground/r/gETB75D/javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret","origin":"community","path":"javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret"}}},"languages":["javascript","typescript"],"severity":"WARNING","mode":"taint","pattern-sources":[{"patterns":[{"pattern":"$X = '...' \n"},{"pattern":"$X = '$Y' \n"}]},{"patterns":[{"pattern-either":[{"pattern-inside":"$JWT.sign($DATA,\"...\",...);\n"},{"pattern-inside":"$JWT.verify($DATA,\"...\",...);\n"}]}]}],"pattern-sinks":[{"patterns":[{"pattern-either":[{"pattern-inside":"$JWT = require(\"jsonwebtoken\")\n...\n"},{"pattern-inside":"import $JWT from \"jsonwebtoken\"\n...\n"},{"pattern-inside":"import * as $JWT from \"jsonwebtoken\"\n...\n"},{"pattern-inside":"import {...,$JWT,...} from \"jsonwebtoken\"\n...\n"}]},{"pattern-either":[{"pattern-inside":"$JWT.sign($DATA,$VALUE,...);\n"},{"pattern-inside":"$JWT.verify($DATA,$VALUE,...);\n"}]},{"focus-metavariable":"$VALUE"}]}]},{"id":"javascript.passport-jwt.security.passport-hardcode.hardcoded-passport-secret","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"asvs":{"section":"V3: Session Management Verification Requirements","control_id":"3.5.2 Static API keys or secret","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x12-V3-Session-management.md#v35-token-based-session-management","version":"4"},"category":"security","technology":["jwt","nodejs","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.passport-jwt.security.passport-hardcode.hardcoded-passport-secret","shortlink":"https://sg.run/vz70","semgrep.dev":{"rule":{"r_id":9333,"rv_id":1263225,"rule_id":"QrUzq6","version_id":"X0TzyoE","url":"https://semgrep.dev/playground/r/X0TzyoE/javascript.passport-jwt.security.passport-hardcode.hardcoded-passport-secret","origin":"community","path":"javascript.passport-jwt.security.passport-hardcode.hardcoded-passport-secret"}}},"languages":["javascript","typescript"],"severity":"WARNING","mode":"taint","pattern-sources":[{"by-side-effect":true,"patterns":[{"pattern-either":[{"pattern":"{..., clientSecret: \"...\", ...}\n"},{"pattern":"{..., secretOrKey: \"...\", ...}\n"},{"pattern":"{..., consumerSecret: \"...\", ...}\n"},{"patterns":[{"pattern-inside":"$OBJ = {}\n...\n"},{"pattern-either":[{"pattern":"$OBJ.clientSecret = \"...\"\n"},{"pattern":"$OBJ.secretOrKey = \"...\"\n"},{"pattern":"$OBJ.consumerSecret = \"...\"\n"}]},{"pattern":"$OBJ"}]},{"patterns":[{"pattern-inside":"$SECRET = '...'\n...\n"},{"pattern-either":[{"pattern":"{..., clientSecret: $SECRET, ...}\n"},{"pattern":"{..., secretOrKey: $SECRET, ...}\n"},{"pattern":"{..., consumerSecret: $SECRET, ...}\n"}]}]},{"patterns":[{"pattern-inside":"$SECRET = '...'\n...\n"},{"pattern-either":[{"pattern-inside":"$VALUE = {..., clientSecret: $SECRET, ...}\n...\n"},{"pattern-inside":"$VALUE = {..., secretOrKey: $SECRET, ...}\n...\n"},{"pattern-inside":"$VALUE = {..., consumerSecret: $SECRET, ...}\n...\n"}]},{"pattern":"$VALUE"}]}]}]}],"pattern-sinks":[{"patterns":[{"pattern-either":[{"pattern-inside":"$F = require(\"$I\").Strategy\n...\n"},{"pattern-inside":"$F = require(\"$I\")\n...\n"},{"pattern-inside":"import { $STRAT as $F } from '$I'\n...\n"},{"pattern-inside":"import $F from '$I'\n...\n"}]},{"metavariable-regex":{"metavariable":"$I","regex":"(passport-.*)"}},{"pattern-inside":"new $F($VALUE,...)\n"},{"focus-metavariable":"$VALUE"}]}]},{"id":"python.boto3.security.hardcoded-token.hardcoded-token","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html","https://bento.dev/checks/boto3/hardcoded-access-token/","https://aws.amazon.com/blogs/security/what-to-do-if-you-inadvertently-expose-an-aws-access-key/"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"category":"security","technology":["boto3","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/python.boto3.security.hardcoded-token.hardcoded-token","shortlink":"https://sg.run/LwQ6","semgrep.dev":{"rule":{"r_id":9439,"rv_id":1263347,"rule_id":"5rUOwK","version_id":"gETB78n","url":"https://semgrep.dev/playground/r/gETB78n/python.boto3.security.hardcoded-token.hardcoded-token","origin":"community","path":"python.boto3.security.hardcoded-token.hardcoded-token"}}},"languages":["python"],"severity":"WARNING","mode":"taint","pattern-sources":[{"pattern":"\"...\"\n"}],"pattern-sinks":[{"patterns":[{"pattern-either":[{"pattern":"$W(...,$TOKEN=\"$VALUE\",...)"},{"pattern":"$BOTO. ... .$W(...,$TOKEN=\"$VALUE\",...)"}]},{"metavariable-regex":{"metavariable":"$TOKEN","regex":"(aws_session_token|aws_access_key_id|aws_secret_access_key)"}},{"metavariable-pattern":{"language":"generic","metavariable":"$VALUE","patterns":[{"pattern-either":[{"pattern-regex":"^AKI"},{"pattern-regex":"^[A-Za-z0-9/+=]+$"}]}]}},{"metavariable-analysis":{"metavariable":"$VALUE","analyzer":"entropy"}}]}]},{"id":"ruby.lang.security.hardcoded-http-auth-in-controller.hardcoded-http-auth-in-controller","patterns":[{"pattern-inside":"class $CONTROLLER < ApplicationController\n  ...\n  http_basic_authenticate_with ..., :password => \"$SECRET\", ...\nend\n"},{"focus-metavariable":"$SECRET"}],"message":"Detected hardcoded password used in basic authentication in a controller class. Including this password in version control could expose this credential. Consider refactoring to use environment variables or configuration files.","severity":"WARNING","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"source-rule-url":"https://github.com/presidentbeef/brakeman/blob/main/docs/warning_types/basic_auth/index.markdown","category":"security","technology":["ruby","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"MEDIUM","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/ruby.lang.security.hardcoded-http-auth-in-controller.hardcoded-http-auth-in-controller","shortlink":"https://sg.run/6r0w","semgrep.dev":{"rule":{"r_id":9715,"rv_id":1263606,"rule_id":"X5UZWK","version_id":"0bTKzNK","url":"https://semgrep.dev/playground/r/0bTKzNK/ruby.lang.security.hardcoded-http-auth-in-controller.hardcoded-http-auth-in-controller","origin":"community","path":"ruby.lang.security.hardcoded-http-auth-in-controller.hardcoded-http-auth-in-controller"}}},"languages":["ruby"]},{"id":"terraform.aws.security.aws-provider-static-credentials.aws-provider-static-credentials","patterns":[{"pattern-inside":"provider \"aws\" {\n...\n    secret_key = \"$SECRET\"\n}\n"},{"focus-metavariable":"$SECRET"}],"message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","languages":["hcl"],"severity":"WARNING","metadata":{"technology":["secrets","aws","terraform"],"category":"security","cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/terraform.aws.security.aws-provider-static-credentials.aws-provider-static-credentials","shortlink":"https://sg.run/L3kn","semgrep.dev":{"rule":{"r_id":16439,"rv_id":1263735,"rule_id":"d8U4n0","version_id":"rxTAK76","url":"https://semgrep.dev/playground/r/rxTAK76/terraform.aws.security.aws-provider-static-credentials.aws-provider-static-credentials","origin":"community","path":"terraform.aws.security.aws-provider-static-credentials.aws-provider-static-credentials"}}}},{"id":"terraform.aws.security.aws-lambda-environment-credentials.aws-lambda-environment-credentials","patterns":[{"pattern-inside":"resource \"$ANYTING\" $ANYTHING {\n  ...\n  environment {\n    variables = {\n      ...\n    }\n  }\n  ...\n}\n"},{"pattern-either":[{"pattern-inside":"AWS_ACCESS_KEY_ID = \"$Y\"\n"},{"pattern-regex":"(?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9])\n"},{"pattern-inside":"AWS_SECRET_ACCESS_KEY = \"$Y\"\n"},{"pattern-regex":"(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])\n"}]},{"focus-metavariable":"$Y"}],"message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"category":"security","references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A03:2017 - Sensitive Data Exposure","A02:2021 - Cryptographic Failures","A04:2025 - Cryptographic Failures"],"cwe":["CWE-326: Inadequate Encryption Strength"],"technology":["aws","terraform","secrets"],"subcategory":["vuln"],"likelihood":"LOW","impact":"HIGH","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cryptographic Issues"],"source":"https://semgrep.dev/r/terraform.aws.security.aws-lambda-environment-credentials.aws-lambda-environment-credentials","shortlink":"https://sg.run/wZqY","semgrep.dev":{"rule":{"r_id":17373,"rv_id":1263731,"rule_id":"JDU6gj","version_id":"jQTn573","url":"https://semgrep.dev/playground/r/jQTn573/terraform.aws.security.aws-lambda-environment-credentials.aws-lambda-environment-credentials","origin":"community","path":"terraform.aws.security.aws-lambda-environment-credentials.aws-lambda-environment-credentials"}}},"languages":["hcl"],"severity":"ERROR"},{"id":"ruby.lang.security.hardcoded-secret-rsa-passphrase.hardcoded-secret-rsa-passphrase","message":"Found the use of an hardcoded passphrase for RSA. The passphrase can be easily discovered, and therefore should not be stored in source-code. It is recommended to remove the passphrase from source-code, and use system environment variables or a restricted configuration file.","languages":["ruby"],"severity":"WARNING","metadata":{"technology":["ruby","secrets"],"category":"security","references":["https://cwe.mitre.org/data/definitions/522.html"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/ruby.lang.security.hardcoded-secret-rsa-passphrase.hardcoded-secret-rsa-passphrase","shortlink":"https://sg.run/xPEe","semgrep.dev":{"rule":{"r_id":20730,"rv_id":1263607,"rule_id":"bwULyN","version_id":"K3TKkEo","url":"https://semgrep.dev/playground/r/K3TKkEo/ruby.lang.security.hardcoded-secret-rsa-passphrase.hardcoded-secret-rsa-passphrase","origin":"community","path":"ruby.lang.security.hardcoded-secret-rsa-passphrase.hardcoded-secret-rsa-passphrase"}}},"patterns":[{"pattern-either":[{"pattern":"OpenSSL::PKey::RSA.new(..., '...')"},{"pattern":"OpenSSL::PKey::RSA.new(...).to_pem(..., '...')"},{"pattern":"OpenSSL::PKey::RSA.new(...).export(..., '...')"},{"patterns":[{"pattern-inside":"$OPENSSL = OpenSSL::PKey::RSA.new(...)\n...\n"},{"pattern-either":[{"pattern":"$OPENSSL.export(...,'...')\n"},{"pattern":"$OPENSSL.to_pem(...,'...')\n"}]}]},{"patterns":[{"pattern-either":[{"patterns":[{"pattern-inside":"$ASSIGN = '...'\n...\n"},{"pattern":"OpenSSL::PKey::RSA.new(..., $ASSIGN)"}]},{"patterns":[{"pattern-inside":"def $METHOD1(...)\n...\n$ASSIGN = '...'\n...\nend\n...\ndef $METHOD2(...)\n...\nend\n"},{"pattern":"OpenSSL::PKey::RSA.new(..., $ASSIGN)"}]},{"patterns":[{"pattern-inside":"$ASSIGN = '...'\n...\ndef $METHOD(...)\n  $OPENSSL = OpenSSL::PKey::RSA.new(...)\n...\nend\n...\n"},{"pattern-either":[{"pattern":"$OPENSSL.export(...,$ASSIGN)"},{"pattern":"$OPENSSL.to_pem(...,$ASSIGN)"}]}]},{"patterns":[{"pattern-inside":"def $METHOD1(...)\n...\n$OPENSSL = OpenSSL::PKey::RSA.new(...)\n...\n$ASSIGN = '...'\n...\nend\n...\n"},{"pattern-either":[{"pattern":"$OPENSSL.export(...,$ASSIGN)"},{"pattern":"$OPENSSL.to_pem(...,$ASSIGN)"}]}]},{"patterns":[{"pattern-inside":"def $METHOD1(...)\n...\n$ASSIGN = '...'\n...\nend\n...\ndef $METHOD2(...)\n...\n$OPENSSL = OpenSSL::PKey::RSA.new(...)\n...\nend\n...\n"},{"pattern-either":[{"pattern":"$OPENSSL.export(...,$ASSIGN)"},{"pattern":"$OPENSSL.to_pem(...,$ASSIGN)"}]}]}]}]}]}]},{"id":"yaml.kubernetes.security.secrets-in-config-file.secrets-in-config-file","patterns":[{"pattern":"$KEY: $VALUE\n"},{"pattern-inside":"data: ...\n"},{"pattern-inside":"kind: Secret\n...\n"},{"metavariable-regex":{"metavariable":"$VALUE","regex":"(?i)^[aA-zZ0-9+/]+={0,2}$"}},{"metavariable-analysis":{"analyzer":"entropy","metavariable":"$VALUE"}}],"message":"Secrets ($VALUE) should not be stored in infrastructure as code files. Use an alternative such as Bitnami Sealed Secrets or KSOPS to encrypt Kubernetes Secrets. ","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"category":"security","technology":["kubernetes"],"references":["https://kubernetes.io/docs/concepts/configuration/secret/","https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/0/CTR_Kubernetes_Hardening_Guidance_1.1_20220315.PDF","https://docs.gitlab.com/ee/user/clusters/agent/gitops/secrets_management.html","https://www.cncf.io/blog/2021/04/22/revealing-the-secrets-of-kubernetes-secrets/","https://github.com/bitnami-labs/sealed-secrets","https://www.cncf.io/blog/2022/01/25/secrets-management-essential-when-using-kubernetes/","https://blog.oddbit.com/post/2021-03-09-getting-started-with-ksops/"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"LOW","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/yaml.kubernetes.security.secrets-in-config-file.secrets-in-config-file","shortlink":"https://sg.run/KyL6","semgrep.dev":{"rule":{"r_id":20055,"rv_id":1263942,"rule_id":"YGUYEb","version_id":"xyTjz5B","url":"https://semgrep.dev/playground/r/xyTjz5B/yaml.kubernetes.security.secrets-in-config-file.secrets-in-config-file","origin":"community","path":"yaml.kubernetes.security.secrets-in-config-file.secrets-in-config-file"}}},"languages":["yaml"],"severity":"WARNING"},{"id":"generic.secrets.security.detected-onfido-live-api-token.detected-onfido-live-api-token","pattern-regex":"(?:api_live(?:_[a-zA-Z]{2})?\\.[a-zA-Z0-9-_]{11}\\.[-_a-zA-Z0-9]{32})","languages":["regex"],"message":"Onfido live API Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"category":"security","technology":["secrets","onfido"],"confidence":"HIGH","references":["https://documentation.onfido.com/api/latest/#api-tokens"],"subcategory":["audit"],"likelihood":"HIGH","impact":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-onfido-live-api-token.detected-onfido-live-api-token","shortlink":"https://sg.run/lBoKD","semgrep.dev":{"rule":{"r_id":141957,"rv_id":945509,"rule_id":"WAUW9q3","version_id":"A8TJzE2","url":"https://semgrep.dev/playground/r/A8TJzE2/generic.secrets.security.detected-onfido-live-api-token.detected-onfido-live-api-token","origin":"community","path":"generic.secrets.security.detected-onfido-live-api-token.detected-onfido-live-api-token"}}}},{"id":"kotlin.gradle.security.build-gradle-password-hardcoded.build-gradle-password-hardcoded","message":"A secret is hard-coded in the application. Secrets stored in source code, such as credentials, identifiers, and other types of sensitive data, can be leaked and used by internal or external malicious actors. It is recommended to rotate the secret and retrieve them from a secure secret vault or Hardware Security Module (HSM), alternatively environment variables can be used if allowed by your company policy.","severity":"WARNING","metadata":{"likelihood":"LOW","impact":"HIGH","confidence":"MEDIUM","category":"security","subcategory":["vuln"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"cwe2020-top25":true,"cwe2021-top25":true,"cwe2022-top25":true,"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"technology":["secrets"],"vulnerability_class":["Hard-coded Secrets"],"source_rule_url":"https://semgrep.dev/playground/r/d8Ur5BA/achufistov6_personal_org.build-gradle-password-hardcoded","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","source":"https://semgrep.dev/r/kotlin.gradle.security.build-gradle-password-hardcoded.build-gradle-password-hardcoded","shortlink":"https://sg.run/qN29x","semgrep.dev":{"rule":{"r_id":137856,"rv_id":1263257,"rule_id":"ReUD6Kg","version_id":"DkTRbLX","url":"https://semgrep.dev/playground/r/DkTRbLX/kotlin.gradle.security.build-gradle-password-hardcoded.build-gradle-password-hardcoded","origin":"community","path":"kotlin.gradle.security.build-gradle-password-hardcoded.build-gradle-password-hardcoded"}}},"languages":["kotlin"],"options":{"symbolic_propagation":true},"patterns":[{"pattern-either":[{"pattern":"$PASS = env[...] ?: $VALUE"}]},{"metavariable-regex":{"metavariable":"$PASS","regex":"(password|pass|passwd|loginPassword)"}},{"metavariable-pattern":{"language":"generic","metavariable":"$VALUE","patterns":[{"pattern-either":[{"pattern-regex":"^[A-Za-z0-9/+=]+$"}]}]}}],"paths":{"include":["*build.gradle.kts"]}},{"id":"generic.secrets.security.detected-mailgun-api-key.detected-mailgun-api-key","pattern-regex":"key-[0-9a-zA-Z]{32}","languages":["regex"],"message":"Mailgun API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","mailgun"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-mailgun-api-key.detected-mailgun-api-key","shortlink":"https://sg.run/jRL2","semgrep.dev":{"rule":{"r_id":9065,"rv_id":1262882,"rule_id":"v8UneY","version_id":"ExTExAG","url":"https://semgrep.dev/playground/r/ExTExAG/generic.secrets.security.detected-mailgun-api-key.detected-mailgun-api-key","origin":"community","path":"generic.secrets.security.detected-mailgun-api-key.detected-mailgun-api-key"}}}},{"id":"generic.secrets.security.detected-outlook-team.detected-outlook-team","pattern-regex":"https://outlook\\.office\\.com/webhook/[0-9a-f-]{36}","languages":["regex"],"message":"Outlook Team detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","outlook"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-outlook-team.detected-outlook-team","shortlink":"https://sg.run/1ZwQ","semgrep.dev":{"rule":{"r_id":9066,"rv_id":1262884,"rule_id":"d8UjXq","version_id":"LjTkgA1","url":"https://semgrep.dev/playground/r/LjTkgA1/generic.secrets.security.detected-outlook-team.detected-outlook-team","origin":"community","path":"generic.secrets.security.detected-outlook-team.detected-outlook-team"}}}},{"id":"generic.secrets.security.detected-pgp-private-key-block.detected-pgp-private-key-block","pattern-regex":"-----BEGIN PGP PRIVATE KEY BLOCK-----","languages":["regex"],"message":"Something that looks like a PGP private key block is detected. This is a potential hardcoded secret that could be leaked if this code is committed. Instead, remove this code block from the commit.","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-pgp-private-key-block.detected-pgp-private-key-block","shortlink":"https://sg.run/ydKd","semgrep.dev":{"rule":{"r_id":9068,"rv_id":1262886,"rule_id":"nJUzXz","version_id":"gETB7O4","url":"https://semgrep.dev/playground/r/gETB7O4/generic.secrets.security.detected-pgp-private-key-block.detected-pgp-private-key-block","origin":"community","path":"generic.secrets.security.detected-pgp-private-key-block.detected-pgp-private-key-block"}}}},{"id":"generic.secrets.security.detected-heroku-api-key.detected-heroku-api-key","pattern-regex":"[hH][eE][rR][oO][kK][uU].*[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}","languages":["regex"],"message":"Heroku API Key detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","heroku"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-heroku-api-key.detected-heroku-api-key","shortlink":"https://sg.run/pxXR","semgrep.dev":{"rule":{"r_id":9062,"rv_id":1262877,"rule_id":"x8UnOB","version_id":"e1Tyj3N","url":"https://semgrep.dev/playground/r/e1Tyj3N/generic.secrets.security.detected-heroku-api-key.detected-heroku-api-key","origin":"community","path":"generic.secrets.security.detected-heroku-api-key.detected-heroku-api-key"}}}},{"id":"generic.secrets.security.detected-mailchimp-api-key.detected-mailchimp-api-key","pattern-regex":"[0-9a-f]{32}-us[0-9]{1,2}","languages":["regex"],"message":"MailChimp API Key detected","severity":"ERROR","metadata":{"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","cwe":["CWE-798: Use of Hard-coded Credentials"],"technology":["secrets","mailchimp"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-mailchimp-api-key.detected-mailchimp-api-key","shortlink":"https://sg.run/XBde","semgrep.dev":{"rule":{"r_id":9064,"rv_id":1262881,"rule_id":"eqU8QR","version_id":"nWT2LoR","url":"https://semgrep.dev/playground/r/nWT2LoR/generic.secrets.security.detected-mailchimp-api-key.detected-mailchimp-api-key","origin":"community","path":"generic.secrets.security.detected-mailchimp-api-key.detected-mailchimp-api-key"}}}},{"id":"generic.secrets.security.detected-npm-registry-auth-token.detected-npm-registry-auth-token","patterns":[{"pattern":"$AUTHTOKEN = $VALUE"},{"metavariable-regex":{"metavariable":"$AUTHTOKEN","regex":"_(authToken|auth|password)"}},{"pattern-not":"$AUTHTOKEN = ${...}"}],"languages":["generic"],"message":"NPM registry authentication token detected","paths":{"include":["*npmrc*"]},"severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"category":"security","technology":["secrets","npm"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-npm-registry-auth-token.detected-npm-registry-auth-token","shortlink":"https://sg.run/Ppg3","semgrep.dev":{"rule":{"r_id":10045,"rv_id":1262883,"rule_id":"5rU4pe","version_id":"7ZTE3n2","url":"https://semgrep.dev/playground/r/7ZTE3n2/generic.secrets.security.detected-npm-registry-auth-token.detected-npm-registry-auth-token","origin":"community","path":"generic.secrets.security.detected-npm-registry-auth-token.detected-npm-registry-auth-token"}}}},{"id":"generic.secrets.security.detected-google-gcm-service-account.detected-google-gcm-service-account","pattern-regex":"((\"|'|`)?type(\"|'|`)?\\s{0,50}(:|=>|=)\\s{0,50}(\"|'|`)?service_account(\"|'|`)?,?)","languages":["regex"],"message":"Google (GCM) Service account detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","google-cloud"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-google-gcm-service-account.detected-google-gcm-service-account","shortlink":"https://sg.run/6nXj","semgrep.dev":{"rule":{"r_id":9059,"rv_id":1262874,"rule_id":"NbUkL8","version_id":"w8TRoDX","url":"https://semgrep.dev/playground/r/w8TRoDX/generic.secrets.security.detected-google-gcm-service-account.detected-google-gcm-service-account","origin":"community","path":"generic.secrets.security.detected-google-gcm-service-account.detected-google-gcm-service-account"}}}},{"id":"generic.secrets.security.detected-paypal-braintree-access-token.detected-paypal-braintree-access-token","pattern-regex":"access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-z]{32}","languages":["regex"],"message":"PayPal Braintree Access Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","paypal","braintree"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-paypal-braintree-access-token.detected-paypal-braintree-access-token","shortlink":"https://sg.run/9oBR","semgrep.dev":{"rule":{"r_id":9067,"rv_id":1262885,"rule_id":"ZqU507","version_id":"8KT5ryb","url":"https://semgrep.dev/playground/r/8KT5ryb/generic.secrets.security.detected-paypal-braintree-access-token.detected-paypal-braintree-access-token","origin":"community","path":"generic.secrets.security.detected-paypal-braintree-access-token.detected-paypal-braintree-access-token"}}}},{"id":"generic.secrets.security.detected-google-oauth-access-token.detected-google-oauth-access-token","pattern-regex":"ya29\\.[0-9A-Za-z\\-_]+","languages":["regex"],"message":"Google OAuth Access Token detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json","category":"security","technology":["secrets","google"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-google-oauth-access-token.detected-google-oauth-access-token","shortlink":"https://sg.run/ox2n","semgrep.dev":{"rule":{"r_id":9060,"rv_id":1262875,"rule_id":"kxUkpo","version_id":"xyTjzp6","url":"https://semgrep.dev/playground/r/xyTjzp6/generic.secrets.security.detected-google-oauth-access-token.detected-google-oauth-access-token","origin":"community","path":"generic.secrets.security.detected-google-oauth-access-token.detected-google-oauth-access-token"}}}},{"id":"generic.secrets.security.detected-hockeyapp.detected-hockeyapp","pattern-regex":"(?i)hockey.{0,50}(\\\\\\\"|'|`)?[0-9a-f]{32}(\\\\\\\"|'|`)?","languages":["regex"],"message":"HockeyApp detected","severity":"ERROR","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"source-rule-url":"https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go","category":"security","technology":["secrets","hockeyapp"],"confidence":"LOW","owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"references":["https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-hockeyapp.detected-hockeyapp","shortlink":"https://sg.run/2xoY","semgrep.dev":{"rule":{"r_id":9063,"rv_id":1262878,"rule_id":"OrU3zo","version_id":"vdT068z","url":"https://semgrep.dev/playground/r/vdT068z/generic.secrets.security.detected-hockeyapp.detected-hockeyapp","origin":"community","path":"generic.secrets.security.detected-hockeyapp.detected-hockeyapp"}}}},{"id":"terraform.lang.security.rds-insecure-password-storage-in-source-code.rds-insecure-password-storage-in-source-code","pattern-either":[{"patterns":[{"pattern":"password = \"...\""},{"pattern-inside":"resource \"aws_db_instance\" \"...\" {\n  ...\n}\n"}]},{"patterns":[{"pattern":"master_password = \"...\""},{"pattern-inside":"resource \"aws_rds_cluster\" \"...\" {\n  ...\n}\n"}]}],"languages":["hcl"],"severity":"WARNING","message":"RDS instance or cluster with hardcoded credentials in source code. It is recommended to pass the credentials at runtime, or generate random credentials using the random_password resource.","metadata":{"references":["https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#master_password","https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#master_password","https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password"],"cwe":["CWE-522: Insufficiently Protected Credentials"],"category":"security","technology":["terraform","aws","secrets"],"owasp":["A02:2017 - Broken Authentication","A04:2021 - Insecure Design","A06:2025 - Insecure Design"],"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cryptographic Issues"],"source":"https://semgrep.dev/r/terraform.lang.security.rds-insecure-password-storage-in-source-code.rds-insecure-password-storage-in-source-code","shortlink":"https://sg.run/x4qA","semgrep.dev":{"rule":{"r_id":15830,"rv_id":1263896,"rule_id":"OrUl6W","version_id":"gETB77b","url":"https://semgrep.dev/playground/r/gETB77b/terraform.lang.security.rds-insecure-password-storage-in-source-code.rds-insecure-password-storage-in-source-code","origin":"community","path":"terraform.lang.security.rds-insecure-password-storage-in-source-code.rds-insecure-password-storage-in-source-code"}}}}],"missed":218}