# Docs: https://render.com/docs/deploy-hooks
# Format: https://api.render.com/deploy/{service_id}?key={key} or srv- prefix
# Verify: POST to hook URL triggers deploy (no auth required for POST)
# Prefix: https://api.render.com/deploy/
[detector]
id = "render-deploy-hook"
name = "Render Deploy Hook"
service = "render"
severity = "high"
ml = { match_mode = "lift", entropy_mode = "disabled", weight = 1.0, context_radius_lines = 5 }
match_confidence = { literal_prefix_weight = 0.35, context_anchor_weight = 0.20, entropy_weight = 0.20, high_entropy_partial_weight = 0.12, moderate_entropy_threshold = 3.0, moderate_entropy_weight = 0.05, low_entropy_penalty_floor = 2.0, low_entropy_min_match_length = 10, low_entropy_penalty_multiplier = 0.60, keyword_nearby_weight = 0.10, sensitive_file_weight = 0.10, companion_weight = 0.05, very_high_entropy_margin = 1.2999999999999998, named_anchor_floor = 0.55, assignment_context_multiplier = 1.0, string_literal_context_multiplier = 0.9, unknown_context_multiplier = 0.8, documentation_context_multiplier = 0.3, comment_context_multiplier = 0.4, test_context_multiplier = 0.3, encrypted_context_multiplier = 0.05, soft_context_suppression_threshold = 0.5, encrypted_context_suppression_threshold = 0.8, post_match = { placeholder_multiplier = 0.05, minimum_byte_diversity = 0.1, low_diversity_multiplier = 0.1, maximum_repeat_ratio = 0.8, degenerate_run_min_length = 10, degenerate_repeat_multiplier = 0.1, fixture_path_multiplier = 0.5, ml_context_reapply_below = 0.95 } }
keywords = ["render", "deploy"]
[[detector.patterns]]
regex = "https://api\\.render\\.com/deploy/srv-[a-z0-9]+\\?key=[a-zA-Z0-9_-]{20,}"
description = "Render deploy hook URL with service ID and key"
[[detector.patterns]]
regex = "(?:RENDER|render)[_\\-\\s]*(?:DEPLOY|deploy)[_\\-\\s]*(?:HOOK|hook)[_\\-\\s]*(?:URL|url)?[=:\\s\"'\\']+(https://api\\.render\\.com/deploy/srv-[a-z0-9]+\\?key=[a-zA-Z0-9_-]{20,})"
description = "Render deploy hook URL with context anchor"
group = 1
[[detector.tests]]
test_positive = "https://api.render.com/deploy/srv-io418fk5icxm3yawaaove0uasyyelq6t5818ilo9b92bkw1pt15ff3jkwo0y6h80mz4zp1ho6h5p3r84ra0f3fjh6sk03mtpz9?key=6EW1MZSw_KYtNzt_qVhQ2jVpB8XWuRi8lXju"
test_negative = "YOUR_API_KEY_HERE_PLACEHOLDER_VALUE"