keyhog-core 0.5.4

# Docs: https://docs.deepnote.com/docs/api
# Format: Deepnote API token with dn_ prefix or context-anchored
# Verify: GET /v1/projects with Bearer token returns 200 if valid
# Prefix: dn_

[detector]
id = "deepnote-api-credentials"
name = "Deepnote API Credentials"
service = "deepnote"
severity = "high"
keywords = ["dn_", "DEEPNOTE", "deepnote"]

[[detector.patterns]]
regex = "dn_[a-zA-Z0-9_-]{20,}"
description = "Deepnote API token with dn_ prefix"

[[detector.patterns]]
regex = "(?:DEEPNOTE|deepnote)[_\\s]*(API|TOKEN|KEY)[=:\\s\"'']+([a-zA-Z0-9_-]{20,})"
description = "Deepnote API credential with context anchor"
group = 2

[detector.verify]
method = "GET"
url = "https://api.deepnote.com/v1/projects"

[detector.verify.auth]
type = "bearer"
field = "match"

[detector.verify.success]
status = 200