keyhog-core 0.5.4

keyhog-core — shared data model and detector specifications for the KeyHog secret scanner
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

# Docs: https://developers.google.com/forms/api/reference/rest
# Format: Google service account JSON with private_key and client_email
# Verify: no public verification endpoint (requires OAuth flow)
# Prefix: none (requires context anchoring)

[detector]
id = "google-forms-api-credentials"
name = "Google Forms API Credentials"
service = "google"
severity = "critical"
keywords = ["google_forms", "GOOGLE_FORMS", "forms.googleapis.com"]

[[detector.patterns]]
regex = "(?:google[_\\s]*forms?|GOOGLE[_\\s]*FORMS)[\\s\"'':=]+[^}]*(?:private[_\\s]*key|private_key)[\\s\"'':=]+([A-Za-z0-9+/=]{100,})"
description = "Google Forms API private key in service account JSON"
group = 1

[[detector.patterns]]
regex = "(?:google[_\\s]*forms?|GOOGLE[_\\s]*FORMS)[_.\\s]*(?:api[_\\s]*key|API[_\\s]*KEY)[\\s\"'':=]+([A-Za-z0-9_-]{30,})"
description = "Google Forms API key with context anchor"
group = 1