keyhog-core 0.5.4

keyhog-core — shared data model and detector specifications for the KeyHog secret scanner
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
# Docs: https://www.postgresql.org/docs/current/libpq-connect.html
# Format: postgresql://user:pass@host.domain:port/db
# Prefix: postgres

[detector]
id = "postgresql-connection-string"
name = "PostgreSQL Connection String"
service = "postgresql"
severity = "critical"
keywords = ["postgresql", "postgres", "DATABASE_URL"]

[[detector.patterns]]
regex = '''postgres(?:ql)?://[^:]+:[^@\s"'']+@[a-zA-Z0-9-]+\.[a-zA-Z0-9._-]+'''
description = "PostgreSQL connection string with credentials (requires domain host)"