keyhog-scanner 0.5.40

keyhog-scanner: high-performance SIMD-accelerated secret detection engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

schema_version = 1
detector_id = "base-api-credentials"
service = "base"
severity = "high"

[[positive]]
text = "base_api_key=7b3e5d8c1a9f4e2b6c8d3a5e9f1b7c4d"
credential = "7b3e5d8c1a9f4e2b6c8d3a5e9f1b7c4d"
reason = "Base API key env-var (32 hex)."

[[positive]]
text = "BASE_RPC_URL=https://node.g.alchemy.com/v2/aBc3dEf5Gh6Ij7Kl8Mn9OpQr0StUvWxY"
credential = "https://node.g.alchemy.com/v2/aBc3dEf5Gh6Ij7Kl8Mn9OpQr0StUvWxY"
reason = "Base RPC URL with Alchemy API key."

[[negative]]
text = "BASE_API_KEY=short"
reason = "Body below 32 hex chars."

[[evasion]]
text = "base_api_key=\"7b3e5d8c1a9f4e2b6c8d3a5e9f1b7c4d\""
credential = "7b3e5d8c1a9f4e2b6c8d3a5e9f1b7c4d"
reason = "Quoted API key form."

[perf]
fixture_bytes = 4096
max_microseconds = 25000
note = "Standard single-file budget."

[scale]
fixture_bytes = 1048576
min_findings = 1
max_seconds = 2.0
note = "1 MiB filler + planted Base API key."

readme_claim = "900 service-specific detectors"