keyhog-scanner 0.5.40

keyhog-scanner: high-performance SIMD-accelerated secret detection engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

schema_version = 1
detector_id = "cloudinary-api-key"
service = "cloudinary"
severity = "critical"




[[positive]]
text = """cloudinary://946054033816433664211118670346455:NvXnEzfHQBPE9sQVcnk@rgV7LEbhI1QMVD7lYiBrqFtq3avz_fSEXZpggxdEGkHDnUT3TMXyqaAAPFYT"""
credential = "cloudinary://946054033816433664211118670346455:NvXnEzfHQBPE9sQVcnk@rgV7LEbhI1QMVD7lYiBrqFtq3avz_fSEXZpggxdEGkHDnUT3TMXyqaAAPFYT"
reason = "Hand-tuned positive matching detector regex (R2-F adversarial batch)."

[[positive]]
text = """cloudinary://946054033816433664211118670346455:NvXnEzfHQBPE9sQVcnk@rgV7LEbhI1QMVD7lYiBrqFtq3avz_fSEXZpggxdEGkHDnUT3TMXyqaAAPFYT="cloudinary://946054033816433664211118670346455:NvXnEzfHQBPE9sQVcnk@rgV7LEbhI1QMVD7lYiBrqFtq3avz_fSEXZpggxdEGkHDnUT3TMXyqaAAPFYT""""
credential = "cloudinary://946054033816433664211118670346455:NvXnEzfHQBPE9sQVcnk@rgV7LEbhI1QMVD7lYiBrqFtq3avz_fSEXZpggxdEGkHDnUT3TMXyqaAAPFYT"
reason = "Quoted-value variant of the canonical positive."

[[negative]]
text = "cloudinary://123:@cloud"
reason = "Missing secret after colon; regex requires at least one alnum/underscore/hyphen."

[[evasion]]
text = "cloudinary://123456:Kp4Qx7Rm2Sn5Tb8Vw3Yz@mycloud"
credential = "cloudinary://123456:Kp4Qx7Rm2Sn5Tb8Vw3Yz@mycloud"
reason = "Adversarial header_bare envelope — credential must still surface under this detector."

[perf]
fixture_bytes = 4096
max_microseconds = 25000
note = "Standard single-file budget."

[scale]
fixture_bytes = 1048576
min_findings = 1
max_seconds = 2.0
note = "1 MiB filler + planted Cloudinary URL."

readme_claim = "900 service-specific detectors"