keyhog-scanner 0.5.40

keyhog-scanner: high-performance SIMD-accelerated secret detection engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

schema_version = 1
detector_id = "render-api-key"
service = "render"
severity = "critical"

[[positive]]
text = "rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
credential = "rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
reason = "Bare Render API key, 24 alnum chars after rnd_."

[[positive]]
text = "RENDER_API_KEY=rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
credential = "rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
reason = "Standard env-var assignment."

[[positive]]
text = "Authorization: Bearer rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
credential = "rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
reason = "Bearer header — Render API auth shape."

[[negative]]
text = "rnd_short"
reason = "Body shorter than 24 chars."

[[evasion]]
text = "{\"key\":\"rnd_9X3kQp7VbT2hYRzNcMfWj4Dg\"}"
credential = "rnd_9X3kQp7VbT2hYRzNcMfWj4Dg"
reason = "JSON payload."

[perf]
fixture_bytes = 4096
max_microseconds = 15000
note = "Standard single-file budget."

[scale]
fixture_bytes = 1048576
min_findings = 1
max_seconds = 2.0
note = "1 MiB filler + one planted Render key."

readme_claim = "900 service-specific detectors"