schema_version = 1
detector_id = "wordpress-api-token"
service = "wordpress"
severity = "high"
[[positive]]
text = "access-token ' : \" ' = : = = '' = ' '\" '= \" \" =: lc%PF8RBcccLMTOWauL6V%RM3uWA4svAHhkHtrTcvE2QRQGMr20xjfxEOtPczoGZOT07sN7v5W0bWdEMCsEt4jlWQiCcCSnc"
credential = "lc%PF8RBcccLMTOWauL6V%RM3uWA4svAHhkHtrTcvE2QRQGMr20xjfxEOtPczoGZOT07sN7v5W0bWdEMCsEt4jlWQiCcCSnc"
reason = "Canonical anchor + synthesized body satisfying detector's primary regex."
[[positive]]
text = "access-token ' : \" ' = : = = '' = ' '\" '= \" \" =: lc%PF8RBcccLMTOWauL6V%RM3uWA4svAHhkHtrTcvE2QRQGMr20xjfxEOtPczoGZOT07sN7v5W0bWdEMCsEt4jlWQiCcCSnc"
credential = "lc%PF8RBcccLMTOWauL6V%RM3uWA4svAHhkHtrTcvE2QRQGMr20xjfxEOtPczoGZOT07sN7v5W0bWdEMCsEt4jlWQiCcCSnc"
reason = "Quoted-value variant of the canonical positive."
[[negative]]
text = "access-token ' : \" ' = : = = '' = ' '\" '= \" \" =: YOUR_API_KEY_HERE_PLACEHOLDER_VALUE"
reason = "Placeholder-keyword body — suppression gate matches PLACEHOLDER prefix."
[[negative]]
text = "access-token ' : \" ' = : = = '' = ' '\" '= \" \" =: lc%PFEXAMPLEEXAMPLEcCSnc"
reason = "EXAMPLE token marker inside the body — suppression gate strips it."