keyhog 0.5.73

GPU-accelerated secret scanner for code, Git history, cloud, containers, browser assets, and live credential verification
1
2
3
4
5
6
7
8
9
10
11
12
13

# Static prefix shapes that mark an entropy candidate as a shell expansion
# or template literal, not a credential. Workflow files generate these in
# volume. The dynamic "$" + uppercase-letter rule (e.g. $VAR, $HOME) stays
# in code because it is a character-class predicate, not a fixed string.
prefixes = [
  "$(",
  "${",
  "\\\"${",
  "[{ \"",
  "{ \"a",
  "$ECR",
  "$RUN",
]