# Django — SECRET_KEY, database credentials, third-party API keys
# Django SECRET_KEY — 50+ char string assigned in settings.py or .env files
- kind: regex
pattern: '(?i)(?:SECRET_KEY|DJANGO_SECRET_KEY)[\s:="'']+([^\s"'']{40,})'
category: auth_token
label: django_secret_key
- kind: allow
values:
- "django"
- "django.contrib"
- "djangoproject.com"
- "localhost:8000"
- "127.0.0.1:8000"
- "true"
- "false"
- "yes"
- "no"
- "null"
- "none"
- "nil"
- "0"
- "1"
- "localhost"
- "127.0.0.1"
- "0.0.0.0"
- "::1"
- "changeme"
- "example"
- "sample"
- "placeholder"
- "${*}"
- "{{*}}"
- "example.com"
- "example.org"