The largest open-source database of regex patterns for detecting secrets, API keys, passwords, and tokens in code.
Secrets Patterns DB is an open-source database containing over 1600 regular expressions for detecting secrets, API keys, passwords, tokens, and other sensitive data in code. It solves the problem of limited, high-quality regex patterns available for secret scanning tools, providing a curated and tested collection that security teams can use to enhance their application security programs.
Security engineers, AppSec teams, and developers who need to integrate secret detection into their CI/CD pipelines or security tooling, particularly those using tools like TruffleHog or Gitleaks.
Developers choose Secrets Patterns DB because it offers the largest open-source collection of validated regex patterns for secret detection, with built-in ReDoS protection and support for multiple tools, reducing the effort required to maintain and update detection rules.
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
With over 1600 regular expressions, it offers the largest open-source collection for detecting secrets like API keys and tokens, far exceeding built-in rules in tools like TruffleHog.
All patterns are validated against Regular Expression Denial of Service attacks, ensuring safer usage in security scanning without introducing vulnerabilities.
Includes conversion scripts for popular tools like TruffleHog and Gitleaks, making it easy to integrate into existing workflows without lock-in to a single platform.
Patterns are categorized by confidence levels, helping users prioritize alerts and reduce noise in secret detection pipelines.
The project is explicitly labeled as in Beta, meaning patterns may lack maturity, have inconsistencies, or require manual validation for production use.
Users must run conversion scripts and configure tools themselves; it's not a plug-and-play solution, adding setup complexity compared to pre-integrated offerings.
Relies on community contributions for updates, which can lead to variable pattern accuracy or slower adoption of new secret formats without active maintenance.