From 76f2d1f9af20c29d963e2535cee728a3e32bbe43 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Fri, 10 May 2024 14:11:34 +0530
Subject: [PATCH 001/136] Update main.yml without image sign

---
 .github/workflows/main.yml | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e1e9e69..6d8b12d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -143,17 +143,17 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
-      # Sign the resulting Docker image digest except on PRs.
-      # This will only write to the public Rekor transparency log when the Docker
-      # repository is public to avoid leaking data.  If you would like to publish
-      # transparency data even for private images, pass --force to cosign below.
-      # https://github.com/sigstore/cosign
-      - name: Sign the published Docker image
-        if: ${{ github.event_name != 'pull_request' }}
-        env:
-          # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
-          TAGS: ${{ steps.meta.outputs.tags }}
-          DIGEST: ${{ steps.build-and-push.outputs.digest }}
-        # This step uses the identity token to provision an ephemeral certificate
-        # against the sigstore community Fulcio instance.
-        run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+      # # Sign the resulting Docker image digest except on PRs.
+      # # This will only write to the public Rekor transparency log when the Docker
+      # # repository is public to avoid leaking data.  If you would like to publish
+      # # transparency data even for private images, pass --force to cosign below.
+      # # https://github.com/sigstore/cosign
+      # - name: Sign the published Docker image
+      #   if: ${{ github.event_name != 'pull_request' }}
+      #   env:
+      #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+      #     TAGS: ${{ steps.meta.outputs.tags }}
+      #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
+      #   # This step uses the identity token to provision an ephemeral certificate
+      #   # against the sigstore community Fulcio instance.
+      #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

From 82bd1022514d3b617f2aabf95f4f7110a5f6963d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Fri, 10 May 2024 14:15:40 +0530
Subject: [PATCH 002/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6d8b12d..f0c5512 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -12,8 +12,8 @@ on:
     branches: [ "docker-pipeline" ]
   #   # Publish semver tags as releases.
   #   tags: [ 'v*.*.*' ]
-  # pull_request:
-  #   branches: [ "docker-pipeline" ]
+  pull_request:
+    branches: [ "docker-pipeline" ]
     # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 

From 79d32fb8cfa4acf77debd9b1a1112992fa602f85 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Fri, 10 May 2024 15:14:52 +0530
Subject: [PATCH 003/136] Update main.yml

---
 .github/workflows/main.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f0c5512..4bc4ba3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -42,6 +42,15 @@ jobs:
         with:
           submodules: 'true'
           token: ${{ secrets.PAT_TOKEN }}
+          
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4
+        # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
+        with:
+          comment-summary-in-pr: always
+        #   fail-on-severity: moderate
+        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
+        #   retry-on-snapshot-warnings: true
       # - name: 'Dependency Review'
       #   if: github.event_name == 'workflow_dispatch'
       #   uses: actions/dependency-review-action@v4

From 2c42454f5d92c0874cda5679af29427d41ace4e1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 21 May 2024 12:46:21 +0530
Subject: [PATCH 004/136] Update main.yml

---
 .github/workflows/main.yml | 153 ++++++++++++++++++++++++++++++++++---
 1 file changed, 142 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4bc4ba3..1973821 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -22,6 +22,7 @@ env:
   REGISTRY: ghcr.io
   # github.repository as <account>/<repo>
   IMAGE_NAME: ${{ github.repository }}
+  TG: docker-pipeline
 
 
 jobs:
@@ -29,9 +30,11 @@ jobs:
 
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       packages: write
       security-events: write
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
       # This is used to complete the identity challenge
       # with sigstore/fulcio when running outside of PRs.
       id-token: write
@@ -43,19 +46,22 @@ jobs:
           submodules: 'true'
           token: ${{ secrets.PAT_TOKEN }}
           
-      - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v4
-        # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
-        with:
-          comment-summary-in-pr: always
-        #   fail-on-severity: moderate
-        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
-        #   retry-on-snapshot-warnings: true
+      - name: validating gradlle
+        uses: gradle/actions/wrapper-validation@v3
+          
       # - name: 'Dependency Review'
-      #   if: github.event_name == 'workflow_dispatch'
       #   uses: actions/dependency-review-action@v4
+      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
       #   with:
-      #     base-ref: 'docker-pipeline'
+      #     comment-summary-in-pr: always
+        #   fail-on-severity: moderate
+        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
+        #   retry-on-snapshot-warnings: true
+      - name: 'Dependency Review'
+        if: github.event_name == 'workflow_dispatch'
+        uses: actions/dependency-review-action@v4
+        with:
+          base-ref: 'docker-pipeline'
 
       # - uses: github/codeql-action/init@v3
       #   with:
@@ -67,6 +73,51 @@ jobs:
       # - name: Perform CodeQL Analysis
       #   uses: github/codeql-action/analyze@v3
 
+      # - name: Run Trivy scanner
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
+      #     ignore-unfixed: true
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL'
+      #     # hide-progress: true
+      #     # output: trivy.txt
+
+      # - name: Publish Trivy Output to Summary
+      #   run: |
+      #     if [[ -s trivy.txt ]]; then
+      #       {
+      #         echo "### Security Output"
+      #         echo "<details><summary>Click to expand</summary>"
+      #         echo ""
+      #         echo '```terraform'
+      #         cat trivy.txt
+      #         echo '```'
+      #         echo "</details>"
+      #       } >> $GITHUB_STEP_SUMMARY
+      #     fi
+
+##########################################################################
+      - name: Run Trivy vulnerability scanner in repo mode
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,LOW,MEDIUM,HIGH'
+          vuln-type: 'os,library'
+          scanners: 'vuln,secret'
+          
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
+
+ ##############################################         
+
       - name: Run Codacy Analysis CLI
         uses: codacy/codacy-analysis-cli-action@master
         
@@ -80,6 +131,9 @@ jobs:
       # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+        with:
+          gradle-version: '8.5'
+          dependency-graph: generate-and-submit
   
       - name: Build with Gradle Wrapper
         run: | 
@@ -107,6 +161,51 @@ jobs:
         with:
           name: jar-file
 
+     
+  # dependency-submission:
+
+  #   runs-on: ubuntu-latest
+  #   permissions:
+  #     contents: write
+
+  #   steps:
+  #   - uses: actions/checkout@v4
+  #   - name: Set up JDK 17
+  #     uses: actions/setup-java@v4
+  #     with:
+  #       java-version: '17'
+  #       distribution: 'temurin'
+
+  #   # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
+  #   # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
+  #   - name: Generate and submit dependency graph
+  #     uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+  #     with:
+  #       # Use a particular Gradle version instead of the configured wrapper.
+  #       gradle-version: 8.5
+
+  docker-build:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read
+    steps:
+
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
@@ -152,6 +251,38 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        with:
+          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
+          github-pat: ${{ secrets.PAT_TOKEN }}
+          docker-host: //var/run/docker.sock
+          vuln-type: 'os,library'
+          scanners: 'vuln,secret'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
+          
+      # - name: Scan image in a private registry
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
+      #     scan-type: 'image'
+      #     format: 'sarif'
+      #     output: 'trivy-results-image.sarif'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
+      #     severity: "MEDIUM,HIGH,CRITICAL"
+      #     scanners: "vuln"	 
+
+
+
       # # Sign the resulting Docker image digest except on PRs.
       # # This will only write to the public Rekor transparency log when the Docker
       # # repository is public to avoid leaking data.  If you would like to publish

From 253adbae4b9cc1ee6031b739c48645c4debac086 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 21 May 2024 14:39:14 +0530
Subject: [PATCH 005/136] Update main.yml

---
 .github/workflows/main.yml | 52 +++++++++++++++++++-------------------
 1 file changed, 26 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1973821..d115122 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -58,10 +58,10 @@ jobs:
         #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
         #   retry-on-snapshot-warnings: true
       - name: 'Dependency Review'
-        if: github.event_name == 'workflow_dispatch'
+        # if: github.event_name == 'workflow_dispatch'
         uses: actions/dependency-review-action@v4
-        with:
-          base-ref: 'docker-pipeline'
+        # with:
+        #   base-ref: 'docker-pipeline'
 
       # - uses: github/codeql-action/init@v3
       #   with:
@@ -118,8 +118,8 @@ jobs:
 
  ##############################################         
 
-      - name: Run Codacy Analysis CLI
-        uses: codacy/codacy-analysis-cli-action@master
+      # - name: Run Codacy Analysis CLI
+      #   uses: codacy/codacy-analysis-cli-action@master
         
       - name: Set up JDK 17
         uses: actions/setup-java@v4
@@ -162,27 +162,27 @@ jobs:
           name: jar-file
 
      
-  # dependency-submission:
-
-  #   runs-on: ubuntu-latest
-  #   permissions:
-  #     contents: write
-
-  #   steps:
-  #   - uses: actions/checkout@v4
-  #   - name: Set up JDK 17
-  #     uses: actions/setup-java@v4
-  #     with:
-  #       java-version: '17'
-  #       distribution: 'temurin'
-
-  #   # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
-  #   # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
-  #   - name: Generate and submit dependency graph
-  #     uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
-  #     with:
-  #       # Use a particular Gradle version instead of the configured wrapper.
-  #       gradle-version: 8.5
+  dependency-submission:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Set up JDK 17
+      uses: actions/setup-java@v4
+      with:
+        java-version: '17'
+        distribution: 'temurin'
+
+    # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
+    # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
+    - name: Generate and submit dependency graph
+      uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+      with:
+        # Use a particular Gradle version instead of the configured wrapper.
+        gradle-version: 8.5
 
   docker-build:
     needs: build

From 8ff86bc1033f7d049c8c4c3c43cfd3b36a437608 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 21 May 2024 14:50:46 +0530
Subject: [PATCH 006/136] Update main.yml

---
 .github/workflows/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d115122..d9e0af2 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -183,6 +183,9 @@ jobs:
       with:
         # Use a particular Gradle version instead of the configured wrapper.
         gradle-version: 8.5
+        
+    - name: Perform dependency review
+      uses: actions/dependency-review-action@v3
 
   docker-build:
     needs: build

From d8d444d72c9b30ccb276dbd171ce013993734518 Mon Sep 17 00:00:00 2001
From: RJAC5D <raviraj.jambullingam@scania.com>
Date: Tue, 21 May 2024 16:19:02 +0200
Subject: [PATCH 007/136] pushing changes for dependency vulnerability and
 secret scanning

---
 build.gradle                                         | 10 ++++------
 .../com/scania/sdos/orchestration/Rdf4jClient.java   | 12 ++++++++++++
 2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/build.gradle b/build.gradle
index fb41f13..c9fe601 100644
--- a/build.gradle
+++ b/build.gradle
@@ -40,13 +40,11 @@ ext['log4j2.version'] = '2.22.1'
 
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-actuator'
-    implementation("org.springframework.boot:spring-boot-starter-web") {
-        exclude group: 'org.springframework', module: 'spring-web'
-    }
+    implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-web-services'
     implementation 'org.springframework.boot:spring-boot-starter-log4j2'
     runtimeOnly group: 'org.apache.logging.log4j', name: 'log4j-layout-template-json', version: '2.22.1'
-	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.4.0'
+    implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.4.0'
     implementation 'io.swagger.core.v3:swagger-annotations-jakarta:2.2.20'
     implementation 'org.springframework:spring-web:6.1.5'
 
@@ -55,7 +53,7 @@ dependencies {
     implementation 'com.lmax:disruptor:3.4.1'
     implementation 'org.apache.httpcomponents:httpclient:4.5.13'
     implementation group: 'com.predic8', name: 'soa-model-core', version: '2.0.1'
-    implementation 'org.restlet.jee:org.restlet.ext.json:2.4-M1'
+    implementation 'org.restlet.jee:org.restlet.ext.json:2.3.12'
     implementation group: 'com.google.code.gson', name: 'gson', version: '2.8.9'
     implementation 'org.apache.groovy:groovy-xml:4.0.5'
     implementation 'org.apache.groovy:groovy-json:4.0.5'
@@ -70,7 +68,7 @@ dependencies {
     implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
     implementation group: 'org.apache.shiro', name: 'shiro-core', version: '2.0.0'
     implementation group: 'org.json', name: 'json', version: '20240303'
-    implementation group: 'com.google.guava', name: 'guava', version: '33.0.0-jre'
+    implementation group: 'com.google.guava', name: 'guava', version: '32.0.0-jre'
 
     testImplementation 'org.junit.jupiter:junit-jupiter:5.6.0'
     testImplementation 'org.junit.jupiter:junit-jupiter-params:5.6.0'
diff --git a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
index c0dd476..2ad38c1 100644
--- a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
+++ b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
@@ -67,6 +67,18 @@ public class Rdf4jClient {
 
   private static String STARDOG_PASS = "password";
 
+  private static String aws_session_token = "gfhvbdfdter547uthgy";
+
+  private static String aws_temporary_access_key_id = "12345";
+
+  private static String azure_function_key = "azure_function_key";
+
+  private static String baiducloud_api_accesskey = "baiducloud_api_accesskey";
+
+  private static String cratesio_api_token = "cratesio_api_token";
+
+
+
   public Rdf4jClient() {
     //default  constructor
   }

From 8df2a4ef402aea012a22430aaac1d0aac41c79ae Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 21 May 2024 20:41:51 +0530
Subject: [PATCH 008/136] Update main.yml

---
 .github/workflows/main.yml | 32 +++++++++++++++++---------------
 1 file changed, 17 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d9e0af2..a399990 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -57,9 +57,9 @@ jobs:
         #   fail-on-severity: moderate
         #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
         #   retry-on-snapshot-warnings: true
-      - name: 'Dependency Review'
-        # if: github.event_name == 'workflow_dispatch'
-        uses: actions/dependency-review-action@v4
+      # - name: 'Dependency Review'
+      #   # if: github.event_name == 'workflow_dispatch'
+      #   uses: actions/dependency-review-action@v4
         # with:
         #   base-ref: 'docker-pipeline'
 
@@ -134,6 +134,7 @@ jobs:
         with:
           gradle-version: '8.5'
           dependency-graph: generate-and-submit
+          cache-disabled: true
   
       - name: Build with Gradle Wrapper
         run: | 
@@ -163,28 +164,29 @@ jobs:
 
      
   dependency-submission:
-
+    needs: build
     runs-on: ubuntu-latest
     permissions:
       contents: write
 
     steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK 17
-      uses: actions/setup-java@v4
-      with:
-        java-version: '17'
-        distribution: 'temurin'
+    # - uses: actions/checkout@v4
+    # - name: Set up JDK 17
+    #   uses: actions/setup-java@v4
+    #   with:
+    #     java-version: '17'
+    #     distribution: 'temurin'
 
     # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
     # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
-    - name: Generate and submit dependency graph
-      uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
-      with:
-        # Use a particular Gradle version instead of the configured wrapper.
-        gradle-version: 8.5
+    # - name: Generate and submit dependency graph
+    #   uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+    #   with:
+    #     # Use a particular Gradle version instead of the configured wrapper.
+    #     gradle-version: 8.5
         
     - name: Perform dependency review
+      if: github.event_name == 'pull_request'
       uses: actions/dependency-review-action@v3
 
   docker-build:

From 16e9220a3515f878897dd771b46726604a635214 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 21 May 2024 21:07:28 +0530
Subject: [PATCH 009/136] Update main.yml

---
 .github/workflows/main.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a399990..c505e1c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -127,14 +127,20 @@ jobs:
           java-version: '17'
           distribution: 'temurin'
 
+      - name: Set up Gradle Build Action
+        uses: gradle/gradle-build-action@v3
+        with:
+          dependency-graph: generate-and-submit
+          cache-disabled: true
+          
       # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
       # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
         with:
           gradle-version: '8.5'
-          dependency-graph: generate-and-submit
-          cache-disabled: true
+          # dependency-graph: generate-and-submit
+          # cache-disabled: true
   
       - name: Build with Gradle Wrapper
         run: | 

From 9e111d2cef2dc4e64288863debc087a41e29f9e9 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 11:42:47 +0530
Subject: [PATCH 010/136] Update main.yml

---
 .github/workflows/main.yml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c505e1c..6b1bc4f 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -133,14 +133,14 @@ jobs:
           dependency-graph: generate-and-submit
           cache-disabled: true
           
-      # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
-      # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-        with:
-          gradle-version: '8.5'
-          # dependency-graph: generate-and-submit
-          # cache-disabled: true
+      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
+      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #     # dependency-graph: generate-and-submit
+      #     # cache-disabled: true
   
       - name: Build with Gradle Wrapper
         run: | 

From 8fd7ce0cfac81e750d94b37b2f408b551a2b57b3 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 14:05:49 +0530
Subject: [PATCH 011/136] Update main.yml

---
 .github/workflows/main.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6b1bc4f..94d3fa7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -127,11 +127,15 @@ jobs:
           java-version: '17'
           distribution: 'temurin'
 
+      - name: Run chmod to make gradlew executable
+        run: chmod +x ./gradlew
+        
       - name: Set up Gradle Build Action
         uses: gradle/gradle-build-action@v3
         with:
           dependency-graph: generate-and-submit
           cache-disabled: true
+      - run: ./gradlew build
           
       # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
       # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
@@ -142,10 +146,8 @@ jobs:
       #     # dependency-graph: generate-and-submit
       #     # cache-disabled: true
   
-      - name: Build with Gradle Wrapper
-        run: | 
-          chmod +x ./gradlew
-          ./gradlew build
+      # - name: Build with Gradle Wrapper
+      #   run: ./gradlew build
 
       # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
       # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.

From f10040e420dd6359a53ced34d42c48f2c8cd1e2a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:12:31 +0530
Subject: [PATCH 012/136] Update main.yml

---
 .github/workflows/main.yml | 313 ++-----------------------------------
 1 file changed, 13 insertions(+), 300 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 94d3fa7..2396744 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,312 +1,25 @@
-name: Docker
-
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
+name: Generate and save dependency graph
 
 on:
-  # schedule:
-  #   - cron: '27 0 * * *'
-  push:
-    branches: [ "docker-pipeline" ]
-  #   # Publish semver tags as releases.
-  #   tags: [ 'v*.*.*' ]
   pull_request:
     branches: [ "docker-pipeline" ]
     # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
-env:
-  # Use docker.io for Docker Hub if empty
-  REGISTRY: ghcr.io
-  # github.repository as <account>/<repo>
-  IMAGE_NAME: ${{ github.repository }}
-  TG: docker-pipeline
-
+permissions:
+  contents: read # 'write' permission is not available
 
 jobs:
-  build:
-
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
-
-      # This is used to complete the identity challenge
-      # with sigstore/fulcio when running outside of PRs.
-      id-token: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          submodules: 'true'
-          token: ${{ secrets.PAT_TOKEN }}
-          
-      - name: validating gradlle
-        uses: gradle/actions/wrapper-validation@v3
-          
-      # - name: 'Dependency Review'
-      #   uses: actions/dependency-review-action@v4
-      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
-      #   with:
-      #     comment-summary-in-pr: always
-        #   fail-on-severity: moderate
-        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
-        #   retry-on-snapshot-warnings: true
-      # - name: 'Dependency Review'
-      #   # if: github.event_name == 'workflow_dispatch'
-      #   uses: actions/dependency-review-action@v4
-        # with:
-        #   base-ref: 'docker-pipeline'
-
-      # - uses: github/codeql-action/init@v3
-      #   with:
-      #     languages: java
-
-      # - name: Autobuild
-      #   uses: github/codeql-action/autobuild@v3
-          
-      # - name: Perform CodeQL Analysis
-      #   uses: github/codeql-action/analyze@v3
-
-      # - name: Run Trivy scanner
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     scan-type: 'fs'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
-      #     ignore-unfixed: true
-      #     format: 'sarif'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL'
-      #     # hide-progress: true
-      #     # output: trivy.txt
-
-      # - name: Publish Trivy Output to Summary
-      #   run: |
-      #     if [[ -s trivy.txt ]]; then
-      #       {
-      #         echo "### Security Output"
-      #         echo "<details><summary>Click to expand</summary>"
-      #         echo ""
-      #         echo '```terraform'
-      #         cat trivy.txt
-      #         echo '```'
-      #         echo "</details>"
-      #       } >> $GITHUB_STEP_SUMMARY
-      #     fi
-
-##########################################################################
-      - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
-        with:
-          scan-type: 'fs'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,LOW,MEDIUM,HIGH'
-          vuln-type: 'os,library'
-          scanners: 'vuln,secret'
-          
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results.sarif'
-
- ##############################################         
-
-      # - name: Run Codacy Analysis CLI
-      #   uses: codacy/codacy-analysis-cli-action@master
-        
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - name: Run chmod to make gradlew executable
-        run: chmod +x ./gradlew
-        
-      - name: Set up Gradle Build Action
-        uses: gradle/gradle-build-action@v3
-        with:
-          dependency-graph: generate-and-submit
-          cache-disabled: true
-      - run: ./gradlew build
-          
-      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
-      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #     # dependency-graph: generate-and-submit
-      #     # cache-disabled: true
-  
-      # - name: Build with Gradle Wrapper
-      #   run: ./gradlew build
-
-      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
-      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
-      #
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #
-      # - name: Build with Gradle 8.5
-      #   run: gradle build
-
-
-      - uses: actions/upload-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-  
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-
-     
   dependency-submission:
-    needs: build
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-    # - uses: actions/checkout@v4
-    # - name: Set up JDK 17
-    #   uses: actions/setup-java@v4
-    #   with:
-    #     java-version: '17'
-    #     distribution: 'temurin'
-
-    # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
-    # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
-    # - name: Generate and submit dependency graph
-    #   uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
-    #   with:
-    #     # Use a particular Gradle version instead of the configured wrapper.
-    #     gradle-version: 8.5
-        
-    - name: Perform dependency review
-      if: github.event_name == 'pull_request'
-      uses: actions/dependency-review-action@v3
-
-  docker-build:
-    needs: build
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-      actions: read
     steps:
-
-      - uses: actions/checkout@v4
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-
-      # Install the cosign tool except on PR
-      # https://github.com/sigstore/cosign-installer
-      - name: Install cosign
-        if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
-        with:
-          cosign-release: 'v2.1.1'
-
-      # Set up BuildKit Docker container builder to be able to build
-      # multi-platform images and export cache
-      # https://github.com/docker/setup-buildx-action
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
-
-      # Login against a Docker registry except on PR
-      # https://github.com/docker/login-action
-      - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      # Extract metadata (tags, labels) for Docker
-      # https://github.com/docker/metadata-action
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-
-      # Build and push Docker image with Buildx (don't push on PR)
-      # https://github.com/docker/build-push-action
-      - name: Build and push Docker image
-        id: build-and-push
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
-        with:
-          context: .
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
-        with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
-          format: 'template'
-          template: '@/contrib/sarif.tpl'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
-          github-pat: ${{ secrets.PAT_TOKEN }}
-          docker-host: //var/run/docker.sock
-          vuln-type: 'os,library'
-          scanners: 'vuln,secret'
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results.sarif'
-          
-      # - name: Scan image in a private registry
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
-      #     scan-type: 'image'
-      #     format: 'sarif'
-      #     output: 'trivy-results-image.sarif'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
-      #     severity: "MEDIUM,HIGH,CRITICAL"
-      #     scanners: "vuln"	 
-
-
-
-      # # Sign the resulting Docker image digest except on PRs.
-      # # This will only write to the public Rekor transparency log when the Docker
-      # # repository is public to avoid leaking data.  If you would like to publish
-      # # transparency data even for private images, pass --force to cosign below.
-      # # https://github.com/sigstore/cosign
-      # - name: Sign the published Docker image
-      #   if: ${{ github.event_name != 'pull_request' }}
-      #   env:
-      #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
-      #     TAGS: ${{ steps.meta.outputs.tags }}
-      #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
-      #   # This step uses the identity token to provision an ephemeral certificate
-      #   # against the sigstore community Fulcio instance.
-      #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+    - uses: actions/checkout@v4
+    - uses: actions/setup-java@v4
+      with:
+        distribution: temurin
+        java-version: 17
+
+    - name: Generate and save dependency graph
+      uses: gradle/actions/dependency-submission@v3
+      with:
+        dependency-graph: generate-and-upload

From cc7795fc421833ddf68d91e57a63f8aefbd285a0 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:21:30 +0530
Subject: [PATCH 013/136] Create dependent-workflow.yml

---
 .github/workflows/dependent-workflow.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/workflows/dependent-workflow.yml

diff --git a/.github/workflows/dependent-workflow.yml b/.github/workflows/dependent-workflow.yml
new file mode 100644
index 0000000..a2d3fdd
--- /dev/null
+++ b/.github/workflows/dependent-workflow.yml
@@ -0,0 +1,18 @@
+name: Download and submit dependency graph
+
+on:
+  workflow_run:
+    workflows: ['Generate and save dependency graph']
+    types: [completed]
+
+permissions:
+  contents: write
+
+jobs:
+  submit-dependency-graph:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Download and submit dependency graph
+      uses: gradle/actions/dependency-submission@v3
+      with:
+        dependency-graph: download-and-submit # Download saved dependency-graph and submit

From 0a4ed53b14ad3e97fa8e5cb049d973ab199627fa Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:22:34 +0530
Subject: [PATCH 014/136] Create review.yml

---
 .github/workflows/review.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/workflows/review.yml

diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
new file mode 100644
index 0000000..3c215da
--- /dev/null
+++ b/.github/workflows/review.yml
@@ -0,0 +1,20 @@
+name: dependency-review
+
+on:
+  pull_request:
+    branches: [ "docker-pipeline" ]
+    # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+    - name: 'Dependency Review'
+      uses: actions/dependency-review-action@v3
+      with:
+        retry-on-snapshot-warnings: true
+        retry-on-snapshot-warnings-timeout: 600

From 71d6c394019e5e0731cb8ba86b22fb45ec0835b1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:30:02 +0530
Subject: [PATCH 015/136] Update review.yml

---
 .github/workflows/review.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index 3c215da..222be16 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -1,11 +1,12 @@
 name: dependency-review
 
 on:
-  pull_request:
-    branches: [ "docker-pipeline" ]
+  # pull_request:
+  #   branches: [ "docker-pipeline" ]
     # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-
+  workflow_run:
+    workflows: ['name: Download and submit dependency graph']
+    types: [completed]
 permissions:
   contents: read
 

From e6e6b1f802a63bc50f1281cce0358580ed672e18 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:40:34 +0530
Subject: [PATCH 016/136] Update review.yml

---
 .github/workflows/review.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index 222be16..2ff6805 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -1,12 +1,12 @@
 name: dependency-review
 
 on:
-  # pull_request:
-  #   branches: [ "docker-pipeline" ]
-    # Allows you to run this workflow manually from the Actions tab
-  workflow_run:
-    workflows: ['name: Download and submit dependency graph']
-    types: [completed]
+  pull_request:
+    branches: [ "docker-pipeline" ]
+  # Allows you to run this workflow manually from the Actions tab
+  # workflow_run:
+  #   workflows: ['name: Download and submit dependency graph']
+  #   types: [completed]
 permissions:
   contents: read
 

From 80e0a45ec0258e8177b00a01d8db5e91e382e00c Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 15:45:58 +0530
Subject: [PATCH 017/136] Create dependabot.yml

---
 .github/dependabot.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..3e4a382
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "gradle" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"

From 87199ad058bf24fafff44813d3a9127b611d6346 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 16:01:44 +0530
Subject: [PATCH 018/136] Update main.yml

---
 .github/workflows/main.yml | 313 +++++++++++++++++++++++++++++++++++--
 1 file changed, 300 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2396744..59629d5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,25 +1,312 @@
-name: Generate and save dependency graph
+name: Docker
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
 
 on:
+  # schedule:
+  #   - cron: '27 0 * * *'
+  push:
+    branches: [ "docker-pipeline" ]
+  #   # Publish semver tags as releases.
+  #   tags: [ 'v*.*.*' ]
   pull_request:
     branches: [ "docker-pipeline" ]
     # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
-permissions:
-  contents: read # 'write' permission is not available
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+  TG: docker-pipeline
+
 
 jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+          token: ${{ secrets.PAT_TOKEN }}
+          
+      - name: validating gradlle
+        uses: gradle/actions/wrapper-validation@v3
+          
+      # - name: 'Dependency Review'
+      #   uses: actions/dependency-review-action@v4
+      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
+      #   with:
+      #     comment-summary-in-pr: always
+        #   fail-on-severity: moderate
+        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
+        #   retry-on-snapshot-warnings: true
+      # - name: 'Dependency Review'
+      #   # if: github.event_name == 'workflow_dispatch'
+      #   uses: actions/dependency-review-action@v4
+        # with:
+        #   base-ref: 'docker-pipeline'
+
+      # - uses: github/codeql-action/init@v3
+      #   with:
+      #     languages: java
+
+      # - name: Autobuild
+      #   uses: github/codeql-action/autobuild@v3
+          
+      # - name: Perform CodeQL Analysis
+      #   uses: github/codeql-action/analyze@v3
+
+      # - name: Run Trivy scanner
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
+      #     ignore-unfixed: true
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL'
+      #     # hide-progress: true
+      #     # output: trivy.txt
+
+      # - name: Publish Trivy Output to Summary
+      #   run: |
+      #     if [[ -s trivy.txt ]]; then
+      #       {
+      #         echo "### Security Output"
+      #         echo "<details><summary>Click to expand</summary>"
+      #         echo ""
+      #         echo '```terraform'
+      #         cat trivy.txt
+      #         echo '```'
+      #         echo "</details>"
+      #       } >> $GITHUB_STEP_SUMMARY
+      #     fi
+
+##########################################################################
+      - name: Run Trivy vulnerability scanner in repo mode
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,LOW,MEDIUM,HIGH'
+          vuln-type: 'os,library'
+          scanners: 'vuln,secret'
+          
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
+
+ ##############################################         
+
+      # - name: Run Codacy Analysis CLI
+      #   uses: codacy/codacy-analysis-cli-action@master
+        
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Run chmod to make gradlew executable
+        run: chmod +x ./gradlew
+        
+      - name: Set up Gradle Build Action
+        uses: gradle/gradle-build-action@v3
+        with:
+          dependency-graph: generate-and-upload
+          cache-disabled: true
+      - run: ./gradlew build
+          
+      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
+      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #     # dependency-graph: generate-and-submit
+      #     # cache-disabled: true
+  
+      # - name: Build with Gradle Wrapper
+      #   run: ./gradlew build
+
+      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
+      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
+      #
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #
+      # - name: Build with Gradle 8.5
+      #   run: gradle build
+
+
+      - uses: actions/upload-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+  
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+
+     
   dependency-submission:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+    # - uses: actions/checkout@v4
+    # - name: Set up JDK 17
+    #   uses: actions/setup-java@v4
+    #   with:
+    #     java-version: '17'
+    #     distribution: 'temurin'
+
+    # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
+    # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
+     - name: Generate and submit dependency graph
+       uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+    #   with:
+    #     # Use a particular Gradle version instead of the configured wrapper.
+    #     gradle-version: 8.5
+        
+     - name: Perform dependency review
+       if: github.event_name == 'pull_request'
+       uses: actions/dependency-review-action@v3
+
+  docker-build:
+    needs: build
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-java@v4
-      with:
-        distribution: temurin
-        java-version: 17
-
-    - name: Generate and save dependency graph
-      uses: gradle/actions/dependency-submission@v3
-      with:
-        dependency-graph: generate-and-upload
+
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+
+      # Install the cosign tool except on PR
+      # https://github.com/sigstore/cosign-installer
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
+        with:
+          cosign-release: 'v2.1.1'
+
+      # Set up BuildKit Docker container builder to be able to build
+      # multi-platform images and export cache
+      # https://github.com/docker/setup-buildx-action
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Extract metadata (tags, labels) for Docker
+      # https://github.com/docker/metadata-action
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      # Build and push Docker image with Buildx (don't push on PR)
+      # https://github.com/docker/build-push-action
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        with:
+          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
+          github-pat: ${{ secrets.PAT_TOKEN }}
+          docker-host: //var/run/docker.sock
+          vuln-type: 'os,library'
+          scanners: 'vuln,secret'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
+          
+      # - name: Scan image in a private registry
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
+      #     scan-type: 'image'
+      #     format: 'sarif'
+      #     output: 'trivy-results-image.sarif'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
+      #     severity: "MEDIUM,HIGH,CRITICAL"
+      #     scanners: "vuln"	 
+
+
+
+      # # Sign the resulting Docker image digest except on PRs.
+      # # This will only write to the public Rekor transparency log when the Docker
+      # # repository is public to avoid leaking data.  If you would like to publish
+      # # transparency data even for private images, pass --force to cosign below.
+      # # https://github.com/sigstore/cosign
+      # - name: Sign the published Docker image
+      #   if: ${{ github.event_name != 'pull_request' }}
+      #   env:
+      #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+      #     TAGS: ${{ steps.meta.outputs.tags }}
+      #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
+      #   # This step uses the identity token to provision an ephemeral certificate
+      #   # against the sigstore community Fulcio instance.
+      #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

From e9dc8fbb20f5252b89e09cdac574851adebc69b9 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 16:35:13 +0530
Subject: [PATCH 019/136] Update main.yml

---
 .github/workflows/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 59629d5..7492db3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -129,6 +129,16 @@ jobs:
 
       - name: Run chmod to make gradlew executable
         run: chmod +x ./gradlew
+
+      - name: check
+        run: |
+          ./gradlew dependencyCheckAnalyze
+
+      - name: upload check
+        uses: actions/upload-artifact@v2
+        with:
+          name: dependency-check-report
+          path: ${{ gihub.workspace }}/build/reports/dependency-check-report.html
         
       - name: Set up Gradle Build Action
         uses: gradle/gradle-build-action@v3

From 2fe8e6be0a03ff090836320702021d767a9e6acb Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 16:39:46 +0530
Subject: [PATCH 020/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7492db3..ad3c380 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -138,7 +138,7 @@ jobs:
         uses: actions/upload-artifact@v2
         with:
           name: dependency-check-report
-          path: ${{ gihub.workspace }}/build/reports/dependency-check-report.html
+          path: ${{ github.workspace }}/build/reports/dependency-check-report.html
         
       - name: Set up Gradle Build Action
         uses: gradle/gradle-build-action@v3

From 4360b291bc547bd6dd2fcdc99272a735344c3dac Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 16:50:57 +0530
Subject: [PATCH 021/136] Update build.gradle

---
 build.gradle | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.gradle b/build.gradle
index c9fe601..6eb1555 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,6 +3,7 @@ plugins {
     id 'io.spring.dependency-management' version '1.0.11.RELEASE'
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
+    id 'org.owasp.dependencycheck' version '6.0.2'
 }
 
 group = 'com.scania.sdos'

From 6e7613cdcc4e5afaefa8751366d9f1424b592b7d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 22 May 2024 18:43:17 +0530
Subject: [PATCH 022/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ad3c380..33d994c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -132,7 +132,7 @@ jobs:
 
       - name: check
         run: |
-          ./gradlew dependencyCheckAnalyze
+          ./gradlew dependencyCheckAnalyze --debug
 
       - name: upload check
         uses: actions/upload-artifact@v2

From a494015184705c15a741e1b7824241cded7adef2 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 23 May 2024 14:18:57 +0530
Subject: [PATCH 023/136] Update main.yml

---
 .github/workflows/main.yml | 42 +++++++++++++++++++-------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 33d994c..21e5845 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -100,21 +100,21 @@ jobs:
       #     fi
 
 ##########################################################################
-      - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
-        with:
-          scan-type: 'fs'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,LOW,MEDIUM,HIGH'
-          vuln-type: 'os,library'
-          scanners: 'vuln,secret'
+      # - name: Run Trivy vulnerability scanner in repo mode
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL,LOW,MEDIUM,HIGH'
+      #     vuln-type: 'os,library'
+      #     scanners: 'vuln,secret'
           
 
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results.sarif'
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
 
  ##############################################         
 
@@ -130,15 +130,15 @@ jobs:
       - name: Run chmod to make gradlew executable
         run: chmod +x ./gradlew
 
-      - name: check
-        run: |
-          ./gradlew dependencyCheckAnalyze --debug
+      # - name: check
+      #   run: |
+      #     ./gradlew dependencyCheckAnalyze --debug
 
-      - name: upload check
-        uses: actions/upload-artifact@v2
-        with:
-          name: dependency-check-report
-          path: ${{ github.workspace }}/build/reports/dependency-check-report.html
+      # - name: upload check
+      #   uses: actions/upload-artifact@v2
+      #   with:
+      #     name: dependency-check-report
+      #     path: ${{ github.workspace }}/build/reports/dependency-check-report.html
         
       - name: Set up Gradle Build Action
         uses: gradle/gradle-build-action@v3

From 209bc4d1bea4a2feafebb75525a8fb0b7f2d467a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 23 May 2024 14:21:21 +0530
Subject: [PATCH 024/136] Update main.yml

---
 .github/workflows/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 21e5845..ad507cf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -268,6 +268,7 @@ jobs:
         uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
         with:
           context: .
+          build-args: --load
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

From d2ab73567e9e2b92edf1e08a4df9b7276af7447d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Fri, 24 May 2024 13:22:00 +0530
Subject: [PATCH 025/136] Update main.yml

---
 .github/workflows/main.yml | 331 ++++---------------------------------
 1 file changed, 30 insertions(+), 301 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ad507cf..0cbb103 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,323 +1,52 @@
-name: Docker
-
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-
+name: Run Gradle Build
 on:
-  # schedule:
-  #   - cron: '27 0 * * *'
   push:
     branches: [ "docker-pipeline" ]
-  #   # Publish semver tags as releases.
-  #   tags: [ 'v*.*.*' ]
   pull_request:
     branches: [ "docker-pipeline" ]
-    # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-
-env:
-  # Use docker.io for Docker Hub if empty
-  REGISTRY: ghcr.io
-  # github.repository as <account>/<repo>
-  IMAGE_NAME: ${{ github.repository }}
-  TG: docker-pipeline
-
-
 jobs:
   build:
-
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
-
-      # This is used to complete the identity challenge
-      # with sigstore/fulcio when running outside of PRs.
-      id-token: write
-
     steps:
-      - name: Checkout repository
+      - name: Checkout
         uses: actions/checkout@v4
         with:
           submodules: 'true'
-          token: ${{ secrets.PAT_TOKEN }}
-          
-      - name: validating gradlle
-        uses: gradle/actions/wrapper-validation@v3
-          
-      # - name: 'Dependency Review'
-      #   uses: actions/dependency-review-action@v4
-      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
-      #   with:
-      #     comment-summary-in-pr: always
-        #   fail-on-severity: moderate
-        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
-        #   retry-on-snapshot-warnings: true
-      # - name: 'Dependency Review'
-      #   # if: github.event_name == 'workflow_dispatch'
-      #   uses: actions/dependency-review-action@v4
-        # with:
-        #   base-ref: 'docker-pipeline'
-
-      # - uses: github/codeql-action/init@v3
-      #   with:
-      #     languages: java
-
-      # - name: Autobuild
-      #   uses: github/codeql-action/autobuild@v3
-          
-      # - name: Perform CodeQL Analysis
-      #   uses: github/codeql-action/analyze@v3
-
-      # - name: Run Trivy scanner
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     scan-type: 'fs'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
-      #     ignore-unfixed: true
-      #     format: 'sarif'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL'
-      #     # hide-progress: true
-      #     # output: trivy.txt
-
-      # - name: Publish Trivy Output to Summary
-      #   run: |
-      #     if [[ -s trivy.txt ]]; then
-      #       {
-      #         echo "### Security Output"
-      #         echo "<details><summary>Click to expand</summary>"
-      #         echo ""
-      #         echo '```terraform'
-      #         cat trivy.txt
-      #         echo '```'
-      #         echo "</details>"
-      #       } >> $GITHUB_STEP_SUMMARY
-      #     fi
-
-##########################################################################
-      # - name: Run Trivy vulnerability scanner in repo mode
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     scan-type: 'fs'
-      #     format: 'sarif'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL,LOW,MEDIUM,HIGH'
-      #     vuln-type: 'os,library'
-      #     scanners: 'vuln,secret'
-          
-
-      # - name: Upload Trivy scan results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy-results.sarif'
-
- ##############################################         
-
-      # - name: Run Codacy Analysis CLI
-      #   uses: codacy/codacy-analysis-cli-action@master
-        
+          token: ${{ secrets.PAT_TOKEN }} 
       - name: Set up JDK 17
         uses: actions/setup-java@v4
         with:
           java-version: '17'
           distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3
+      - name: Build with Gradle
+        run: |
+          chmod +x ./gradlew
+          ./gradlew build
 
-      - name: Run chmod to make gradlew executable
-        run: chmod +x ./gradlew
-
-      # - name: check
-      #   run: |
-      #     ./gradlew dependencyCheckAnalyze --debug
-
-      # - name: upload check
-      #   uses: actions/upload-artifact@v2
-      #   with:
-      #     name: dependency-check-report
-      #     path: ${{ github.workspace }}/build/reports/dependency-check-report.html
-        
-      - name: Set up Gradle Build Action
-        uses: gradle/gradle-build-action@v3
-        with:
-          dependency-graph: generate-and-upload
-          cache-disabled: true
-      - run: ./gradlew build
-          
-      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
-      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #     # dependency-graph: generate-and-submit
-      #     # cache-disabled: true
-  
-      # - name: Build with Gradle Wrapper
-      #   run: ./gradlew build
-
-      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
-      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
-      #
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #
-      # - name: Build with Gradle 8.5
-      #   run: gradle build
-
-
-      - uses: actions/upload-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-  
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-
-     
   dependency-submission:
-    needs: build
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-    # - uses: actions/checkout@v4
-    # - name: Set up JDK 17
-    #   uses: actions/setup-java@v4
-    #   with:
-    #     java-version: '17'
-    #     distribution: 'temurin'
-
-    # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
-    # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
-     - name: Generate and submit dependency graph
-       uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
-    #   with:
-    #     # Use a particular Gradle version instead of the configured wrapper.
-    #     gradle-version: 8.5
-        
-     - name: Perform dependency review
-       if: github.event_name == 'pull_request'
-       uses: actions/dependency-review-action@v3
-
-  docker-build:
     needs: build
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-      actions: read
     steps:
-
-      - uses: actions/checkout@v4
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-
-      # Install the cosign tool except on PR
-      # https://github.com/sigstore/cosign-installer
-      - name: Install cosign
-        if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
-        with:
-          cosign-release: 'v2.1.1'
-
-      # Set up BuildKit Docker container builder to be able to build
-      # multi-platform images and export cache
-      # https://github.com/docker/setup-buildx-action
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
-
-      # Login against a Docker registry except on PR
-      # https://github.com/docker/login-action
-      - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      # Extract metadata (tags, labels) for Docker
-      # https://github.com/docker/metadata-action
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-
-      # Build and push Docker image with Buildx (don't push on PR)
-      # https://github.com/docker/build-push-action
-      - name: Build and push Docker image
-        id: build-and-push
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
-        with:
-          context: .
-          build-args: --load
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
-        with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
-          format: 'template'
-          template: '@/contrib/sarif.tpl'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
-          github-pat: ${{ secrets.PAT_TOKEN }}
-          docker-host: //var/run/docker.sock
-          vuln-type: 'os,library'
-          scanners: 'vuln,secret'
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results.sarif'
-          
-      # - name: Scan image in a private registry
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
-      #     scan-type: 'image'
-      #     format: 'sarif'
-      #     output: 'trivy-results-image.sarif'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
-      #     severity: "MEDIUM,HIGH,CRITICAL"
-      #     scanners: "vuln"	 
-
-
-
-      # # Sign the resulting Docker image digest except on PRs.
-      # # This will only write to the public Rekor transparency log when the Docker
-      # # repository is public to avoid leaking data.  If you would like to publish
-      # # transparency data even for private images, pass --force to cosign below.
-      # # https://github.com/sigstore/cosign
-      # - name: Sign the published Docker image
-      #   if: ${{ github.event_name != 'pull_request' }}
-      #   env:
-      #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
-      #     TAGS: ${{ steps.meta.outputs.tags }}
-      #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
-      #   # This step uses the identity token to provision an ephemeral certificate
-      #   # against the sigstore community Fulcio instance.
-      #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+    - name: Checkout sources
+      uses: actions/checkout@v4
+      with:
+        submodules: 'true'
+        token: ${{ secrets.PAT_TOKEN }} 
+    - name: Setup Java
+      uses: actions/setup-java@v4
+      with:
+        distribution: 'temurin'
+        java-version: 17
+    - name: Generate and submit dependency graph
+      uses: gradle/actions/dependency-submission@v3
+      
+  submit-and-review:
+      runs-on: ubuntu-latest
+      if: github.event_name == 'pull_request'
+      needs: build
+      steps:
+      - name: 'Dependency Review'
+        if: github.event_name == 'pull_request'
+        uses: actions/dependency-review-action@v3        

From ff744f81e0ab59fbbca6980bdadca73c51b4494b Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Sat, 25 May 2024 11:45:06 +0530
Subject: [PATCH 026/136] Update main.yml

---
 .github/workflows/main.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index de2a454..30f84a1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -7,6 +7,10 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -50,4 +54,4 @@ jobs:
       steps:
       - name: 'Dependency Review'
         if: github.event_name == 'pull_request'
-        uses: actions/dependency-review-action@v3        
\ No newline at end of file
+        uses: actions/dependency-review-action@v3        

From 980c589d7a951a75e0b771d3f06d8cf7f43af50f Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 12:19:01 +0530
Subject: [PATCH 027/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 30f84a1..5b124e7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Build with Gradle
         run: |
           chmod +x ./gradlew
-          ./gradlew build
+          ./gradlew build --scan
 
   dependency-submission:
     runs-on: ubuntu-latest

From 7645fd2538fe0c439eda7265713c23ddbbfe274a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 12:57:20 +0530
Subject: [PATCH 028/136] Update build.gradle

---
 build.gradle | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/build.gradle b/build.gradle
index 6eb1555..4598184 100644
--- a/build.gradle
+++ b/build.gradle
@@ -4,6 +4,7 @@ plugins {
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
     id 'org.owasp.dependencycheck' version '6.0.2'
+    id 'com.gradle.enterprise' version '3.16.2'
 }
 
 group = 'com.scania.sdos'
@@ -122,3 +123,13 @@ tasks.withType(JavaExec).configureEach {
 }
 
 tasks.withType(Jar) { duplicatesStrategy = DuplicatesStrategy.EXCLUDE }
+
+gradleEnterprise {
+    if (System.getenv("CI") != null) {
+        buildScan {
+            publishAlways()
+            termsOfServiceUrl = "https://gradle.com/terms-of-service"
+            termsOfServiceAgree = "yes"
+        }
+    }
+}

From 664caf2dce20b82e3b513de3ebade4da5cf73e61 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 12:59:40 +0530
Subject: [PATCH 029/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5b124e7..9ec5406 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Build with Gradle
         run: |
           chmod +x ./gradlew
-          ./gradlew build --scan
+          CI=true ./gradlew build --scan
 
   dependency-submission:
     runs-on: ubuntu-latest

From fa650b1c17a2b5c35c19b3ef2512c49914b7649d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 13:02:17 +0530
Subject: [PATCH 030/136] Update build.gradle

---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 4598184..0e9c899 100644
--- a/build.gradle
+++ b/build.gradle
@@ -4,7 +4,7 @@ plugins {
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
     id 'org.owasp.dependencycheck' version '6.0.2'
-    id 'com.gradle.enterprise' version '3.16.2'
+    id 'com.gradle.enterprise' version '3.8.1'
 }
 
 group = 'com.scania.sdos'

From 41d5a063fb994128f27fb341b5e407f194b488c1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 13:05:00 +0530
Subject: [PATCH 031/136] Update build.gradle

---
 build.gradle | 1 -
 1 file changed, 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 0e9c899..42d8a62 100644
--- a/build.gradle
+++ b/build.gradle
@@ -4,7 +4,6 @@ plugins {
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
     id 'org.owasp.dependencycheck' version '6.0.2'
-    id 'com.gradle.enterprise' version '3.8.1'
 }
 
 group = 'com.scania.sdos'

From 661c551273cd70d9f46e84699ef1a695bf85c2e4 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 13:41:58 +0530
Subject: [PATCH 032/136] Update review.yml

---
 .github/workflows/review.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index 2ff6805..99e8a2a 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -2,7 +2,8 @@ name: dependency-review
 
 on:
   pull_request:
-    branches: [ "docker-pipeline" ]
+    #branches: [ "docker-pipeline" ]
+    branches: [ "chk" ]
   # Allows you to run this workflow manually from the Actions tab
   # workflow_run:
   #   workflows: ['name: Download and submit dependency graph']

From fced0e512acb03d42e2eb8c9fbd07e29b8c850fc Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 13:42:34 +0530
Subject: [PATCH 033/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 9ec5406..e5cf721 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -46,6 +46,10 @@ jobs:
         java-version: 17
     - name: Generate and submit dependency graph
       uses: gradle/actions/dependency-submission@v3
+      with: 
+         build-scan-publish: true 
+         build-scan-terms-of-service-url: "https://gradle.com/terms-of-service" 
+         build-scan-terms-of-service-agree: "yes" 
       
   submit-and-review:
       runs-on: ubuntu-latest

From 468f2612c0da26436f72df8ec26c069549f31f9e Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 14:52:34 +0530
Subject: [PATCH 034/136] Update dependabot.yml

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3e4a382..9eea8b2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,4 +8,4 @@ updates:
   - package-ecosystem: "gradle" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
-      interval: "weekly"
+      interval: "daily"

From c452d6655714b1262c508ef747bc71246a3feae3 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 15:11:03 +0530
Subject: [PATCH 035/136] Update build.gradle

---
 build.gradle | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 42d8a62..c18213b 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,7 +3,7 @@ plugins {
     id 'io.spring.dependency-management' version '1.0.11.RELEASE'
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
-    id 'org.owasp.dependencycheck' version '6.0.2'
+    id 'org.owasp.dependencycheck' version '9.2.0'
 }
 
 group = 'com.scania.sdos'
@@ -23,6 +23,9 @@ configurations {
         exclude group: 'org.springframework.boot', module: 'spring-boot-starter-logging'
         implementation.exclude group: "org.slf4j", module: "slf4j-log4j12"
     }
+    configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> {
+    format = org.owasp.dependencycheck.reporting.ReportGenerator.Format.ALL.toString()
+   }
 }
 
 repositories {

From b774331a49b9aac816c2ea65f3fdd805b06d3353 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 15:13:29 +0530
Subject: [PATCH 036/136] Update main.yml

---
 .github/workflows/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e5cf721..1c5c31f 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -29,6 +29,9 @@ jobs:
         run: |
           chmod +x ./gradlew
           CI=true ./gradlew build --scan
+      - name: Check Gradle
+        run: |
+          ./gradlew dependencyCheckAnalyze --info
 
   dependency-submission:
     runs-on: ubuntu-latest

From 22b05bc8412f0f3f9be366ba4cf8332680928476 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 15:17:17 +0530
Subject: [PATCH 037/136] Update main.yml

---
 .github/workflows/main.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1c5c31f..39606ef 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -29,8 +29,6 @@ jobs:
         run: |
           chmod +x ./gradlew
           CI=true ./gradlew build --scan
-      - name: Check Gradle
-        run: |
           ./gradlew dependencyCheckAnalyze --info
 
   dependency-submission:

From c0a14abdea4a5018ef97c2d109fdd47c01644f01 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 15:19:13 +0530
Subject: [PATCH 038/136] Update main.yml

---
 .github/workflows/main.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 39606ef..e5cf721 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -29,7 +29,6 @@ jobs:
         run: |
           chmod +x ./gradlew
           CI=true ./gradlew build --scan
-          ./gradlew dependencyCheckAnalyze --info
 
   dependency-submission:
     runs-on: ubuntu-latest

From 95c9db45c1b75ccb799cba1c4d20c544af4cf12a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 15:21:18 +0530
Subject: [PATCH 039/136] Update build.gradle

---
 build.gradle | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/build.gradle b/build.gradle
index c18213b..01da905 100644
--- a/build.gradle
+++ b/build.gradle
@@ -23,9 +23,6 @@ configurations {
         exclude group: 'org.springframework.boot', module: 'spring-boot-starter-logging'
         implementation.exclude group: "org.slf4j", module: "slf4j-log4j12"
     }
-    configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> {
-    format = org.owasp.dependencycheck.reporting.ReportGenerator.Format.ALL.toString()
-   }
 }
 
 repositories {

From eb5ab419a3dfc6e09cfeb9b27a41f4e0eabc7d8d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 17:00:25 +0530
Subject: [PATCH 040/136] Update build.gradle

---
 build.gradle | 1 -
 1 file changed, 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 01da905..153d5b1 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,7 +3,6 @@ plugins {
     id 'io.spring.dependency-management' version '1.0.11.RELEASE'
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
-    id 'org.owasp.dependencycheck' version '9.2.0'
 }
 
 group = 'com.scania.sdos'

From 12f8e84547ce34123b908392b66991e522cafa33 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 17:29:47 +0530
Subject: [PATCH 041/136] Update main.yml

---
 .github/workflows/main.yml | 158 ++++++++++++++++++++++++++-----------
 1 file changed, 113 insertions(+), 45 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e5cf721..8c561ab 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,61 +1,129 @@
-name: Run Gradle Build
+name: CI Pipeline
+
 on:
   push:
-    branches: [ "docker-pipeline" ]
+    branches:
+      - docker-pipeline
   pull_request:
-    branches: [ "docker-pipeline" ]
+    branches:
+      - docker-pipeline
+
+
 jobs:
-  build:
+  prerequisites:
     runs-on: ubuntu-latest
     permissions:
       contents: write
       packages: write
       security-events: write
+    if: github.event_name == 'pull_request'
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - name: Checkout code
+        uses: actions/checkout@v3
         with:
-          submodules: 'true'
+          submodules: recursive
           token: ${{ secrets.PAT_TOKEN }}
-          
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v3
-      - name: Build with Gradle
+
+      - name: Display environment
         run: |
-          chmod +x ./gradlew
-          CI=true ./gradlew build --scan
+          java -version
+          gradle -v
+          docker ps # Check if containers are running
+          docker images # Check existing images
+
+  code_quality:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+    needs: [prerequisites]
+    if: github.event_name == 'pull_request'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+          token: ${{ secrets.PAT_TOKEN }}
+
+      - name: Run GitHub CodeQL Action
+        uses: github/codeql-action/init@v2
+        with:
+          languages: 'javascript,python'
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
 
-  dependency-submission:
+      - name: Upload Code Quality Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: code-quality-report
+          path: gl-code-quality-report.json
+
+  dependency_scanning:
     runs-on: ubuntu-latest
-    needs: build
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+    needs: [prerequisites]
+    if: github.event_name == 'pull_request'
     steps:
-    - name: Checkout sources
-      uses: actions/checkout@v4
-      with:
-        submodules: 'true'
-        token: ${{ secrets.PAT_TOKEN }} 
-    - name: Setup Java
-      uses: actions/setup-java@v4
-      with:
-        distribution: 'temurin'
-        java-version: 17
-    - name: Generate and submit dependency graph
-      uses: gradle/actions/dependency-submission@v3
-      with: 
-         build-scan-publish: true 
-         build-scan-terms-of-service-url: "https://gradle.com/terms-of-service" 
-         build-scan-terms-of-service-agree: "yes" 
-      
-  submit-and-review:
-      runs-on: ubuntu-latest
-      if: github.event_name == 'pull_request'
-      needs: build
-      steps:
-      - name: 'Dependency Review'
-        if: github.event_name == 'pull_request'
-        uses: actions/dependency-review-action@v3        
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+          token: ${{ secrets.PAT_TOKEN }}
+
+      - name: Run Dependency Scanning
+        uses: aquasecurity/trivy-action@v0.11.1
+        with:
+          scan-type: 'fs'
+          format: 'json'
+          output: 'gl-dependency-scanning-report.json'
+
+      - name: Upload Dependency Scanning Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: dependency-scanning-report
+          path: gl-dependency-scanning-report.json
+
+  unit_tests:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+    needs: [prerequisites]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+          token: ${{ secrets.PAT_TOKEN }}
+
+      - name: Set up JDK
+        uses: actions/setup-java@v3
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Run Unit Tests
+        run: |
+          ./gradlew test jacocoTestReport
+        continue-on-error: true
+
+      - name: Upload Test Results
+        uses: actions/upload-artifact@v3
+        with:
+          name: test-results
+          path: build/test-results/test/
+
+      - name: Upload Code Coverage Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: code-coverage-report
+          path: build/reports/jacoco/

From 72b60701771a579cac5ed4cf92b6ca51d4b70fa3 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 17:43:27 +0530
Subject: [PATCH 042/136] Update main.yml

---
 .github/workflows/main.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8c561ab..f5db182 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Run GitHub CodeQL Action
         uses: github/codeql-action/init@v2
         with:
-          languages: 'javascript,python'
+          languages: 'javascript,java'
 
       - name: Autobuild
         uses: github/codeql-action/autobuild@v2
@@ -79,7 +79,7 @@ jobs:
           token: ${{ secrets.PAT_TOKEN }}
 
       - name: Run Dependency Scanning
-        uses: aquasecurity/trivy-action@v0.11.1
+        uses: aquasecurity/trivy-action@master
         with:
           scan-type: 'fs'
           format: 'json'
@@ -113,6 +113,7 @@ jobs:
 
       - name: Run Unit Tests
         run: |
+          chmod +x ./gradlew
           ./gradlew test jacocoTestReport
         continue-on-error: true
 

From f3d61b25bc5c2c674260957a92d49c42a8312f9c Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 17:53:22 +0530
Subject: [PATCH 043/136] Update build.gradle

---
 build.gradle | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/build.gradle b/build.gradle
index 153d5b1..c9fe601 100644
--- a/build.gradle
+++ b/build.gradle
@@ -121,13 +121,3 @@ tasks.withType(JavaExec).configureEach {
 }
 
 tasks.withType(Jar) { duplicatesStrategy = DuplicatesStrategy.EXCLUDE }
-
-gradleEnterprise {
-    if (System.getenv("CI") != null) {
-        buildScan {
-            publishAlways()
-            termsOfServiceUrl = "https://gradle.com/terms-of-service"
-            termsOfServiceAgree = "yes"
-        }
-    }
-}

From af95684891111e7aac6b399102a6ce3cb333061d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 27 May 2024 18:24:58 +0530
Subject: [PATCH 044/136] Update main.yml

---
 .github/workflows/main.yml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f5db182..a582543 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -62,6 +62,11 @@ jobs:
         with:
           name: code-quality-report
           path: gl-code-quality-report.json
+          
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'gl-code-quality-report.sarif'
 
   dependency_scanning:
     runs-on: ubuntu-latest
@@ -82,8 +87,13 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           scan-type: 'fs'
-          format: 'json'
-          output: 'gl-dependency-scanning-report.json'
+          format: 'sarif'
+          output: 'gl-dependency-scanning-report.sarif'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'gl-dependency-scanning-report.sarif'
 
       - name: Upload Dependency Scanning Report
         uses: actions/upload-artifact@v3

From 44bd4f772ca04fae941d9197ad5326c5984fd510 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 28 May 2024 15:17:29 +0530
Subject: [PATCH 045/136] Update main.yml

---
 .github/workflows/main.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a582543..e58c1b6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -133,8 +133,28 @@ jobs:
           name: test-results
           path: build/test-results/test/
 
+
       - name: Upload Code Coverage Report
         uses: actions/upload-artifact@v3
         with:
           name: code-coverage-report
           path: build/reports/jacoco/
+
+  TruffleHog:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: TruffleHog OSS
+        id: trufflehog
+        uses: trufflesecurity/trufflehog@main
+        continue-on-error: true
+        with:
+          path: ./
+          base: test
+          head: HEAD
+          extra_args: --debug
+

From cdfc523c9643b9f5e3f575a542d12ffd669909f4 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Tue, 28 May 2024 15:28:22 +0530
Subject: [PATCH 046/136] Update main.yml

---
 .github/workflows/main.yml | 21 ++++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e58c1b6..1fc0b46 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -148,13 +148,20 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: TruffleHog OSS
-        id: trufflehog
+      # - name: TruffleHog OSS
+      #   id: trufflehog
+      #   uses: trufflesecurity/trufflehog@main
+      #   continue-on-error: true
+      #   with:
+      #     path: ./
+      #     base: test
+      #     head: HEAD
+      #     extra_args: --debug
+
+      - name: scan-push
         uses: trufflesecurity/trufflehog@main
-        continue-on-error: true
         with:
-          path: ./
-          base: test
-          head: HEAD
-          extra_args: --debug
+          base: ""
+          head: ${{ github.ref_name }}
+          extra_args: --only-verified
 

From c409e307719f0e16c998e5316092c49611a65a22 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 14:36:38 +0530
Subject: [PATCH 047/136] Update main.yml

---
 .github/workflows/main.yml | 398 ++++++++++++++++++++++++++-----------
 1 file changed, 280 insertions(+), 118 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1fc0b46..2d8fd85 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,167 +1,329 @@
-name: CI Pipeline
+name: Docker
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
 
 on:
-  push:
-    branches:
-      - docker-pipeline
+  # schedule:
+  #   - cron: '27 0 * * *'
+  # push:
+  #   branches: [ "check" ]
+  #   # Publish semver tags as releases.
+  #   tags: [ 'v*.*.*' ]
   pull_request:
-    branches:
-      - docker-pipeline
+    branches: [ "main" ]
+    # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+  TG: docker-pipeline
 
 
 jobs:
-  prerequisites:
+  build:
+
     runs-on: ubuntu-latest
     permissions:
       contents: write
       packages: write
       security-events: write
-    if: github.event_name == 'pull_request'
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          submodules: recursive
-          token: ${{ secrets.PAT_TOKEN }}
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
 
-      - name: Display environment
-        run: |
-          java -version
-          gradle -v
-          docker ps # Check if containers are running
-          docker images # Check existing images
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
 
-  code_quality:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-    needs: [prerequisites]
-    if: github.event_name == 'pull_request'
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
+      - name: Checkout repository
+        uses: actions/checkout@v4
         with:
-          submodules: recursive
+          submodules: 'true'
           token: ${{ secrets.PAT_TOKEN }}
+          
+      - name: validating gradlle
+        uses: gradle/actions/wrapper-validation@v3
+          
+      # - name: 'Dependency Review'
+      #   uses: actions/dependency-review-action@v4
+      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
+      #   with:
+      #     comment-summary-in-pr: always
+        #   fail-on-severity: moderate
+        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
+        #   retry-on-snapshot-warnings: true
+      # - name: 'Dependency Review'
+      #   # if: github.event_name == 'workflow_dispatch'
+      #   uses: actions/dependency-review-action@v4
+        # with:
+        #   base-ref: 'docker-pipeline'
 
-      - name: Run GitHub CodeQL Action
-        uses: github/codeql-action/init@v2
-        with:
-          languages: 'javascript,java'
+      # - uses: github/codeql-action/init@v3
+      #   with:
+      #     languages: java
 
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+      # - name: Autobuild
+      #   uses: github/codeql-action/autobuild@v3
+          
+      # - name: Perform CodeQL Analysis
+      #   uses: github/codeql-action/analyze@v3
 
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+      # - name: Run Trivy scanner
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
+      #     ignore-unfixed: true
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL'
+      #     # hide-progress: true
+      #     # output: trivy.txt
 
-      - name: Upload Code Quality Report
-        uses: actions/upload-artifact@v3
-        with:
-          name: code-quality-report
-          path: gl-code-quality-report.json
+      # - name: Publish Trivy Output to Summary
+      #   run: |
+      #     if [[ -s trivy.txt ]]; then
+      #       {
+      #         echo "### Security Output"
+      #         echo "<details><summary>Click to expand</summary>"
+      #         echo ""
+      #         echo '```terraform'
+      #         cat trivy.txt
+      #         echo '```'
+      #         echo "</details>"
+      #       } >> $GITHUB_STEP_SUMMARY
+      #     fi
+
+##########################################################################
+      # - name: Run Trivy vulnerability scanner in repo mode
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL,LOW,MEDIUM,HIGH'
+      #     vuln-type: 'os,library'
+      #     scanners: 'vuln,secret'
           
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'gl-code-quality-report.sarif'
 
-  dependency_scanning:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
-    needs: [prerequisites]
-    if: github.event_name == 'pull_request'
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          submodules: recursive
-          token: ${{ secrets.PAT_TOKEN }}
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
 
-      - name: Run Dependency Scanning
-        uses: aquasecurity/trivy-action@master
+ ##############################################         
+
+      # - name: Run Codacy Analysis CLI
+      #   uses: codacy/codacy-analysis-cli-action@master
+        
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
         with:
-          scan-type: 'fs'
-          format: 'sarif'
-          output: 'gl-dependency-scanning-report.sarif'
+          java-version: '17'
+          distribution: 'temurin'
 
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+      - name: Run chmod to make gradlew executable
+        run: chmod +x ./gradlew
+
+      # - name: check
+      #   run: |
+      #     ./gradlew dependencyCheckAnalyze --debug
+
+      # - name: upload check
+      #   uses: actions/upload-artifact@v2
+      #   with:
+      #     name: dependency-check-report
+      #     path: ${{ github.workspace }}/build/reports/dependency-check-report.html
+        
+      - name: Set up Gradle Build Action
+        uses: gradle/gradle-build-action@v3
         with:
-          sarif_file: 'gl-dependency-scanning-report.sarif'
+          dependency-graph: generate-and-upload
+          cache-disabled: true
+      - run: ./gradlew build
+          
+      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
+      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #     # dependency-graph: generate-and-submit
+      #     # cache-disabled: true
+  
+      # - name: Build with Gradle Wrapper
+      #   run: ./gradlew build
+
+      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
+      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
+      #
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #
+      # - name: Build with Gradle 8.5
+      #   run: gradle build
 
-      - name: Upload Dependency Scanning Report
-        uses: actions/upload-artifact@v3
+
+      - uses: actions/upload-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+  
+      - uses: actions/download-artifact@master
         with:
-          name: dependency-scanning-report
-          path: gl-dependency-scanning-report.json
+          name: jar-file
+
+     
+  # dependency-submission:
+  #   needs: build
+  #   runs-on: ubuntu-latest
+  #   permissions:
+  #     contents: read
+
+  #   steps:
+  #    - uses: actions/checkout@v4
+  #    - name: Set up JDK 17
+  #      uses: actions/setup-java@v4
+  #      with:
+  #        java-version: '17'
+  #        distribution: 'temurin'
 
-  unit_tests:
+  #   # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
+  #   # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
+  #    - name: Generate and submit dependency graph
+  #      uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+  #      with:
+  #       # Use a particular Gradle version instead of the configured wrapper.
+  #        gradle-version: 8.5
+  #        dependency-graph: generate-and-upload
+        
+  #    - name: Perform dependency review
+  #      if: github.event_name == 'pull_request'
+  #      uses: actions/dependency-review-action@v3
+
+  docker-build:
+    needs: build
     runs-on: ubuntu-latest
     permissions:
       contents: write
       packages: write
       security-events: write
-    needs: [prerequisites]
+      actions: read
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          submodules: recursive
-          token: ${{ secrets.PAT_TOKEN }}
 
-      - name: Set up JDK
-        uses: actions/setup-java@v3
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
         with:
-          distribution: 'temurin'
           java-version: '17'
+          distribution: 'temurin'
 
-      - name: Run Unit Tests
-        run: |
-          chmod +x ./gradlew
-          ./gradlew test jacocoTestReport
-        continue-on-error: true
-
-      - name: Upload Test Results
-        uses: actions/upload-artifact@v3
+      - uses: actions/download-artifact@master
         with:
-          name: test-results
-          path: build/test-results/test/
+          name: jar-file
+          path: build/libs
 
+  #     # Install the cosign tool except on PR
+  #     # https://github.com/sigstore/cosign-installer
+  #     - name: Install cosign
+  #       if: github.event_name != 'pull_request'
+  #       uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
+  #       with:
+  #         cosign-release: 'v2.1.1'
 
-      - name: Upload Code Coverage Report
-        uses: actions/upload-artifact@v3
+  #     # Set up BuildKit Docker container builder to be able to build
+  #     # multi-platform images and export cache
+  #     # https://github.com/docker/setup-buildx-action
+  #     - name: Set up Docker Buildx
+  #       uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
         with:
-          name: code-coverage-report
-          path: build/reports/jacoco/
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-  TruffleHog:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
+  #     # Extract metadata (tags, labels) for Docker
+  #     # https://github.com/docker/metadata-action
+  #     - name: Extract Docker metadata
+  #       id: meta
+  #       uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+  #       with:
+  #         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+  #     # Build and push Docker image with Buildx (don't push on PR)
+  #     # https://github.com/docker/build-push-action
+  #     - name: Build and push Docker image
+  #       id: build-and-push
+  #       uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+  #       with:
+  #         build-args: --load
+  #         context: .
+  #         push: ${{ github.event_name != 'pull_request' }}
+  #         tags: ${{ steps.meta.outputs.tags }}
+  #         labels: ${{ steps.meta.outputs.labels }}
+  #         cache-from: type=gha
+  #         cache-to: type=gha,mode=max
+      - name: build and push docker image
+        run: | 
+          ls -ltr && docker ps
+          docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+        
+        
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
-          fetch-depth: 0
+          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
+          github-pat: ${{ secrets.PAT_TOKEN }}
+          docker-host: //var/run/docker.sock
+          vuln-type: 'os,library'
+          scanners: 'vuln,secret'
 
-      # - name: TruffleHog OSS
-      #   id: trufflehog
-      #   uses: trufflesecurity/trufflehog@main
-      #   continue-on-error: true
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results.sarif'
+          
+      # - name: Scan image in a private registry
+      #   uses: aquasecurity/trivy-action@master
       #   with:
-      #     path: ./
-      #     base: test
-      #     head: HEAD
-      #     extra_args: --debug
+      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
+      #     scan-type: 'image'
+      #     format: 'sarif'
+      #     output: 'trivy-results-image.sarif'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
+      #     severity: "MEDIUM,HIGH,CRITICAL"
+      #     scanners: "vuln"	 
+
 
-      - name: scan-push
-        uses: trufflesecurity/trufflehog@main
-        with:
-          base: ""
-          head: ${{ github.ref_name }}
-          extra_args: --only-verified
 
+  #     # # Sign the resulting Docker image digest except on PRs.
+  #     # # This will only write to the public Rekor transparency log when the Docker
+  #     # # repository is public to avoid leaking data.  If you would like to publish
+  #     # # transparency data even for private images, pass --force to cosign below.
+  #     # # https://github.com/sigstore/cosign
+  #     # - name: Sign the published Docker image
+  #     #   if: ${{ github.event_name != 'pull_request' }}
+  #     #   env:
+  #     #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+  #     #     TAGS: ${{ steps.meta.outputs.tags }}
+  #     #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
+  #     #   # This step uses the identity token to provision an ephemeral certificate
+  #     #   # against the sigstore community Fulcio instance.
+  #     #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

From 6b812c6661073a7f021949db360229a6206c5262 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 14:38:10 +0530
Subject: [PATCH 048/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2d8fd85..18ad3b5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,7 +13,7 @@ on:
   #   # Publish semver tags as releases.
   #   tags: [ 'v*.*.*' ]
   pull_request:
-    branches: [ "main" ]
+    branches: [ "docker-pipeline" ]
     # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 

From 4f2ad2bafe6795c2c9c4e9a0ec46dc9cac03213e Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 14:49:47 +0530
Subject: [PATCH 049/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 18ad3b5..a392025 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -279,7 +279,7 @@ jobs:
         run: | 
           ls -ltr && docker ps
           docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
-          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+        
         
         
       - name: Run Trivy vulnerability scanner

From 1a1606c0dc2ad1ae5131de6230291d6c35656ec6 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:05:10 +0530
Subject: [PATCH 050/136] Update main.yml

---
 .github/workflows/main.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a392025..f0eeaf0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -286,12 +286,12 @@ jobs:
         uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
           image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
-          format: 'template'
-          template: '@/contrib/sarif.tpl'
+          format: 'sarif'
+          # template: '@/contrib/sarif.tpl'
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH,MEDIUM,LOW'
           github-pat: ${{ secrets.PAT_TOKEN }}
-          docker-host: //var/run/docker.sock
+          # docker-host: //var/run/docker.sock
           vuln-type: 'os,library'
           scanners: 'vuln,secret'
 

From 6337b4d899e7e8a176e48b5c55dd9d3749308831 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:10:48 +0530
Subject: [PATCH 051/136] Update main.yml

---
 .github/workflows/main.yml | 41 +++++++++++++++++++++-----------------
 1 file changed, 23 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f0eeaf0..86f4bf0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -279,26 +279,31 @@ jobs:
         run: | 
           ls -ltr && docker ps
           docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+
+      - name: trivy manual image scan
+        run: |
+          wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
+          sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
+          trivy image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
         
         
-        
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
-        with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
-          format: 'sarif'
-          # template: '@/contrib/sarif.tpl'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW'
-          github-pat: ${{ secrets.PAT_TOKEN }}
-          # docker-host: //var/run/docker.sock
-          vuln-type: 'os,library'
-          scanners: 'vuln,secret'
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy-results.sarif'
+      # - name: Run Trivy vulnerability scanner
+      #   uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+      #   with:
+      #     image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+      #     format: 'sarif'
+      #     # template: '@/contrib/sarif.tpl'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL,HIGH,MEDIUM,LOW'
+      #     github-pat: ${{ secrets.PAT_TOKEN }}
+      #     # docker-host: //var/run/docker.sock
+      #     vuln-type: 'os,library'
+      #     # scanners: 'vuln,secret'
+
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
           
       # - name: Scan image in a private registry
       #   uses: aquasecurity/trivy-action@master

From 664a03d756c39cf100225de27ac29f068e7c66b1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:22:10 +0530
Subject: [PATCH 052/136] Update main.yml

---
 .github/workflows/main.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 86f4bf0..1ab16aa 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -285,6 +285,11 @@ jobs:
           wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
           sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
           trivy image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+
+      - name: trivy manual local code scan
+        run: |
+          ls && pwd
+          trivy fs $PWD
         
         
       # - name: Run Trivy vulnerability scanner

From 29f7fe594f642884cce6e8651fc5c53ccbb5fcb9 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:28:53 +0530
Subject: [PATCH 053/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1ab16aa..52f718c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -289,7 +289,7 @@ jobs:
       - name: trivy manual local code scan
         run: |
           ls && pwd
-          trivy fs $PWD
+          trivy fs /home/runner/work/sdos/sdos
         
         
       # - name: Run Trivy vulnerability scanner

From 349d9719b53f5b6d0965c81e24f9154f4c939919 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:37:53 +0530
Subject: [PATCH 054/136] Update main.yml

---
 .github/workflows/main.yml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 52f718c..253575a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -284,12 +284,22 @@ jobs:
         run: |
           wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
           sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
-          trivy image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+          trivy image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} --format sarif --output trivy_license_image.sarif
+
+      - name: Upload Trivy image license results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy_license_image.sarif'
 
       - name: trivy manual local code scan
         run: |
           ls && pwd
-          trivy fs /home/runner/work/sdos/sdos
+          trivy fs /home/runner/work/sdos/sdos/src --format sarif --output trivy_code.sarif
+
+      - name: Upload Trivy code results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy_code.sarif'
         
         
       # - name: Run Trivy vulnerability scanner

From 1776dc07aca037b9b111393ff766362668af866e Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 15:47:06 +0530
Subject: [PATCH 055/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 253575a..e7f7e28 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -284,7 +284,7 @@ jobs:
         run: |
           wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
           sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
-          trivy image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} --format sarif --output trivy_license_image.sarif
+          trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
 
       - name: Upload Trivy image license results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2
@@ -294,7 +294,7 @@ jobs:
       - name: trivy manual local code scan
         run: |
           ls && pwd
-          trivy fs /home/runner/work/sdos/sdos/src --format sarif --output trivy_code.sarif
+          trivy fs  --format sarif --output trivy_code.sarif /home/runner/work/sdos/sdos/src
 
       - name: Upload Trivy code results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v2

From e2e6c64bf782f1bba5ecbebcfda5de4af6f03160 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 16:00:52 +0530
Subject: [PATCH 056/136] Update main.yml

---
 .github/workflows/main.yml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e7f7e28..48b3f63 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -287,19 +287,18 @@ jobs:
           trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
 
       - name: Upload Trivy image license results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy_license_image.sarif'
 
       - name: trivy manual local code scan
         run: |
-          ls && pwd
-          trivy fs  --format sarif --output trivy_code.sarif /home/runner/work/sdos/sdos/src
+          trivy rootfs  --format sarif --output trivy_code.sarif /home/runner/work/sdos/sdos
 
-      - name: Upload Trivy code results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'trivy_code.sarif'
+      # - name: Upload Trivy code results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy_code.sarif'
         
         
       # - name: Run Trivy vulnerability scanner

From b7963154368ac870e45c28315fa86cd0f7f8b046 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 16:20:38 +0530
Subject: [PATCH 057/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 48b3f63..25b2a79 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -293,7 +293,7 @@ jobs:
 
       - name: trivy manual local code scan
         run: |
-          trivy rootfs  --format sarif --output trivy_code.sarif /home/runner/work/sdos/sdos
+          trivy rootfs /home/runner/work/sdos/sdos
 
       # - name: Upload Trivy code results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2

From 1b31f1ba4a8b885f5078e247da217654058b3a8a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 16:46:26 +0530
Subject: [PATCH 058/136] Update main.yml

---
 .github/workflows/main.yml | 417 +++++++------------------------------
 1 file changed, 81 insertions(+), 336 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 25b2a79..0e7f19f 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,348 +1,93 @@
-name: Docker
-
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
 
 on:
-  # schedule:
-  #   - cron: '27 0 * * *'
-  # push:
-  #   branches: [ "check" ]
-  #   # Publish semver tags as releases.
-  #   tags: [ 'v*.*.*' ]
+  push:
+    branches: [ "docker-pipeline" ]
   pull_request:
     branches: [ "docker-pipeline" ]
-    # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-
-env:
-  # Use docker.io for Docker Hub if empty
-  REGISTRY: ghcr.io
-  # github.repository as <account>/<repo>
-  IMAGE_NAME: ${{ github.repository }}
-  TG: docker-pipeline
-
+  # schedule:
+  #   - cron: '33 7 * * 5'
 
 jobs:
-  build:
-
-    runs-on: ubuntu-latest
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    # Runner size impacts CodeQL analysis time. To learn more, please see:
+    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+    #   - https://gh.io/supported-runners-and-hardware-resources
+    #   - https://gh.io/using-larger-runners (GitHub.com only)
+    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
     permissions:
-      contents: write
-      packages: write
+      # required for all workflows
       security-events: write
-      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
-
-      # This is used to complete the identity challenge
-      # with sigstore/fulcio when running outside of PRs.
-      id-token: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          submodules: 'true'
-          token: ${{ secrets.PAT_TOKEN }}
-          
-      - name: validating gradlle
-        uses: gradle/actions/wrapper-validation@v3
-          
-      # - name: 'Dependency Review'
-      #   uses: actions/dependency-review-action@v4
-      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
-      #   with:
-      #     comment-summary-in-pr: always
-        #   fail-on-severity: moderate
-        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
-        #   retry-on-snapshot-warnings: true
-      # - name: 'Dependency Review'
-      #   # if: github.event_name == 'workflow_dispatch'
-      #   uses: actions/dependency-review-action@v4
-        # with:
-        #   base-ref: 'docker-pipeline'
-
-      # - uses: github/codeql-action/init@v3
-      #   with:
-      #     languages: java
-
-      # - name: Autobuild
-      #   uses: github/codeql-action/autobuild@v3
-          
-      # - name: Perform CodeQL Analysis
-      #   uses: github/codeql-action/analyze@v3
-
-      # - name: Run Trivy scanner
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     scan-type: 'fs'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
-      #     ignore-unfixed: true
-      #     format: 'sarif'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL'
-      #     # hide-progress: true
-      #     # output: trivy.txt
-
-      # - name: Publish Trivy Output to Summary
-      #   run: |
-      #     if [[ -s trivy.txt ]]; then
-      #       {
-      #         echo "### Security Output"
-      #         echo "<details><summary>Click to expand</summary>"
-      #         echo ""
-      #         echo '```terraform'
-      #         cat trivy.txt
-      #         echo '```'
-      #         echo "</details>"
-      #       } >> $GITHUB_STEP_SUMMARY
-      #     fi
-
-##########################################################################
-      # - name: Run Trivy vulnerability scanner in repo mode
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     scan-type: 'fs'
-      #     format: 'sarif'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL,LOW,MEDIUM,HIGH'
-      #     vuln-type: 'os,library'
-      #     scanners: 'vuln,secret'
-          
-
-      # - name: Upload Trivy scan results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy-results.sarif'
-
- ##############################################         
-
-      # - name: Run Codacy Analysis CLI
-      #   uses: codacy/codacy-analysis-cli-action@master
-        
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - name: Run chmod to make gradlew executable
-        run: chmod +x ./gradlew
-
-      # - name: check
-      #   run: |
-      #     ./gradlew dependencyCheckAnalyze --debug
-
-      # - name: upload check
-      #   uses: actions/upload-artifact@v2
-      #   with:
-      #     name: dependency-check-report
-      #     path: ${{ github.workspace }}/build/reports/dependency-check-report.html
-        
-      - name: Set up Gradle Build Action
-        uses: gradle/gradle-build-action@v3
-        with:
-          dependency-graph: generate-and-upload
-          cache-disabled: true
-      - run: ./gradlew build
-          
-      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
-      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #     # dependency-graph: generate-and-submit
-      #     # cache-disabled: true
-  
-      # - name: Build with Gradle Wrapper
-      #   run: ./gradlew build
-
-      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
-      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
-      #
-      # - name: Setup Gradle
-      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
-      #   with:
-      #     gradle-version: '8.5'
-      #
-      # - name: Build with Gradle 8.5
-      #   run: gradle build
 
+      # required to fetch internal or private CodeQL packs
+      packages: read
 
-      - uses: actions/upload-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-  
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-
-     
-  # dependency-submission:
-  #   needs: build
-  #   runs-on: ubuntu-latest
-  #   permissions:
-  #     contents: read
-
-  #   steps:
-  #    - uses: actions/checkout@v4
-  #    - name: Set up JDK 17
-  #      uses: actions/setup-java@v4
-  #      with:
-  #        java-version: '17'
-  #        distribution: 'temurin'
-
-  #   # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
-  #   # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
-  #    - name: Generate and submit dependency graph
-  #      uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
-  #      with:
-  #       # Use a particular Gradle version instead of the configured wrapper.
-  #        gradle-version: 8.5
-  #        dependency-graph: generate-and-upload
-        
-  #    - name: Perform dependency review
-  #      if: github.event_name == 'pull_request'
-  #      uses: actions/dependency-review-action@v3
-
-  docker-build:
-    needs: build
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-      security-events: write
+      # only required for workflows in private repositories
       actions: read
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: java-kotlin
+          build-mode: none # This mode only analyzes Java. Set this to 'autobuild' or 'manual' to analyze Kotlin too.
+        # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
+        # Use `c-cpp` to analyze code written in C, C++ or both
+        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
+        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
+        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
+        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
+        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
-
-      - uses: actions/checkout@v4
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - uses: actions/download-artifact@master
-        with:
-          name: jar-file
-          path: build/libs
-
-  #     # Install the cosign tool except on PR
-  #     # https://github.com/sigstore/cosign-installer
-  #     - name: Install cosign
-  #       if: github.event_name != 'pull_request'
-  #       uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
-  #       with:
-  #         cosign-release: 'v2.1.1'
-
-  #     # Set up BuildKit Docker container builder to be able to build
-  #     # multi-platform images and export cache
-  #     # https://github.com/docker/setup-buildx-action
-  #     - name: Set up Docker Buildx
-  #       uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
-
-      # Login against a Docker registry except on PR
-      # https://github.com/docker/login-action
-      - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-  #     # Extract metadata (tags, labels) for Docker
-  #     # https://github.com/docker/metadata-action
-  #     - name: Extract Docker metadata
-  #       id: meta
-  #       uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
-  #       with:
-  #         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-
-  #     # Build and push Docker image with Buildx (don't push on PR)
-  #     # https://github.com/docker/build-push-action
-  #     - name: Build and push Docker image
-  #       id: build-and-push
-  #       uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
-  #       with:
-  #         build-args: --load
-  #         context: .
-  #         push: ${{ github.event_name != 'pull_request' }}
-  #         tags: ${{ steps.meta.outputs.tags }}
-  #         labels: ${{ steps.meta.outputs.labels }}
-  #         cache-from: type=gha
-  #         cache-to: type=gha,mode=max
-      - name: build and push docker image
-        run: | 
-          ls -ltr && docker ps
-          docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
-
-      - name: trivy manual image scan
-        run: |
-          wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
-          sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
-          trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
-
-      - name: Upload Trivy image license results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: 'trivy_license_image.sarif'
-
-      - name: trivy manual local code scan
-        run: |
-          trivy rootfs /home/runner/work/sdos/sdos
-
-      # - name: Upload Trivy code results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy_code.sarif'
-        
-        
-      # - name: Run Trivy vulnerability scanner
-      #   uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
-      #   with:
-      #     image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
-      #     format: 'sarif'
-      #     # template: '@/contrib/sarif.tpl'
-      #     output: 'trivy-results.sarif'
-      #     severity: 'CRITICAL,HIGH,MEDIUM,LOW'
-      #     github-pat: ${{ secrets.PAT_TOKEN }}
-      #     # docker-host: //var/run/docker.sock
-      #     vuln-type: 'os,library'
-      #     # scanners: 'vuln,secret'
-
-      # - name: Upload Trivy scan results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy-results.sarif'
-          
-      # - name: Scan image in a private registry
-      #   uses: aquasecurity/trivy-action@master
-      #   with:
-      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
-      #     scan-type: 'image'
-      #     format: 'sarif'
-      #     output: 'trivy-results-image.sarif'
-      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
-      #     severity: "MEDIUM,HIGH,CRITICAL"
-      #     scanners: "vuln"	 
-
-
-
-  #     # # Sign the resulting Docker image digest except on PRs.
-  #     # # This will only write to the public Rekor transparency log when the Docker
-  #     # # repository is public to avoid leaking data.  If you would like to publish
-  #     # # transparency data even for private images, pass --force to cosign below.
-  #     # # https://github.com/sigstore/cosign
-  #     # - name: Sign the published Docker image
-  #     #   if: ${{ github.event_name != 'pull_request' }}
-  #     #   env:
-  #     #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
-  #     #     TAGS: ${{ steps.meta.outputs.tags }}
-  #     #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
-  #     #   # This step uses the identity token to provision an ephemeral certificate
-  #     #   # against the sigstore community Fulcio instance.
-  #     #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+    # If the analyze step fails for one of the languages you are analyzing with
+    # "We were unable to automatically build your code", modify the matrix above
+    # to set the build mode to "manual" for that language. Then modify this step
+    # to build your code.
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+    - if: matrix.build-mode == 'manual'
+      shell: bash
+      run: |
+        echo 'If you are using a "manual" build mode for one or more of the' \
+          'languages you are analyzing, replace this with the commands to build' \
+          'your code, for example:'
+        echo '  make bootstrap'
+        echo '  make release'
+        exit 1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

From 59ef4d8a15a15003b2d4d2c2078c2e5f83ae9cc1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 16:49:07 +0530
Subject: [PATCH 059/136] Create trivy-upload.yml

---
 .github/workflows/trivy-upload.yml | 341 +++++++++++++++++++++++++++++
 1 file changed, 341 insertions(+)
 create mode 100644 .github/workflows/trivy-upload.yml

diff --git a/.github/workflows/trivy-upload.yml b/.github/workflows/trivy-upload.yml
new file mode 100644
index 0000000..be6a2e3
--- /dev/null
+++ b/.github/workflows/trivy-upload.yml
@@ -0,0 +1,341 @@
+name: Docker
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  workflow_run:
+    workflows: ['CodeQL']
+    types: [completed]
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+  TG: docker-pipeline
+
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+          token: ${{ secrets.PAT_TOKEN }}
+          
+      - name: validating gradlle
+        uses: gradle/actions/wrapper-validation@v3
+          
+      # - name: 'Dependency Review'
+      #   uses: actions/dependency-review-action@v4
+      #   # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
+      #   with:
+      #     comment-summary-in-pr: always
+        #   fail-on-severity: moderate
+        #   deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later
+        #   retry-on-snapshot-warnings: true
+      # - name: 'Dependency Review'
+      #   # if: github.event_name == 'workflow_dispatch'
+      #   uses: actions/dependency-review-action@v4
+        # with:
+        #   base-ref: 'docker-pipeline'
+
+      # - uses: github/codeql-action/init@v3
+      #   with:
+      #     languages: java
+
+      # - name: Autobuild
+      #   uses: github/codeql-action/autobuild@v3
+          
+      # - name: Perform CodeQL Analysis
+      #   uses: github/codeql-action/analyze@v3
+
+      # - name: Run Trivy scanner
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }}
+      #     ignore-unfixed: true
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL'
+      #     # hide-progress: true
+      #     # output: trivy.txt
+
+      # - name: Publish Trivy Output to Summary
+      #   run: |
+      #     if [[ -s trivy.txt ]]; then
+      #       {
+      #         echo "### Security Output"
+      #         echo "<details><summary>Click to expand</summary>"
+      #         echo ""
+      #         echo '```terraform'
+      #         cat trivy.txt
+      #         echo '```'
+      #         echo "</details>"
+      #       } >> $GITHUB_STEP_SUMMARY
+      #     fi
+
+##########################################################################
+      # - name: Run Trivy vulnerability scanner in repo mode
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     scan-type: 'fs'
+      #     format: 'sarif'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL,LOW,MEDIUM,HIGH'
+      #     vuln-type: 'os,library'
+      #     scanners: 'vuln,secret'
+          
+
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
+
+ ##############################################         
+
+      # - name: Run Codacy Analysis CLI
+      #   uses: codacy/codacy-analysis-cli-action@master
+        
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Run chmod to make gradlew executable
+        run: chmod +x ./gradlew
+
+      # - name: check
+      #   run: |
+      #     ./gradlew dependencyCheckAnalyze --debug
+
+      # - name: upload check
+      #   uses: actions/upload-artifact@v2
+      #   with:
+      #     name: dependency-check-report
+      #     path: ${{ github.workspace }}/build/reports/dependency-check-report.html
+        
+      - name: Set up Gradle Build Action
+        uses: gradle/gradle-build-action@v3
+        with:
+          dependency-graph: generate-and-upload
+          cache-disabled: true
+      - run: ./gradlew build
+          
+      # # Configure Gradle for optimal use in GiHub Actions, including caching of downloaded dependencies.
+      # # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #     # dependency-graph: generate-and-submit
+      #     # cache-disabled: true
+  
+      # - name: Build with Gradle Wrapper
+      #   run: ./gradlew build
+
+      # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
+      # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
+      #
+      # - name: Setup Gradle
+      #   uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
+      #   with:
+      #     gradle-version: '8.5'
+      #
+      # - name: Build with Gradle 8.5
+      #   run: gradle build
+
+
+      - uses: actions/upload-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+  
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+
+     
+  # dependency-submission:
+  #   needs: build
+  #   runs-on: ubuntu-latest
+  #   permissions:
+  #     contents: read
+
+  #   steps:
+  #    - uses: actions/checkout@v4
+  #    - name: Set up JDK 17
+  #      uses: actions/setup-java@v4
+  #      with:
+  #        java-version: '17'
+  #        distribution: 'temurin'
+
+  #   # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
+  #   # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
+  #    - name: Generate and submit dependency graph
+  #      uses: gradle/actions/dependency-submission@417ae3ccd767c252f5661f1ace9f835f9654f2b5
+  #      with:
+  #       # Use a particular Gradle version instead of the configured wrapper.
+  #        gradle-version: 8.5
+  #        dependency-graph: generate-and-upload
+        
+  #    - name: Perform dependency review
+  #      if: github.event_name == 'pull_request'
+  #      uses: actions/dependency-review-action@v3
+
+  docker-build:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read
+    steps:
+
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+
+  #     # Install the cosign tool except on PR
+  #     # https://github.com/sigstore/cosign-installer
+  #     - name: Install cosign
+  #       if: github.event_name != 'pull_request'
+  #       uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
+  #       with:
+  #         cosign-release: 'v2.1.1'
+
+  #     # Set up BuildKit Docker container builder to be able to build
+  #     # multi-platform images and export cache
+  #     # https://github.com/docker/setup-buildx-action
+  #     - name: Set up Docker Buildx
+  #       uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+  #     # Extract metadata (tags, labels) for Docker
+  #     # https://github.com/docker/metadata-action
+  #     - name: Extract Docker metadata
+  #       id: meta
+  #       uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+  #       with:
+  #         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+  #     # Build and push Docker image with Buildx (don't push on PR)
+  #     # https://github.com/docker/build-push-action
+  #     - name: Build and push Docker image
+  #       id: build-and-push
+  #       uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+  #       with:
+  #         build-args: --load
+  #         context: .
+  #         push: ${{ github.event_name != 'pull_request' }}
+  #         tags: ${{ steps.meta.outputs.tags }}
+  #         labels: ${{ steps.meta.outputs.labels }}
+  #         cache-from: type=gha
+  #         cache-to: type=gha,mode=max
+      - name: build and push docker image
+        run: | 
+          ls -ltr && docker ps
+          docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+
+      - name: trivy manual image scan
+        run: |
+          wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
+          sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
+          trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+
+      - name: Upload Trivy image license results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy_license_image.sarif'
+
+      - name: trivy manual local code scan
+        run: |
+          trivy rootfs /home/runner/work/sdos/sdos
+
+      # - name: Upload Trivy code results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy_code.sarif'
+        
+        
+      # - name: Run Trivy vulnerability scanner
+      #   uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+      #   with:
+      #     image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+      #     format: 'sarif'
+      #     # template: '@/contrib/sarif.tpl'
+      #     output: 'trivy-results.sarif'
+      #     severity: 'CRITICAL,HIGH,MEDIUM,LOW'
+      #     github-pat: ${{ secrets.PAT_TOKEN }}
+      #     # docker-host: //var/run/docker.sock
+      #     vuln-type: 'os,library'
+      #     # scanners: 'vuln,secret'
+
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
+          
+      # - name: Scan image in a private registry
+      #   uses: aquasecurity/trivy-action@master
+      #   with:
+      #     image-ref: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}"
+      #     scan-type: 'image'
+      #     format: 'sarif'
+      #     output: 'trivy-results-image.sarif'
+      #     github-pat: ${{ secrets.GITHUB_TOKEN }} # or ${{ secrets.github_pat_name }} if you're using a PAT
+      #     severity: "MEDIUM,HIGH,CRITICAL"
+      #     scanners: "vuln"	 
+
+
+
+  #     # # Sign the resulting Docker image digest except on PRs.
+  #     # # This will only write to the public Rekor transparency log when the Docker
+  #     # # repository is public to avoid leaking data.  If you would like to publish
+  #     # # transparency data even for private images, pass --force to cosign below.
+  #     # # https://github.com/sigstore/cosign
+  #     # - name: Sign the published Docker image
+  #     #   if: ${{ github.event_name != 'pull_request' }}
+  #     #   env:
+  #     #     # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+  #     #     TAGS: ${{ steps.meta.outputs.tags }}
+  #     #     DIGEST: ${{ steps.build-and-push.outputs.digest }}
+  #     #   # This step uses the identity token to provision an ephemeral certificate
+  #     #   # against the sigstore community Fulcio instance.
+  #     #   run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

From d3525fe2a11374cddf4dff295380e53c8f476c85 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 16:58:10 +0530
Subject: [PATCH 060/136] Update main.yml

---
 .github/workflows/main.yml | 107 +++++++++++++++++++++++++++++++++++++
 1 file changed, 107 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0e7f19f..e483105 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -19,6 +19,13 @@ on:
   # schedule:
   #   - cron: '33 7 * * 5'
 
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+  TG: docker-pipeline
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
@@ -87,6 +94,106 @@ jobs:
         echo '  make release'
         exit 1
 
+
+  ##################################################################
+
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+          token: ${{ secrets.PAT_TOKEN }}
+          
+      - name: validating gradlle
+        uses: gradle/actions/wrapper-validation@v3
+        
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Run chmod to make gradlew executable
+        run: chmod +x ./gradlew
+
+      - name: Set up Gradle Build Action
+        uses: gradle/gradle-build-action@v3
+        with:
+          dependency-graph: generate-and-upload
+          cache-disabled: true
+      - run: ./gradlew build
+          
+      - uses: actions/upload-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+  
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+
+
+  docker-build:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      security-events: write
+      actions: read
+    steps:
+
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - uses: actions/download-artifact@master
+        with:
+          name: jar-file
+          path: build/libs
+
+
+      - name: build and push docker image
+        run: | 
+          ls -ltr && docker ps
+          docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+
+      - name: trivy manual image scan
+        run: |
+          wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
+          sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
+          trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+
+      - name: Upload Trivy image license results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy_license_image.sarif'
+
+      - name: trivy manual local code scan
+        run: |
+          trivy rootfs /home/runner/work/sdos/sdos
+
+      # - name: Upload Trivy code results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy_code.sarif'
+  
+
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
       with:

From e96fdadfb5d9e59c8c757a7c441a4b872d63abb1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 18:15:13 +0530
Subject: [PATCH 061/136] Update main.yml

---
 .github/workflows/main.yml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e483105..ee5f3f3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -94,9 +94,14 @@ jobs:
         echo '  make release'
         exit 1
 
+      
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"
 
-  ##################################################################
 
+  ##################################################################
   build:
     runs-on: ubuntu-latest
     permissions:
@@ -192,9 +197,3 @@ jobs:
       #   uses: github/codeql-action/upload-sarif@v2
       #   with:
       #     sarif_file: 'trivy_code.sarif'
-  
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
-      with:
-        category: "/language:${{matrix.language}}"

From 6aaacf991b59dc2d99160c1a2cff2c4dfe5e5622 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 18:36:42 +0530
Subject: [PATCH 062/136] Update main.yml

---
 .github/workflows/main.yml | 95 ++++++++++++++++++++++++++++++++------
 1 file changed, 80 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ee5f3f3..94e92ee 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -172,26 +172,91 @@ jobs:
           name: jar-file
           path: build/libs
 
+      # Install the cosign tool except on PR
+      # https://github.com/sigstore/cosign-installer
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
+        with:
+          cosign-release: 'v2.1.1'
+
+      # Set up BuildKit Docker container builder to be able to build
+      # multi-platform images and export cache
+      # https://github.com/docker/setup-buildx-action
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: build and push docker image
-        run: | 
-          ls -ltr && docker ps
-          docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+      # Extract metadata (tags, labels) for Docker
+      # https://github.com/docker/metadata-action
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      # Build and push Docker image with Buildx (don't push on PR)
+      # https://github.com/docker/build-push-action
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        with:
+          load: true
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
 
-      - name: trivy manual image scan
-        run: |
-          wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
-          sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
-          trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
 
-      - name: Upload Trivy image license results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
-          sarif_file: 'trivy_license_image.sarif'
+          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+          format: 'sarif'
+          # output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH'
+          exit-code: '1'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+        continue-on-error: true
+
+      # - name: Upload Trivy scan results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'trivy-results.sarif'
+
+
+
+      # - name: build and push docker image
+      #   run: | 
+      #     ls -ltr && docker ps
+      #     docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
+
+      # - name: trivy manual image scan
+      #   run: |
+      #     wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
+      #     sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
+      #     trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
+
+      # - name: Upload Trivy image license results to GitHub Security tab
+      #   uses: github/codeql-action/upload-sarif@v3
+      #   with:
+      #     sarif_file: 'trivy_license_image.sarif'
 
-      - name: trivy manual local code scan
-        run: |
-          trivy rootfs /home/runner/work/sdos/sdos
+      # - name: trivy manual local code scan
+      #   run: |
+      #     trivy rootfs /home/runner/work/sdos/sdos
 
       # - name: Upload Trivy code results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2

From 2657642c8ec78de71a5bee2cffbd777827471417 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 18:46:11 +0530
Subject: [PATCH 063/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 94e92ee..09844d1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -222,7 +222,7 @@ jobs:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}'
+          image-ref: '${{ steps.meta.outputs.tags }}'
           format: 'sarif'
           # output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'

From 421d054b74d3f1a24d61ac7d4008204212c1f941 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 19:07:24 +0530
Subject: [PATCH 064/136] Update main.yml

---
 .github/workflows/main.yml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 09844d1..ac852a7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -225,11 +225,21 @@ jobs:
           image-ref: '${{ steps.meta.outputs.tags }}'
           format: 'sarif'
           # output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH'
+          severity: 'CRITICAL'
           exit-code: '1'
           ignore-unfixed: true
           vuln-type: 'os,library'
-        continue-on-error: true
+          continue-on-error: true
+
+      - name: Run Trivy repo vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        with:
+          scan-type: 'fs'
+          format: 'sarif'
+          # output: 'trivy-fs-results.sarif'
+          severity: 'CRITICAL,HIGH'
+          exit-code: '1'
+          ignore-unfixed: true
 
       # - name: Upload Trivy scan results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2

From bd7b79705609d7d52e67e39d3e807ee456434f77 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 19:12:17 +0530
Subject: [PATCH 065/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ac852a7..98795b4 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -229,7 +229,7 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          continue-on-error: true
+        continue-on-error: true
 
       - name: Run Trivy repo vulnerability scanner
         uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe

From e44b91626f5e8c8899e58790c09d7eb5cbf63f67 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 19:19:02 +0530
Subject: [PATCH 066/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 98795b4..2cd9744 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -234,7 +234,7 @@ jobs:
       - name: Run Trivy repo vulnerability scanner
         uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
-          scan-type: 'fs'
+          scan-type: 'rootfs'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
           severity: 'CRITICAL,HIGH'

From 5925c634d79a76d2075d730b9adad35f76196b79 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Wed, 29 May 2024 19:44:31 +0530
Subject: [PATCH 067/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2cd9744..1966e7b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -237,7 +237,7 @@ jobs:
           scan-type: 'rootfs'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
-          severity: 'CRITICAL,HIGH'
+          severity: 'CRITICAL'
           exit-code: '1'
           ignore-unfixed: true
 

From cb9e48d42386a0a181c0a890827472cbfc55a6e7 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 14:40:20 +0530
Subject: [PATCH 068/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1966e7b..d3bc4b0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -234,7 +234,7 @@ jobs:
       - name: Run Trivy repo vulnerability scanner
         uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
         with:
-          scan-type: 'rootfs'
+          scan-type: 'fs'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
           severity: 'CRITICAL'

From 9fc4b960a2298ae91204ff0285c7840420d30329 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 14:46:44 +0530
Subject: [PATCH 069/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d3bc4b0..c517528 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -119,7 +119,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           submodules: 'true'
-          token: ${{ secrets.PAT_TOKEN }}
+          # token: ${{ secrets.PAT_TOKEN }}
           
       - name: validating gradlle
         uses: gradle/actions/wrapper-validation@v3

From 1362c4fdffdba729c7dd3f85f05a24b526d67c39 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 14:59:20 +0530
Subject: [PATCH 070/136] Update main.yml

---
 .github/workflows/main.yml | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c517528..ac55fbf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -161,6 +161,17 @@ jobs:
     steps:
 
       - uses: actions/checkout@v4
+      - name: Run Trivy repo vulnerability scanner
+        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        with:
+          scan-type: 'fs'
+          format: 'sarif'
+          # output: 'trivy-fs-results.sarif'
+          severity: 'CRITICAL'
+          exit-code: '1'
+          ignore-unfixed: true
+          scanners: misconfig,secret
+      
       - name: Set up JDK 17
         uses: actions/setup-java@v4
         with:
@@ -231,15 +242,6 @@ jobs:
           vuln-type: 'os,library'
         continue-on-error: true
 
-      - name: Run Trivy repo vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
-        with:
-          scan-type: 'fs'
-          format: 'sarif'
-          # output: 'trivy-fs-results.sarif'
-          severity: 'CRITICAL'
-          exit-code: '1'
-          ignore-unfixed: true
 
       # - name: Upload Trivy scan results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2

From 137394590e6404d9ee82d9bd4a78774277ffb65a Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:15:44 +0530
Subject: [PATCH 071/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ac55fbf..cdba2be 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -162,7 +162,7 @@ jobs:
 
       - uses: actions/checkout@v4
       - name: Run Trivy repo vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        uses: aquasecurity/trivy-action@0.21.0
         with:
           scan-type: 'fs'
           format: 'sarif'
@@ -231,7 +231,7 @@ jobs:
 
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        uses: aquasecurity/trivy-action@0.21.0
         with:
           image-ref: '${{ steps.meta.outputs.tags }}'
           format: 'sarif'

From eaf3c1d3223c3642f7d1d6e74ff755c42210fd81 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:25:11 +0530
Subject: [PATCH 072/136] Update main.yml

---
 .github/workflows/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index cdba2be..f733da6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -167,6 +167,7 @@ jobs:
           scan-type: 'fs'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
+          scan-ref: .
           severity: 'CRITICAL'
           exit-code: '1'
           ignore-unfixed: true

From ae8acced038c1873390ccfee8423986a4f9db3d6 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:34:05 +0530
Subject: [PATCH 073/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f733da6..2ec5109 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -164,10 +164,10 @@ jobs:
       - name: Run Trivy repo vulnerability scanner
         uses: aquasecurity/trivy-action@0.21.0
         with:
-          scan-type: 'fs'
+          scan-type: 'repo'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
-          scan-ref: .
+          scan-ref: 'repo'
           severity: 'CRITICAL'
           exit-code: '1'
           ignore-unfixed: true

From 534fabb1743c7b53497f5abc1b567d87a91d921d Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:38:00 +0530
Subject: [PATCH 074/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2ec5109..a01be7e 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -167,7 +167,7 @@ jobs:
           scan-type: 'repo'
           format: 'sarif'
           # output: 'trivy-fs-results.sarif'
-          scan-ref: 'repo'
+          # scan-ref: 'repo'
           severity: 'CRITICAL'
           exit-code: '1'
           ignore-unfixed: true

From 95a7ed8e7ea1dbe62c0f12f7814b3e0acc440788 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:48:20 +0530
Subject: [PATCH 075/136] Update main.yml

---
 .github/workflows/main.yml | 26 +++++++++++++++-----------
 1 file changed, 15 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a01be7e..2b3188a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -161,17 +161,21 @@ jobs:
     steps:
 
       - uses: actions/checkout@v4
-      - name: Run Trivy repo vulnerability scanner
-        uses: aquasecurity/trivy-action@0.21.0
-        with:
-          scan-type: 'repo'
-          format: 'sarif'
-          # output: 'trivy-fs-results.sarif'
-          # scan-ref: 'repo'
-          severity: 'CRITICAL'
-          exit-code: '1'
-          ignore-unfixed: true
-          scanners: misconfig,secret
+
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4.3.2
+        
+      # - name: Run Trivy repo vulnerability scanner
+      #   uses: aquasecurity/trivy-action@0.21.0
+      #   with:
+      #     scan-type: 'repo'
+      #     format: 'sarif'
+      #     # output: 'trivy-fs-results.sarif'
+      #     # scan-ref: 'repo'
+      #     severity: 'CRITICAL'
+      #     exit-code: '1'
+      #     ignore-unfixed: true
+      #     scanners: misconfig,secret
       
       - name: Set up JDK 17
         uses: actions/setup-java@v4

From a97af0149d34589382dc0e80acd4d4954db855c9 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 15:59:17 +0530
Subject: [PATCH 076/136] Update main.yml

---
 .github/workflows/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2b3188a..c2e1d41 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -164,6 +164,14 @@ jobs:
 
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4.3.2
+
+      - name: Depcheck
+        uses: dependency-check/Dependency-Check_Action@1.1.0
+        id: Depcheck
+        with:
+          project: 'test'
+          path: '.'
+          format: 'HTML'
         
       # - name: Run Trivy repo vulnerability scanner
       #   uses: aquasecurity/trivy-action@0.21.0

From 1936a046e1655a23ce6cc3ef7580547ce70eaca2 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 16:14:33 +0530
Subject: [PATCH 077/136] Update build.gradle

---
 build.gradle | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/build.gradle b/build.gradle
index c9fe601..0f55544 100644
--- a/build.gradle
+++ b/build.gradle
@@ -95,6 +95,14 @@ dependencies {
                 exclude group: 'org.slf4j'
                 exclude group: 'ch.qos.logback'
             }
+    implementation group: 'org.owasp', name: 'dependency-check-gradle', version: '9.2.0'
+        constraints {
+        // org.owasp.dependencycheck needs at least this version of jackson. Other plugins pull in older versions..
+        add("implementation", "com.fasterxml.jackson:jackson-bom:2.16.1")
+        // org.owasp.dependencycheck needs these versions. Other plugins pull in older versions..
+        add("implementation", "org.apache.commons:commons-lang3:3.14.0")
+        add("implementation", "org.apache.commons:commons-text:1.11.0")
+                    }
     implementation project(':errorcode:sdos-error-code')
     implementation 'io.jsonwebtoken:jjwt-api:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-impl:0.11.2'

From f3efcd7753eb21ed45e1b8eec6d12fdbc3ab66c0 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 16:16:33 +0530
Subject: [PATCH 078/136] Update main.yml

---
 .github/workflows/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c2e1d41..55de258 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -148,6 +148,9 @@ jobs:
       - uses: actions/download-artifact@master
         with:
           name: jar-file
+          
+      - name: gradle dep check
+        run: ./gradlew dependencyCheckAnalyze --info
 
 
   docker-build:

From 5c94060a774815631b4c27bbf9e0d9db79d5af71 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 16:48:41 +0530
Subject: [PATCH 079/136] Update main.yml

---
 .github/workflows/main.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 55de258..7cd72ef 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -148,9 +148,16 @@ jobs:
       - uses: actions/download-artifact@master
         with:
           name: jar-file
+
+      - name: scan-push
+        uses: trufflesecurity/trufflehog@main
+        with:
+          base: ""
+          head: ${{ github.ref_name }}
+          extra_args: --only-verified
           
-      - name: gradle dep check
-        run: ./gradlew dependencyCheckAnalyze --info
+      # - name: gradle dep check
+      #   run: ./gradlew dependencyCheckAnalyze --info
 
 
   docker-build:

From 55969595280079199e3dbe0c0a4dd6eeb91643ce Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 17:55:47 +0530
Subject: [PATCH 080/136] Update main.yml

---
 .github/workflows/main.yml | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7cd72ef..5ec7831 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -149,12 +149,17 @@ jobs:
         with:
           name: jar-file
 
-      - name: scan-push
-        uses: trufflesecurity/trufflehog@main
-        with:
-          base: ""
-          head: ${{ github.ref_name }}
-          extra_args: --only-verified
+      - name: truffle scan
+        run: | 
+          curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
+          trufflehog git https://github.com/scania/sdos --only-verified
+
+      # - name: scan-push
+      #   uses: trufflesecurity/trufflehog@main
+      #   with:
+      #     base: ""
+      #     head: ${{ github.ref_name }}
+      #     extra_args: --only-verified
           
       # - name: gradle dep check
       #   run: ./gradlew dependencyCheckAnalyze --info

From 9b2a3fd175c85eff1e2a7a749997d68c53ce5913 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Thu, 30 May 2024 18:03:37 +0530
Subject: [PATCH 081/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5ec7831..4d2f58b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -152,7 +152,7 @@ jobs:
       - name: truffle scan
         run: | 
           curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
-          trufflehog git https://github.com/scania/sdos --only-verified
+          trufflehog git https://github.com/scania/sdos
 
       # - name: scan-push
       #   uses: trufflesecurity/trufflehog@main

From e6eb6e8fcab93db8f337c084978e52161c5b08ae Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 17 Jun 2024 17:44:41 +0530
Subject: [PATCH 082/136] Update build.gradle

---
 build.gradle | 24 +++++++++---------------
 1 file changed, 9 insertions(+), 15 deletions(-)

diff --git a/build.gradle b/build.gradle
index 0f55544..238f799 100644
--- a/build.gradle
+++ b/build.gradle
@@ -5,7 +5,7 @@ plugins {
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
 }
 
-group = 'com.scania.sdos'
+group = 'com.scania.sdip'
 version = '0.0.1-SNAPSHOT'
 apply plugin: 'maven-publish'
 java {
@@ -40,11 +40,13 @@ ext['log4j2.version'] = '2.22.1'
 
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-actuator'
-    implementation 'org.springframework.boot:spring-boot-starter-web'
+    implementation("org.springframework.boot:spring-boot-starter-web") {
+        exclude group: 'org.springframework', module: 'spring-web'
+    }
     implementation 'org.springframework.boot:spring-boot-starter-web-services'
     implementation 'org.springframework.boot:spring-boot-starter-log4j2'
     runtimeOnly group: 'org.apache.logging.log4j', name: 'log4j-layout-template-json', version: '2.22.1'
-    implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.4.0'
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.4.0'
     implementation 'io.swagger.core.v3:swagger-annotations-jakarta:2.2.20'
     implementation 'org.springframework:spring-web:6.1.5'
 
@@ -53,7 +55,7 @@ dependencies {
     implementation 'com.lmax:disruptor:3.4.1'
     implementation 'org.apache.httpcomponents:httpclient:4.5.13'
     implementation group: 'com.predic8', name: 'soa-model-core', version: '2.0.1'
-    implementation 'org.restlet.jee:org.restlet.ext.json:2.3.12'
+    implementation 'org.restlet.jee:org.restlet.ext.json:2.4-M1'
     implementation group: 'com.google.code.gson', name: 'gson', version: '2.8.9'
     implementation 'org.apache.groovy:groovy-xml:4.0.5'
     implementation 'org.apache.groovy:groovy-json:4.0.5'
@@ -68,7 +70,7 @@ dependencies {
     implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
     implementation group: 'org.apache.shiro', name: 'shiro-core', version: '2.0.0'
     implementation group: 'org.json', name: 'json', version: '20240303'
-    implementation group: 'com.google.guava', name: 'guava', version: '32.0.0-jre'
+    implementation group: 'com.google.guava', name: 'guava', version: '33.0.0-jre'
 
     testImplementation 'org.junit.jupiter:junit-jupiter:5.6.0'
     testImplementation 'org.junit.jupiter:junit-jupiter-params:5.6.0'
@@ -95,15 +97,7 @@ dependencies {
                 exclude group: 'org.slf4j'
                 exclude group: 'ch.qos.logback'
             }
-    implementation group: 'org.owasp', name: 'dependency-check-gradle', version: '9.2.0'
-        constraints {
-        // org.owasp.dependencycheck needs at least this version of jackson. Other plugins pull in older versions..
-        add("implementation", "com.fasterxml.jackson:jackson-bom:2.16.1")
-        // org.owasp.dependencycheck needs these versions. Other plugins pull in older versions..
-        add("implementation", "org.apache.commons:commons-lang3:3.14.0")
-        add("implementation", "org.apache.commons:commons-text:1.11.0")
-                    }
-    implementation project(':errorcode:sdos-error-code')
+    implementation project(':common-sdip:sdip-error-codes')
     implementation 'io.jsonwebtoken:jjwt-api:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-impl:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-jackson:0.11.2'
@@ -125,7 +119,7 @@ test {
 }
 
 tasks.withType(JavaExec).configureEach {
-    jvmArgs = ['-Xms4g', '-Xmx6g', '-Xss1g']
+    jvmArgs = ['-Xms4g', '-Xmx6g', '-Xss2g']
 }
 
 tasks.withType(Jar) { duplicatesStrategy = DuplicatesStrategy.EXCLUDE }

From 33a70d6ec99e0069213615599be1699a24545ae1 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 17 Jun 2024 19:43:40 +0530
Subject: [PATCH 083/136] Update build.gradle

---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 238f799..0842816 100644
--- a/build.gradle
+++ b/build.gradle
@@ -97,7 +97,7 @@ dependencies {
                 exclude group: 'org.slf4j'
                 exclude group: 'ch.qos.logback'
             }
-    implementation project(':common-sdip:sdip-error-codes')
+    implementation project(':errorcode:sdos-error-code')
     implementation 'io.jsonwebtoken:jjwt-api:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-impl:0.11.2'
     implementation 'io.jsonwebtoken:jjwt-jackson:0.11.2'

From 8bb16de1490f999789e5d0133f149c409d8d3dd4 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Wed, 3 Jul 2024 19:22:36 +0530
Subject: [PATCH 084/136] Update main.yml

---
 .github/workflows/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4d2f58b..bf0b199 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -187,7 +187,8 @@ jobs:
           project: 'test'
           path: '.'
           format: 'HTML'
-        
+
+      # Trivy repo
       # - name: Run Trivy repo vulnerability scanner
       #   uses: aquasecurity/trivy-action@0.21.0
       #   with:

From 2558c2901825be5ddee89e852557b79f1f5fc219 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Fri, 5 Jul 2024 21:40:05 +0530
Subject: [PATCH 085/136] Update main.yml

---
 .github/workflows/main.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index bf0b199..2770344 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -271,7 +271,18 @@ jobs:
           vuln-type: 'os,library'
         continue-on-error: true
 
-
+      # Gitleaks
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Run Gitleaks
+        uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
+      
+      
       # - name: Upload Trivy scan results to GitHub Security tab
       #   uses: github/codeql-action/upload-sarif@v2
       #   with:

From 679b9dad23975ed26ad7c72961d4c48fa3c1e00f Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Fri, 5 Jul 2024 21:49:31 +0530
Subject: [PATCH 086/136] Update main.yml

---
 .github/workflows/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2770344..55ddd0d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -276,6 +276,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Set permissions
+        run: sudo chmod -R 777 /home/runner/work/sdos/sdos
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2
         env:

From f1f84aae6296640b075596698c50e29015616220 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Fri, 5 Jul 2024 22:04:34 +0530
Subject: [PATCH 087/136] Update main.yml

---
 .github/workflows/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 55ddd0d..33f0398 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -276,6 +276,12 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+      - name: Set permissions for reports directory
+        run: sudo chmod -R 777 /home/runner/work/sdos/sdos/reports || true
+
+      - name: Remove dependency-check-report.html
+        run: sudo rm -f /home/runner/work/sdos/sdos/reports/dependency-check-report.html || true
+
       - name: Set permissions
         run: sudo chmod -R 777 /home/runner/work/sdos/sdos
       - name: Run Gitleaks

From 09f95a3ad0af5bbf2c01b845a3d4e36331dd91e2 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Fri, 5 Jul 2024 22:11:39 +0530
Subject: [PATCH 088/136] Update main.yml

---
 .github/workflows/main.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 33f0398..1cc33fe 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -276,14 +276,16 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          clean: false
       - name: Set permissions for reports directory
         run: sudo chmod -R 777 /home/runner/work/sdos/sdos/reports || true
 
       - name: Remove dependency-check-report.html
         run: sudo rm -f /home/runner/work/sdos/sdos/reports/dependency-check-report.html || true
 
-      - name: Set permissions
-        run: sudo chmod -R 777 /home/runner/work/sdos/sdos
+      - name: Manual cleanup
+        run: sudo rm -rf /home/runner/work/sdos/sdos/* || true
+      
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2
         env:

From b9fa1e61ccd0e355905659e1eb962617c497c8e7 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 8 Jul 2024 19:01:32 +0530
Subject: [PATCH 089/136] Create .gitleaks.toml

---
 .gitleaks.toml | 2910 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 2910 insertions(+)
 create mode 100644 .gitleaks.toml

diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..24e8b88
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,2910 @@
+# This file has been auto-generated. Do not edit manually.
+# If you would like to contribute new rules, please use 
+# cmd/generate/config/main.go and follow the contributing guidelines
+# at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
+
+# This is the default gitleaks configuration file.
+# Rules and allowlists are defined within this file.
+# Rules instruct gitleaks on what should be considered a secret.
+# Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
+
+title = "gitleaks config"
+
+[allowlist]
+description = "global allow lists"
+paths = [
+    '''gitleaks.toml''',
+    '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
+    '''(go.mod|go.sum|go.work|go.work.sum)$''',
+    '''gradle.lockfile''',
+    '''node_modules''',
+    '''package-lock.json''',
+    '''yarn.lock''',
+    '''pnpm-lock.yaml''',
+    '''Database.refactorlog''',
+    '''vendor''',
+]
+
+[[rules]]
+id = "adafruit-api-key"
+description = "Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure."
+regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "adafruit",
+]
+
+[[rules]]
+id = "adobe-client-id"
+description = "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches."
+regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "adobe",
+]
+
+[[rules]]
+id = "adobe-client-secret"
+description = "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation."
+regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "p8e-",
+]
+
+[[rules]]
+id = "age-secret-key"
+description = "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information."
+regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
+keywords = [
+    "age-secret-key-1",
+]
+
+[[rules]]
+id = "airtable-api-key"
+description = "Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration."
+regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "airtable",
+]
+
+[[rules]]
+id = "algolia-api-key"
+description = "Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms."
+regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "algolia",
+]
+
+[[rules]]
+id = "alibaba-access-key-id"
+description = "Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise."
+regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ltai",
+]
+
+[[rules]]
+id = "alibaba-secret-key"
+description = "Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud."
+regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "alibaba",
+]
+
+[[rules]]
+id = "asana-client-id"
+description = "Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information."
+regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "asana",
+]
+
+[[rules]]
+id = "asana-client-secret"
+description = "Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access."
+regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "asana",
+]
+
+[[rules]]
+id = "atlassian-api-token"
+description = "Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality."
+regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "atlassian","confluence","jira",
+]
+
+[[rules]]
+id = "authress-service-client-access-key"
+description = "Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data."
+regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sc_","ext_","scauth_","authress_",
+]
+
+[[rules]]
+id = "aws-access-token"
+description = "Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms."
+regex = '''(?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}'''
+keywords = [
+    "akia","asia","abia","acca",
+]
+
+[[rules]]
+id = "beamer-api-token"
+description = "Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates."
+regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "beamer",
+]
+
+[[rules]]
+id = "bitbucket-client-id"
+description = "Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure."
+regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bitbucket",
+]
+
+[[rules]]
+id = "bitbucket-client-secret"
+description = "Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access."
+regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bitbucket",
+]
+
+[[rules]]
+id = "bittrex-access-key"
+description = "Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss."
+regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bittrex",
+]
+
+[[rules]]
+id = "bittrex-secret-key"
+description = "Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security."
+regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bittrex",
+]
+
+[[rules]]
+id = "clojars-api-token"
+description = "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation."
+regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
+keywords = [
+    "clojars",
+]
+
+[[rules]]
+id = "cloudflare-api-key"
+description = "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare",
+]
+
+[[rules]]
+id = "cloudflare-global-api-key"
+description = "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare",
+]
+
+[[rules]]
+id = "cloudflare-origin-ca-key"
+description = "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security."
+regex = '''\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare","v1.0-",
+]
+
+[[rules]]
+id = "codecov-access-token"
+description = "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data."
+regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "codecov",
+]
+
+[[rules]]
+id = "coinbase-access-token"
+description = "Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions."
+regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "coinbase",
+]
+
+[[rules]]
+id = "confluent-access-token"
+description = "Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow."
+regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "confluent",
+]
+
+[[rules]]
+id = "confluent-secret-key"
+description = "Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services."
+regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "confluent",
+]
+
+[[rules]]
+id = "contentful-delivery-api-token"
+description = "Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity."
+regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "contentful",
+]
+
+[[rules]]
+id = "databricks-api-token"
+description = "Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing."
+regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dapi",
+]
+
+[[rules]]
+id = "datadog-access-token"
+description = "Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation."
+regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "datadog",
+]
+
+[[rules]]
+id = "defined-networking-api-token"
+description = "Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches."
+regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dnkey",
+]
+
+[[rules]]
+id = "digitalocean-access-token"
+description = "Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise."
+regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "doo_v1_",
+]
+
+[[rules]]
+id = "digitalocean-pat"
+description = "Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy."
+regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dop_v1_",
+]
+
+[[rules]]
+id = "digitalocean-refresh-token"
+description = "Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation."
+regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dor_v1_",
+]
+
+[[rules]]
+id = "discord-api-token"
+description = "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "discord-client-id"
+description = "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "discord-client-secret"
+description = "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "doppler-api-token"
+description = "Discovered a Doppler API token, posing a risk to environment and secrets management security."
+regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
+keywords = [
+    "doppler",
+]
+
+[[rules]]
+id = "droneci-access-token"
+description = "Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows."
+regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "droneci",
+]
+
+[[rules]]
+id = "dropbox-api-token"
+description = "Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "dropbox-long-lived-api-token"
+description = "Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "dropbox-short-lived-api-token"
+description = "Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "duffel-api-token"
+description = "Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data."
+regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
+keywords = [
+    "duffel",
+]
+
+[[rules]]
+id = "dynatrace-api-token"
+description = "Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure."
+regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
+keywords = [
+    "dynatrace",
+]
+
+[[rules]]
+id = "easypost-api-token"
+description = "Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure."
+regex = '''\bEZAK(?i)[a-z0-9]{54}'''
+keywords = [
+    "ezak",
+]
+
+[[rules]]
+id = "easypost-test-api-token"
+description = "Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data."
+regex = '''\bEZTK(?i)[a-z0-9]{54}'''
+keywords = [
+    "eztk",
+]
+
+[[rules]]
+id = "etsy-access-token"
+description = "Found an Etsy Access Token, potentially compromising Etsy shop management and customer data."
+regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "etsy",
+]
+
+[[rules]]
+id = "facebook-access-token"
+description = "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+
+[[rules]]
+id = "facebook-page-access-token"
+description = "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)\b(EAA[MC][a-z0-9]{20,})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "eaam","eaac",
+]
+
+[[rules]]
+id = "facebook-secret"
+description = "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "facebook",
+]
+
+[[rules]]
+id = "fastly-api-token"
+description = "Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues."
+regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "fastly",
+]
+
+[[rules]]
+id = "finicity-api-token"
+description = "Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations."
+regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finicity",
+]
+
+[[rules]]
+id = "finicity-client-secret"
+description = "Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches."
+regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finicity",
+]
+
+[[rules]]
+id = "finnhub-access-token"
+description = "Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics."
+regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finnhub",
+]
+
+[[rules]]
+id = "flickr-access-token"
+description = "Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage."
+regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "flickr",
+]
+
+[[rules]]
+id = "flutterwave-encryption-key"
+description = "Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information."
+regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
+keywords = [
+    "flwseck_test",
+]
+
+[[rules]]
+id = "flutterwave-public-key"
+description = "Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations."
+regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
+keywords = [
+    "flwpubk_test",
+]
+
+[[rules]]
+id = "flutterwave-secret-key"
+description = "Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches."
+regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
+keywords = [
+    "flwseck_test",
+]
+
+[[rules]]
+id = "frameio-api-token"
+description = "Found a Frame.io API token, potentially compromising video collaboration and project management."
+regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
+keywords = [
+    "fio-u-",
+]
+
+[[rules]]
+id = "freshbooks-access-token"
+description = "Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure."
+regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "freshbooks",
+]
+
+[[rules]]
+id = "gcp-api-key"
+description = "Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches."
+regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "aiza",
+]
+
+[[rules]]
+id = "generic-api-key"
+description = "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."
+regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "key","api","token","secret","client","passwd","password","auth","access",
+]
+
+[rules.allowlist]
+stopwords = [
+    "000000",
+    "aaaaaa",
+    "about",
+    "abstract",
+    "academy",
+    "acces",
+    "account",
+    "act-",
+    "act.",
+    "act_",
+    "action",
+    "active",
+    "actively",
+    "activity",
+    "adapter",
+    "add-",
+    "add.",
+    "add_",
+    "add-on",
+    "addon",
+    "addres",
+    "admin",
+    "adobe",
+    "advanced",
+    "adventure",
+    "agent",
+    "agile",
+    "air-",
+    "air.",
+    "air_",
+    "ajax",
+    "akka",
+    "alert",
+    "alfred",
+    "algorithm",
+    "all-",
+    "all.",
+    "all_",
+    "alloy",
+    "alpha",
+    "amazon",
+    "amqp",
+    "analysi",
+    "analytic",
+    "analyzer",
+    "android",
+    "angular",
+    "angularj",
+    "animate",
+    "animation",
+    "another",
+    "ansible",
+    "answer",
+    "ant-",
+    "ant.",
+    "ant_",
+    "any-",
+    "any.",
+    "any_",
+    "apache",
+    "app-",
+    "app-",
+    "app.",
+    "app.",
+    "app_",
+    "app_",
+    "apple",
+    "arch",
+    "archive",
+    "archived",
+    "arduino",
+    "array",
+    "art-",
+    "art.",
+    "art_",
+    "article",
+    "asp-",
+    "asp.",
+    "asp_",
+    "asset",
+    "async",
+    "atom",
+    "attention",
+    "audio",
+    "audit",
+    "aura",
+    "auth",
+    "author",
+    "author",
+    "authorize",
+    "auto",
+    "automated",
+    "automatic",
+    "awesome",
+    "aws_",
+    "azure",
+    "back",
+    "backbone",
+    "backend",
+    "backup",
+    "bar-",
+    "bar.",
+    "bar_",
+    "base",
+    "based",
+    "bash",
+    "basic",
+    "batch",
+    "been",
+    "beer",
+    "behavior",
+    "being",
+    "benchmark",
+    "best",
+    "beta",
+    "better",
+    "big-",
+    "big.",
+    "big_",
+    "binary",
+    "binding",
+    "bit-",
+    "bit.",
+    "bit_",
+    "bitcoin",
+    "block",
+    "blog",
+    "board",
+    "book",
+    "bookmark",
+    "boost",
+    "boot",
+    "bootstrap",
+    "bosh",
+    "bot-",
+    "bot.",
+    "bot_",
+    "bower",
+    "box-",
+    "box.",
+    "box_",
+    "boxen",
+    "bracket",
+    "branch",
+    "bridge",
+    "browser",
+    "brunch",
+    "buffer",
+    "bug-",
+    "bug.",
+    "bug_",
+    "build",
+    "builder",
+    "building",
+    "buildout",
+    "buildpack",
+    "built",
+    "bundle",
+    "busines",
+    "but-",
+    "but.",
+    "but_",
+    "button",
+    "cache",
+    "caching",
+    "cakephp",
+    "calendar",
+    "call",
+    "camera",
+    "campfire",
+    "can-",
+    "can.",
+    "can_",
+    "canva",
+    "captcha",
+    "capture",
+    "card",
+    "carousel",
+    "case",
+    "cassandra",
+    "cat-",
+    "cat.",
+    "cat_",
+    "category",
+    "center",
+    "cento",
+    "challenge",
+    "change",
+    "changelog",
+    "channel",
+    "chart",
+    "chat",
+    "cheat",
+    "check",
+    "checker",
+    "chef",
+    "ches",
+    "chinese",
+    "chosen",
+    "chrome",
+    "ckeditor",
+    "clas",
+    "classe",
+    "classic",
+    "clean",
+    "cli-",
+    "cli.",
+    "cli_",
+    "client",
+    "client",
+    "clojure",
+    "clone",
+    "closure",
+    "cloud",
+    "club",
+    "cluster",
+    "cms-",
+    "cms_",
+    "coco",
+    "code",
+    "coding",
+    "coffee",
+    "color",
+    "combination",
+    "combo",
+    "command",
+    "commander",
+    "comment",
+    "commit",
+    "common",
+    "community",
+    "compas",
+    "compiler",
+    "complete",
+    "component",
+    "composer",
+    "computer",
+    "computing",
+    "con-",
+    "con.",
+    "con_",
+    "concept",
+    "conf",
+    "config",
+    "config",
+    "connect",
+    "connector",
+    "console",
+    "contact",
+    "container",
+    "contao",
+    "content",
+    "contest",
+    "context",
+    "control",
+    "convert",
+    "converter",
+    "conway'",
+    "cookbook",
+    "cookie",
+    "cool",
+    "copy",
+    "cordova",
+    "core",
+    "couchbase",
+    "couchdb",
+    "countdown",
+    "counter",
+    "course",
+    "craft",
+    "crawler",
+    "create",
+    "creating",
+    "creator",
+    "credential",
+    "crm-",
+    "crm.",
+    "crm_",
+    "cros",
+    "crud",
+    "csv-",
+    "csv.",
+    "csv_",
+    "cube",
+    "cucumber",
+    "cuda",
+    "current",
+    "currently",
+    "custom",
+    "daemon",
+    "dark",
+    "dart",
+    "dash",
+    "dashboard",
+    "data",
+    "database",
+    "date",
+    "day-",
+    "day.",
+    "day_",
+    "dead",
+    "debian",
+    "debug",
+    "debug",
+    "debugger",
+    "deck",
+    "define",
+    "del-",
+    "del.",
+    "del_",
+    "delete",
+    "demo",
+    "deploy",
+    "design",
+    "designer",
+    "desktop",
+    "detection",
+    "detector",
+    "dev-",
+    "dev.",
+    "dev_",
+    "develop",
+    "developer",
+    "device",
+    "devise",
+    "diff",
+    "digital",
+    "directive",
+    "directory",
+    "discovery",
+    "display",
+    "django",
+    "dns-",
+    "dns_",
+    "doc-",
+    "doc-",
+    "doc.",
+    "doc.",
+    "doc_",
+    "doc_",
+    "docker",
+    "docpad",
+    "doctrine",
+    "document",
+    "doe-",
+    "doe.",
+    "doe_",
+    "dojo",
+    "dom-",
+    "dom.",
+    "dom_",
+    "domain",
+    "done",
+    "don't",
+    "dot-",
+    "dot.",
+    "dot_",
+    "dotfile",
+    "download",
+    "draft",
+    "drag",
+    "drill",
+    "drive",
+    "driven",
+    "driver",
+    "drop",
+    "dropbox",
+    "drupal",
+    "dsl-",
+    "dsl.",
+    "dsl_",
+    "dynamic",
+    "easy",
+    "_ec2_",
+    "ecdsa",
+    "eclipse",
+    "edit",
+    "editing",
+    "edition",
+    "editor",
+    "element",
+    "emac",
+    "email",
+    "embed",
+    "embedded",
+    "ember",
+    "emitter",
+    "emulator",
+    "encoding",
+    "endpoint",
+    "engine",
+    "english",
+    "enhanced",
+    "entity",
+    "entry",
+    "env_",
+    "episode",
+    "erlang",
+    "error",
+    "espresso",
+    "event",
+    "evented",
+    "example",
+    "example",
+    "exchange",
+    "exercise",
+    "experiment",
+    "expire",
+    "exploit",
+    "explorer",
+    "export",
+    "exporter",
+    "expres",
+    "ext-",
+    "ext.",
+    "ext_",
+    "extended",
+    "extension",
+    "external",
+    "extra",
+    "extractor",
+    "fabric",
+    "facebook",
+    "factory",
+    "fake",
+    "fast",
+    "feature",
+    "feed",
+    "fewfwef",
+    "ffmpeg",
+    "field",
+    "file",
+    "filter",
+    "find",
+    "finder",
+    "firefox",
+    "firmware",
+    "first",
+    "fish",
+    "fix-",
+    "fix_",
+    "flash",
+    "flask",
+    "flat",
+    "flex",
+    "flexible",
+    "flickr",
+    "flow",
+    "fluent",
+    "fluentd",
+    "fluid",
+    "folder",
+    "font",
+    "force",
+    "foreman",
+    "fork",
+    "form",
+    "format",
+    "formatter",
+    "forum",
+    "foundry",
+    "framework",
+    "free",
+    "friend",
+    "friendly",
+    "front-end",
+    "frontend",
+    "ftp-",
+    "ftp.",
+    "ftp_",
+    "fuel",
+    "full",
+    "fun-",
+    "fun.",
+    "fun_",
+    "func",
+    "future",
+    "gaia",
+    "gallery",
+    "game",
+    "gateway",
+    "gem-",
+    "gem.",
+    "gem_",
+    "gen-",
+    "gen.",
+    "gen_",
+    "general",
+    "generator",
+    "generic",
+    "genetic",
+    "get-",
+    "get.",
+    "get_",
+    "getenv",
+    "getting",
+    "ghost",
+    "gist",
+    "git-",
+    "git.",
+    "git_",
+    "github",
+    "gitignore",
+    "gitlab",
+    "glas",
+    "gmail",
+    "gnome",
+    "gnu-",
+    "gnu.",
+    "gnu_",
+    "goal",
+    "golang",
+    "gollum",
+    "good",
+    "google",
+    "gpu-",
+    "gpu.",
+    "gpu_",
+    "gradle",
+    "grail",
+    "graph",
+    "graphic",
+    "great",
+    "grid",
+    "groovy",
+    "group",
+    "grunt",
+    "guard",
+    "gui-",
+    "gui.",
+    "gui_",
+    "guide",
+    "guideline",
+    "gulp",
+    "gwt-",
+    "gwt.",
+    "gwt_",
+    "hack",
+    "hackathon",
+    "hacker",
+    "hacking",
+    "hadoop",
+    "haml",
+    "handler",
+    "hardware",
+    "has-",
+    "has_",
+    "hash",
+    "haskell",
+    "have",
+    "haxe",
+    "hello",
+    "help",
+    "helper",
+    "here",
+    "hero",
+    "heroku",
+    "high",
+    "hipchat",
+    "history",
+    "home",
+    "homebrew",
+    "homepage",
+    "hook",
+    "host",
+    "hosting",
+    "hot-",
+    "hot.",
+    "hot_",
+    "house",
+    "how-",
+    "how.",
+    "how_",
+    "html",
+    "http",
+    "hub-",
+    "hub.",
+    "hub_",
+    "hubot",
+    "human",
+    "icon",
+    "ide-",
+    "ide.",
+    "ide_",
+    "idea",
+    "identity",
+    "idiomatic",
+    "image",
+    "impact",
+    "import",
+    "important",
+    "importer",
+    "impres",
+    "index",
+    "infinite",
+    "info",
+    "injection",
+    "inline",
+    "input",
+    "inside",
+    "inspector",
+    "instagram",
+    "install",
+    "installer",
+    "instant",
+    "intellij",
+    "interface",
+    "internet",
+    "interview",
+    "into",
+    "intro",
+    "ionic",
+    "iphone",
+    "ipython",
+    "irc-",
+    "irc_",
+    "iso-",
+    "iso.",
+    "iso_",
+    "issue",
+    "jade",
+    "jasmine",
+    "java",
+    "jbos",
+    "jekyll",
+    "jenkin",
+    "job-",
+    "job.",
+    "job_",
+    "joomla",
+    "jpa-",
+    "jpa.",
+    "jpa_",
+    "jquery",
+    "json",
+    "just",
+    "kafka",
+    "karma",
+    "kata",
+    "kernel",
+    "keyboard",
+    "kindle",
+    "kit-",
+    "kit.",
+    "kit_",
+    "kitchen",
+    "knife",
+    "koan",
+    "kohana",
+    "lab-",
+    "lab-",
+    "lab.",
+    "lab.",
+    "lab_",
+    "lab_",
+    "lambda",
+    "lamp",
+    "language",
+    "laravel",
+    "last",
+    "latest",
+    "latex",
+    "launcher",
+    "layer",
+    "layout",
+    "lazy",
+    "ldap",
+    "leaflet",
+    "league",
+    "learn",
+    "learning",
+    "led-",
+    "led.",
+    "led_",
+    "leetcode",
+    "les-",
+    "les.",
+    "les_",
+    "level",
+    "leveldb",
+    "lib-",
+    "lib.",
+    "lib_",
+    "librarie",
+    "library",
+    "license",
+    "life",
+    "liferay",
+    "light",
+    "lightbox",
+    "like",
+    "line",
+    "link",
+    "linked",
+    "linkedin",
+    "linux",
+    "lisp",
+    "list",
+    "lite",
+    "little",
+    "load",
+    "loader",
+    "local",
+    "location",
+    "lock",
+    "log-",
+    "log.",
+    "log_",
+    "logger",
+    "logging",
+    "logic",
+    "login",
+    "logstash",
+    "longer",
+    "look",
+    "love",
+    "lua-",
+    "lua.",
+    "lua_",
+    "mac-",
+    "mac.",
+    "mac_",
+    "machine",
+    "made",
+    "magento",
+    "magic",
+    "mail",
+    "make",
+    "maker",
+    "making",
+    "man-",
+    "man.",
+    "man_",
+    "manage",
+    "manager",
+    "manifest",
+    "manual",
+    "map-",
+    "map-",
+    "map.",
+    "map.",
+    "map_",
+    "map_",
+    "mapper",
+    "mapping",
+    "markdown",
+    "markup",
+    "master",
+    "math",
+    "matrix",
+    "maven",
+    "md5",
+    "mean",
+    "media",
+    "mediawiki",
+    "meetup",
+    "memcached",
+    "memory",
+    "menu",
+    "merchant",
+    "message",
+    "messaging",
+    "meta",
+    "metadata",
+    "meteor",
+    "method",
+    "metric",
+    "micro",
+    "middleman",
+    "migration",
+    "minecraft",
+    "miner",
+    "mini",
+    "minimal",
+    "mirror",
+    "mit-",
+    "mit.",
+    "mit_",
+    "mobile",
+    "mocha",
+    "mock",
+    "mod-",
+    "mod.",
+    "mod_",
+    "mode",
+    "model",
+    "modern",
+    "modular",
+    "module",
+    "modx",
+    "money",
+    "mongo",
+    "mongodb",
+    "mongoid",
+    "mongoose",
+    "monitor",
+    "monkey",
+    "more",
+    "motion",
+    "moved",
+    "movie",
+    "mozilla",
+    "mqtt",
+    "mule",
+    "multi",
+    "multiple",
+    "music",
+    "mustache",
+    "mvc-",
+    "mvc.",
+    "mvc_",
+    "mysql",
+    "nagio",
+    "name",
+    "native",
+    "need",
+    "neo-",
+    "neo.",
+    "neo_",
+    "nest",
+    "nested",
+    "net-",
+    "net.",
+    "net_",
+    "nette",
+    "network",
+    "new-",
+    "new-",
+    "new.",
+    "new.",
+    "new_",
+    "new_",
+    "next",
+    "nginx",
+    "ninja",
+    "nlp-",
+    "nlp.",
+    "nlp_",
+    "node",
+    "nodej",
+    "nosql",
+    "not-",
+    "not.",
+    "not_",
+    "note",
+    "notebook",
+    "notepad",
+    "notice",
+    "notifier",
+    "now-",
+    "now.",
+    "now_",
+    "number",
+    "oauth",
+    "object",
+    "objective",
+    "obsolete",
+    "ocaml",
+    "octopres",
+    "official",
+    "old-",
+    "old.",
+    "old_",
+    "onboard",
+    "online",
+    "only",
+    "open",
+    "opencv",
+    "opengl",
+    "openshift",
+    "openwrt",
+    "option",
+    "oracle",
+    "org-",
+    "org.",
+    "org_",
+    "origin",
+    "original",
+    "orm-",
+    "orm.",
+    "orm_",
+    "osx-",
+    "osx_",
+    "our-",
+    "our.",
+    "our_",
+    "out-",
+    "out.",
+    "out_",
+    "output",
+    "over",
+    "overview",
+    "own-",
+    "own.",
+    "own_",
+    "pack",
+    "package",
+    "packet",
+    "page",
+    "page",
+    "panel",
+    "paper",
+    "paperclip",
+    "para",
+    "parallax",
+    "parallel",
+    "parse",
+    "parser",
+    "parsing",
+    "particle",
+    "party",
+    "password",
+    "patch",
+    "path",
+    "pattern",
+    "payment",
+    "paypal",
+    "pdf-",
+    "pdf.",
+    "pdf_",
+    "pebble",
+    "people",
+    "perl",
+    "personal",
+    "phalcon",
+    "phoenix",
+    "phone",
+    "phonegap",
+    "photo",
+    "php-",
+    "php.",
+    "php_",
+    "physic",
+    "picker",
+    "pipeline",
+    "platform",
+    "play",
+    "player",
+    "please",
+    "plu-",
+    "plu.",
+    "plu_",
+    "plug-in",
+    "plugin",
+    "plupload",
+    "png-",
+    "png.",
+    "png_",
+    "poker",
+    "polyfill",
+    "polymer",
+    "pool",
+    "pop-",
+    "pop.",
+    "pop_",
+    "popcorn",
+    "popup",
+    "port",
+    "portable",
+    "portal",
+    "portfolio",
+    "post",
+    "power",
+    "powered",
+    "powerful",
+    "prelude",
+    "pretty",
+    "preview",
+    "principle",
+    "print",
+    "pro-",
+    "pro.",
+    "pro_",
+    "problem",
+    "proc",
+    "product",
+    "profile",
+    "profiler",
+    "program",
+    "progres",
+    "project",
+    "protocol",
+    "prototype",
+    "provider",
+    "proxy",
+    "public",
+    "pull",
+    "puppet",
+    "pure",
+    "purpose",
+    "push",
+    "pusher",
+    "pyramid",
+    "python",
+    "quality",
+    "query",
+    "queue",
+    "quick",
+    "rabbitmq",
+    "rack",
+    "radio",
+    "rail",
+    "railscast",
+    "random",
+    "range",
+    "raspberry",
+    "rdf-",
+    "rdf.",
+    "rdf_",
+    "react",
+    "reactive",
+    "read",
+    "reader",
+    "readme",
+    "ready",
+    "real",
+    "reality",
+    "real-time",
+    "realtime",
+    "recipe",
+    "recorder",
+    "red-",
+    "red.",
+    "red_",
+    "reddit",
+    "redi",
+    "redmine",
+    "reference",
+    "refinery",
+    "refresh",
+    "registry",
+    "related",
+    "release",
+    "remote",
+    "rendering",
+    "repo",
+    "report",
+    "request",
+    "require",
+    "required",
+    "requirej",
+    "research",
+    "resource",
+    "response",
+    "resque",
+    "rest",
+    "restful",
+    "resume",
+    "reveal",
+    "reverse",
+    "review",
+    "riak",
+    "rich",
+    "right",
+    "ring",
+    "robot",
+    "role",
+    "room",
+    "router",
+    "routing",
+    "rpc-",
+    "rpc.",
+    "rpc_",
+    "rpg-",
+    "rpg.",
+    "rpg_",
+    "rspec",
+    "ruby-",
+    "ruby.",
+    "ruby_",
+    "rule",
+    "run-",
+    "run.",
+    "run_",
+    "runner",
+    "running",
+    "runtime",
+    "rust",
+    "rvm-",
+    "rvm.",
+    "rvm_",
+    "salt",
+    "sample",
+    "sample",
+    "sandbox",
+    "sas-",
+    "sas.",
+    "sas_",
+    "sbt-",
+    "sbt.",
+    "sbt_",
+    "scala",
+    "scalable",
+    "scanner",
+    "schema",
+    "scheme",
+    "school",
+    "science",
+    "scraper",
+    "scratch",
+    "screen",
+    "script",
+    "scroll",
+    "scs-",
+    "scs.",
+    "scs_",
+    "sdk-",
+    "sdk.",
+    "sdk_",
+    "sdl-",
+    "sdl.",
+    "sdl_",
+    "search",
+    "secure",
+    "security",
+    "see-",
+    "see.",
+    "see_",
+    "seed",
+    "select",
+    "selector",
+    "selenium",
+    "semantic",
+    "sencha",
+    "send",
+    "sentiment",
+    "serie",
+    "server",
+    "service",
+    "session",
+    "set-",
+    "set.",
+    "set_",
+    "setting",
+    "setting",
+    "setup",
+    "sha1",
+    "sha2",
+    "sha256",
+    "share",
+    "shared",
+    "sharing",
+    "sheet",
+    "shell",
+    "shield",
+    "shipping",
+    "shop",
+    "shopify",
+    "shortener",
+    "should",
+    "show",
+    "showcase",
+    "side",
+    "silex",
+    "simple",
+    "simulator",
+    "single",
+    "site",
+    "skeleton",
+    "sketch",
+    "skin",
+    "slack",
+    "slide",
+    "slider",
+    "slim",
+    "small",
+    "smart",
+    "smtp",
+    "snake",
+    "snippet",
+    "soap",
+    "social",
+    "socket",
+    "software",
+    "solarized",
+    "solr",
+    "solution",
+    "solver",
+    "some",
+    "soon",
+    "source",
+    "space",
+    "spark",
+    "spatial",
+    "spec",
+    "sphinx",
+    "spine",
+    "spotify",
+    "spree",
+    "spring",
+    "sprite",
+    "sql-",
+    "sql.",
+    "sql_",
+    "sqlite",
+    "ssh-",
+    "ssh.",
+    "ssh_",
+    "stack",
+    "staging",
+    "standard",
+    "stanford",
+    "start",
+    "started",
+    "starter",
+    "startup",
+    "stat",
+    "statamic",
+    "state",
+    "static",
+    "statistic",
+    "statsd",
+    "statu",
+    "steam",
+    "step",
+    "still",
+    "stm-",
+    "stm.",
+    "stm_",
+    "storage",
+    "store",
+    "storm",
+    "story",
+    "strategy",
+    "stream",
+    "streaming",
+    "string",
+    "stripe",
+    "structure",
+    "studio",
+    "study",
+    "stuff",
+    "style",
+    "sublime",
+    "sugar",
+    "suite",
+    "summary",
+    "super",
+    "support",
+    "supported",
+    "svg-",
+    "svg.",
+    "svg_",
+    "svn-",
+    "svn.",
+    "svn_",
+    "swagger",
+    "swift",
+    "switch",
+    "switcher",
+    "symfony",
+    "symphony",
+    "sync",
+    "synopsi",
+    "syntax",
+    "system",
+    "system",
+    "tab-",
+    "tab-",
+    "tab.",
+    "tab.",
+    "tab_",
+    "tab_",
+    "table",
+    "tag-",
+    "tag-",
+    "tag.",
+    "tag.",
+    "tag_",
+    "tag_",
+    "talk",
+    "target",
+    "task",
+    "tcp-",
+    "tcp.",
+    "tcp_",
+    "tdd-",
+    "tdd.",
+    "tdd_",
+    "team",
+    "tech",
+    "template",
+    "term",
+    "terminal",
+    "testing",
+    "tetri",
+    "text",
+    "textmate",
+    "theme",
+    "theory",
+    "three",
+    "thrift",
+    "time",
+    "timeline",
+    "timer",
+    "tiny",
+    "tinymce",
+    "tip-",
+    "tip.",
+    "tip_",
+    "title",
+    "todo",
+    "todomvc",
+    "token",
+    "tool",
+    "toolbox",
+    "toolkit",
+    "top-",
+    "top.",
+    "top_",
+    "tornado",
+    "touch",
+    "tower",
+    "tracker",
+    "tracking",
+    "traffic",
+    "training",
+    "transfer",
+    "translate",
+    "transport",
+    "tree",
+    "trello",
+    "try-",
+    "try.",
+    "try_",
+    "tumblr",
+    "tut-",
+    "tut.",
+    "tut_",
+    "tutorial",
+    "tweet",
+    "twig",
+    "twitter",
+    "type",
+    "typo",
+    "ubuntu",
+    "uiview",
+    "ultimate",
+    "under",
+    "unit",
+    "unity",
+    "universal",
+    "unix",
+    "update",
+    "updated",
+    "upgrade",
+    "upload",
+    "uploader",
+    "uri-",
+    "uri.",
+    "uri_",
+    "url-",
+    "url.",
+    "url_",
+    "usage",
+    "usb-",
+    "usb.",
+    "usb_",
+    "use-",
+    "use.",
+    "use_",
+    "used",
+    "useful",
+    "user",
+    "using",
+    "util",
+    "utilitie",
+    "utility",
+    "vagrant",
+    "validator",
+    "value",
+    "variou",
+    "varnish",
+    "version",
+    "via-",
+    "via.",
+    "via_",
+    "video",
+    "view",
+    "viewer",
+    "vim-",
+    "vim.",
+    "vim_",
+    "vimrc",
+    "virtual",
+    "vision",
+    "visual",
+    "vpn",
+    "want",
+    "warning",
+    "watch",
+    "watcher",
+    "wave",
+    "way-",
+    "way.",
+    "way_",
+    "weather",
+    "web-",
+    "web_",
+    "webapp",
+    "webgl",
+    "webhook",
+    "webkit",
+    "webrtc",
+    "website",
+    "websocket",
+    "welcome",
+    "welcome",
+    "what",
+    "what'",
+    "when",
+    "where",
+    "which",
+    "why-",
+    "why.",
+    "why_",
+    "widget",
+    "wifi",
+    "wiki",
+    "win-",
+    "win.",
+    "win_",
+    "window",
+    "wip-",
+    "wip.",
+    "wip_",
+    "within",
+    "without",
+    "wizard",
+    "word",
+    "wordpres",
+    "work",
+    "worker",
+    "workflow",
+    "working",
+    "workshop",
+    "world",
+    "wrapper",
+    "write",
+    "writer",
+    "writing",
+    "written",
+    "www-",
+    "www.",
+    "www_",
+    "xamarin",
+    "xcode",
+    "xml-",
+    "xml.",
+    "xml_",
+    "xmpp",
+    "xxxxxx",
+    "yahoo",
+    "yaml",
+    "yandex",
+    "yeoman",
+    "yet-",
+    "yet.",
+    "yet_",
+    "yii-",
+    "yii.",
+    "yii_",
+    "youtube",
+    "yui-",
+    "yui.",
+    "yui_",
+    "zend",
+    "zero",
+    "zip-",
+    "zip.",
+    "zip_",
+    "zsh-",
+    "zsh.",
+    "zsh_",
+]
+
+[[rules]]
+id = "github-app-token"
+description = "Identified a GitHub App Token, which may compromise GitHub application integrations and source code security."
+regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghu_","ghs_",
+]
+
+[[rules]]
+id = "github-fine-grained-pat"
+description = "Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation."
+regex = '''github_pat_[0-9a-zA-Z_]{82}'''
+keywords = [
+    "github_pat_",
+]
+
+[[rules]]
+id = "github-oauth"
+description = "Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks."
+regex = '''gho_[0-9a-zA-Z]{36}'''
+keywords = [
+    "gho_",
+]
+
+[[rules]]
+id = "github-pat"
+description = "Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure."
+regex = '''ghp_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghp_",
+]
+
+[[rules]]
+id = "github-refresh-token"
+description = "Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services."
+regex = '''ghr_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghr_",
+]
+
+[[rules]]
+id = "gitlab-pat"
+description = "Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure."
+regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
+keywords = [
+    "glpat-",
+]
+
+[[rules]]
+id = "gitlab-ptt"
+description = "Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security."
+regex = '''glptt-[0-9a-f]{40}'''
+keywords = [
+    "glptt-",
+]
+
+[[rules]]
+id = "gitlab-rrt"
+description = "Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access."
+regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
+keywords = [
+    "gr1348941",
+]
+
+[[rules]]
+id = "gitter-access-token"
+description = "Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services."
+regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "gitter",
+]
+
+[[rules]]
+id = "gocardless-api-token"
+description = "Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure."
+regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "live_","gocardless",
+]
+
+[[rules]]
+id = "grafana-api-key"
+description = "Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics."
+regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "eyjrijoi",
+]
+
+[[rules]]
+id = "grafana-cloud-api-token"
+description = "Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure."
+regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "glc_",
+]
+
+[[rules]]
+id = "grafana-service-account-token"
+description = "Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity."
+regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "glsa_",
+]
+
+[[rules]]
+id = "harness-api-key"
+description = "Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account."
+regex = '''((?:pat|sat)\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{20})'''
+keywords = [
+    "pat.","sat.",
+]
+
+[[rules]]
+id = "hashicorp-tf-api-token"
+description = "Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches."
+regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
+keywords = [
+    "atlasv1",
+]
+
+[[rules]]
+id = "hashicorp-tf-password"
+description = "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches."
+regex = '''(?i)(?:administrator_login_password|password)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}("[a-z0-9=_\-]{8,20}")(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+path = '''\.(tf|hcl)$'''
+keywords = [
+    "administrator_login_password","password",
+]
+
+[[rules]]
+id = "heroku-api-key"
+description = "Detected a Heroku API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "heroku",
+]
+
+[[rules]]
+id = "hubspot-api-key"
+description = "Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations."
+regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hubspot",
+]
+
+[[rules]]
+id = "huggingface-access-token"
+description = "Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data."
+regex = '''(?:^|[\\'"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\'"` <])'''
+entropy = 1
+keywords = [
+    "hf_",
+]
+
+[[rules]]
+id = "huggingface-organization-api-token"
+description = "Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data."
+regex = '''(?:^|[\\'"` >=:\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\'"` <\),])'''
+entropy = 2
+keywords = [
+    "api_org_",
+]
+
+[[rules]]
+id = "infracost-api-token"
+description = "Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data."
+regex = '''(?i)\b(ico-[a-zA-Z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ico-",
+]
+
+[[rules]]
+id = "intercom-api-key"
+description = "Identified an Intercom API Token, which could compromise customer communication channels and data privacy."
+regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "intercom",
+]
+
+[[rules]]
+id = "intra42-client-secret"
+description = "Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data."
+regex = '''(?i)\b(s-s4t2(?:ud|af)-[abcdef0123456789]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "intra","s-s4t2ud-","s-s4t2af-",
+]
+
+[[rules]]
+id = "jfrog-api-key"
+description = "Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines."
+regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "jfrog","artifactory","bintray","xray",
+]
+
+[[rules]]
+id = "jfrog-identity-token"
+description = "Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts."
+regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "jfrog","artifactory","bintray","xray",
+]
+
+[[rules]]
+id = "jwt"
+description = "Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data."
+regex = '''\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ey",
+]
+
+[[rules]]
+id = "jwt-base64"
+description = "Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information."
+regex = '''\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\/\\_+\-\r\n]{40,}={0,2}'''
+keywords = [
+    "zxlk",
+]
+
+[[rules]]
+id = "kraken-access-token"
+description = "Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security."
+regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kraken",
+]
+
+[[rules]]
+id = "kucoin-access-token"
+description = "Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions."
+regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kucoin",
+]
+
+[[rules]]
+id = "kucoin-secret-key"
+description = "Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches."
+regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kucoin",
+]
+
+[[rules]]
+id = "launchdarkly-access-token"
+description = "Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality."
+regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "launchdarkly",
+]
+
+[[rules]]
+id = "linear-api-key"
+description = "Detected a Linear API Token, posing a risk to project management tools and sensitive task data."
+regex = '''lin_api_(?i)[a-z0-9]{40}'''
+keywords = [
+    "lin_api_",
+]
+
+[[rules]]
+id = "linear-client-secret"
+description = "Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data."
+regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linear",
+]
+
+[[rules]]
+id = "linkedin-client-id"
+description = "Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure."
+regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linkedin","linked-in",
+]
+
+[[rules]]
+id = "linkedin-client-secret"
+description = "Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data."
+regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linkedin","linked-in",
+]
+
+[[rules]]
+id = "lob-api-key"
+description = "Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services."
+regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "test_","live_",
+]
+
+[[rules]]
+id = "lob-pub-api-key"
+description = "Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations."
+regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "test_pub","live_pub","_pub",
+]
+
+[[rules]]
+id = "mailchimp-api-key"
+description = "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data."
+regex = '''(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us\d\d)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailchimp",
+]
+
+[[rules]]
+id = "mailgun-private-api-token"
+description = "Found a Mailgun private API token, risking unauthorized email service operations and data breaches."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mailgun-pub-key"
+description = "Discovered a Mailgun public validation key, which could expose email verification processes and associated data."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mailgun-signing-key"
+description = "Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mapbox-api-token"
+description = "Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure."
+regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mapbox",
+]
+
+[[rules]]
+id = "mattermost-access-token"
+description = "Identified a Mattermost Access Token, which may compromise team communication channels and data privacy."
+regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mattermost",
+]
+
+[[rules]]
+id = "messagebird-api-token"
+description = "Found a MessageBird API token, risking unauthorized access to communication platforms and message data."
+regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "messagebird","message-bird","message_bird",
+]
+
+[[rules]]
+id = "messagebird-client-id"
+description = "Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data."
+regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "messagebird","message-bird","message_bird",
+]
+
+[[rules]]
+id = "microsoft-teams-webhook"
+description = "Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks."
+regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
+keywords = [
+    "webhook.office.com","webhookb2","incomingwebhook",
+]
+
+[[rules]]
+id = "netlify-access-token"
+description = "Detected a Netlify Access Token, potentially compromising web hosting services and site management."
+regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "netlify",
+]
+
+[[rules]]
+id = "new-relic-browser-api-token"
+description = "Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrjs-",
+]
+
+[[rules]]
+id = "new-relic-insert-key"
+description = "Discovered a New Relic insight insert key, compromising data injection into the platform."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrii-",
+]
+
+[[rules]]
+id = "new-relic-user-api-id"
+description = "Found a New Relic user API ID, posing a risk to application monitoring services and data integrity."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "new-relic","newrelic","new_relic",
+]
+
+[[rules]]
+id = "new-relic-user-api-key"
+description = "Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrak",
+]
+
+[[rules]]
+id = "npm-access-token"
+description = "Uncovered an npm access token, potentially compromising package management and code repository access."
+regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "npm_",
+]
+
+[[rules]]
+id = "nytimes-access-token"
+description = "Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services."
+regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nytimes","new-york-times","newyorktimes",
+]
+
+[[rules]]
+id = "okta-access-token"
+description = "Identified an Okta Access Token, which may compromise identity management services and user authentication data."
+regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "okta",
+]
+
+[[rules]]
+id = "openai-api-key"
+description = "Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation."
+regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "t3blbkfj",
+]
+
+[[rules]]
+id = "plaid-api-token"
+description = "Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "plaid-client-id"
+description = "Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "plaid-secret-key"
+description = "Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "planetscale-api-token"
+description = "Identified a PlanetScale API token, potentially compromising database management and operations."
+regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_tkn_",
+]
+
+[[rules]]
+id = "planetscale-oauth-token"
+description = "Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity."
+regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_oauth_",
+]
+
+[[rules]]
+id = "planetscale-password"
+description = "Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches."
+regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_pw_",
+]
+
+[[rules]]
+id = "postman-api-token"
+description = "Uncovered a Postman API token, potentially compromising API testing and development workflows."
+regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pmak-",
+]
+
+[[rules]]
+id = "prefect-api-token"
+description = "Detected a Prefect API token, risking unauthorized access to workflow management and automation services."
+regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pnu_",
+]
+
+[[rules]]
+id = "private-key"
+description = "Identified a Private Key, which may compromise cryptographic security and sensitive data encryption."
+regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
+keywords = [
+    "-----begin",
+]
+
+[[rules]]
+id = "pulumi-api-token"
+description = "Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management."
+regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pul-",
+]
+
+[[rules]]
+id = "pypi-upload-token"
+description = "Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity."
+regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
+keywords = [
+    "pypi-ageichlwas5vcmc",
+]
+
+[[rules]]
+id = "rapidapi-access-token"
+description = "Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services."
+regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rapidapi",
+]
+
+[[rules]]
+id = "readme-api-token"
+description = "Detected a Readme API token, risking unauthorized documentation management and content exposure."
+regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rdme_",
+]
+
+[[rules]]
+id = "rubygems-api-token"
+description = "Identified a Rubygem API token, potentially compromising Ruby library distribution and package management."
+regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rubygems_",
+]
+
+[[rules]]
+id = "scalingo-api-token"
+description = "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security."
+regex = '''\b(tk-us-[a-zA-Z0-9-_]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "tk-us-",
+]
+
+[[rules]]
+id = "sendbird-access-id"
+description = "Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations."
+regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sendbird",
+]
+
+[[rules]]
+id = "sendbird-access-token"
+description = "Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data."
+regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sendbird",
+]
+
+[[rules]]
+id = "sendgrid-api-token"
+description = "Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure."
+regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sg.",
+]
+
+[[rules]]
+id = "sendinblue-api-token"
+description = "Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy."
+regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "xkeysib-",
+]
+
+[[rules]]
+id = "sentry-access-token"
+description = "Found a Sentry Access Token, risking unauthorized access to error tracking services and sensitive application data."
+regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sentry",
+]
+
+[[rules]]
+id = "shippo-api-token"
+description = "Discovered a Shippo API token, potentially compromising shipping services and customer order data."
+regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "shippo_",
+]
+
+[[rules]]
+id = "shopify-access-token"
+description = "Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches."
+regex = '''shpat_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpat_",
+]
+
+[[rules]]
+id = "shopify-custom-access-token"
+description = "Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security."
+regex = '''shpca_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpca_",
+]
+
+[[rules]]
+id = "shopify-private-app-access-token"
+description = "Identified a Shopify private app access token, risking unauthorized access to private app data and store operations."
+regex = '''shppa_[a-fA-F0-9]{32}'''
+keywords = [
+    "shppa_",
+]
+
+[[rules]]
+id = "shopify-shared-secret"
+description = "Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security."
+regex = '''shpss_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpss_",
+]
+
+[[rules]]
+id = "sidekiq-secret"
+description = "Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches."
+regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
+]
+
+[[rules]]
+id = "sidekiq-sensitive-url"
+description = "Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details."
+regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
+secretGroup = 2
+keywords = [
+    "gems.contribsys.com","enterprise.contribsys.com",
+]
+
+[[rules]]
+id = "slack-app-token"
+description = "Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data."
+regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
+keywords = [
+    "xapp",
+]
+
+[[rules]]
+id = "slack-bot-token"
+description = "Identified a Slack Bot token, which may compromise bot integrations and communication channel security."
+regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
+keywords = [
+    "xoxb",
+]
+
+[[rules]]
+id = "slack-config-access-token"
+description = "Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access."
+regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
+keywords = [
+    "xoxe.xoxb-","xoxe.xoxp-",
+]
+
+[[rules]]
+id = "slack-config-refresh-token"
+description = "Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings."
+regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
+keywords = [
+    "xoxe-",
+]
+
+[[rules]]
+id = "slack-legacy-bot-token"
+description = "Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure."
+regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
+keywords = [
+    "xoxb",
+]
+
+[[rules]]
+id = "slack-legacy-token"
+description = "Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data."
+regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
+keywords = [
+    "xoxo","xoxs",
+]
+
+[[rules]]
+id = "slack-legacy-workspace-token"
+description = "Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features."
+regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
+keywords = [
+    "xoxa","xoxr",
+]
+
+[[rules]]
+id = "slack-user-token"
+description = "Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces."
+regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
+keywords = [
+    "xoxp-","xoxe-",
+]
+
+[[rules]]
+id = "slack-webhook-url"
+description = "Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels."
+regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
+keywords = [
+    "hooks.slack.com",
+]
+
+[[rules]]
+id = "snyk-api-token"
+description = "Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security."
+regex = '''(?i)(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token",
+]
+
+[[rules]]
+id = "square-access-token"
+description = "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure."
+regex = '''(?i)\b((EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sq0atp-","eaaa",
+]
+
+[[rules]]
+id = "squarespace-access-token"
+description = "Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace."
+regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "squarespace",
+]
+
+[[rules]]
+id = "stripe-access-token"
+description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data."
+regex = '''(?i)\b((sk|rk)_(test|live|prod)_[0-9a-z]{10,99})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod",
+]
+
+[[rules]]
+id = "sumologic-access-id"
+description = "Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity."
+regex = '''(?i:(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3})(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3
+keywords = [
+    "sumo",
+]
+
+[rules.allowlist]
+
+regexTarget = "line"
+regexes = [
+    "sumOf",
+]
+
+[[rules]]
+id = "sumologic-access-token"
+description = "Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights."
+regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3
+keywords = [
+    "sumo",
+]
+
+[[rules]]
+id = "telegram-bot-api-token"
+description = "Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram."
+regex = '''(?i:(?:telegr)(?:[0-9a-z\(-_\t .\\]{0,40})(?:[\s|']|[\s|"]){0,3})(?:=|\|\|:|<=|=>|:|\?=|\()(?:'|\"|\s|=|\x60){0,5}([0-9]{5,16}:A[a-z0-9_\-]{34})(?:['|\"|\n|\r|\s|\x60|;|\\]|$)'''
+keywords = [
+    "telegr",
+]
+
+[[rules]]
+id = "travisci-access-token"
+description = "Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security."
+regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "travis",
+]
+
+[[rules]]
+id = "twilio-api-key"
+description = "Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data."
+regex = '''SK[0-9a-fA-F]{32}'''
+keywords = [
+    "twilio",
+]
+
+[[rules]]
+id = "twitch-api-token"
+description = "Discovered a Twitch API token, which could compromise streaming services and account integrations."
+regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitch",
+]
+
+[[rules]]
+id = "twitter-access-secret"
+description = "Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-access-token"
+description = "Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-api-key"
+description = "Identified a Twitter API Key, which may compromise Twitter application integrations and user data security."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-api-secret"
+description = "Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-bearer-token"
+description = "Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "typeform-api-token"
+description = "Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection."
+regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "tfp_",
+]
+
+[[rules]]
+id = "vault-batch-token"
+description = "Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data."
+regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hvb",
+]
+
+[[rules]]
+id = "vault-service-token"
+description = "Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials."
+regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hvs",
+]
+
+[[rules]]
+id = "yandex-access-token"
+description = "Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "yandex-api-key"
+description = "Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "yandex-aws-access-token"
+description = "Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "zendesk-secret-key"
+description = "Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data."
+regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "zendesk",
+]
+

From 2d8ce7866a1b417abd188dedd81ccf9ca684d31e Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 8 Jul 2024 19:14:51 +0530
Subject: [PATCH 090/136] Delete .gitleaks.toml

---
 .gitleaks.toml | 2910 ------------------------------------------------
 1 file changed, 2910 deletions(-)
 delete mode 100644 .gitleaks.toml

diff --git a/.gitleaks.toml b/.gitleaks.toml
deleted file mode 100644
index 24e8b88..0000000
--- a/.gitleaks.toml
+++ /dev/null
@@ -1,2910 +0,0 @@
-# This file has been auto-generated. Do not edit manually.
-# If you would like to contribute new rules, please use 
-# cmd/generate/config/main.go and follow the contributing guidelines
-# at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
-
-# This is the default gitleaks configuration file.
-# Rules and allowlists are defined within this file.
-# Rules instruct gitleaks on what should be considered a secret.
-# Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
-
-title = "gitleaks config"
-
-[allowlist]
-description = "global allow lists"
-paths = [
-    '''gitleaks.toml''',
-    '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
-    '''(go.mod|go.sum|go.work|go.work.sum)$''',
-    '''gradle.lockfile''',
-    '''node_modules''',
-    '''package-lock.json''',
-    '''yarn.lock''',
-    '''pnpm-lock.yaml''',
-    '''Database.refactorlog''',
-    '''vendor''',
-]
-
-[[rules]]
-id = "adafruit-api-key"
-description = "Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure."
-regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "adafruit",
-]
-
-[[rules]]
-id = "adobe-client-id"
-description = "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches."
-regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "adobe",
-]
-
-[[rules]]
-id = "adobe-client-secret"
-description = "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation."
-regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "p8e-",
-]
-
-[[rules]]
-id = "age-secret-key"
-description = "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information."
-regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
-keywords = [
-    "age-secret-key-1",
-]
-
-[[rules]]
-id = "airtable-api-key"
-description = "Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration."
-regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "airtable",
-]
-
-[[rules]]
-id = "algolia-api-key"
-description = "Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms."
-regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "algolia",
-]
-
-[[rules]]
-id = "alibaba-access-key-id"
-description = "Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise."
-regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ltai",
-]
-
-[[rules]]
-id = "alibaba-secret-key"
-description = "Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud."
-regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "alibaba",
-]
-
-[[rules]]
-id = "asana-client-id"
-description = "Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information."
-regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "asana",
-]
-
-[[rules]]
-id = "asana-client-secret"
-description = "Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access."
-regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "asana",
-]
-
-[[rules]]
-id = "atlassian-api-token"
-description = "Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality."
-regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "atlassian","confluence","jira",
-]
-
-[[rules]]
-id = "authress-service-client-access-key"
-description = "Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data."
-regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sc_","ext_","scauth_","authress_",
-]
-
-[[rules]]
-id = "aws-access-token"
-description = "Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms."
-regex = '''(?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}'''
-keywords = [
-    "akia","asia","abia","acca",
-]
-
-[[rules]]
-id = "beamer-api-token"
-description = "Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates."
-regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "beamer",
-]
-
-[[rules]]
-id = "bitbucket-client-id"
-description = "Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure."
-regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bitbucket",
-]
-
-[[rules]]
-id = "bitbucket-client-secret"
-description = "Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access."
-regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bitbucket",
-]
-
-[[rules]]
-id = "bittrex-access-key"
-description = "Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss."
-regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bittrex",
-]
-
-[[rules]]
-id = "bittrex-secret-key"
-description = "Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security."
-regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bittrex",
-]
-
-[[rules]]
-id = "clojars-api-token"
-description = "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation."
-regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
-keywords = [
-    "clojars",
-]
-
-[[rules]]
-id = "cloudflare-api-key"
-description = "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare",
-]
-
-[[rules]]
-id = "cloudflare-global-api-key"
-description = "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare",
-]
-
-[[rules]]
-id = "cloudflare-origin-ca-key"
-description = "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security."
-regex = '''\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare","v1.0-",
-]
-
-[[rules]]
-id = "codecov-access-token"
-description = "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data."
-regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "codecov",
-]
-
-[[rules]]
-id = "coinbase-access-token"
-description = "Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions."
-regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "coinbase",
-]
-
-[[rules]]
-id = "confluent-access-token"
-description = "Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow."
-regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "confluent",
-]
-
-[[rules]]
-id = "confluent-secret-key"
-description = "Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services."
-regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "confluent",
-]
-
-[[rules]]
-id = "contentful-delivery-api-token"
-description = "Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity."
-regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "contentful",
-]
-
-[[rules]]
-id = "databricks-api-token"
-description = "Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing."
-regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dapi",
-]
-
-[[rules]]
-id = "datadog-access-token"
-description = "Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation."
-regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "datadog",
-]
-
-[[rules]]
-id = "defined-networking-api-token"
-description = "Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches."
-regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dnkey",
-]
-
-[[rules]]
-id = "digitalocean-access-token"
-description = "Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise."
-regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "doo_v1_",
-]
-
-[[rules]]
-id = "digitalocean-pat"
-description = "Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy."
-regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dop_v1_",
-]
-
-[[rules]]
-id = "digitalocean-refresh-token"
-description = "Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation."
-regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dor_v1_",
-]
-
-[[rules]]
-id = "discord-api-token"
-description = "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "discord-client-id"
-description = "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "discord-client-secret"
-description = "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "doppler-api-token"
-description = "Discovered a Doppler API token, posing a risk to environment and secrets management security."
-regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
-keywords = [
-    "doppler",
-]
-
-[[rules]]
-id = "droneci-access-token"
-description = "Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows."
-regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "droneci",
-]
-
-[[rules]]
-id = "dropbox-api-token"
-description = "Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "dropbox-long-lived-api-token"
-description = "Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "dropbox-short-lived-api-token"
-description = "Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "duffel-api-token"
-description = "Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data."
-regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
-keywords = [
-    "duffel",
-]
-
-[[rules]]
-id = "dynatrace-api-token"
-description = "Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure."
-regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
-keywords = [
-    "dynatrace",
-]
-
-[[rules]]
-id = "easypost-api-token"
-description = "Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure."
-regex = '''\bEZAK(?i)[a-z0-9]{54}'''
-keywords = [
-    "ezak",
-]
-
-[[rules]]
-id = "easypost-test-api-token"
-description = "Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data."
-regex = '''\bEZTK(?i)[a-z0-9]{54}'''
-keywords = [
-    "eztk",
-]
-
-[[rules]]
-id = "etsy-access-token"
-description = "Found an Etsy Access Token, potentially compromising Etsy shop management and customer data."
-regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "etsy",
-]
-
-[[rules]]
-id = "facebook-access-token"
-description = "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-
-[[rules]]
-id = "facebook-page-access-token"
-description = "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)\b(EAA[MC][a-z0-9]{20,})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "eaam","eaac",
-]
-
-[[rules]]
-id = "facebook-secret"
-description = "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "facebook",
-]
-
-[[rules]]
-id = "fastly-api-token"
-description = "Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues."
-regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "fastly",
-]
-
-[[rules]]
-id = "finicity-api-token"
-description = "Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations."
-regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finicity",
-]
-
-[[rules]]
-id = "finicity-client-secret"
-description = "Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches."
-regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finicity",
-]
-
-[[rules]]
-id = "finnhub-access-token"
-description = "Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics."
-regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finnhub",
-]
-
-[[rules]]
-id = "flickr-access-token"
-description = "Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage."
-regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "flickr",
-]
-
-[[rules]]
-id = "flutterwave-encryption-key"
-description = "Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information."
-regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
-keywords = [
-    "flwseck_test",
-]
-
-[[rules]]
-id = "flutterwave-public-key"
-description = "Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations."
-regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
-keywords = [
-    "flwpubk_test",
-]
-
-[[rules]]
-id = "flutterwave-secret-key"
-description = "Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches."
-regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
-keywords = [
-    "flwseck_test",
-]
-
-[[rules]]
-id = "frameio-api-token"
-description = "Found a Frame.io API token, potentially compromising video collaboration and project management."
-regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
-keywords = [
-    "fio-u-",
-]
-
-[[rules]]
-id = "freshbooks-access-token"
-description = "Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure."
-regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "freshbooks",
-]
-
-[[rules]]
-id = "gcp-api-key"
-description = "Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches."
-regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "aiza",
-]
-
-[[rules]]
-id = "generic-api-key"
-description = "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."
-regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "key","api","token","secret","client","passwd","password","auth","access",
-]
-
-[rules.allowlist]
-stopwords = [
-    "000000",
-    "aaaaaa",
-    "about",
-    "abstract",
-    "academy",
-    "acces",
-    "account",
-    "act-",
-    "act.",
-    "act_",
-    "action",
-    "active",
-    "actively",
-    "activity",
-    "adapter",
-    "add-",
-    "add.",
-    "add_",
-    "add-on",
-    "addon",
-    "addres",
-    "admin",
-    "adobe",
-    "advanced",
-    "adventure",
-    "agent",
-    "agile",
-    "air-",
-    "air.",
-    "air_",
-    "ajax",
-    "akka",
-    "alert",
-    "alfred",
-    "algorithm",
-    "all-",
-    "all.",
-    "all_",
-    "alloy",
-    "alpha",
-    "amazon",
-    "amqp",
-    "analysi",
-    "analytic",
-    "analyzer",
-    "android",
-    "angular",
-    "angularj",
-    "animate",
-    "animation",
-    "another",
-    "ansible",
-    "answer",
-    "ant-",
-    "ant.",
-    "ant_",
-    "any-",
-    "any.",
-    "any_",
-    "apache",
-    "app-",
-    "app-",
-    "app.",
-    "app.",
-    "app_",
-    "app_",
-    "apple",
-    "arch",
-    "archive",
-    "archived",
-    "arduino",
-    "array",
-    "art-",
-    "art.",
-    "art_",
-    "article",
-    "asp-",
-    "asp.",
-    "asp_",
-    "asset",
-    "async",
-    "atom",
-    "attention",
-    "audio",
-    "audit",
-    "aura",
-    "auth",
-    "author",
-    "author",
-    "authorize",
-    "auto",
-    "automated",
-    "automatic",
-    "awesome",
-    "aws_",
-    "azure",
-    "back",
-    "backbone",
-    "backend",
-    "backup",
-    "bar-",
-    "bar.",
-    "bar_",
-    "base",
-    "based",
-    "bash",
-    "basic",
-    "batch",
-    "been",
-    "beer",
-    "behavior",
-    "being",
-    "benchmark",
-    "best",
-    "beta",
-    "better",
-    "big-",
-    "big.",
-    "big_",
-    "binary",
-    "binding",
-    "bit-",
-    "bit.",
-    "bit_",
-    "bitcoin",
-    "block",
-    "blog",
-    "board",
-    "book",
-    "bookmark",
-    "boost",
-    "boot",
-    "bootstrap",
-    "bosh",
-    "bot-",
-    "bot.",
-    "bot_",
-    "bower",
-    "box-",
-    "box.",
-    "box_",
-    "boxen",
-    "bracket",
-    "branch",
-    "bridge",
-    "browser",
-    "brunch",
-    "buffer",
-    "bug-",
-    "bug.",
-    "bug_",
-    "build",
-    "builder",
-    "building",
-    "buildout",
-    "buildpack",
-    "built",
-    "bundle",
-    "busines",
-    "but-",
-    "but.",
-    "but_",
-    "button",
-    "cache",
-    "caching",
-    "cakephp",
-    "calendar",
-    "call",
-    "camera",
-    "campfire",
-    "can-",
-    "can.",
-    "can_",
-    "canva",
-    "captcha",
-    "capture",
-    "card",
-    "carousel",
-    "case",
-    "cassandra",
-    "cat-",
-    "cat.",
-    "cat_",
-    "category",
-    "center",
-    "cento",
-    "challenge",
-    "change",
-    "changelog",
-    "channel",
-    "chart",
-    "chat",
-    "cheat",
-    "check",
-    "checker",
-    "chef",
-    "ches",
-    "chinese",
-    "chosen",
-    "chrome",
-    "ckeditor",
-    "clas",
-    "classe",
-    "classic",
-    "clean",
-    "cli-",
-    "cli.",
-    "cli_",
-    "client",
-    "client",
-    "clojure",
-    "clone",
-    "closure",
-    "cloud",
-    "club",
-    "cluster",
-    "cms-",
-    "cms_",
-    "coco",
-    "code",
-    "coding",
-    "coffee",
-    "color",
-    "combination",
-    "combo",
-    "command",
-    "commander",
-    "comment",
-    "commit",
-    "common",
-    "community",
-    "compas",
-    "compiler",
-    "complete",
-    "component",
-    "composer",
-    "computer",
-    "computing",
-    "con-",
-    "con.",
-    "con_",
-    "concept",
-    "conf",
-    "config",
-    "config",
-    "connect",
-    "connector",
-    "console",
-    "contact",
-    "container",
-    "contao",
-    "content",
-    "contest",
-    "context",
-    "control",
-    "convert",
-    "converter",
-    "conway'",
-    "cookbook",
-    "cookie",
-    "cool",
-    "copy",
-    "cordova",
-    "core",
-    "couchbase",
-    "couchdb",
-    "countdown",
-    "counter",
-    "course",
-    "craft",
-    "crawler",
-    "create",
-    "creating",
-    "creator",
-    "credential",
-    "crm-",
-    "crm.",
-    "crm_",
-    "cros",
-    "crud",
-    "csv-",
-    "csv.",
-    "csv_",
-    "cube",
-    "cucumber",
-    "cuda",
-    "current",
-    "currently",
-    "custom",
-    "daemon",
-    "dark",
-    "dart",
-    "dash",
-    "dashboard",
-    "data",
-    "database",
-    "date",
-    "day-",
-    "day.",
-    "day_",
-    "dead",
-    "debian",
-    "debug",
-    "debug",
-    "debugger",
-    "deck",
-    "define",
-    "del-",
-    "del.",
-    "del_",
-    "delete",
-    "demo",
-    "deploy",
-    "design",
-    "designer",
-    "desktop",
-    "detection",
-    "detector",
-    "dev-",
-    "dev.",
-    "dev_",
-    "develop",
-    "developer",
-    "device",
-    "devise",
-    "diff",
-    "digital",
-    "directive",
-    "directory",
-    "discovery",
-    "display",
-    "django",
-    "dns-",
-    "dns_",
-    "doc-",
-    "doc-",
-    "doc.",
-    "doc.",
-    "doc_",
-    "doc_",
-    "docker",
-    "docpad",
-    "doctrine",
-    "document",
-    "doe-",
-    "doe.",
-    "doe_",
-    "dojo",
-    "dom-",
-    "dom.",
-    "dom_",
-    "domain",
-    "done",
-    "don't",
-    "dot-",
-    "dot.",
-    "dot_",
-    "dotfile",
-    "download",
-    "draft",
-    "drag",
-    "drill",
-    "drive",
-    "driven",
-    "driver",
-    "drop",
-    "dropbox",
-    "drupal",
-    "dsl-",
-    "dsl.",
-    "dsl_",
-    "dynamic",
-    "easy",
-    "_ec2_",
-    "ecdsa",
-    "eclipse",
-    "edit",
-    "editing",
-    "edition",
-    "editor",
-    "element",
-    "emac",
-    "email",
-    "embed",
-    "embedded",
-    "ember",
-    "emitter",
-    "emulator",
-    "encoding",
-    "endpoint",
-    "engine",
-    "english",
-    "enhanced",
-    "entity",
-    "entry",
-    "env_",
-    "episode",
-    "erlang",
-    "error",
-    "espresso",
-    "event",
-    "evented",
-    "example",
-    "example",
-    "exchange",
-    "exercise",
-    "experiment",
-    "expire",
-    "exploit",
-    "explorer",
-    "export",
-    "exporter",
-    "expres",
-    "ext-",
-    "ext.",
-    "ext_",
-    "extended",
-    "extension",
-    "external",
-    "extra",
-    "extractor",
-    "fabric",
-    "facebook",
-    "factory",
-    "fake",
-    "fast",
-    "feature",
-    "feed",
-    "fewfwef",
-    "ffmpeg",
-    "field",
-    "file",
-    "filter",
-    "find",
-    "finder",
-    "firefox",
-    "firmware",
-    "first",
-    "fish",
-    "fix-",
-    "fix_",
-    "flash",
-    "flask",
-    "flat",
-    "flex",
-    "flexible",
-    "flickr",
-    "flow",
-    "fluent",
-    "fluentd",
-    "fluid",
-    "folder",
-    "font",
-    "force",
-    "foreman",
-    "fork",
-    "form",
-    "format",
-    "formatter",
-    "forum",
-    "foundry",
-    "framework",
-    "free",
-    "friend",
-    "friendly",
-    "front-end",
-    "frontend",
-    "ftp-",
-    "ftp.",
-    "ftp_",
-    "fuel",
-    "full",
-    "fun-",
-    "fun.",
-    "fun_",
-    "func",
-    "future",
-    "gaia",
-    "gallery",
-    "game",
-    "gateway",
-    "gem-",
-    "gem.",
-    "gem_",
-    "gen-",
-    "gen.",
-    "gen_",
-    "general",
-    "generator",
-    "generic",
-    "genetic",
-    "get-",
-    "get.",
-    "get_",
-    "getenv",
-    "getting",
-    "ghost",
-    "gist",
-    "git-",
-    "git.",
-    "git_",
-    "github",
-    "gitignore",
-    "gitlab",
-    "glas",
-    "gmail",
-    "gnome",
-    "gnu-",
-    "gnu.",
-    "gnu_",
-    "goal",
-    "golang",
-    "gollum",
-    "good",
-    "google",
-    "gpu-",
-    "gpu.",
-    "gpu_",
-    "gradle",
-    "grail",
-    "graph",
-    "graphic",
-    "great",
-    "grid",
-    "groovy",
-    "group",
-    "grunt",
-    "guard",
-    "gui-",
-    "gui.",
-    "gui_",
-    "guide",
-    "guideline",
-    "gulp",
-    "gwt-",
-    "gwt.",
-    "gwt_",
-    "hack",
-    "hackathon",
-    "hacker",
-    "hacking",
-    "hadoop",
-    "haml",
-    "handler",
-    "hardware",
-    "has-",
-    "has_",
-    "hash",
-    "haskell",
-    "have",
-    "haxe",
-    "hello",
-    "help",
-    "helper",
-    "here",
-    "hero",
-    "heroku",
-    "high",
-    "hipchat",
-    "history",
-    "home",
-    "homebrew",
-    "homepage",
-    "hook",
-    "host",
-    "hosting",
-    "hot-",
-    "hot.",
-    "hot_",
-    "house",
-    "how-",
-    "how.",
-    "how_",
-    "html",
-    "http",
-    "hub-",
-    "hub.",
-    "hub_",
-    "hubot",
-    "human",
-    "icon",
-    "ide-",
-    "ide.",
-    "ide_",
-    "idea",
-    "identity",
-    "idiomatic",
-    "image",
-    "impact",
-    "import",
-    "important",
-    "importer",
-    "impres",
-    "index",
-    "infinite",
-    "info",
-    "injection",
-    "inline",
-    "input",
-    "inside",
-    "inspector",
-    "instagram",
-    "install",
-    "installer",
-    "instant",
-    "intellij",
-    "interface",
-    "internet",
-    "interview",
-    "into",
-    "intro",
-    "ionic",
-    "iphone",
-    "ipython",
-    "irc-",
-    "irc_",
-    "iso-",
-    "iso.",
-    "iso_",
-    "issue",
-    "jade",
-    "jasmine",
-    "java",
-    "jbos",
-    "jekyll",
-    "jenkin",
-    "job-",
-    "job.",
-    "job_",
-    "joomla",
-    "jpa-",
-    "jpa.",
-    "jpa_",
-    "jquery",
-    "json",
-    "just",
-    "kafka",
-    "karma",
-    "kata",
-    "kernel",
-    "keyboard",
-    "kindle",
-    "kit-",
-    "kit.",
-    "kit_",
-    "kitchen",
-    "knife",
-    "koan",
-    "kohana",
-    "lab-",
-    "lab-",
-    "lab.",
-    "lab.",
-    "lab_",
-    "lab_",
-    "lambda",
-    "lamp",
-    "language",
-    "laravel",
-    "last",
-    "latest",
-    "latex",
-    "launcher",
-    "layer",
-    "layout",
-    "lazy",
-    "ldap",
-    "leaflet",
-    "league",
-    "learn",
-    "learning",
-    "led-",
-    "led.",
-    "led_",
-    "leetcode",
-    "les-",
-    "les.",
-    "les_",
-    "level",
-    "leveldb",
-    "lib-",
-    "lib.",
-    "lib_",
-    "librarie",
-    "library",
-    "license",
-    "life",
-    "liferay",
-    "light",
-    "lightbox",
-    "like",
-    "line",
-    "link",
-    "linked",
-    "linkedin",
-    "linux",
-    "lisp",
-    "list",
-    "lite",
-    "little",
-    "load",
-    "loader",
-    "local",
-    "location",
-    "lock",
-    "log-",
-    "log.",
-    "log_",
-    "logger",
-    "logging",
-    "logic",
-    "login",
-    "logstash",
-    "longer",
-    "look",
-    "love",
-    "lua-",
-    "lua.",
-    "lua_",
-    "mac-",
-    "mac.",
-    "mac_",
-    "machine",
-    "made",
-    "magento",
-    "magic",
-    "mail",
-    "make",
-    "maker",
-    "making",
-    "man-",
-    "man.",
-    "man_",
-    "manage",
-    "manager",
-    "manifest",
-    "manual",
-    "map-",
-    "map-",
-    "map.",
-    "map.",
-    "map_",
-    "map_",
-    "mapper",
-    "mapping",
-    "markdown",
-    "markup",
-    "master",
-    "math",
-    "matrix",
-    "maven",
-    "md5",
-    "mean",
-    "media",
-    "mediawiki",
-    "meetup",
-    "memcached",
-    "memory",
-    "menu",
-    "merchant",
-    "message",
-    "messaging",
-    "meta",
-    "metadata",
-    "meteor",
-    "method",
-    "metric",
-    "micro",
-    "middleman",
-    "migration",
-    "minecraft",
-    "miner",
-    "mini",
-    "minimal",
-    "mirror",
-    "mit-",
-    "mit.",
-    "mit_",
-    "mobile",
-    "mocha",
-    "mock",
-    "mod-",
-    "mod.",
-    "mod_",
-    "mode",
-    "model",
-    "modern",
-    "modular",
-    "module",
-    "modx",
-    "money",
-    "mongo",
-    "mongodb",
-    "mongoid",
-    "mongoose",
-    "monitor",
-    "monkey",
-    "more",
-    "motion",
-    "moved",
-    "movie",
-    "mozilla",
-    "mqtt",
-    "mule",
-    "multi",
-    "multiple",
-    "music",
-    "mustache",
-    "mvc-",
-    "mvc.",
-    "mvc_",
-    "mysql",
-    "nagio",
-    "name",
-    "native",
-    "need",
-    "neo-",
-    "neo.",
-    "neo_",
-    "nest",
-    "nested",
-    "net-",
-    "net.",
-    "net_",
-    "nette",
-    "network",
-    "new-",
-    "new-",
-    "new.",
-    "new.",
-    "new_",
-    "new_",
-    "next",
-    "nginx",
-    "ninja",
-    "nlp-",
-    "nlp.",
-    "nlp_",
-    "node",
-    "nodej",
-    "nosql",
-    "not-",
-    "not.",
-    "not_",
-    "note",
-    "notebook",
-    "notepad",
-    "notice",
-    "notifier",
-    "now-",
-    "now.",
-    "now_",
-    "number",
-    "oauth",
-    "object",
-    "objective",
-    "obsolete",
-    "ocaml",
-    "octopres",
-    "official",
-    "old-",
-    "old.",
-    "old_",
-    "onboard",
-    "online",
-    "only",
-    "open",
-    "opencv",
-    "opengl",
-    "openshift",
-    "openwrt",
-    "option",
-    "oracle",
-    "org-",
-    "org.",
-    "org_",
-    "origin",
-    "original",
-    "orm-",
-    "orm.",
-    "orm_",
-    "osx-",
-    "osx_",
-    "our-",
-    "our.",
-    "our_",
-    "out-",
-    "out.",
-    "out_",
-    "output",
-    "over",
-    "overview",
-    "own-",
-    "own.",
-    "own_",
-    "pack",
-    "package",
-    "packet",
-    "page",
-    "page",
-    "panel",
-    "paper",
-    "paperclip",
-    "para",
-    "parallax",
-    "parallel",
-    "parse",
-    "parser",
-    "parsing",
-    "particle",
-    "party",
-    "password",
-    "patch",
-    "path",
-    "pattern",
-    "payment",
-    "paypal",
-    "pdf-",
-    "pdf.",
-    "pdf_",
-    "pebble",
-    "people",
-    "perl",
-    "personal",
-    "phalcon",
-    "phoenix",
-    "phone",
-    "phonegap",
-    "photo",
-    "php-",
-    "php.",
-    "php_",
-    "physic",
-    "picker",
-    "pipeline",
-    "platform",
-    "play",
-    "player",
-    "please",
-    "plu-",
-    "plu.",
-    "plu_",
-    "plug-in",
-    "plugin",
-    "plupload",
-    "png-",
-    "png.",
-    "png_",
-    "poker",
-    "polyfill",
-    "polymer",
-    "pool",
-    "pop-",
-    "pop.",
-    "pop_",
-    "popcorn",
-    "popup",
-    "port",
-    "portable",
-    "portal",
-    "portfolio",
-    "post",
-    "power",
-    "powered",
-    "powerful",
-    "prelude",
-    "pretty",
-    "preview",
-    "principle",
-    "print",
-    "pro-",
-    "pro.",
-    "pro_",
-    "problem",
-    "proc",
-    "product",
-    "profile",
-    "profiler",
-    "program",
-    "progres",
-    "project",
-    "protocol",
-    "prototype",
-    "provider",
-    "proxy",
-    "public",
-    "pull",
-    "puppet",
-    "pure",
-    "purpose",
-    "push",
-    "pusher",
-    "pyramid",
-    "python",
-    "quality",
-    "query",
-    "queue",
-    "quick",
-    "rabbitmq",
-    "rack",
-    "radio",
-    "rail",
-    "railscast",
-    "random",
-    "range",
-    "raspberry",
-    "rdf-",
-    "rdf.",
-    "rdf_",
-    "react",
-    "reactive",
-    "read",
-    "reader",
-    "readme",
-    "ready",
-    "real",
-    "reality",
-    "real-time",
-    "realtime",
-    "recipe",
-    "recorder",
-    "red-",
-    "red.",
-    "red_",
-    "reddit",
-    "redi",
-    "redmine",
-    "reference",
-    "refinery",
-    "refresh",
-    "registry",
-    "related",
-    "release",
-    "remote",
-    "rendering",
-    "repo",
-    "report",
-    "request",
-    "require",
-    "required",
-    "requirej",
-    "research",
-    "resource",
-    "response",
-    "resque",
-    "rest",
-    "restful",
-    "resume",
-    "reveal",
-    "reverse",
-    "review",
-    "riak",
-    "rich",
-    "right",
-    "ring",
-    "robot",
-    "role",
-    "room",
-    "router",
-    "routing",
-    "rpc-",
-    "rpc.",
-    "rpc_",
-    "rpg-",
-    "rpg.",
-    "rpg_",
-    "rspec",
-    "ruby-",
-    "ruby.",
-    "ruby_",
-    "rule",
-    "run-",
-    "run.",
-    "run_",
-    "runner",
-    "running",
-    "runtime",
-    "rust",
-    "rvm-",
-    "rvm.",
-    "rvm_",
-    "salt",
-    "sample",
-    "sample",
-    "sandbox",
-    "sas-",
-    "sas.",
-    "sas_",
-    "sbt-",
-    "sbt.",
-    "sbt_",
-    "scala",
-    "scalable",
-    "scanner",
-    "schema",
-    "scheme",
-    "school",
-    "science",
-    "scraper",
-    "scratch",
-    "screen",
-    "script",
-    "scroll",
-    "scs-",
-    "scs.",
-    "scs_",
-    "sdk-",
-    "sdk.",
-    "sdk_",
-    "sdl-",
-    "sdl.",
-    "sdl_",
-    "search",
-    "secure",
-    "security",
-    "see-",
-    "see.",
-    "see_",
-    "seed",
-    "select",
-    "selector",
-    "selenium",
-    "semantic",
-    "sencha",
-    "send",
-    "sentiment",
-    "serie",
-    "server",
-    "service",
-    "session",
-    "set-",
-    "set.",
-    "set_",
-    "setting",
-    "setting",
-    "setup",
-    "sha1",
-    "sha2",
-    "sha256",
-    "share",
-    "shared",
-    "sharing",
-    "sheet",
-    "shell",
-    "shield",
-    "shipping",
-    "shop",
-    "shopify",
-    "shortener",
-    "should",
-    "show",
-    "showcase",
-    "side",
-    "silex",
-    "simple",
-    "simulator",
-    "single",
-    "site",
-    "skeleton",
-    "sketch",
-    "skin",
-    "slack",
-    "slide",
-    "slider",
-    "slim",
-    "small",
-    "smart",
-    "smtp",
-    "snake",
-    "snippet",
-    "soap",
-    "social",
-    "socket",
-    "software",
-    "solarized",
-    "solr",
-    "solution",
-    "solver",
-    "some",
-    "soon",
-    "source",
-    "space",
-    "spark",
-    "spatial",
-    "spec",
-    "sphinx",
-    "spine",
-    "spotify",
-    "spree",
-    "spring",
-    "sprite",
-    "sql-",
-    "sql.",
-    "sql_",
-    "sqlite",
-    "ssh-",
-    "ssh.",
-    "ssh_",
-    "stack",
-    "staging",
-    "standard",
-    "stanford",
-    "start",
-    "started",
-    "starter",
-    "startup",
-    "stat",
-    "statamic",
-    "state",
-    "static",
-    "statistic",
-    "statsd",
-    "statu",
-    "steam",
-    "step",
-    "still",
-    "stm-",
-    "stm.",
-    "stm_",
-    "storage",
-    "store",
-    "storm",
-    "story",
-    "strategy",
-    "stream",
-    "streaming",
-    "string",
-    "stripe",
-    "structure",
-    "studio",
-    "study",
-    "stuff",
-    "style",
-    "sublime",
-    "sugar",
-    "suite",
-    "summary",
-    "super",
-    "support",
-    "supported",
-    "svg-",
-    "svg.",
-    "svg_",
-    "svn-",
-    "svn.",
-    "svn_",
-    "swagger",
-    "swift",
-    "switch",
-    "switcher",
-    "symfony",
-    "symphony",
-    "sync",
-    "synopsi",
-    "syntax",
-    "system",
-    "system",
-    "tab-",
-    "tab-",
-    "tab.",
-    "tab.",
-    "tab_",
-    "tab_",
-    "table",
-    "tag-",
-    "tag-",
-    "tag.",
-    "tag.",
-    "tag_",
-    "tag_",
-    "talk",
-    "target",
-    "task",
-    "tcp-",
-    "tcp.",
-    "tcp_",
-    "tdd-",
-    "tdd.",
-    "tdd_",
-    "team",
-    "tech",
-    "template",
-    "term",
-    "terminal",
-    "testing",
-    "tetri",
-    "text",
-    "textmate",
-    "theme",
-    "theory",
-    "three",
-    "thrift",
-    "time",
-    "timeline",
-    "timer",
-    "tiny",
-    "tinymce",
-    "tip-",
-    "tip.",
-    "tip_",
-    "title",
-    "todo",
-    "todomvc",
-    "token",
-    "tool",
-    "toolbox",
-    "toolkit",
-    "top-",
-    "top.",
-    "top_",
-    "tornado",
-    "touch",
-    "tower",
-    "tracker",
-    "tracking",
-    "traffic",
-    "training",
-    "transfer",
-    "translate",
-    "transport",
-    "tree",
-    "trello",
-    "try-",
-    "try.",
-    "try_",
-    "tumblr",
-    "tut-",
-    "tut.",
-    "tut_",
-    "tutorial",
-    "tweet",
-    "twig",
-    "twitter",
-    "type",
-    "typo",
-    "ubuntu",
-    "uiview",
-    "ultimate",
-    "under",
-    "unit",
-    "unity",
-    "universal",
-    "unix",
-    "update",
-    "updated",
-    "upgrade",
-    "upload",
-    "uploader",
-    "uri-",
-    "uri.",
-    "uri_",
-    "url-",
-    "url.",
-    "url_",
-    "usage",
-    "usb-",
-    "usb.",
-    "usb_",
-    "use-",
-    "use.",
-    "use_",
-    "used",
-    "useful",
-    "user",
-    "using",
-    "util",
-    "utilitie",
-    "utility",
-    "vagrant",
-    "validator",
-    "value",
-    "variou",
-    "varnish",
-    "version",
-    "via-",
-    "via.",
-    "via_",
-    "video",
-    "view",
-    "viewer",
-    "vim-",
-    "vim.",
-    "vim_",
-    "vimrc",
-    "virtual",
-    "vision",
-    "visual",
-    "vpn",
-    "want",
-    "warning",
-    "watch",
-    "watcher",
-    "wave",
-    "way-",
-    "way.",
-    "way_",
-    "weather",
-    "web-",
-    "web_",
-    "webapp",
-    "webgl",
-    "webhook",
-    "webkit",
-    "webrtc",
-    "website",
-    "websocket",
-    "welcome",
-    "welcome",
-    "what",
-    "what'",
-    "when",
-    "where",
-    "which",
-    "why-",
-    "why.",
-    "why_",
-    "widget",
-    "wifi",
-    "wiki",
-    "win-",
-    "win.",
-    "win_",
-    "window",
-    "wip-",
-    "wip.",
-    "wip_",
-    "within",
-    "without",
-    "wizard",
-    "word",
-    "wordpres",
-    "work",
-    "worker",
-    "workflow",
-    "working",
-    "workshop",
-    "world",
-    "wrapper",
-    "write",
-    "writer",
-    "writing",
-    "written",
-    "www-",
-    "www.",
-    "www_",
-    "xamarin",
-    "xcode",
-    "xml-",
-    "xml.",
-    "xml_",
-    "xmpp",
-    "xxxxxx",
-    "yahoo",
-    "yaml",
-    "yandex",
-    "yeoman",
-    "yet-",
-    "yet.",
-    "yet_",
-    "yii-",
-    "yii.",
-    "yii_",
-    "youtube",
-    "yui-",
-    "yui.",
-    "yui_",
-    "zend",
-    "zero",
-    "zip-",
-    "zip.",
-    "zip_",
-    "zsh-",
-    "zsh.",
-    "zsh_",
-]
-
-[[rules]]
-id = "github-app-token"
-description = "Identified a GitHub App Token, which may compromise GitHub application integrations and source code security."
-regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghu_","ghs_",
-]
-
-[[rules]]
-id = "github-fine-grained-pat"
-description = "Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation."
-regex = '''github_pat_[0-9a-zA-Z_]{82}'''
-keywords = [
-    "github_pat_",
-]
-
-[[rules]]
-id = "github-oauth"
-description = "Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks."
-regex = '''gho_[0-9a-zA-Z]{36}'''
-keywords = [
-    "gho_",
-]
-
-[[rules]]
-id = "github-pat"
-description = "Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure."
-regex = '''ghp_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghp_",
-]
-
-[[rules]]
-id = "github-refresh-token"
-description = "Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services."
-regex = '''ghr_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghr_",
-]
-
-[[rules]]
-id = "gitlab-pat"
-description = "Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure."
-regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
-keywords = [
-    "glpat-",
-]
-
-[[rules]]
-id = "gitlab-ptt"
-description = "Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security."
-regex = '''glptt-[0-9a-f]{40}'''
-keywords = [
-    "glptt-",
-]
-
-[[rules]]
-id = "gitlab-rrt"
-description = "Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access."
-regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
-keywords = [
-    "gr1348941",
-]
-
-[[rules]]
-id = "gitter-access-token"
-description = "Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services."
-regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "gitter",
-]
-
-[[rules]]
-id = "gocardless-api-token"
-description = "Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure."
-regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "live_","gocardless",
-]
-
-[[rules]]
-id = "grafana-api-key"
-description = "Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics."
-regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "eyjrijoi",
-]
-
-[[rules]]
-id = "grafana-cloud-api-token"
-description = "Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure."
-regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "glc_",
-]
-
-[[rules]]
-id = "grafana-service-account-token"
-description = "Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity."
-regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "glsa_",
-]
-
-[[rules]]
-id = "harness-api-key"
-description = "Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account."
-regex = '''((?:pat|sat)\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{20})'''
-keywords = [
-    "pat.","sat.",
-]
-
-[[rules]]
-id = "hashicorp-tf-api-token"
-description = "Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches."
-regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
-keywords = [
-    "atlasv1",
-]
-
-[[rules]]
-id = "hashicorp-tf-password"
-description = "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches."
-regex = '''(?i)(?:administrator_login_password|password)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}("[a-z0-9=_\-]{8,20}")(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-path = '''\.(tf|hcl)$'''
-keywords = [
-    "administrator_login_password","password",
-]
-
-[[rules]]
-id = "heroku-api-key"
-description = "Detected a Heroku API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "heroku",
-]
-
-[[rules]]
-id = "hubspot-api-key"
-description = "Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations."
-regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hubspot",
-]
-
-[[rules]]
-id = "huggingface-access-token"
-description = "Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data."
-regex = '''(?:^|[\\'"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\'"` <])'''
-entropy = 1
-keywords = [
-    "hf_",
-]
-
-[[rules]]
-id = "huggingface-organization-api-token"
-description = "Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data."
-regex = '''(?:^|[\\'"` >=:\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\'"` <\),])'''
-entropy = 2
-keywords = [
-    "api_org_",
-]
-
-[[rules]]
-id = "infracost-api-token"
-description = "Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data."
-regex = '''(?i)\b(ico-[a-zA-Z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ico-",
-]
-
-[[rules]]
-id = "intercom-api-key"
-description = "Identified an Intercom API Token, which could compromise customer communication channels and data privacy."
-regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "intercom",
-]
-
-[[rules]]
-id = "intra42-client-secret"
-description = "Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data."
-regex = '''(?i)\b(s-s4t2(?:ud|af)-[abcdef0123456789]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "intra","s-s4t2ud-","s-s4t2af-",
-]
-
-[[rules]]
-id = "jfrog-api-key"
-description = "Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines."
-regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "jfrog","artifactory","bintray","xray",
-]
-
-[[rules]]
-id = "jfrog-identity-token"
-description = "Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts."
-regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "jfrog","artifactory","bintray","xray",
-]
-
-[[rules]]
-id = "jwt"
-description = "Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data."
-regex = '''\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ey",
-]
-
-[[rules]]
-id = "jwt-base64"
-description = "Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information."
-regex = '''\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\/\\_+\-\r\n]{40,}={0,2}'''
-keywords = [
-    "zxlk",
-]
-
-[[rules]]
-id = "kraken-access-token"
-description = "Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security."
-regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kraken",
-]
-
-[[rules]]
-id = "kucoin-access-token"
-description = "Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions."
-regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kucoin",
-]
-
-[[rules]]
-id = "kucoin-secret-key"
-description = "Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches."
-regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kucoin",
-]
-
-[[rules]]
-id = "launchdarkly-access-token"
-description = "Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality."
-regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "launchdarkly",
-]
-
-[[rules]]
-id = "linear-api-key"
-description = "Detected a Linear API Token, posing a risk to project management tools and sensitive task data."
-regex = '''lin_api_(?i)[a-z0-9]{40}'''
-keywords = [
-    "lin_api_",
-]
-
-[[rules]]
-id = "linear-client-secret"
-description = "Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data."
-regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linear",
-]
-
-[[rules]]
-id = "linkedin-client-id"
-description = "Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure."
-regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linkedin","linked-in",
-]
-
-[[rules]]
-id = "linkedin-client-secret"
-description = "Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data."
-regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linkedin","linked-in",
-]
-
-[[rules]]
-id = "lob-api-key"
-description = "Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services."
-regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "test_","live_",
-]
-
-[[rules]]
-id = "lob-pub-api-key"
-description = "Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations."
-regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "test_pub","live_pub","_pub",
-]
-
-[[rules]]
-id = "mailchimp-api-key"
-description = "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data."
-regex = '''(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us\d\d)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailchimp",
-]
-
-[[rules]]
-id = "mailgun-private-api-token"
-description = "Found a Mailgun private API token, risking unauthorized email service operations and data breaches."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mailgun-pub-key"
-description = "Discovered a Mailgun public validation key, which could expose email verification processes and associated data."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mailgun-signing-key"
-description = "Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mapbox-api-token"
-description = "Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure."
-regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mapbox",
-]
-
-[[rules]]
-id = "mattermost-access-token"
-description = "Identified a Mattermost Access Token, which may compromise team communication channels and data privacy."
-regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mattermost",
-]
-
-[[rules]]
-id = "messagebird-api-token"
-description = "Found a MessageBird API token, risking unauthorized access to communication platforms and message data."
-regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "messagebird","message-bird","message_bird",
-]
-
-[[rules]]
-id = "messagebird-client-id"
-description = "Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data."
-regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "messagebird","message-bird","message_bird",
-]
-
-[[rules]]
-id = "microsoft-teams-webhook"
-description = "Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks."
-regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
-keywords = [
-    "webhook.office.com","webhookb2","incomingwebhook",
-]
-
-[[rules]]
-id = "netlify-access-token"
-description = "Detected a Netlify Access Token, potentially compromising web hosting services and site management."
-regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "netlify",
-]
-
-[[rules]]
-id = "new-relic-browser-api-token"
-description = "Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrjs-",
-]
-
-[[rules]]
-id = "new-relic-insert-key"
-description = "Discovered a New Relic insight insert key, compromising data injection into the platform."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrii-",
-]
-
-[[rules]]
-id = "new-relic-user-api-id"
-description = "Found a New Relic user API ID, posing a risk to application monitoring services and data integrity."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "new-relic","newrelic","new_relic",
-]
-
-[[rules]]
-id = "new-relic-user-api-key"
-description = "Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrak",
-]
-
-[[rules]]
-id = "npm-access-token"
-description = "Uncovered an npm access token, potentially compromising package management and code repository access."
-regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "npm_",
-]
-
-[[rules]]
-id = "nytimes-access-token"
-description = "Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services."
-regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nytimes","new-york-times","newyorktimes",
-]
-
-[[rules]]
-id = "okta-access-token"
-description = "Identified an Okta Access Token, which may compromise identity management services and user authentication data."
-regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "okta",
-]
-
-[[rules]]
-id = "openai-api-key"
-description = "Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation."
-regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "t3blbkfj",
-]
-
-[[rules]]
-id = "plaid-api-token"
-description = "Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "plaid-client-id"
-description = "Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "plaid-secret-key"
-description = "Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "planetscale-api-token"
-description = "Identified a PlanetScale API token, potentially compromising database management and operations."
-regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_tkn_",
-]
-
-[[rules]]
-id = "planetscale-oauth-token"
-description = "Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity."
-regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_oauth_",
-]
-
-[[rules]]
-id = "planetscale-password"
-description = "Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches."
-regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_pw_",
-]
-
-[[rules]]
-id = "postman-api-token"
-description = "Uncovered a Postman API token, potentially compromising API testing and development workflows."
-regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pmak-",
-]
-
-[[rules]]
-id = "prefect-api-token"
-description = "Detected a Prefect API token, risking unauthorized access to workflow management and automation services."
-regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pnu_",
-]
-
-[[rules]]
-id = "private-key"
-description = "Identified a Private Key, which may compromise cryptographic security and sensitive data encryption."
-regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
-keywords = [
-    "-----begin",
-]
-
-[[rules]]
-id = "pulumi-api-token"
-description = "Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management."
-regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pul-",
-]
-
-[[rules]]
-id = "pypi-upload-token"
-description = "Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity."
-regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
-keywords = [
-    "pypi-ageichlwas5vcmc",
-]
-
-[[rules]]
-id = "rapidapi-access-token"
-description = "Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services."
-regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rapidapi",
-]
-
-[[rules]]
-id = "readme-api-token"
-description = "Detected a Readme API token, risking unauthorized documentation management and content exposure."
-regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rdme_",
-]
-
-[[rules]]
-id = "rubygems-api-token"
-description = "Identified a Rubygem API token, potentially compromising Ruby library distribution and package management."
-regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rubygems_",
-]
-
-[[rules]]
-id = "scalingo-api-token"
-description = "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security."
-regex = '''\b(tk-us-[a-zA-Z0-9-_]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "tk-us-",
-]
-
-[[rules]]
-id = "sendbird-access-id"
-description = "Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations."
-regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sendbird",
-]
-
-[[rules]]
-id = "sendbird-access-token"
-description = "Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data."
-regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sendbird",
-]
-
-[[rules]]
-id = "sendgrid-api-token"
-description = "Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure."
-regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sg.",
-]
-
-[[rules]]
-id = "sendinblue-api-token"
-description = "Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy."
-regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "xkeysib-",
-]
-
-[[rules]]
-id = "sentry-access-token"
-description = "Found a Sentry Access Token, risking unauthorized access to error tracking services and sensitive application data."
-regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sentry",
-]
-
-[[rules]]
-id = "shippo-api-token"
-description = "Discovered a Shippo API token, potentially compromising shipping services and customer order data."
-regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "shippo_",
-]
-
-[[rules]]
-id = "shopify-access-token"
-description = "Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches."
-regex = '''shpat_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpat_",
-]
-
-[[rules]]
-id = "shopify-custom-access-token"
-description = "Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security."
-regex = '''shpca_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpca_",
-]
-
-[[rules]]
-id = "shopify-private-app-access-token"
-description = "Identified a Shopify private app access token, risking unauthorized access to private app data and store operations."
-regex = '''shppa_[a-fA-F0-9]{32}'''
-keywords = [
-    "shppa_",
-]
-
-[[rules]]
-id = "shopify-shared-secret"
-description = "Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security."
-regex = '''shpss_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpss_",
-]
-
-[[rules]]
-id = "sidekiq-secret"
-description = "Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches."
-regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
-]
-
-[[rules]]
-id = "sidekiq-sensitive-url"
-description = "Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details."
-regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
-secretGroup = 2
-keywords = [
-    "gems.contribsys.com","enterprise.contribsys.com",
-]
-
-[[rules]]
-id = "slack-app-token"
-description = "Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data."
-regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
-keywords = [
-    "xapp",
-]
-
-[[rules]]
-id = "slack-bot-token"
-description = "Identified a Slack Bot token, which may compromise bot integrations and communication channel security."
-regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
-keywords = [
-    "xoxb",
-]
-
-[[rules]]
-id = "slack-config-access-token"
-description = "Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access."
-regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
-keywords = [
-    "xoxe.xoxb-","xoxe.xoxp-",
-]
-
-[[rules]]
-id = "slack-config-refresh-token"
-description = "Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings."
-regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
-keywords = [
-    "xoxe-",
-]
-
-[[rules]]
-id = "slack-legacy-bot-token"
-description = "Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure."
-regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
-keywords = [
-    "xoxb",
-]
-
-[[rules]]
-id = "slack-legacy-token"
-description = "Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data."
-regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
-keywords = [
-    "xoxo","xoxs",
-]
-
-[[rules]]
-id = "slack-legacy-workspace-token"
-description = "Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features."
-regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
-keywords = [
-    "xoxa","xoxr",
-]
-
-[[rules]]
-id = "slack-user-token"
-description = "Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces."
-regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
-keywords = [
-    "xoxp-","xoxe-",
-]
-
-[[rules]]
-id = "slack-webhook-url"
-description = "Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels."
-regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
-keywords = [
-    "hooks.slack.com",
-]
-
-[[rules]]
-id = "snyk-api-token"
-description = "Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security."
-regex = '''(?i)(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token",
-]
-
-[[rules]]
-id = "square-access-token"
-description = "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure."
-regex = '''(?i)\b((EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sq0atp-","eaaa",
-]
-
-[[rules]]
-id = "squarespace-access-token"
-description = "Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace."
-regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "squarespace",
-]
-
-[[rules]]
-id = "stripe-access-token"
-description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data."
-regex = '''(?i)\b((sk|rk)_(test|live|prod)_[0-9a-z]{10,99})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod",
-]
-
-[[rules]]
-id = "sumologic-access-id"
-description = "Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity."
-regex = '''(?i:(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3})(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3
-keywords = [
-    "sumo",
-]
-
-[rules.allowlist]
-
-regexTarget = "line"
-regexes = [
-    "sumOf",
-]
-
-[[rules]]
-id = "sumologic-access-token"
-description = "Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights."
-regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3
-keywords = [
-    "sumo",
-]
-
-[[rules]]
-id = "telegram-bot-api-token"
-description = "Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram."
-regex = '''(?i:(?:telegr)(?:[0-9a-z\(-_\t .\\]{0,40})(?:[\s|']|[\s|"]){0,3})(?:=|\|\|:|<=|=>|:|\?=|\()(?:'|\"|\s|=|\x60){0,5}([0-9]{5,16}:A[a-z0-9_\-]{34})(?:['|\"|\n|\r|\s|\x60|;|\\]|$)'''
-keywords = [
-    "telegr",
-]
-
-[[rules]]
-id = "travisci-access-token"
-description = "Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security."
-regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "travis",
-]
-
-[[rules]]
-id = "twilio-api-key"
-description = "Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data."
-regex = '''SK[0-9a-fA-F]{32}'''
-keywords = [
-    "twilio",
-]
-
-[[rules]]
-id = "twitch-api-token"
-description = "Discovered a Twitch API token, which could compromise streaming services and account integrations."
-regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitch",
-]
-
-[[rules]]
-id = "twitter-access-secret"
-description = "Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-access-token"
-description = "Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-api-key"
-description = "Identified a Twitter API Key, which may compromise Twitter application integrations and user data security."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-api-secret"
-description = "Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-bearer-token"
-description = "Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "typeform-api-token"
-description = "Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection."
-regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "tfp_",
-]
-
-[[rules]]
-id = "vault-batch-token"
-description = "Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data."
-regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hvb",
-]
-
-[[rules]]
-id = "vault-service-token"
-description = "Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials."
-regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hvs",
-]
-
-[[rules]]
-id = "yandex-access-token"
-description = "Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "yandex-api-key"
-description = "Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "yandex-aws-access-token"
-description = "Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "zendesk-secret-key"
-description = "Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data."
-regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "zendesk",
-]
-

From 04a4b3e349edd8183d64a805b9252b772b71ad77 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 8 Jul 2024 19:46:16 +0530
Subject: [PATCH 091/136] Update Rdf4jClient.java

---
 src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
index 2ad38c1..cfb356c 100644
--- a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
+++ b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
@@ -67,6 +67,8 @@ public class Rdf4jClient {
 
   private static String STARDOG_PASS = "password";
 
+  private static String password = "gfhvbdfdter547uthgy";
+  
   private static String aws_session_token = "gfhvbdfdter547uthgy";
 
   private static String aws_temporary_access_key_id = "12345";

From 50574e141e2a8d474121f1f0157b9276c27d9183 Mon Sep 17 00:00:00 2001
From: iamSrikantheppa <169036673+iamSrikantheppa@users.noreply.github.com>
Date: Mon, 8 Jul 2024 19:53:31 +0530
Subject: [PATCH 092/136] Update Rdf4jClient.java

---
 src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
index cfb356c..0f8d156 100644
--- a/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
+++ b/src/main/java/com/scania/sdos/orchestration/Rdf4jClient.java
@@ -68,8 +68,6 @@ public class Rdf4jClient {
   private static String STARDOG_PASS = "password";
 
   private static String password = "gfhvbdfdter547uthgy";
-  
-  private static String aws_session_token = "gfhvbdfdter547uthgy";
 
   private static String aws_temporary_access_key_id = "12345";
 

From e0c3d223903d396776c7c5220fb632138a34f918 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 8 Jul 2024 21:44:26 +0530
Subject: [PATCH 093/136] Update main.yml

---
 .github/workflows/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1cc33fe..17102a6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -277,6 +277,7 @@ jobs:
         with:
           fetch-depth: 0
           clean: false
+          ref: refs/heads/test
       - name: Set permissions for reports directory
         run: sudo chmod -R 777 /home/runner/work/sdos/sdos/reports || true
 

From b8b7364a830d936bd565ea5c86e5a86bf78bb6c5 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 8 Jul 2024 21:58:55 +0530
Subject: [PATCH 094/136] Update main.yml

---
 .github/workflows/main.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 17102a6..ee9a869 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -277,7 +277,7 @@ jobs:
         with:
           fetch-depth: 0
           clean: false
-          ref: refs/heads/test
+          
       - name: Set permissions for reports directory
         run: sudo chmod -R 777 /home/runner/work/sdos/sdos/reports || true
 
@@ -289,6 +289,8 @@ jobs:
       
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2
+        with:
+          args: detect --redact -v --exit-code=2 --report-format=sarif --report-path=results.sarif --log-level=debug
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.

From 1d08154b04d68d747f852e41b8d252603ab1b9b5 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 8 Jul 2024 22:06:35 +0530
Subject: [PATCH 095/136] Create .gitleaks.toml

---
 .gitleaks.toml | 2910 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 2910 insertions(+)
 create mode 100644 .gitleaks.toml

diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..24e8b88
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,2910 @@
+# This file has been auto-generated. Do not edit manually.
+# If you would like to contribute new rules, please use 
+# cmd/generate/config/main.go and follow the contributing guidelines
+# at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
+
+# This is the default gitleaks configuration file.
+# Rules and allowlists are defined within this file.
+# Rules instruct gitleaks on what should be considered a secret.
+# Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
+
+title = "gitleaks config"
+
+[allowlist]
+description = "global allow lists"
+paths = [
+    '''gitleaks.toml''',
+    '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
+    '''(go.mod|go.sum|go.work|go.work.sum)$''',
+    '''gradle.lockfile''',
+    '''node_modules''',
+    '''package-lock.json''',
+    '''yarn.lock''',
+    '''pnpm-lock.yaml''',
+    '''Database.refactorlog''',
+    '''vendor''',
+]
+
+[[rules]]
+id = "adafruit-api-key"
+description = "Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure."
+regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "adafruit",
+]
+
+[[rules]]
+id = "adobe-client-id"
+description = "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches."
+regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "adobe",
+]
+
+[[rules]]
+id = "adobe-client-secret"
+description = "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation."
+regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "p8e-",
+]
+
+[[rules]]
+id = "age-secret-key"
+description = "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information."
+regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
+keywords = [
+    "age-secret-key-1",
+]
+
+[[rules]]
+id = "airtable-api-key"
+description = "Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration."
+regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "airtable",
+]
+
+[[rules]]
+id = "algolia-api-key"
+description = "Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms."
+regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "algolia",
+]
+
+[[rules]]
+id = "alibaba-access-key-id"
+description = "Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise."
+regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ltai",
+]
+
+[[rules]]
+id = "alibaba-secret-key"
+description = "Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud."
+regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "alibaba",
+]
+
+[[rules]]
+id = "asana-client-id"
+description = "Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information."
+regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "asana",
+]
+
+[[rules]]
+id = "asana-client-secret"
+description = "Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access."
+regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "asana",
+]
+
+[[rules]]
+id = "atlassian-api-token"
+description = "Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality."
+regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "atlassian","confluence","jira",
+]
+
+[[rules]]
+id = "authress-service-client-access-key"
+description = "Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data."
+regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sc_","ext_","scauth_","authress_",
+]
+
+[[rules]]
+id = "aws-access-token"
+description = "Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms."
+regex = '''(?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}'''
+keywords = [
+    "akia","asia","abia","acca",
+]
+
+[[rules]]
+id = "beamer-api-token"
+description = "Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates."
+regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "beamer",
+]
+
+[[rules]]
+id = "bitbucket-client-id"
+description = "Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure."
+regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bitbucket",
+]
+
+[[rules]]
+id = "bitbucket-client-secret"
+description = "Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access."
+regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bitbucket",
+]
+
+[[rules]]
+id = "bittrex-access-key"
+description = "Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss."
+regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bittrex",
+]
+
+[[rules]]
+id = "bittrex-secret-key"
+description = "Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security."
+regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bittrex",
+]
+
+[[rules]]
+id = "clojars-api-token"
+description = "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation."
+regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
+keywords = [
+    "clojars",
+]
+
+[[rules]]
+id = "cloudflare-api-key"
+description = "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare",
+]
+
+[[rules]]
+id = "cloudflare-global-api-key"
+description = "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare",
+]
+
+[[rules]]
+id = "cloudflare-origin-ca-key"
+description = "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security."
+regex = '''\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "cloudflare","v1.0-",
+]
+
+[[rules]]
+id = "codecov-access-token"
+description = "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data."
+regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "codecov",
+]
+
+[[rules]]
+id = "coinbase-access-token"
+description = "Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions."
+regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "coinbase",
+]
+
+[[rules]]
+id = "confluent-access-token"
+description = "Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow."
+regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "confluent",
+]
+
+[[rules]]
+id = "confluent-secret-key"
+description = "Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services."
+regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "confluent",
+]
+
+[[rules]]
+id = "contentful-delivery-api-token"
+description = "Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity."
+regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "contentful",
+]
+
+[[rules]]
+id = "databricks-api-token"
+description = "Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing."
+regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dapi",
+]
+
+[[rules]]
+id = "datadog-access-token"
+description = "Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation."
+regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "datadog",
+]
+
+[[rules]]
+id = "defined-networking-api-token"
+description = "Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches."
+regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dnkey",
+]
+
+[[rules]]
+id = "digitalocean-access-token"
+description = "Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise."
+regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "doo_v1_",
+]
+
+[[rules]]
+id = "digitalocean-pat"
+description = "Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy."
+regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dop_v1_",
+]
+
+[[rules]]
+id = "digitalocean-refresh-token"
+description = "Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation."
+regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dor_v1_",
+]
+
+[[rules]]
+id = "discord-api-token"
+description = "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "discord-client-id"
+description = "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "discord-client-secret"
+description = "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks."
+regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "discord",
+]
+
+[[rules]]
+id = "doppler-api-token"
+description = "Discovered a Doppler API token, posing a risk to environment and secrets management security."
+regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
+keywords = [
+    "doppler",
+]
+
+[[rules]]
+id = "droneci-access-token"
+description = "Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows."
+regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "droneci",
+]
+
+[[rules]]
+id = "dropbox-api-token"
+description = "Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "dropbox-long-lived-api-token"
+description = "Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "dropbox-short-lived-api-token"
+description = "Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation."
+regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "dropbox",
+]
+
+[[rules]]
+id = "duffel-api-token"
+description = "Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data."
+regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
+keywords = [
+    "duffel",
+]
+
+[[rules]]
+id = "dynatrace-api-token"
+description = "Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure."
+regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
+keywords = [
+    "dynatrace",
+]
+
+[[rules]]
+id = "easypost-api-token"
+description = "Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure."
+regex = '''\bEZAK(?i)[a-z0-9]{54}'''
+keywords = [
+    "ezak",
+]
+
+[[rules]]
+id = "easypost-test-api-token"
+description = "Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data."
+regex = '''\bEZTK(?i)[a-z0-9]{54}'''
+keywords = [
+    "eztk",
+]
+
+[[rules]]
+id = "etsy-access-token"
+description = "Found an Etsy Access Token, potentially compromising Etsy shop management and customer data."
+regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "etsy",
+]
+
+[[rules]]
+id = "facebook-access-token"
+description = "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+
+[[rules]]
+id = "facebook-page-access-token"
+description = "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)\b(EAA[MC][a-z0-9]{20,})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "eaam","eaac",
+]
+
+[[rules]]
+id = "facebook-secret"
+description = "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
+regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "facebook",
+]
+
+[[rules]]
+id = "fastly-api-token"
+description = "Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues."
+regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "fastly",
+]
+
+[[rules]]
+id = "finicity-api-token"
+description = "Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations."
+regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finicity",
+]
+
+[[rules]]
+id = "finicity-client-secret"
+description = "Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches."
+regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finicity",
+]
+
+[[rules]]
+id = "finnhub-access-token"
+description = "Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics."
+regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "finnhub",
+]
+
+[[rules]]
+id = "flickr-access-token"
+description = "Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage."
+regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "flickr",
+]
+
+[[rules]]
+id = "flutterwave-encryption-key"
+description = "Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information."
+regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
+keywords = [
+    "flwseck_test",
+]
+
+[[rules]]
+id = "flutterwave-public-key"
+description = "Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations."
+regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
+keywords = [
+    "flwpubk_test",
+]
+
+[[rules]]
+id = "flutterwave-secret-key"
+description = "Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches."
+regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
+keywords = [
+    "flwseck_test",
+]
+
+[[rules]]
+id = "frameio-api-token"
+description = "Found a Frame.io API token, potentially compromising video collaboration and project management."
+regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
+keywords = [
+    "fio-u-",
+]
+
+[[rules]]
+id = "freshbooks-access-token"
+description = "Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure."
+regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "freshbooks",
+]
+
+[[rules]]
+id = "gcp-api-key"
+description = "Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches."
+regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "aiza",
+]
+
+[[rules]]
+id = "generic-api-key"
+description = "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."
+regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "key","api","token","secret","client","passwd","password","auth","access",
+]
+
+[rules.allowlist]
+stopwords = [
+    "000000",
+    "aaaaaa",
+    "about",
+    "abstract",
+    "academy",
+    "acces",
+    "account",
+    "act-",
+    "act.",
+    "act_",
+    "action",
+    "active",
+    "actively",
+    "activity",
+    "adapter",
+    "add-",
+    "add.",
+    "add_",
+    "add-on",
+    "addon",
+    "addres",
+    "admin",
+    "adobe",
+    "advanced",
+    "adventure",
+    "agent",
+    "agile",
+    "air-",
+    "air.",
+    "air_",
+    "ajax",
+    "akka",
+    "alert",
+    "alfred",
+    "algorithm",
+    "all-",
+    "all.",
+    "all_",
+    "alloy",
+    "alpha",
+    "amazon",
+    "amqp",
+    "analysi",
+    "analytic",
+    "analyzer",
+    "android",
+    "angular",
+    "angularj",
+    "animate",
+    "animation",
+    "another",
+    "ansible",
+    "answer",
+    "ant-",
+    "ant.",
+    "ant_",
+    "any-",
+    "any.",
+    "any_",
+    "apache",
+    "app-",
+    "app-",
+    "app.",
+    "app.",
+    "app_",
+    "app_",
+    "apple",
+    "arch",
+    "archive",
+    "archived",
+    "arduino",
+    "array",
+    "art-",
+    "art.",
+    "art_",
+    "article",
+    "asp-",
+    "asp.",
+    "asp_",
+    "asset",
+    "async",
+    "atom",
+    "attention",
+    "audio",
+    "audit",
+    "aura",
+    "auth",
+    "author",
+    "author",
+    "authorize",
+    "auto",
+    "automated",
+    "automatic",
+    "awesome",
+    "aws_",
+    "azure",
+    "back",
+    "backbone",
+    "backend",
+    "backup",
+    "bar-",
+    "bar.",
+    "bar_",
+    "base",
+    "based",
+    "bash",
+    "basic",
+    "batch",
+    "been",
+    "beer",
+    "behavior",
+    "being",
+    "benchmark",
+    "best",
+    "beta",
+    "better",
+    "big-",
+    "big.",
+    "big_",
+    "binary",
+    "binding",
+    "bit-",
+    "bit.",
+    "bit_",
+    "bitcoin",
+    "block",
+    "blog",
+    "board",
+    "book",
+    "bookmark",
+    "boost",
+    "boot",
+    "bootstrap",
+    "bosh",
+    "bot-",
+    "bot.",
+    "bot_",
+    "bower",
+    "box-",
+    "box.",
+    "box_",
+    "boxen",
+    "bracket",
+    "branch",
+    "bridge",
+    "browser",
+    "brunch",
+    "buffer",
+    "bug-",
+    "bug.",
+    "bug_",
+    "build",
+    "builder",
+    "building",
+    "buildout",
+    "buildpack",
+    "built",
+    "bundle",
+    "busines",
+    "but-",
+    "but.",
+    "but_",
+    "button",
+    "cache",
+    "caching",
+    "cakephp",
+    "calendar",
+    "call",
+    "camera",
+    "campfire",
+    "can-",
+    "can.",
+    "can_",
+    "canva",
+    "captcha",
+    "capture",
+    "card",
+    "carousel",
+    "case",
+    "cassandra",
+    "cat-",
+    "cat.",
+    "cat_",
+    "category",
+    "center",
+    "cento",
+    "challenge",
+    "change",
+    "changelog",
+    "channel",
+    "chart",
+    "chat",
+    "cheat",
+    "check",
+    "checker",
+    "chef",
+    "ches",
+    "chinese",
+    "chosen",
+    "chrome",
+    "ckeditor",
+    "clas",
+    "classe",
+    "classic",
+    "clean",
+    "cli-",
+    "cli.",
+    "cli_",
+    "client",
+    "client",
+    "clojure",
+    "clone",
+    "closure",
+    "cloud",
+    "club",
+    "cluster",
+    "cms-",
+    "cms_",
+    "coco",
+    "code",
+    "coding",
+    "coffee",
+    "color",
+    "combination",
+    "combo",
+    "command",
+    "commander",
+    "comment",
+    "commit",
+    "common",
+    "community",
+    "compas",
+    "compiler",
+    "complete",
+    "component",
+    "composer",
+    "computer",
+    "computing",
+    "con-",
+    "con.",
+    "con_",
+    "concept",
+    "conf",
+    "config",
+    "config",
+    "connect",
+    "connector",
+    "console",
+    "contact",
+    "container",
+    "contao",
+    "content",
+    "contest",
+    "context",
+    "control",
+    "convert",
+    "converter",
+    "conway'",
+    "cookbook",
+    "cookie",
+    "cool",
+    "copy",
+    "cordova",
+    "core",
+    "couchbase",
+    "couchdb",
+    "countdown",
+    "counter",
+    "course",
+    "craft",
+    "crawler",
+    "create",
+    "creating",
+    "creator",
+    "credential",
+    "crm-",
+    "crm.",
+    "crm_",
+    "cros",
+    "crud",
+    "csv-",
+    "csv.",
+    "csv_",
+    "cube",
+    "cucumber",
+    "cuda",
+    "current",
+    "currently",
+    "custom",
+    "daemon",
+    "dark",
+    "dart",
+    "dash",
+    "dashboard",
+    "data",
+    "database",
+    "date",
+    "day-",
+    "day.",
+    "day_",
+    "dead",
+    "debian",
+    "debug",
+    "debug",
+    "debugger",
+    "deck",
+    "define",
+    "del-",
+    "del.",
+    "del_",
+    "delete",
+    "demo",
+    "deploy",
+    "design",
+    "designer",
+    "desktop",
+    "detection",
+    "detector",
+    "dev-",
+    "dev.",
+    "dev_",
+    "develop",
+    "developer",
+    "device",
+    "devise",
+    "diff",
+    "digital",
+    "directive",
+    "directory",
+    "discovery",
+    "display",
+    "django",
+    "dns-",
+    "dns_",
+    "doc-",
+    "doc-",
+    "doc.",
+    "doc.",
+    "doc_",
+    "doc_",
+    "docker",
+    "docpad",
+    "doctrine",
+    "document",
+    "doe-",
+    "doe.",
+    "doe_",
+    "dojo",
+    "dom-",
+    "dom.",
+    "dom_",
+    "domain",
+    "done",
+    "don't",
+    "dot-",
+    "dot.",
+    "dot_",
+    "dotfile",
+    "download",
+    "draft",
+    "drag",
+    "drill",
+    "drive",
+    "driven",
+    "driver",
+    "drop",
+    "dropbox",
+    "drupal",
+    "dsl-",
+    "dsl.",
+    "dsl_",
+    "dynamic",
+    "easy",
+    "_ec2_",
+    "ecdsa",
+    "eclipse",
+    "edit",
+    "editing",
+    "edition",
+    "editor",
+    "element",
+    "emac",
+    "email",
+    "embed",
+    "embedded",
+    "ember",
+    "emitter",
+    "emulator",
+    "encoding",
+    "endpoint",
+    "engine",
+    "english",
+    "enhanced",
+    "entity",
+    "entry",
+    "env_",
+    "episode",
+    "erlang",
+    "error",
+    "espresso",
+    "event",
+    "evented",
+    "example",
+    "example",
+    "exchange",
+    "exercise",
+    "experiment",
+    "expire",
+    "exploit",
+    "explorer",
+    "export",
+    "exporter",
+    "expres",
+    "ext-",
+    "ext.",
+    "ext_",
+    "extended",
+    "extension",
+    "external",
+    "extra",
+    "extractor",
+    "fabric",
+    "facebook",
+    "factory",
+    "fake",
+    "fast",
+    "feature",
+    "feed",
+    "fewfwef",
+    "ffmpeg",
+    "field",
+    "file",
+    "filter",
+    "find",
+    "finder",
+    "firefox",
+    "firmware",
+    "first",
+    "fish",
+    "fix-",
+    "fix_",
+    "flash",
+    "flask",
+    "flat",
+    "flex",
+    "flexible",
+    "flickr",
+    "flow",
+    "fluent",
+    "fluentd",
+    "fluid",
+    "folder",
+    "font",
+    "force",
+    "foreman",
+    "fork",
+    "form",
+    "format",
+    "formatter",
+    "forum",
+    "foundry",
+    "framework",
+    "free",
+    "friend",
+    "friendly",
+    "front-end",
+    "frontend",
+    "ftp-",
+    "ftp.",
+    "ftp_",
+    "fuel",
+    "full",
+    "fun-",
+    "fun.",
+    "fun_",
+    "func",
+    "future",
+    "gaia",
+    "gallery",
+    "game",
+    "gateway",
+    "gem-",
+    "gem.",
+    "gem_",
+    "gen-",
+    "gen.",
+    "gen_",
+    "general",
+    "generator",
+    "generic",
+    "genetic",
+    "get-",
+    "get.",
+    "get_",
+    "getenv",
+    "getting",
+    "ghost",
+    "gist",
+    "git-",
+    "git.",
+    "git_",
+    "github",
+    "gitignore",
+    "gitlab",
+    "glas",
+    "gmail",
+    "gnome",
+    "gnu-",
+    "gnu.",
+    "gnu_",
+    "goal",
+    "golang",
+    "gollum",
+    "good",
+    "google",
+    "gpu-",
+    "gpu.",
+    "gpu_",
+    "gradle",
+    "grail",
+    "graph",
+    "graphic",
+    "great",
+    "grid",
+    "groovy",
+    "group",
+    "grunt",
+    "guard",
+    "gui-",
+    "gui.",
+    "gui_",
+    "guide",
+    "guideline",
+    "gulp",
+    "gwt-",
+    "gwt.",
+    "gwt_",
+    "hack",
+    "hackathon",
+    "hacker",
+    "hacking",
+    "hadoop",
+    "haml",
+    "handler",
+    "hardware",
+    "has-",
+    "has_",
+    "hash",
+    "haskell",
+    "have",
+    "haxe",
+    "hello",
+    "help",
+    "helper",
+    "here",
+    "hero",
+    "heroku",
+    "high",
+    "hipchat",
+    "history",
+    "home",
+    "homebrew",
+    "homepage",
+    "hook",
+    "host",
+    "hosting",
+    "hot-",
+    "hot.",
+    "hot_",
+    "house",
+    "how-",
+    "how.",
+    "how_",
+    "html",
+    "http",
+    "hub-",
+    "hub.",
+    "hub_",
+    "hubot",
+    "human",
+    "icon",
+    "ide-",
+    "ide.",
+    "ide_",
+    "idea",
+    "identity",
+    "idiomatic",
+    "image",
+    "impact",
+    "import",
+    "important",
+    "importer",
+    "impres",
+    "index",
+    "infinite",
+    "info",
+    "injection",
+    "inline",
+    "input",
+    "inside",
+    "inspector",
+    "instagram",
+    "install",
+    "installer",
+    "instant",
+    "intellij",
+    "interface",
+    "internet",
+    "interview",
+    "into",
+    "intro",
+    "ionic",
+    "iphone",
+    "ipython",
+    "irc-",
+    "irc_",
+    "iso-",
+    "iso.",
+    "iso_",
+    "issue",
+    "jade",
+    "jasmine",
+    "java",
+    "jbos",
+    "jekyll",
+    "jenkin",
+    "job-",
+    "job.",
+    "job_",
+    "joomla",
+    "jpa-",
+    "jpa.",
+    "jpa_",
+    "jquery",
+    "json",
+    "just",
+    "kafka",
+    "karma",
+    "kata",
+    "kernel",
+    "keyboard",
+    "kindle",
+    "kit-",
+    "kit.",
+    "kit_",
+    "kitchen",
+    "knife",
+    "koan",
+    "kohana",
+    "lab-",
+    "lab-",
+    "lab.",
+    "lab.",
+    "lab_",
+    "lab_",
+    "lambda",
+    "lamp",
+    "language",
+    "laravel",
+    "last",
+    "latest",
+    "latex",
+    "launcher",
+    "layer",
+    "layout",
+    "lazy",
+    "ldap",
+    "leaflet",
+    "league",
+    "learn",
+    "learning",
+    "led-",
+    "led.",
+    "led_",
+    "leetcode",
+    "les-",
+    "les.",
+    "les_",
+    "level",
+    "leveldb",
+    "lib-",
+    "lib.",
+    "lib_",
+    "librarie",
+    "library",
+    "license",
+    "life",
+    "liferay",
+    "light",
+    "lightbox",
+    "like",
+    "line",
+    "link",
+    "linked",
+    "linkedin",
+    "linux",
+    "lisp",
+    "list",
+    "lite",
+    "little",
+    "load",
+    "loader",
+    "local",
+    "location",
+    "lock",
+    "log-",
+    "log.",
+    "log_",
+    "logger",
+    "logging",
+    "logic",
+    "login",
+    "logstash",
+    "longer",
+    "look",
+    "love",
+    "lua-",
+    "lua.",
+    "lua_",
+    "mac-",
+    "mac.",
+    "mac_",
+    "machine",
+    "made",
+    "magento",
+    "magic",
+    "mail",
+    "make",
+    "maker",
+    "making",
+    "man-",
+    "man.",
+    "man_",
+    "manage",
+    "manager",
+    "manifest",
+    "manual",
+    "map-",
+    "map-",
+    "map.",
+    "map.",
+    "map_",
+    "map_",
+    "mapper",
+    "mapping",
+    "markdown",
+    "markup",
+    "master",
+    "math",
+    "matrix",
+    "maven",
+    "md5",
+    "mean",
+    "media",
+    "mediawiki",
+    "meetup",
+    "memcached",
+    "memory",
+    "menu",
+    "merchant",
+    "message",
+    "messaging",
+    "meta",
+    "metadata",
+    "meteor",
+    "method",
+    "metric",
+    "micro",
+    "middleman",
+    "migration",
+    "minecraft",
+    "miner",
+    "mini",
+    "minimal",
+    "mirror",
+    "mit-",
+    "mit.",
+    "mit_",
+    "mobile",
+    "mocha",
+    "mock",
+    "mod-",
+    "mod.",
+    "mod_",
+    "mode",
+    "model",
+    "modern",
+    "modular",
+    "module",
+    "modx",
+    "money",
+    "mongo",
+    "mongodb",
+    "mongoid",
+    "mongoose",
+    "monitor",
+    "monkey",
+    "more",
+    "motion",
+    "moved",
+    "movie",
+    "mozilla",
+    "mqtt",
+    "mule",
+    "multi",
+    "multiple",
+    "music",
+    "mustache",
+    "mvc-",
+    "mvc.",
+    "mvc_",
+    "mysql",
+    "nagio",
+    "name",
+    "native",
+    "need",
+    "neo-",
+    "neo.",
+    "neo_",
+    "nest",
+    "nested",
+    "net-",
+    "net.",
+    "net_",
+    "nette",
+    "network",
+    "new-",
+    "new-",
+    "new.",
+    "new.",
+    "new_",
+    "new_",
+    "next",
+    "nginx",
+    "ninja",
+    "nlp-",
+    "nlp.",
+    "nlp_",
+    "node",
+    "nodej",
+    "nosql",
+    "not-",
+    "not.",
+    "not_",
+    "note",
+    "notebook",
+    "notepad",
+    "notice",
+    "notifier",
+    "now-",
+    "now.",
+    "now_",
+    "number",
+    "oauth",
+    "object",
+    "objective",
+    "obsolete",
+    "ocaml",
+    "octopres",
+    "official",
+    "old-",
+    "old.",
+    "old_",
+    "onboard",
+    "online",
+    "only",
+    "open",
+    "opencv",
+    "opengl",
+    "openshift",
+    "openwrt",
+    "option",
+    "oracle",
+    "org-",
+    "org.",
+    "org_",
+    "origin",
+    "original",
+    "orm-",
+    "orm.",
+    "orm_",
+    "osx-",
+    "osx_",
+    "our-",
+    "our.",
+    "our_",
+    "out-",
+    "out.",
+    "out_",
+    "output",
+    "over",
+    "overview",
+    "own-",
+    "own.",
+    "own_",
+    "pack",
+    "package",
+    "packet",
+    "page",
+    "page",
+    "panel",
+    "paper",
+    "paperclip",
+    "para",
+    "parallax",
+    "parallel",
+    "parse",
+    "parser",
+    "parsing",
+    "particle",
+    "party",
+    "password",
+    "patch",
+    "path",
+    "pattern",
+    "payment",
+    "paypal",
+    "pdf-",
+    "pdf.",
+    "pdf_",
+    "pebble",
+    "people",
+    "perl",
+    "personal",
+    "phalcon",
+    "phoenix",
+    "phone",
+    "phonegap",
+    "photo",
+    "php-",
+    "php.",
+    "php_",
+    "physic",
+    "picker",
+    "pipeline",
+    "platform",
+    "play",
+    "player",
+    "please",
+    "plu-",
+    "plu.",
+    "plu_",
+    "plug-in",
+    "plugin",
+    "plupload",
+    "png-",
+    "png.",
+    "png_",
+    "poker",
+    "polyfill",
+    "polymer",
+    "pool",
+    "pop-",
+    "pop.",
+    "pop_",
+    "popcorn",
+    "popup",
+    "port",
+    "portable",
+    "portal",
+    "portfolio",
+    "post",
+    "power",
+    "powered",
+    "powerful",
+    "prelude",
+    "pretty",
+    "preview",
+    "principle",
+    "print",
+    "pro-",
+    "pro.",
+    "pro_",
+    "problem",
+    "proc",
+    "product",
+    "profile",
+    "profiler",
+    "program",
+    "progres",
+    "project",
+    "protocol",
+    "prototype",
+    "provider",
+    "proxy",
+    "public",
+    "pull",
+    "puppet",
+    "pure",
+    "purpose",
+    "push",
+    "pusher",
+    "pyramid",
+    "python",
+    "quality",
+    "query",
+    "queue",
+    "quick",
+    "rabbitmq",
+    "rack",
+    "radio",
+    "rail",
+    "railscast",
+    "random",
+    "range",
+    "raspberry",
+    "rdf-",
+    "rdf.",
+    "rdf_",
+    "react",
+    "reactive",
+    "read",
+    "reader",
+    "readme",
+    "ready",
+    "real",
+    "reality",
+    "real-time",
+    "realtime",
+    "recipe",
+    "recorder",
+    "red-",
+    "red.",
+    "red_",
+    "reddit",
+    "redi",
+    "redmine",
+    "reference",
+    "refinery",
+    "refresh",
+    "registry",
+    "related",
+    "release",
+    "remote",
+    "rendering",
+    "repo",
+    "report",
+    "request",
+    "require",
+    "required",
+    "requirej",
+    "research",
+    "resource",
+    "response",
+    "resque",
+    "rest",
+    "restful",
+    "resume",
+    "reveal",
+    "reverse",
+    "review",
+    "riak",
+    "rich",
+    "right",
+    "ring",
+    "robot",
+    "role",
+    "room",
+    "router",
+    "routing",
+    "rpc-",
+    "rpc.",
+    "rpc_",
+    "rpg-",
+    "rpg.",
+    "rpg_",
+    "rspec",
+    "ruby-",
+    "ruby.",
+    "ruby_",
+    "rule",
+    "run-",
+    "run.",
+    "run_",
+    "runner",
+    "running",
+    "runtime",
+    "rust",
+    "rvm-",
+    "rvm.",
+    "rvm_",
+    "salt",
+    "sample",
+    "sample",
+    "sandbox",
+    "sas-",
+    "sas.",
+    "sas_",
+    "sbt-",
+    "sbt.",
+    "sbt_",
+    "scala",
+    "scalable",
+    "scanner",
+    "schema",
+    "scheme",
+    "school",
+    "science",
+    "scraper",
+    "scratch",
+    "screen",
+    "script",
+    "scroll",
+    "scs-",
+    "scs.",
+    "scs_",
+    "sdk-",
+    "sdk.",
+    "sdk_",
+    "sdl-",
+    "sdl.",
+    "sdl_",
+    "search",
+    "secure",
+    "security",
+    "see-",
+    "see.",
+    "see_",
+    "seed",
+    "select",
+    "selector",
+    "selenium",
+    "semantic",
+    "sencha",
+    "send",
+    "sentiment",
+    "serie",
+    "server",
+    "service",
+    "session",
+    "set-",
+    "set.",
+    "set_",
+    "setting",
+    "setting",
+    "setup",
+    "sha1",
+    "sha2",
+    "sha256",
+    "share",
+    "shared",
+    "sharing",
+    "sheet",
+    "shell",
+    "shield",
+    "shipping",
+    "shop",
+    "shopify",
+    "shortener",
+    "should",
+    "show",
+    "showcase",
+    "side",
+    "silex",
+    "simple",
+    "simulator",
+    "single",
+    "site",
+    "skeleton",
+    "sketch",
+    "skin",
+    "slack",
+    "slide",
+    "slider",
+    "slim",
+    "small",
+    "smart",
+    "smtp",
+    "snake",
+    "snippet",
+    "soap",
+    "social",
+    "socket",
+    "software",
+    "solarized",
+    "solr",
+    "solution",
+    "solver",
+    "some",
+    "soon",
+    "source",
+    "space",
+    "spark",
+    "spatial",
+    "spec",
+    "sphinx",
+    "spine",
+    "spotify",
+    "spree",
+    "spring",
+    "sprite",
+    "sql-",
+    "sql.",
+    "sql_",
+    "sqlite",
+    "ssh-",
+    "ssh.",
+    "ssh_",
+    "stack",
+    "staging",
+    "standard",
+    "stanford",
+    "start",
+    "started",
+    "starter",
+    "startup",
+    "stat",
+    "statamic",
+    "state",
+    "static",
+    "statistic",
+    "statsd",
+    "statu",
+    "steam",
+    "step",
+    "still",
+    "stm-",
+    "stm.",
+    "stm_",
+    "storage",
+    "store",
+    "storm",
+    "story",
+    "strategy",
+    "stream",
+    "streaming",
+    "string",
+    "stripe",
+    "structure",
+    "studio",
+    "study",
+    "stuff",
+    "style",
+    "sublime",
+    "sugar",
+    "suite",
+    "summary",
+    "super",
+    "support",
+    "supported",
+    "svg-",
+    "svg.",
+    "svg_",
+    "svn-",
+    "svn.",
+    "svn_",
+    "swagger",
+    "swift",
+    "switch",
+    "switcher",
+    "symfony",
+    "symphony",
+    "sync",
+    "synopsi",
+    "syntax",
+    "system",
+    "system",
+    "tab-",
+    "tab-",
+    "tab.",
+    "tab.",
+    "tab_",
+    "tab_",
+    "table",
+    "tag-",
+    "tag-",
+    "tag.",
+    "tag.",
+    "tag_",
+    "tag_",
+    "talk",
+    "target",
+    "task",
+    "tcp-",
+    "tcp.",
+    "tcp_",
+    "tdd-",
+    "tdd.",
+    "tdd_",
+    "team",
+    "tech",
+    "template",
+    "term",
+    "terminal",
+    "testing",
+    "tetri",
+    "text",
+    "textmate",
+    "theme",
+    "theory",
+    "three",
+    "thrift",
+    "time",
+    "timeline",
+    "timer",
+    "tiny",
+    "tinymce",
+    "tip-",
+    "tip.",
+    "tip_",
+    "title",
+    "todo",
+    "todomvc",
+    "token",
+    "tool",
+    "toolbox",
+    "toolkit",
+    "top-",
+    "top.",
+    "top_",
+    "tornado",
+    "touch",
+    "tower",
+    "tracker",
+    "tracking",
+    "traffic",
+    "training",
+    "transfer",
+    "translate",
+    "transport",
+    "tree",
+    "trello",
+    "try-",
+    "try.",
+    "try_",
+    "tumblr",
+    "tut-",
+    "tut.",
+    "tut_",
+    "tutorial",
+    "tweet",
+    "twig",
+    "twitter",
+    "type",
+    "typo",
+    "ubuntu",
+    "uiview",
+    "ultimate",
+    "under",
+    "unit",
+    "unity",
+    "universal",
+    "unix",
+    "update",
+    "updated",
+    "upgrade",
+    "upload",
+    "uploader",
+    "uri-",
+    "uri.",
+    "uri_",
+    "url-",
+    "url.",
+    "url_",
+    "usage",
+    "usb-",
+    "usb.",
+    "usb_",
+    "use-",
+    "use.",
+    "use_",
+    "used",
+    "useful",
+    "user",
+    "using",
+    "util",
+    "utilitie",
+    "utility",
+    "vagrant",
+    "validator",
+    "value",
+    "variou",
+    "varnish",
+    "version",
+    "via-",
+    "via.",
+    "via_",
+    "video",
+    "view",
+    "viewer",
+    "vim-",
+    "vim.",
+    "vim_",
+    "vimrc",
+    "virtual",
+    "vision",
+    "visual",
+    "vpn",
+    "want",
+    "warning",
+    "watch",
+    "watcher",
+    "wave",
+    "way-",
+    "way.",
+    "way_",
+    "weather",
+    "web-",
+    "web_",
+    "webapp",
+    "webgl",
+    "webhook",
+    "webkit",
+    "webrtc",
+    "website",
+    "websocket",
+    "welcome",
+    "welcome",
+    "what",
+    "what'",
+    "when",
+    "where",
+    "which",
+    "why-",
+    "why.",
+    "why_",
+    "widget",
+    "wifi",
+    "wiki",
+    "win-",
+    "win.",
+    "win_",
+    "window",
+    "wip-",
+    "wip.",
+    "wip_",
+    "within",
+    "without",
+    "wizard",
+    "word",
+    "wordpres",
+    "work",
+    "worker",
+    "workflow",
+    "working",
+    "workshop",
+    "world",
+    "wrapper",
+    "write",
+    "writer",
+    "writing",
+    "written",
+    "www-",
+    "www.",
+    "www_",
+    "xamarin",
+    "xcode",
+    "xml-",
+    "xml.",
+    "xml_",
+    "xmpp",
+    "xxxxxx",
+    "yahoo",
+    "yaml",
+    "yandex",
+    "yeoman",
+    "yet-",
+    "yet.",
+    "yet_",
+    "yii-",
+    "yii.",
+    "yii_",
+    "youtube",
+    "yui-",
+    "yui.",
+    "yui_",
+    "zend",
+    "zero",
+    "zip-",
+    "zip.",
+    "zip_",
+    "zsh-",
+    "zsh.",
+    "zsh_",
+]
+
+[[rules]]
+id = "github-app-token"
+description = "Identified a GitHub App Token, which may compromise GitHub application integrations and source code security."
+regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghu_","ghs_",
+]
+
+[[rules]]
+id = "github-fine-grained-pat"
+description = "Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation."
+regex = '''github_pat_[0-9a-zA-Z_]{82}'''
+keywords = [
+    "github_pat_",
+]
+
+[[rules]]
+id = "github-oauth"
+description = "Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks."
+regex = '''gho_[0-9a-zA-Z]{36}'''
+keywords = [
+    "gho_",
+]
+
+[[rules]]
+id = "github-pat"
+description = "Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure."
+regex = '''ghp_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghp_",
+]
+
+[[rules]]
+id = "github-refresh-token"
+description = "Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services."
+regex = '''ghr_[0-9a-zA-Z]{36}'''
+keywords = [
+    "ghr_",
+]
+
+[[rules]]
+id = "gitlab-pat"
+description = "Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure."
+regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
+keywords = [
+    "glpat-",
+]
+
+[[rules]]
+id = "gitlab-ptt"
+description = "Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security."
+regex = '''glptt-[0-9a-f]{40}'''
+keywords = [
+    "glptt-",
+]
+
+[[rules]]
+id = "gitlab-rrt"
+description = "Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access."
+regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
+keywords = [
+    "gr1348941",
+]
+
+[[rules]]
+id = "gitter-access-token"
+description = "Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services."
+regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "gitter",
+]
+
+[[rules]]
+id = "gocardless-api-token"
+description = "Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure."
+regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "live_","gocardless",
+]
+
+[[rules]]
+id = "grafana-api-key"
+description = "Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics."
+regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "eyjrijoi",
+]
+
+[[rules]]
+id = "grafana-cloud-api-token"
+description = "Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure."
+regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "glc_",
+]
+
+[[rules]]
+id = "grafana-service-account-token"
+description = "Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity."
+regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "glsa_",
+]
+
+[[rules]]
+id = "harness-api-key"
+description = "Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account."
+regex = '''((?:pat|sat)\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{20})'''
+keywords = [
+    "pat.","sat.",
+]
+
+[[rules]]
+id = "hashicorp-tf-api-token"
+description = "Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches."
+regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
+keywords = [
+    "atlasv1",
+]
+
+[[rules]]
+id = "hashicorp-tf-password"
+description = "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches."
+regex = '''(?i)(?:administrator_login_password|password)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}("[a-z0-9=_\-]{8,20}")(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+path = '''\.(tf|hcl)$'''
+keywords = [
+    "administrator_login_password","password",
+]
+
+[[rules]]
+id = "heroku-api-key"
+description = "Detected a Heroku API Key, potentially compromising cloud application deployments and operational security."
+regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "heroku",
+]
+
+[[rules]]
+id = "hubspot-api-key"
+description = "Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations."
+regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hubspot",
+]
+
+[[rules]]
+id = "huggingface-access-token"
+description = "Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data."
+regex = '''(?:^|[\\'"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\'"` <])'''
+entropy = 1
+keywords = [
+    "hf_",
+]
+
+[[rules]]
+id = "huggingface-organization-api-token"
+description = "Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data."
+regex = '''(?:^|[\\'"` >=:\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\'"` <\),])'''
+entropy = 2
+keywords = [
+    "api_org_",
+]
+
+[[rules]]
+id = "infracost-api-token"
+description = "Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data."
+regex = '''(?i)\b(ico-[a-zA-Z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ico-",
+]
+
+[[rules]]
+id = "intercom-api-key"
+description = "Identified an Intercom API Token, which could compromise customer communication channels and data privacy."
+regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "intercom",
+]
+
+[[rules]]
+id = "intra42-client-secret"
+description = "Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data."
+regex = '''(?i)\b(s-s4t2(?:ud|af)-[abcdef0123456789]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "intra","s-s4t2ud-","s-s4t2af-",
+]
+
+[[rules]]
+id = "jfrog-api-key"
+description = "Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines."
+regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "jfrog","artifactory","bintray","xray",
+]
+
+[[rules]]
+id = "jfrog-identity-token"
+description = "Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts."
+regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "jfrog","artifactory","bintray","xray",
+]
+
+[[rules]]
+id = "jwt"
+description = "Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data."
+regex = '''\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "ey",
+]
+
+[[rules]]
+id = "jwt-base64"
+description = "Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information."
+regex = '''\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\/\\_+\-\r\n]{40,}={0,2}'''
+keywords = [
+    "zxlk",
+]
+
+[[rules]]
+id = "kraken-access-token"
+description = "Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security."
+regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kraken",
+]
+
+[[rules]]
+id = "kucoin-access-token"
+description = "Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions."
+regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kucoin",
+]
+
+[[rules]]
+id = "kucoin-secret-key"
+description = "Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches."
+regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "kucoin",
+]
+
+[[rules]]
+id = "launchdarkly-access-token"
+description = "Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality."
+regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "launchdarkly",
+]
+
+[[rules]]
+id = "linear-api-key"
+description = "Detected a Linear API Token, posing a risk to project management tools and sensitive task data."
+regex = '''lin_api_(?i)[a-z0-9]{40}'''
+keywords = [
+    "lin_api_",
+]
+
+[[rules]]
+id = "linear-client-secret"
+description = "Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data."
+regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linear",
+]
+
+[[rules]]
+id = "linkedin-client-id"
+description = "Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure."
+regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linkedin","linked-in",
+]
+
+[[rules]]
+id = "linkedin-client-secret"
+description = "Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data."
+regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "linkedin","linked-in",
+]
+
+[[rules]]
+id = "lob-api-key"
+description = "Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services."
+regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "test_","live_",
+]
+
+[[rules]]
+id = "lob-pub-api-key"
+description = "Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations."
+regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "test_pub","live_pub","_pub",
+]
+
+[[rules]]
+id = "mailchimp-api-key"
+description = "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data."
+regex = '''(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us\d\d)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailchimp",
+]
+
+[[rules]]
+id = "mailgun-private-api-token"
+description = "Found a Mailgun private API token, risking unauthorized email service operations and data breaches."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mailgun-pub-key"
+description = "Discovered a Mailgun public validation key, which could expose email verification processes and associated data."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mailgun-signing-key"
+description = "Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity."
+regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mailgun",
+]
+
+[[rules]]
+id = "mapbox-api-token"
+description = "Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure."
+regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mapbox",
+]
+
+[[rules]]
+id = "mattermost-access-token"
+description = "Identified a Mattermost Access Token, which may compromise team communication channels and data privacy."
+regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "mattermost",
+]
+
+[[rules]]
+id = "messagebird-api-token"
+description = "Found a MessageBird API token, risking unauthorized access to communication platforms and message data."
+regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "messagebird","message-bird","message_bird",
+]
+
+[[rules]]
+id = "messagebird-client-id"
+description = "Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data."
+regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "messagebird","message-bird","message_bird",
+]
+
+[[rules]]
+id = "microsoft-teams-webhook"
+description = "Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks."
+regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
+keywords = [
+    "webhook.office.com","webhookb2","incomingwebhook",
+]
+
+[[rules]]
+id = "netlify-access-token"
+description = "Detected a Netlify Access Token, potentially compromising web hosting services and site management."
+regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "netlify",
+]
+
+[[rules]]
+id = "new-relic-browser-api-token"
+description = "Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrjs-",
+]
+
+[[rules]]
+id = "new-relic-insert-key"
+description = "Discovered a New Relic insight insert key, compromising data injection into the platform."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrii-",
+]
+
+[[rules]]
+id = "new-relic-user-api-id"
+description = "Found a New Relic user API ID, posing a risk to application monitoring services and data integrity."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "new-relic","newrelic","new_relic",
+]
+
+[[rules]]
+id = "new-relic-user-api-key"
+description = "Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring."
+regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nrak",
+]
+
+[[rules]]
+id = "npm-access-token"
+description = "Uncovered an npm access token, potentially compromising package management and code repository access."
+regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "npm_",
+]
+
+[[rules]]
+id = "nytimes-access-token"
+description = "Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services."
+regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "nytimes","new-york-times","newyorktimes",
+]
+
+[[rules]]
+id = "okta-access-token"
+description = "Identified an Okta Access Token, which may compromise identity management services and user authentication data."
+regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "okta",
+]
+
+[[rules]]
+id = "openai-api-key"
+description = "Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation."
+regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "t3blbkfj",
+]
+
+[[rules]]
+id = "plaid-api-token"
+description = "Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "plaid-client-id"
+description = "Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "plaid-secret-key"
+description = "Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data."
+regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3.5
+keywords = [
+    "plaid",
+]
+
+[[rules]]
+id = "planetscale-api-token"
+description = "Identified a PlanetScale API token, potentially compromising database management and operations."
+regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_tkn_",
+]
+
+[[rules]]
+id = "planetscale-oauth-token"
+description = "Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity."
+regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_oauth_",
+]
+
+[[rules]]
+id = "planetscale-password"
+description = "Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches."
+regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pscale_pw_",
+]
+
+[[rules]]
+id = "postman-api-token"
+description = "Uncovered a Postman API token, potentially compromising API testing and development workflows."
+regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pmak-",
+]
+
+[[rules]]
+id = "prefect-api-token"
+description = "Detected a Prefect API token, risking unauthorized access to workflow management and automation services."
+regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pnu_",
+]
+
+[[rules]]
+id = "private-key"
+description = "Identified a Private Key, which may compromise cryptographic security and sensitive data encryption."
+regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
+keywords = [
+    "-----begin",
+]
+
+[[rules]]
+id = "pulumi-api-token"
+description = "Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management."
+regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "pul-",
+]
+
+[[rules]]
+id = "pypi-upload-token"
+description = "Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity."
+regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
+keywords = [
+    "pypi-ageichlwas5vcmc",
+]
+
+[[rules]]
+id = "rapidapi-access-token"
+description = "Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services."
+regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rapidapi",
+]
+
+[[rules]]
+id = "readme-api-token"
+description = "Detected a Readme API token, risking unauthorized documentation management and content exposure."
+regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rdme_",
+]
+
+[[rules]]
+id = "rubygems-api-token"
+description = "Identified a Rubygem API token, potentially compromising Ruby library distribution and package management."
+regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "rubygems_",
+]
+
+[[rules]]
+id = "scalingo-api-token"
+description = "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security."
+regex = '''\b(tk-us-[a-zA-Z0-9-_]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "tk-us-",
+]
+
+[[rules]]
+id = "sendbird-access-id"
+description = "Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations."
+regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sendbird",
+]
+
+[[rules]]
+id = "sendbird-access-token"
+description = "Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data."
+regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sendbird",
+]
+
+[[rules]]
+id = "sendgrid-api-token"
+description = "Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure."
+regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sg.",
+]
+
+[[rules]]
+id = "sendinblue-api-token"
+description = "Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy."
+regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "xkeysib-",
+]
+
+[[rules]]
+id = "sentry-access-token"
+description = "Found a Sentry Access Token, risking unauthorized access to error tracking services and sensitive application data."
+regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sentry",
+]
+
+[[rules]]
+id = "shippo-api-token"
+description = "Discovered a Shippo API token, potentially compromising shipping services and customer order data."
+regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "shippo_",
+]
+
+[[rules]]
+id = "shopify-access-token"
+description = "Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches."
+regex = '''shpat_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpat_",
+]
+
+[[rules]]
+id = "shopify-custom-access-token"
+description = "Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security."
+regex = '''shpca_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpca_",
+]
+
+[[rules]]
+id = "shopify-private-app-access-token"
+description = "Identified a Shopify private app access token, risking unauthorized access to private app data and store operations."
+regex = '''shppa_[a-fA-F0-9]{32}'''
+keywords = [
+    "shppa_",
+]
+
+[[rules]]
+id = "shopify-shared-secret"
+description = "Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security."
+regex = '''shpss_[a-fA-F0-9]{32}'''
+keywords = [
+    "shpss_",
+]
+
+[[rules]]
+id = "sidekiq-secret"
+description = "Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches."
+regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
+]
+
+[[rules]]
+id = "sidekiq-sensitive-url"
+description = "Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details."
+regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
+secretGroup = 2
+keywords = [
+    "gems.contribsys.com","enterprise.contribsys.com",
+]
+
+[[rules]]
+id = "slack-app-token"
+description = "Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data."
+regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
+keywords = [
+    "xapp",
+]
+
+[[rules]]
+id = "slack-bot-token"
+description = "Identified a Slack Bot token, which may compromise bot integrations and communication channel security."
+regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
+keywords = [
+    "xoxb",
+]
+
+[[rules]]
+id = "slack-config-access-token"
+description = "Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access."
+regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
+keywords = [
+    "xoxe.xoxb-","xoxe.xoxp-",
+]
+
+[[rules]]
+id = "slack-config-refresh-token"
+description = "Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings."
+regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
+keywords = [
+    "xoxe-",
+]
+
+[[rules]]
+id = "slack-legacy-bot-token"
+description = "Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure."
+regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
+keywords = [
+    "xoxb",
+]
+
+[[rules]]
+id = "slack-legacy-token"
+description = "Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data."
+regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
+keywords = [
+    "xoxo","xoxs",
+]
+
+[[rules]]
+id = "slack-legacy-workspace-token"
+description = "Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features."
+regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
+keywords = [
+    "xoxa","xoxr",
+]
+
+[[rules]]
+id = "slack-user-token"
+description = "Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces."
+regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
+keywords = [
+    "xoxp-","xoxe-",
+]
+
+[[rules]]
+id = "slack-webhook-url"
+description = "Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels."
+regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
+keywords = [
+    "hooks.slack.com",
+]
+
+[[rules]]
+id = "snyk-api-token"
+description = "Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security."
+regex = '''(?i)(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token",
+]
+
+[[rules]]
+id = "square-access-token"
+description = "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure."
+regex = '''(?i)\b((EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sq0atp-","eaaa",
+]
+
+[[rules]]
+id = "squarespace-access-token"
+description = "Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace."
+regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "squarespace",
+]
+
+[[rules]]
+id = "stripe-access-token"
+description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data."
+regex = '''(?i)\b((sk|rk)_(test|live|prod)_[0-9a-z]{10,99})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod",
+]
+
+[[rules]]
+id = "sumologic-access-id"
+description = "Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity."
+regex = '''(?i:(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3})(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3
+keywords = [
+    "sumo",
+]
+
+[rules.allowlist]
+
+regexTarget = "line"
+regexes = [
+    "sumOf",
+]
+
+[[rules]]
+id = "sumologic-access-token"
+description = "Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights."
+regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+entropy = 3
+keywords = [
+    "sumo",
+]
+
+[[rules]]
+id = "telegram-bot-api-token"
+description = "Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram."
+regex = '''(?i:(?:telegr)(?:[0-9a-z\(-_\t .\\]{0,40})(?:[\s|']|[\s|"]){0,3})(?:=|\|\|:|<=|=>|:|\?=|\()(?:'|\"|\s|=|\x60){0,5}([0-9]{5,16}:A[a-z0-9_\-]{34})(?:['|\"|\n|\r|\s|\x60|;|\\]|$)'''
+keywords = [
+    "telegr",
+]
+
+[[rules]]
+id = "travisci-access-token"
+description = "Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security."
+regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "travis",
+]
+
+[[rules]]
+id = "twilio-api-key"
+description = "Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data."
+regex = '''SK[0-9a-fA-F]{32}'''
+keywords = [
+    "twilio",
+]
+
+[[rules]]
+id = "twitch-api-token"
+description = "Discovered a Twitch API token, which could compromise streaming services and account integrations."
+regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitch",
+]
+
+[[rules]]
+id = "twitter-access-secret"
+description = "Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-access-token"
+description = "Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-api-key"
+description = "Identified a Twitter API Key, which may compromise Twitter application integrations and user data security."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-api-secret"
+description = "Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "twitter-bearer-token"
+description = "Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter."
+regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "twitter",
+]
+
+[[rules]]
+id = "typeform-api-token"
+description = "Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection."
+regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "tfp_",
+]
+
+[[rules]]
+id = "vault-batch-token"
+description = "Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data."
+regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hvb",
+]
+
+[[rules]]
+id = "vault-service-token"
+description = "Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials."
+regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "hvs",
+]
+
+[[rules]]
+id = "yandex-access-token"
+description = "Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "yandex-api-key"
+description = "Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "yandex-aws-access-token"
+description = "Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud."
+regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "yandex",
+]
+
+[[rules]]
+id = "zendesk-secret-key"
+description = "Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data."
+regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+keywords = [
+    "zendesk",
+]
+

From 16e07ada37b8116e267c557a20c5342f5e53e080 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 8 Jul 2024 22:20:33 +0530
Subject: [PATCH 096/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ee9a869..4c979ed 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,9 +13,9 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "docker-pipeline" ]
+    branches: [ "test" ]
   pull_request:
-    branches: [ "docker-pipeline" ]
+    branches: [ "test" ]
   # schedule:
   #   - cron: '33 7 * * 5'
 

From 8891d2119007631181223226a4c6fd3540d5b2bd Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 8 Jul 2024 22:25:24 +0530
Subject: [PATCH 097/136] Update main.yml

---
 .github/workflows/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4c979ed..ee9a869 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,9 +13,9 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "test" ]
+    branches: [ "docker-pipeline" ]
   pull_request:
-    branches: [ "test" ]
+    branches: [ "docker-pipeline" ]
   # schedule:
   #   - cron: '33 7 * * 5'
 

From 460100a997834fbe82a764022532438fdd1f7780 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 11 Jul 2024 16:24:17 +0530
Subject: [PATCH 098/136] Update main.yml

---
 .github/workflows/main.yml | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ee9a869..37f3b70 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,9 +13,9 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "docker-pipeline" ]
+    branches: [ "docker-pipeline", "test" ]
   pull_request:
-    branches: [ "docker-pipeline" ]
+    branches: [ "docker-pipeline", "test" ]
   # schedule:
   #   - cron: '33 7 * * 5'
 
@@ -286,11 +286,16 @@ jobs:
 
       - name: Manual cleanup
         run: sudo rm -rf /home/runner/work/sdos/sdos/* || true
-      
+
+      - name: Run Gitleaks manually
+        run: |
+          git clone https://github.com/gitleaks/gitleaks.git
+          cd gitleaks
+          make build
+          gitleaks detect -v -s ../
+          
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2
-        with:
-          args: detect --redact -v --exit-code=2 --report-format=sarif --report-path=results.sarif --log-level=debug
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.

From 9f55c9405cc9b7606280fc16a6792b3d998f7728 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 11 Jul 2024 16:30:42 +0530
Subject: [PATCH 099/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 37f3b70..7514784 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -292,7 +292,7 @@ jobs:
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
           make build
-          gitleaks detect -v -s ../
+          ./gitleaks detect -v -s ../
           
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2

From af7a63edb2077a45f41c8a8b2b4ab841dfcfa4f4 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 11 Jul 2024 16:51:09 +0530
Subject: [PATCH 100/136] Update main.yml

---
 .github/workflows/main.yml | 96 ++++++--------------------------------
 1 file changed, 15 insertions(+), 81 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7514784..442e9b1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -100,7 +100,6 @@ jobs:
       with:
         category: "/language:${{matrix.language}}"
 
-
   ##################################################################
   build:
     runs-on: ubuntu-latest
@@ -148,23 +147,7 @@ jobs:
       - uses: actions/download-artifact@master
         with:
           name: jar-file
-
-      - name: truffle scan
-        run: | 
-          curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
-          trufflehog git https://github.com/scania/sdos
-
-      # - name: scan-push
-      #   uses: trufflesecurity/trufflehog@main
-      #   with:
-      #     base: ""
-      #     head: ${{ github.ref_name }}
-      #     extra_args: --only-verified
           
-      # - name: gradle dep check
-      #   run: ./gradlew dependencyCheckAnalyze --info
-
-
   docker-build:
     needs: build
     runs-on: ubuntu-latest
@@ -177,29 +160,17 @@ jobs:
 
       - uses: actions/checkout@v4
 
-      - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v4.3.2
+      # - name: 'Dependency Review'
+      #   uses: actions/dependency-review-action@v4.3.2
 
-      - name: Depcheck
-        uses: dependency-check/Dependency-Check_Action@1.1.0
-        id: Depcheck
-        with:
-          project: 'test'
-          path: '.'
-          format: 'HTML'
-
-      # Trivy repo
-      # - name: Run Trivy repo vulnerability scanner
-      #   uses: aquasecurity/trivy-action@0.21.0
+      # - name: Depcheck
+      #   uses: dependency-check/Dependency-Check_Action@1.1.0
+      #   id: Depcheck
       #   with:
-      #     scan-type: 'repo'
-      #     format: 'sarif'
-      #     # output: 'trivy-fs-results.sarif'
-      #     # scan-ref: 'repo'
-      #     severity: 'CRITICAL'
-      #     exit-code: '1'
-      #     ignore-unfixed: true
-      #     scanners: misconfig,secret
+      #     project: 'test'
+      #     path: '.'
+      #     format: 'HTML'
+
       
       - name: Set up JDK 17
         uses: actions/setup-java@v4
@@ -278,57 +249,20 @@ jobs:
           fetch-depth: 0
           clean: false
           
-      - name: Set permissions for reports directory
-        run: sudo chmod -R 777 /home/runner/work/sdos/sdos/reports || true
-
-      - name: Remove dependency-check-report.html
-        run: sudo rm -f /home/runner/work/sdos/sdos/reports/dependency-check-report.html || true
-
-      - name: Manual cleanup
-        run: sudo rm -rf /home/runner/work/sdos/sdos/* || true
-
       - name: Run Gitleaks manually
         run: |
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
           make build
-          ./gitleaks detect -v -s ../
+          ./gitleaks detect -v -f sarif -r ./gitleaks_scan.sarif -s ../ 
           
+      - name: Upload Gitleaks scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'gitleaks_scan.sarif'
+      
       - name: Run Gitleaks
         uses: gitleaks/gitleaks-action@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
-      
-      
-      # - name: Upload Trivy scan results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy-results.sarif'
-
-
-
-      # - name: build and push docker image
-      #   run: | 
-      #     ls -ltr && docker ps
-      #     docker build  -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}} .
-
-      # - name: trivy manual image scan
-      #   run: |
-      #     wget https://github.com/aquasecurity/trivy/releases/download/v0.26.0/trivy_0.26.0_Linux-64bit.deb
-      #     sudo dpkg -i trivy_0.26.0_Linux-64bit.deb
-      #     trivy image --format sarif --output trivy_license_image.sarif ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.TG}}
-
-      # - name: Upload Trivy image license results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v3
-      #   with:
-      #     sarif_file: 'trivy_license_image.sarif'
-
-      # - name: trivy manual local code scan
-      #   run: |
-      #     trivy rootfs /home/runner/work/sdos/sdos
-
-      # - name: Upload Trivy code results to GitHub Security tab
-      #   uses: github/codeql-action/upload-sarif@v2
-      #   with:
-      #     sarif_file: 'trivy_code.sarif'

From 60988aa8b76688f703e027b3ec033d5500cadd5f Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 12:23:37 +0530
Subject: [PATCH 101/136] Update main.yml

---
 .github/workflows/main.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 442e9b1..fc8aaaa 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -255,7 +255,11 @@ jobs:
           cd gitleaks
           make build
           ./gitleaks detect -v -f sarif -r ./gitleaks_scan.sarif -s ../ 
-          
+
+      - name: Run a step that might fail
+        run: exit 1
+        continue-on-error: true
+        
       - name: Upload Gitleaks scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
         with:

From 73b48ec507668aa0fb38a1145d679e1868fe86c0 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 12:37:27 +0530
Subject: [PATCH 102/136] Update main.yml

---
 .github/workflows/main.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index fc8aaaa..ce85864 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -254,13 +254,10 @@ jobs:
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
           make build
-          ./gitleaks detect -v -f sarif -r ./gitleaks_scan.sarif -s ../ 
-
-      - name: Run a step that might fail
-        run: exit 1
-        continue-on-error: true
+          ./gitleaks detect -v -f sarif -r ./gitleaks_scan.sarif -s ../        
         
       - name: Upload Gitleaks scan results to GitHub Security tab
+        if: always()
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'gitleaks_scan.sarif'

From ef2efdb784c24e586c07ac5772d0937b7a7d2f20 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 12:47:08 +0530
Subject: [PATCH 103/136] Update main.yml

---
 .github/workflows/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ce85864..df48806 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -254,7 +254,7 @@ jobs:
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
           make build
-          ./gitleaks detect -v -f sarif -r ./gitleaks_scan.sarif -s ../        
+          ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
         
       - name: Upload Gitleaks scan results to GitHub Security tab
         if: always()

From 112570a7a80b0e01e238fe7f98c7688e946eb497 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 12:59:14 +0530
Subject: [PATCH 104/136] Update main.yml

---
 .github/workflows/main.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index df48806..ba74e06 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -250,6 +250,9 @@ jobs:
           clean: false
           
       - name: Run Gitleaks manually
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Required for Organizations, not personal accounts.
         run: |
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
@@ -262,8 +265,8 @@ jobs:
         with:
           sarif_file: 'gitleaks_scan.sarif'
       
-      - name: Run Gitleaks
-        uses: gitleaks/gitleaks-action@v2
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
+      # - name: Run Gitleaks
+      #   uses: gitleaks/gitleaks-action@v2
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.

From 648204f59a596b177dc312288f4ae4ef1503c836 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 14:57:14 +0530
Subject: [PATCH 105/136] Update main.yml

---
 .github/workflows/main.yml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ba74e06..f7021a0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -252,7 +252,7 @@ jobs:
       - name: Run Gitleaks manually
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Required for Organizations, not personal accounts.
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
         run: |
           git clone https://github.com/gitleaks/gitleaks.git
           cd gitleaks
@@ -264,9 +264,3 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'gitleaks_scan.sarif'
-      
-      # - name: Run Gitleaks
-      #   uses: gitleaks/gitleaks-action@v2
-      #   env:
-      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.

From 0fc9361c480736a3b4367a4140ec41c032c6ddd1 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 15:14:26 +0530
Subject: [PATCH 106/136] Update main.yml

---
 .github/workflows/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f7021a0..3e3ba9d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -264,3 +264,9 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'gitleaks_scan.sarif'
+      
+      - name: List SARIF File
+        run: ls -l ../gitleaks_scan.sarif
+
+      - name: Display SARIF File Content
+        run: cat ../gitleaks_scan.sarif

From 2f69af80e24a05a6d3ddfe980a7787ab23218bdd Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 15:45:25 +0530
Subject: [PATCH 107/136] Update main.yml

---
 .github/workflows/main.yml | 16 +++++-----------
 1 file changed, 5 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 3e3ba9d..089720b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -259,14 +259,8 @@ jobs:
           make build
           ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
         
-      - name: Upload Gitleaks scan results to GitHub Security tab
-        if: always()
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: 'gitleaks_scan.sarif'
-      
-      - name: List SARIF File
-        run: ls -l ../gitleaks_scan.sarif
-
-      - name: Display SARIF File Content
-        run: cat ../gitleaks_scan.sarif
+      # - name: Upload Gitleaks scan results to GitHub Security tab
+      #   if: always()
+      #   uses: github/codeql-action/upload-sarif@v3
+      #   with:
+      #     sarif_file: 'gitleaks_scan.sarif'

From 4ee383823b3fc75a663ef1a5840c65d2046841b0 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:02:53 +0530
Subject: [PATCH 108/136] Create gitleaks.yml

---
 .github/workflows/gitleaks.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/workflows/gitleaks.yml

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
new file mode 100644
index 0000000..a4e14aa
--- /dev/null
+++ b/.github/workflows/gitleaks.yml
@@ -0,0 +1,30 @@
+name: "Find Secrets"
+on:
+  pull_request:
+  push:
+  workflow_dispatch:
+  # schedule:
+  #   - cron: "0 6 * * *" 
+
+permissions:
+ id-token: write
+ contents: read
+ actions: read
+ security-events: write
+
+jobs:
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2.3.4
+        name: Check any Leaked Secrets
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_ENABLE_COMMENTS: 'true'
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
+
+          

From 0bd286033b3ab911b19226df7a8fe9fe702ee9d2 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:03:27 +0530
Subject: [PATCH 109/136] Update main.yml

---
 .github/workflows/main.yml | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 089720b..954a7b0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -242,22 +242,22 @@ jobs:
           vuln-type: 'os,library'
         continue-on-error: true
 
-      # Gitleaks
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          clean: false
+      # # Gitleaks
+      # - name: Checkout repository
+      #   uses: actions/checkout@v4
+      #   with:
+      #     fetch-depth: 0
+      #     clean: false
           
-      - name: Run Gitleaks manually
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
-        run: |
-          git clone https://github.com/gitleaks/gitleaks.git
-          cd gitleaks
-          make build
-          ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
+      # - name: Run Gitleaks manually
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
+      #   run: |
+      #     git clone https://github.com/gitleaks/gitleaks.git
+      #     cd gitleaks
+      #     make build
+      #     ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
         
       # - name: Upload Gitleaks scan results to GitHub Security tab
       #   if: always()

From 2cc03e432339bc92c822bd840a798aed5cfd77b0 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:15:45 +0530
Subject: [PATCH 110/136] Delete .gitleaks.toml

---
 .gitleaks.toml | 2910 ------------------------------------------------
 1 file changed, 2910 deletions(-)
 delete mode 100644 .gitleaks.toml

diff --git a/.gitleaks.toml b/.gitleaks.toml
deleted file mode 100644
index 24e8b88..0000000
--- a/.gitleaks.toml
+++ /dev/null
@@ -1,2910 +0,0 @@
-# This file has been auto-generated. Do not edit manually.
-# If you would like to contribute new rules, please use 
-# cmd/generate/config/main.go and follow the contributing guidelines
-# at https://github.com/zricethezav/gitleaks/blob/master/CONTRIBUTING.md
-
-# This is the default gitleaks configuration file.
-# Rules and allowlists are defined within this file.
-# Rules instruct gitleaks on what should be considered a secret.
-# Allowlists instruct gitleaks on what is allowed, i.e. not a secret.
-
-title = "gitleaks config"
-
-[allowlist]
-description = "global allow lists"
-paths = [
-    '''gitleaks.toml''',
-    '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$''',
-    '''(go.mod|go.sum|go.work|go.work.sum)$''',
-    '''gradle.lockfile''',
-    '''node_modules''',
-    '''package-lock.json''',
-    '''yarn.lock''',
-    '''pnpm-lock.yaml''',
-    '''Database.refactorlog''',
-    '''vendor''',
-]
-
-[[rules]]
-id = "adafruit-api-key"
-description = "Identified a potential Adafruit API Key, which could lead to unauthorized access to Adafruit services and sensitive data exposure."
-regex = '''(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "adafruit",
-]
-
-[[rules]]
-id = "adobe-client-id"
-description = "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches."
-regex = '''(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "adobe",
-]
-
-[[rules]]
-id = "adobe-client-secret"
-description = "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation."
-regex = '''(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "p8e-",
-]
-
-[[rules]]
-id = "age-secret-key"
-description = "Discovered a potential Age encryption tool secret key, risking data decryption and unauthorized access to sensitive information."
-regex = '''AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}'''
-keywords = [
-    "age-secret-key-1",
-]
-
-[[rules]]
-id = "airtable-api-key"
-description = "Uncovered a possible Airtable API Key, potentially compromising database access and leading to data leakage or alteration."
-regex = '''(?i)(?:airtable)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{17})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "airtable",
-]
-
-[[rules]]
-id = "algolia-api-key"
-description = "Identified an Algolia API Key, which could result in unauthorized search operations and data exposure on Algolia-managed platforms."
-regex = '''(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "algolia",
-]
-
-[[rules]]
-id = "alibaba-access-key-id"
-description = "Detected an Alibaba Cloud AccessKey ID, posing a risk of unauthorized cloud resource access and potential data compromise."
-regex = '''(?i)\b((LTAI)(?i)[a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ltai",
-]
-
-[[rules]]
-id = "alibaba-secret-key"
-description = "Discovered a potential Alibaba Cloud Secret Key, potentially allowing unauthorized operations and data access within Alibaba Cloud."
-regex = '''(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "alibaba",
-]
-
-[[rules]]
-id = "asana-client-id"
-description = "Discovered a potential Asana Client ID, risking unauthorized access to Asana projects and sensitive task information."
-regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "asana",
-]
-
-[[rules]]
-id = "asana-client-secret"
-description = "Identified an Asana Client Secret, which could lead to compromised project management integrity and unauthorized access."
-regex = '''(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "asana",
-]
-
-[[rules]]
-id = "atlassian-api-token"
-description = "Detected an Atlassian API token, posing a threat to project management and collaboration tool security and data confidentiality."
-regex = '''(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "atlassian","confluence","jira",
-]
-
-[[rules]]
-id = "authress-service-client-access-key"
-description = "Uncovered a possible Authress Service Client Access Key, which may compromise access control services and sensitive data."
-regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sc_","ext_","scauth_","authress_",
-]
-
-[[rules]]
-id = "aws-access-token"
-description = "Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms."
-regex = '''(?:A3T[A-Z0-9]|AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}'''
-keywords = [
-    "akia","asia","abia","acca",
-]
-
-[[rules]]
-id = "beamer-api-token"
-description = "Detected a Beamer API token, potentially compromising content management and exposing sensitive notifications and updates."
-regex = '''(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "beamer",
-]
-
-[[rules]]
-id = "bitbucket-client-id"
-description = "Discovered a potential Bitbucket Client ID, risking unauthorized repository access and potential codebase exposure."
-regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bitbucket",
-]
-
-[[rules]]
-id = "bitbucket-client-secret"
-description = "Discovered a potential Bitbucket Client Secret, posing a risk of compromised code repositories and unauthorized access."
-regex = '''(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bitbucket",
-]
-
-[[rules]]
-id = "bittrex-access-key"
-description = "Identified a Bittrex Access Key, which could lead to unauthorized access to cryptocurrency trading accounts and financial loss."
-regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bittrex",
-]
-
-[[rules]]
-id = "bittrex-secret-key"
-description = "Detected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security."
-regex = '''(?i)(?:bittrex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bittrex",
-]
-
-[[rules]]
-id = "clojars-api-token"
-description = "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation."
-regex = '''(?i)(CLOJARS_)[a-z0-9]{60}'''
-keywords = [
-    "clojars",
-]
-
-[[rules]]
-id = "cloudflare-api-key"
-description = "Detected a Cloudflare API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare",
-]
-
-[[rules]]
-id = "cloudflare-global-api-key"
-description = "Detected a Cloudflare Global API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare",
-]
-
-[[rules]]
-id = "cloudflare-origin-ca-key"
-description = "Detected a Cloudflare Origin CA Key, potentially compromising cloud application deployments and operational security."
-regex = '''\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "cloudflare","v1.0-",
-]
-
-[[rules]]
-id = "codecov-access-token"
-description = "Found a pattern resembling a Codecov Access Token, posing a risk of unauthorized access to code coverage reports and sensitive data."
-regex = '''(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "codecov",
-]
-
-[[rules]]
-id = "coinbase-access-token"
-description = "Detected a Coinbase Access Token, posing a risk of unauthorized access to cryptocurrency accounts and financial transactions."
-regex = '''(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "coinbase",
-]
-
-[[rules]]
-id = "confluent-access-token"
-description = "Identified a Confluent Access Token, which could compromise access to streaming data platforms and sensitive data flow."
-regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "confluent",
-]
-
-[[rules]]
-id = "confluent-secret-key"
-description = "Found a Confluent Secret Key, potentially risking unauthorized operations and data access within Confluent services."
-regex = '''(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "confluent",
-]
-
-[[rules]]
-id = "contentful-delivery-api-token"
-description = "Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity."
-regex = '''(?i)(?:contentful)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "contentful",
-]
-
-[[rules]]
-id = "databricks-api-token"
-description = "Uncovered a Databricks API token, which may compromise big data analytics platforms and sensitive data processing."
-regex = '''(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dapi",
-]
-
-[[rules]]
-id = "datadog-access-token"
-description = "Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation."
-regex = '''(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "datadog",
-]
-
-[[rules]]
-id = "defined-networking-api-token"
-description = "Identified a Defined Networking API token, which could lead to unauthorized network operations and data breaches."
-regex = '''(?i)(?:dnkey)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(dnkey-[a-z0-9=_\-]{26}-[a-z0-9=_\-]{52})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dnkey",
-]
-
-[[rules]]
-id = "digitalocean-access-token"
-description = "Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise."
-regex = '''(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "doo_v1_",
-]
-
-[[rules]]
-id = "digitalocean-pat"
-description = "Discovered a DigitalOcean Personal Access Token, posing a threat to cloud infrastructure security and data privacy."
-regex = '''(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dop_v1_",
-]
-
-[[rules]]
-id = "digitalocean-refresh-token"
-description = "Uncovered a DigitalOcean OAuth Refresh Token, which could allow prolonged unauthorized access and resource manipulation."
-regex = '''(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dor_v1_",
-]
-
-[[rules]]
-id = "discord-api-token"
-description = "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "discord-client-id"
-description = "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "discord-client-secret"
-description = "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks."
-regex = '''(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "discord",
-]
-
-[[rules]]
-id = "doppler-api-token"
-description = "Discovered a Doppler API token, posing a risk to environment and secrets management security."
-regex = '''(dp\.pt\.)(?i)[a-z0-9]{43}'''
-keywords = [
-    "doppler",
-]
-
-[[rules]]
-id = "droneci-access-token"
-description = "Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows."
-regex = '''(?i)(?:droneci)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "droneci",
-]
-
-[[rules]]
-id = "dropbox-api-token"
-description = "Identified a Dropbox API secret, which could lead to unauthorized file access and data breaches in Dropbox storage."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "dropbox-long-lived-api-token"
-description = "Found a Dropbox long-lived API token, risking prolonged unauthorized access to cloud storage and sensitive data."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\-_=]{43})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "dropbox-short-lived-api-token"
-description = "Discovered a Dropbox short-lived API token, posing a risk of temporary but potentially harmful data access and manipulation."
-regex = '''(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(sl\.[a-z0-9\-=_]{135})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "dropbox",
-]
-
-[[rules]]
-id = "duffel-api-token"
-description = "Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data."
-regex = '''duffel_(test|live)_(?i)[a-z0-9_\-=]{43}'''
-keywords = [
-    "duffel",
-]
-
-[[rules]]
-id = "dynatrace-api-token"
-description = "Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure."
-regex = '''dt0c01\.(?i)[a-z0-9]{24}\.[a-z0-9]{64}'''
-keywords = [
-    "dynatrace",
-]
-
-[[rules]]
-id = "easypost-api-token"
-description = "Identified an EasyPost API token, which could lead to unauthorized postal and shipment service access and data exposure."
-regex = '''\bEZAK(?i)[a-z0-9]{54}'''
-keywords = [
-    "ezak",
-]
-
-[[rules]]
-id = "easypost-test-api-token"
-description = "Detected an EasyPost test API token, risking exposure of test environments and potentially sensitive shipment data."
-regex = '''\bEZTK(?i)[a-z0-9]{54}'''
-keywords = [
-    "eztk",
-]
-
-[[rules]]
-id = "etsy-access-token"
-description = "Found an Etsy Access Token, potentially compromising Etsy shop management and customer data."
-regex = '''(?i)(?:etsy)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "etsy",
-]
-
-[[rules]]
-id = "facebook-access-token"
-description = "Discovered a Facebook Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)\b(\d{15,16}(\||%)[0-9a-z\-_]{27,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-
-[[rules]]
-id = "facebook-page-access-token"
-description = "Discovered a Facebook Page Access Token, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)\b(EAA[MC][a-z0-9]{20,})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "eaam","eaac",
-]
-
-[[rules]]
-id = "facebook-secret"
-description = "Discovered a Facebook Application secret, posing a risk of unauthorized access to Facebook accounts and personal data exposure."
-regex = '''(?i)(?:facebook)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "facebook",
-]
-
-[[rules]]
-id = "fastly-api-token"
-description = "Uncovered a Fastly API key, which may compromise CDN and edge cloud services, leading to content delivery and security issues."
-regex = '''(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "fastly",
-]
-
-[[rules]]
-id = "finicity-api-token"
-description = "Detected a Finicity API token, potentially risking financial data access and unauthorized financial operations."
-regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finicity",
-]
-
-[[rules]]
-id = "finicity-client-secret"
-description = "Identified a Finicity Client Secret, which could lead to compromised financial service integrations and data breaches."
-regex = '''(?i)(?:finicity)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finicity",
-]
-
-[[rules]]
-id = "finnhub-access-token"
-description = "Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics."
-regex = '''(?i)(?:finnhub)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "finnhub",
-]
-
-[[rules]]
-id = "flickr-access-token"
-description = "Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage."
-regex = '''(?i)(?:flickr)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "flickr",
-]
-
-[[rules]]
-id = "flutterwave-encryption-key"
-description = "Uncovered a Flutterwave Encryption Key, which may compromise payment processing and sensitive financial information."
-regex = '''FLWSECK_TEST-(?i)[a-h0-9]{12}'''
-keywords = [
-    "flwseck_test",
-]
-
-[[rules]]
-id = "flutterwave-public-key"
-description = "Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations."
-regex = '''FLWPUBK_TEST-(?i)[a-h0-9]{32}-X'''
-keywords = [
-    "flwpubk_test",
-]
-
-[[rules]]
-id = "flutterwave-secret-key"
-description = "Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches."
-regex = '''FLWSECK_TEST-(?i)[a-h0-9]{32}-X'''
-keywords = [
-    "flwseck_test",
-]
-
-[[rules]]
-id = "frameio-api-token"
-description = "Found a Frame.io API token, potentially compromising video collaboration and project management."
-regex = '''fio-u-(?i)[a-z0-9\-_=]{64}'''
-keywords = [
-    "fio-u-",
-]
-
-[[rules]]
-id = "freshbooks-access-token"
-description = "Discovered a Freshbooks Access Token, posing a risk to accounting software access and sensitive financial data exposure."
-regex = '''(?i)(?:freshbooks)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "freshbooks",
-]
-
-[[rules]]
-id = "gcp-api-key"
-description = "Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches."
-regex = '''(?i)\b(AIza[0-9A-Za-z\\-_]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "aiza",
-]
-
-[[rules]]
-id = "generic-api-key"
-description = "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."
-regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "key","api","token","secret","client","passwd","password","auth","access",
-]
-
-[rules.allowlist]
-stopwords = [
-    "000000",
-    "aaaaaa",
-    "about",
-    "abstract",
-    "academy",
-    "acces",
-    "account",
-    "act-",
-    "act.",
-    "act_",
-    "action",
-    "active",
-    "actively",
-    "activity",
-    "adapter",
-    "add-",
-    "add.",
-    "add_",
-    "add-on",
-    "addon",
-    "addres",
-    "admin",
-    "adobe",
-    "advanced",
-    "adventure",
-    "agent",
-    "agile",
-    "air-",
-    "air.",
-    "air_",
-    "ajax",
-    "akka",
-    "alert",
-    "alfred",
-    "algorithm",
-    "all-",
-    "all.",
-    "all_",
-    "alloy",
-    "alpha",
-    "amazon",
-    "amqp",
-    "analysi",
-    "analytic",
-    "analyzer",
-    "android",
-    "angular",
-    "angularj",
-    "animate",
-    "animation",
-    "another",
-    "ansible",
-    "answer",
-    "ant-",
-    "ant.",
-    "ant_",
-    "any-",
-    "any.",
-    "any_",
-    "apache",
-    "app-",
-    "app-",
-    "app.",
-    "app.",
-    "app_",
-    "app_",
-    "apple",
-    "arch",
-    "archive",
-    "archived",
-    "arduino",
-    "array",
-    "art-",
-    "art.",
-    "art_",
-    "article",
-    "asp-",
-    "asp.",
-    "asp_",
-    "asset",
-    "async",
-    "atom",
-    "attention",
-    "audio",
-    "audit",
-    "aura",
-    "auth",
-    "author",
-    "author",
-    "authorize",
-    "auto",
-    "automated",
-    "automatic",
-    "awesome",
-    "aws_",
-    "azure",
-    "back",
-    "backbone",
-    "backend",
-    "backup",
-    "bar-",
-    "bar.",
-    "bar_",
-    "base",
-    "based",
-    "bash",
-    "basic",
-    "batch",
-    "been",
-    "beer",
-    "behavior",
-    "being",
-    "benchmark",
-    "best",
-    "beta",
-    "better",
-    "big-",
-    "big.",
-    "big_",
-    "binary",
-    "binding",
-    "bit-",
-    "bit.",
-    "bit_",
-    "bitcoin",
-    "block",
-    "blog",
-    "board",
-    "book",
-    "bookmark",
-    "boost",
-    "boot",
-    "bootstrap",
-    "bosh",
-    "bot-",
-    "bot.",
-    "bot_",
-    "bower",
-    "box-",
-    "box.",
-    "box_",
-    "boxen",
-    "bracket",
-    "branch",
-    "bridge",
-    "browser",
-    "brunch",
-    "buffer",
-    "bug-",
-    "bug.",
-    "bug_",
-    "build",
-    "builder",
-    "building",
-    "buildout",
-    "buildpack",
-    "built",
-    "bundle",
-    "busines",
-    "but-",
-    "but.",
-    "but_",
-    "button",
-    "cache",
-    "caching",
-    "cakephp",
-    "calendar",
-    "call",
-    "camera",
-    "campfire",
-    "can-",
-    "can.",
-    "can_",
-    "canva",
-    "captcha",
-    "capture",
-    "card",
-    "carousel",
-    "case",
-    "cassandra",
-    "cat-",
-    "cat.",
-    "cat_",
-    "category",
-    "center",
-    "cento",
-    "challenge",
-    "change",
-    "changelog",
-    "channel",
-    "chart",
-    "chat",
-    "cheat",
-    "check",
-    "checker",
-    "chef",
-    "ches",
-    "chinese",
-    "chosen",
-    "chrome",
-    "ckeditor",
-    "clas",
-    "classe",
-    "classic",
-    "clean",
-    "cli-",
-    "cli.",
-    "cli_",
-    "client",
-    "client",
-    "clojure",
-    "clone",
-    "closure",
-    "cloud",
-    "club",
-    "cluster",
-    "cms-",
-    "cms_",
-    "coco",
-    "code",
-    "coding",
-    "coffee",
-    "color",
-    "combination",
-    "combo",
-    "command",
-    "commander",
-    "comment",
-    "commit",
-    "common",
-    "community",
-    "compas",
-    "compiler",
-    "complete",
-    "component",
-    "composer",
-    "computer",
-    "computing",
-    "con-",
-    "con.",
-    "con_",
-    "concept",
-    "conf",
-    "config",
-    "config",
-    "connect",
-    "connector",
-    "console",
-    "contact",
-    "container",
-    "contao",
-    "content",
-    "contest",
-    "context",
-    "control",
-    "convert",
-    "converter",
-    "conway'",
-    "cookbook",
-    "cookie",
-    "cool",
-    "copy",
-    "cordova",
-    "core",
-    "couchbase",
-    "couchdb",
-    "countdown",
-    "counter",
-    "course",
-    "craft",
-    "crawler",
-    "create",
-    "creating",
-    "creator",
-    "credential",
-    "crm-",
-    "crm.",
-    "crm_",
-    "cros",
-    "crud",
-    "csv-",
-    "csv.",
-    "csv_",
-    "cube",
-    "cucumber",
-    "cuda",
-    "current",
-    "currently",
-    "custom",
-    "daemon",
-    "dark",
-    "dart",
-    "dash",
-    "dashboard",
-    "data",
-    "database",
-    "date",
-    "day-",
-    "day.",
-    "day_",
-    "dead",
-    "debian",
-    "debug",
-    "debug",
-    "debugger",
-    "deck",
-    "define",
-    "del-",
-    "del.",
-    "del_",
-    "delete",
-    "demo",
-    "deploy",
-    "design",
-    "designer",
-    "desktop",
-    "detection",
-    "detector",
-    "dev-",
-    "dev.",
-    "dev_",
-    "develop",
-    "developer",
-    "device",
-    "devise",
-    "diff",
-    "digital",
-    "directive",
-    "directory",
-    "discovery",
-    "display",
-    "django",
-    "dns-",
-    "dns_",
-    "doc-",
-    "doc-",
-    "doc.",
-    "doc.",
-    "doc_",
-    "doc_",
-    "docker",
-    "docpad",
-    "doctrine",
-    "document",
-    "doe-",
-    "doe.",
-    "doe_",
-    "dojo",
-    "dom-",
-    "dom.",
-    "dom_",
-    "domain",
-    "done",
-    "don't",
-    "dot-",
-    "dot.",
-    "dot_",
-    "dotfile",
-    "download",
-    "draft",
-    "drag",
-    "drill",
-    "drive",
-    "driven",
-    "driver",
-    "drop",
-    "dropbox",
-    "drupal",
-    "dsl-",
-    "dsl.",
-    "dsl_",
-    "dynamic",
-    "easy",
-    "_ec2_",
-    "ecdsa",
-    "eclipse",
-    "edit",
-    "editing",
-    "edition",
-    "editor",
-    "element",
-    "emac",
-    "email",
-    "embed",
-    "embedded",
-    "ember",
-    "emitter",
-    "emulator",
-    "encoding",
-    "endpoint",
-    "engine",
-    "english",
-    "enhanced",
-    "entity",
-    "entry",
-    "env_",
-    "episode",
-    "erlang",
-    "error",
-    "espresso",
-    "event",
-    "evented",
-    "example",
-    "example",
-    "exchange",
-    "exercise",
-    "experiment",
-    "expire",
-    "exploit",
-    "explorer",
-    "export",
-    "exporter",
-    "expres",
-    "ext-",
-    "ext.",
-    "ext_",
-    "extended",
-    "extension",
-    "external",
-    "extra",
-    "extractor",
-    "fabric",
-    "facebook",
-    "factory",
-    "fake",
-    "fast",
-    "feature",
-    "feed",
-    "fewfwef",
-    "ffmpeg",
-    "field",
-    "file",
-    "filter",
-    "find",
-    "finder",
-    "firefox",
-    "firmware",
-    "first",
-    "fish",
-    "fix-",
-    "fix_",
-    "flash",
-    "flask",
-    "flat",
-    "flex",
-    "flexible",
-    "flickr",
-    "flow",
-    "fluent",
-    "fluentd",
-    "fluid",
-    "folder",
-    "font",
-    "force",
-    "foreman",
-    "fork",
-    "form",
-    "format",
-    "formatter",
-    "forum",
-    "foundry",
-    "framework",
-    "free",
-    "friend",
-    "friendly",
-    "front-end",
-    "frontend",
-    "ftp-",
-    "ftp.",
-    "ftp_",
-    "fuel",
-    "full",
-    "fun-",
-    "fun.",
-    "fun_",
-    "func",
-    "future",
-    "gaia",
-    "gallery",
-    "game",
-    "gateway",
-    "gem-",
-    "gem.",
-    "gem_",
-    "gen-",
-    "gen.",
-    "gen_",
-    "general",
-    "generator",
-    "generic",
-    "genetic",
-    "get-",
-    "get.",
-    "get_",
-    "getenv",
-    "getting",
-    "ghost",
-    "gist",
-    "git-",
-    "git.",
-    "git_",
-    "github",
-    "gitignore",
-    "gitlab",
-    "glas",
-    "gmail",
-    "gnome",
-    "gnu-",
-    "gnu.",
-    "gnu_",
-    "goal",
-    "golang",
-    "gollum",
-    "good",
-    "google",
-    "gpu-",
-    "gpu.",
-    "gpu_",
-    "gradle",
-    "grail",
-    "graph",
-    "graphic",
-    "great",
-    "grid",
-    "groovy",
-    "group",
-    "grunt",
-    "guard",
-    "gui-",
-    "gui.",
-    "gui_",
-    "guide",
-    "guideline",
-    "gulp",
-    "gwt-",
-    "gwt.",
-    "gwt_",
-    "hack",
-    "hackathon",
-    "hacker",
-    "hacking",
-    "hadoop",
-    "haml",
-    "handler",
-    "hardware",
-    "has-",
-    "has_",
-    "hash",
-    "haskell",
-    "have",
-    "haxe",
-    "hello",
-    "help",
-    "helper",
-    "here",
-    "hero",
-    "heroku",
-    "high",
-    "hipchat",
-    "history",
-    "home",
-    "homebrew",
-    "homepage",
-    "hook",
-    "host",
-    "hosting",
-    "hot-",
-    "hot.",
-    "hot_",
-    "house",
-    "how-",
-    "how.",
-    "how_",
-    "html",
-    "http",
-    "hub-",
-    "hub.",
-    "hub_",
-    "hubot",
-    "human",
-    "icon",
-    "ide-",
-    "ide.",
-    "ide_",
-    "idea",
-    "identity",
-    "idiomatic",
-    "image",
-    "impact",
-    "import",
-    "important",
-    "importer",
-    "impres",
-    "index",
-    "infinite",
-    "info",
-    "injection",
-    "inline",
-    "input",
-    "inside",
-    "inspector",
-    "instagram",
-    "install",
-    "installer",
-    "instant",
-    "intellij",
-    "interface",
-    "internet",
-    "interview",
-    "into",
-    "intro",
-    "ionic",
-    "iphone",
-    "ipython",
-    "irc-",
-    "irc_",
-    "iso-",
-    "iso.",
-    "iso_",
-    "issue",
-    "jade",
-    "jasmine",
-    "java",
-    "jbos",
-    "jekyll",
-    "jenkin",
-    "job-",
-    "job.",
-    "job_",
-    "joomla",
-    "jpa-",
-    "jpa.",
-    "jpa_",
-    "jquery",
-    "json",
-    "just",
-    "kafka",
-    "karma",
-    "kata",
-    "kernel",
-    "keyboard",
-    "kindle",
-    "kit-",
-    "kit.",
-    "kit_",
-    "kitchen",
-    "knife",
-    "koan",
-    "kohana",
-    "lab-",
-    "lab-",
-    "lab.",
-    "lab.",
-    "lab_",
-    "lab_",
-    "lambda",
-    "lamp",
-    "language",
-    "laravel",
-    "last",
-    "latest",
-    "latex",
-    "launcher",
-    "layer",
-    "layout",
-    "lazy",
-    "ldap",
-    "leaflet",
-    "league",
-    "learn",
-    "learning",
-    "led-",
-    "led.",
-    "led_",
-    "leetcode",
-    "les-",
-    "les.",
-    "les_",
-    "level",
-    "leveldb",
-    "lib-",
-    "lib.",
-    "lib_",
-    "librarie",
-    "library",
-    "license",
-    "life",
-    "liferay",
-    "light",
-    "lightbox",
-    "like",
-    "line",
-    "link",
-    "linked",
-    "linkedin",
-    "linux",
-    "lisp",
-    "list",
-    "lite",
-    "little",
-    "load",
-    "loader",
-    "local",
-    "location",
-    "lock",
-    "log-",
-    "log.",
-    "log_",
-    "logger",
-    "logging",
-    "logic",
-    "login",
-    "logstash",
-    "longer",
-    "look",
-    "love",
-    "lua-",
-    "lua.",
-    "lua_",
-    "mac-",
-    "mac.",
-    "mac_",
-    "machine",
-    "made",
-    "magento",
-    "magic",
-    "mail",
-    "make",
-    "maker",
-    "making",
-    "man-",
-    "man.",
-    "man_",
-    "manage",
-    "manager",
-    "manifest",
-    "manual",
-    "map-",
-    "map-",
-    "map.",
-    "map.",
-    "map_",
-    "map_",
-    "mapper",
-    "mapping",
-    "markdown",
-    "markup",
-    "master",
-    "math",
-    "matrix",
-    "maven",
-    "md5",
-    "mean",
-    "media",
-    "mediawiki",
-    "meetup",
-    "memcached",
-    "memory",
-    "menu",
-    "merchant",
-    "message",
-    "messaging",
-    "meta",
-    "metadata",
-    "meteor",
-    "method",
-    "metric",
-    "micro",
-    "middleman",
-    "migration",
-    "minecraft",
-    "miner",
-    "mini",
-    "minimal",
-    "mirror",
-    "mit-",
-    "mit.",
-    "mit_",
-    "mobile",
-    "mocha",
-    "mock",
-    "mod-",
-    "mod.",
-    "mod_",
-    "mode",
-    "model",
-    "modern",
-    "modular",
-    "module",
-    "modx",
-    "money",
-    "mongo",
-    "mongodb",
-    "mongoid",
-    "mongoose",
-    "monitor",
-    "monkey",
-    "more",
-    "motion",
-    "moved",
-    "movie",
-    "mozilla",
-    "mqtt",
-    "mule",
-    "multi",
-    "multiple",
-    "music",
-    "mustache",
-    "mvc-",
-    "mvc.",
-    "mvc_",
-    "mysql",
-    "nagio",
-    "name",
-    "native",
-    "need",
-    "neo-",
-    "neo.",
-    "neo_",
-    "nest",
-    "nested",
-    "net-",
-    "net.",
-    "net_",
-    "nette",
-    "network",
-    "new-",
-    "new-",
-    "new.",
-    "new.",
-    "new_",
-    "new_",
-    "next",
-    "nginx",
-    "ninja",
-    "nlp-",
-    "nlp.",
-    "nlp_",
-    "node",
-    "nodej",
-    "nosql",
-    "not-",
-    "not.",
-    "not_",
-    "note",
-    "notebook",
-    "notepad",
-    "notice",
-    "notifier",
-    "now-",
-    "now.",
-    "now_",
-    "number",
-    "oauth",
-    "object",
-    "objective",
-    "obsolete",
-    "ocaml",
-    "octopres",
-    "official",
-    "old-",
-    "old.",
-    "old_",
-    "onboard",
-    "online",
-    "only",
-    "open",
-    "opencv",
-    "opengl",
-    "openshift",
-    "openwrt",
-    "option",
-    "oracle",
-    "org-",
-    "org.",
-    "org_",
-    "origin",
-    "original",
-    "orm-",
-    "orm.",
-    "orm_",
-    "osx-",
-    "osx_",
-    "our-",
-    "our.",
-    "our_",
-    "out-",
-    "out.",
-    "out_",
-    "output",
-    "over",
-    "overview",
-    "own-",
-    "own.",
-    "own_",
-    "pack",
-    "package",
-    "packet",
-    "page",
-    "page",
-    "panel",
-    "paper",
-    "paperclip",
-    "para",
-    "parallax",
-    "parallel",
-    "parse",
-    "parser",
-    "parsing",
-    "particle",
-    "party",
-    "password",
-    "patch",
-    "path",
-    "pattern",
-    "payment",
-    "paypal",
-    "pdf-",
-    "pdf.",
-    "pdf_",
-    "pebble",
-    "people",
-    "perl",
-    "personal",
-    "phalcon",
-    "phoenix",
-    "phone",
-    "phonegap",
-    "photo",
-    "php-",
-    "php.",
-    "php_",
-    "physic",
-    "picker",
-    "pipeline",
-    "platform",
-    "play",
-    "player",
-    "please",
-    "plu-",
-    "plu.",
-    "plu_",
-    "plug-in",
-    "plugin",
-    "plupload",
-    "png-",
-    "png.",
-    "png_",
-    "poker",
-    "polyfill",
-    "polymer",
-    "pool",
-    "pop-",
-    "pop.",
-    "pop_",
-    "popcorn",
-    "popup",
-    "port",
-    "portable",
-    "portal",
-    "portfolio",
-    "post",
-    "power",
-    "powered",
-    "powerful",
-    "prelude",
-    "pretty",
-    "preview",
-    "principle",
-    "print",
-    "pro-",
-    "pro.",
-    "pro_",
-    "problem",
-    "proc",
-    "product",
-    "profile",
-    "profiler",
-    "program",
-    "progres",
-    "project",
-    "protocol",
-    "prototype",
-    "provider",
-    "proxy",
-    "public",
-    "pull",
-    "puppet",
-    "pure",
-    "purpose",
-    "push",
-    "pusher",
-    "pyramid",
-    "python",
-    "quality",
-    "query",
-    "queue",
-    "quick",
-    "rabbitmq",
-    "rack",
-    "radio",
-    "rail",
-    "railscast",
-    "random",
-    "range",
-    "raspberry",
-    "rdf-",
-    "rdf.",
-    "rdf_",
-    "react",
-    "reactive",
-    "read",
-    "reader",
-    "readme",
-    "ready",
-    "real",
-    "reality",
-    "real-time",
-    "realtime",
-    "recipe",
-    "recorder",
-    "red-",
-    "red.",
-    "red_",
-    "reddit",
-    "redi",
-    "redmine",
-    "reference",
-    "refinery",
-    "refresh",
-    "registry",
-    "related",
-    "release",
-    "remote",
-    "rendering",
-    "repo",
-    "report",
-    "request",
-    "require",
-    "required",
-    "requirej",
-    "research",
-    "resource",
-    "response",
-    "resque",
-    "rest",
-    "restful",
-    "resume",
-    "reveal",
-    "reverse",
-    "review",
-    "riak",
-    "rich",
-    "right",
-    "ring",
-    "robot",
-    "role",
-    "room",
-    "router",
-    "routing",
-    "rpc-",
-    "rpc.",
-    "rpc_",
-    "rpg-",
-    "rpg.",
-    "rpg_",
-    "rspec",
-    "ruby-",
-    "ruby.",
-    "ruby_",
-    "rule",
-    "run-",
-    "run.",
-    "run_",
-    "runner",
-    "running",
-    "runtime",
-    "rust",
-    "rvm-",
-    "rvm.",
-    "rvm_",
-    "salt",
-    "sample",
-    "sample",
-    "sandbox",
-    "sas-",
-    "sas.",
-    "sas_",
-    "sbt-",
-    "sbt.",
-    "sbt_",
-    "scala",
-    "scalable",
-    "scanner",
-    "schema",
-    "scheme",
-    "school",
-    "science",
-    "scraper",
-    "scratch",
-    "screen",
-    "script",
-    "scroll",
-    "scs-",
-    "scs.",
-    "scs_",
-    "sdk-",
-    "sdk.",
-    "sdk_",
-    "sdl-",
-    "sdl.",
-    "sdl_",
-    "search",
-    "secure",
-    "security",
-    "see-",
-    "see.",
-    "see_",
-    "seed",
-    "select",
-    "selector",
-    "selenium",
-    "semantic",
-    "sencha",
-    "send",
-    "sentiment",
-    "serie",
-    "server",
-    "service",
-    "session",
-    "set-",
-    "set.",
-    "set_",
-    "setting",
-    "setting",
-    "setup",
-    "sha1",
-    "sha2",
-    "sha256",
-    "share",
-    "shared",
-    "sharing",
-    "sheet",
-    "shell",
-    "shield",
-    "shipping",
-    "shop",
-    "shopify",
-    "shortener",
-    "should",
-    "show",
-    "showcase",
-    "side",
-    "silex",
-    "simple",
-    "simulator",
-    "single",
-    "site",
-    "skeleton",
-    "sketch",
-    "skin",
-    "slack",
-    "slide",
-    "slider",
-    "slim",
-    "small",
-    "smart",
-    "smtp",
-    "snake",
-    "snippet",
-    "soap",
-    "social",
-    "socket",
-    "software",
-    "solarized",
-    "solr",
-    "solution",
-    "solver",
-    "some",
-    "soon",
-    "source",
-    "space",
-    "spark",
-    "spatial",
-    "spec",
-    "sphinx",
-    "spine",
-    "spotify",
-    "spree",
-    "spring",
-    "sprite",
-    "sql-",
-    "sql.",
-    "sql_",
-    "sqlite",
-    "ssh-",
-    "ssh.",
-    "ssh_",
-    "stack",
-    "staging",
-    "standard",
-    "stanford",
-    "start",
-    "started",
-    "starter",
-    "startup",
-    "stat",
-    "statamic",
-    "state",
-    "static",
-    "statistic",
-    "statsd",
-    "statu",
-    "steam",
-    "step",
-    "still",
-    "stm-",
-    "stm.",
-    "stm_",
-    "storage",
-    "store",
-    "storm",
-    "story",
-    "strategy",
-    "stream",
-    "streaming",
-    "string",
-    "stripe",
-    "structure",
-    "studio",
-    "study",
-    "stuff",
-    "style",
-    "sublime",
-    "sugar",
-    "suite",
-    "summary",
-    "super",
-    "support",
-    "supported",
-    "svg-",
-    "svg.",
-    "svg_",
-    "svn-",
-    "svn.",
-    "svn_",
-    "swagger",
-    "swift",
-    "switch",
-    "switcher",
-    "symfony",
-    "symphony",
-    "sync",
-    "synopsi",
-    "syntax",
-    "system",
-    "system",
-    "tab-",
-    "tab-",
-    "tab.",
-    "tab.",
-    "tab_",
-    "tab_",
-    "table",
-    "tag-",
-    "tag-",
-    "tag.",
-    "tag.",
-    "tag_",
-    "tag_",
-    "talk",
-    "target",
-    "task",
-    "tcp-",
-    "tcp.",
-    "tcp_",
-    "tdd-",
-    "tdd.",
-    "tdd_",
-    "team",
-    "tech",
-    "template",
-    "term",
-    "terminal",
-    "testing",
-    "tetri",
-    "text",
-    "textmate",
-    "theme",
-    "theory",
-    "three",
-    "thrift",
-    "time",
-    "timeline",
-    "timer",
-    "tiny",
-    "tinymce",
-    "tip-",
-    "tip.",
-    "tip_",
-    "title",
-    "todo",
-    "todomvc",
-    "token",
-    "tool",
-    "toolbox",
-    "toolkit",
-    "top-",
-    "top.",
-    "top_",
-    "tornado",
-    "touch",
-    "tower",
-    "tracker",
-    "tracking",
-    "traffic",
-    "training",
-    "transfer",
-    "translate",
-    "transport",
-    "tree",
-    "trello",
-    "try-",
-    "try.",
-    "try_",
-    "tumblr",
-    "tut-",
-    "tut.",
-    "tut_",
-    "tutorial",
-    "tweet",
-    "twig",
-    "twitter",
-    "type",
-    "typo",
-    "ubuntu",
-    "uiview",
-    "ultimate",
-    "under",
-    "unit",
-    "unity",
-    "universal",
-    "unix",
-    "update",
-    "updated",
-    "upgrade",
-    "upload",
-    "uploader",
-    "uri-",
-    "uri.",
-    "uri_",
-    "url-",
-    "url.",
-    "url_",
-    "usage",
-    "usb-",
-    "usb.",
-    "usb_",
-    "use-",
-    "use.",
-    "use_",
-    "used",
-    "useful",
-    "user",
-    "using",
-    "util",
-    "utilitie",
-    "utility",
-    "vagrant",
-    "validator",
-    "value",
-    "variou",
-    "varnish",
-    "version",
-    "via-",
-    "via.",
-    "via_",
-    "video",
-    "view",
-    "viewer",
-    "vim-",
-    "vim.",
-    "vim_",
-    "vimrc",
-    "virtual",
-    "vision",
-    "visual",
-    "vpn",
-    "want",
-    "warning",
-    "watch",
-    "watcher",
-    "wave",
-    "way-",
-    "way.",
-    "way_",
-    "weather",
-    "web-",
-    "web_",
-    "webapp",
-    "webgl",
-    "webhook",
-    "webkit",
-    "webrtc",
-    "website",
-    "websocket",
-    "welcome",
-    "welcome",
-    "what",
-    "what'",
-    "when",
-    "where",
-    "which",
-    "why-",
-    "why.",
-    "why_",
-    "widget",
-    "wifi",
-    "wiki",
-    "win-",
-    "win.",
-    "win_",
-    "window",
-    "wip-",
-    "wip.",
-    "wip_",
-    "within",
-    "without",
-    "wizard",
-    "word",
-    "wordpres",
-    "work",
-    "worker",
-    "workflow",
-    "working",
-    "workshop",
-    "world",
-    "wrapper",
-    "write",
-    "writer",
-    "writing",
-    "written",
-    "www-",
-    "www.",
-    "www_",
-    "xamarin",
-    "xcode",
-    "xml-",
-    "xml.",
-    "xml_",
-    "xmpp",
-    "xxxxxx",
-    "yahoo",
-    "yaml",
-    "yandex",
-    "yeoman",
-    "yet-",
-    "yet.",
-    "yet_",
-    "yii-",
-    "yii.",
-    "yii_",
-    "youtube",
-    "yui-",
-    "yui.",
-    "yui_",
-    "zend",
-    "zero",
-    "zip-",
-    "zip.",
-    "zip_",
-    "zsh-",
-    "zsh.",
-    "zsh_",
-]
-
-[[rules]]
-id = "github-app-token"
-description = "Identified a GitHub App Token, which may compromise GitHub application integrations and source code security."
-regex = '''(ghu|ghs)_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghu_","ghs_",
-]
-
-[[rules]]
-id = "github-fine-grained-pat"
-description = "Found a GitHub Fine-Grained Personal Access Token, risking unauthorized repository access and code manipulation."
-regex = '''github_pat_[0-9a-zA-Z_]{82}'''
-keywords = [
-    "github_pat_",
-]
-
-[[rules]]
-id = "github-oauth"
-description = "Discovered a GitHub OAuth Access Token, posing a risk of compromised GitHub account integrations and data leaks."
-regex = '''gho_[0-9a-zA-Z]{36}'''
-keywords = [
-    "gho_",
-]
-
-[[rules]]
-id = "github-pat"
-description = "Uncovered a GitHub Personal Access Token, potentially leading to unauthorized repository access and sensitive content exposure."
-regex = '''ghp_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghp_",
-]
-
-[[rules]]
-id = "github-refresh-token"
-description = "Detected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services."
-regex = '''ghr_[0-9a-zA-Z]{36}'''
-keywords = [
-    "ghr_",
-]
-
-[[rules]]
-id = "gitlab-pat"
-description = "Identified a GitLab Personal Access Token, risking unauthorized access to GitLab repositories and codebase exposure."
-regex = '''glpat-[0-9a-zA-Z\-\_]{20}'''
-keywords = [
-    "glpat-",
-]
-
-[[rules]]
-id = "gitlab-ptt"
-description = "Found a GitLab Pipeline Trigger Token, potentially compromising continuous integration workflows and project security."
-regex = '''glptt-[0-9a-f]{40}'''
-keywords = [
-    "glptt-",
-]
-
-[[rules]]
-id = "gitlab-rrt"
-description = "Discovered a GitLab Runner Registration Token, posing a risk to CI/CD pipeline integrity and unauthorized access."
-regex = '''GR1348941[0-9a-zA-Z\-\_]{20}'''
-keywords = [
-    "gr1348941",
-]
-
-[[rules]]
-id = "gitter-access-token"
-description = "Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services."
-regex = '''(?i)(?:gitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "gitter",
-]
-
-[[rules]]
-id = "gocardless-api-token"
-description = "Detected a GoCardless API token, potentially risking unauthorized direct debit payment operations and financial data exposure."
-regex = '''(?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "live_","gocardless",
-]
-
-[[rules]]
-id = "grafana-api-key"
-description = "Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics."
-regex = '''(?i)\b(eyJrIjoi[A-Za-z0-9]{70,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "eyjrijoi",
-]
-
-[[rules]]
-id = "grafana-cloud-api-token"
-description = "Found a Grafana cloud API token, risking unauthorized access to cloud-based monitoring services and data exposure."
-regex = '''(?i)\b(glc_[A-Za-z0-9+/]{32,400}={0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "glc_",
-]
-
-[[rules]]
-id = "grafana-service-account-token"
-description = "Discovered a Grafana service account token, posing a risk of compromised monitoring services and data integrity."
-regex = '''(?i)\b(glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "glsa_",
-]
-
-[[rules]]
-id = "harness-api-key"
-description = "Identified a Harness Access Token (PAT or SAT), risking unauthorized access to a Harness account."
-regex = '''((?:pat|sat)\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{24}\.[a-zA-Z0-9]{20})'''
-keywords = [
-    "pat.","sat.",
-]
-
-[[rules]]
-id = "hashicorp-tf-api-token"
-description = "Uncovered a HashiCorp Terraform user/org API token, which may lead to unauthorized infrastructure management and security breaches."
-regex = '''(?i)[a-z0-9]{14}\.atlasv1\.[a-z0-9\-_=]{60,70}'''
-keywords = [
-    "atlasv1",
-]
-
-[[rules]]
-id = "hashicorp-tf-password"
-description = "Identified a HashiCorp Terraform password field, risking unauthorized infrastructure configuration and security breaches."
-regex = '''(?i)(?:administrator_login_password|password)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}("[a-z0-9=_\-]{8,20}")(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-path = '''\.(tf|hcl)$'''
-keywords = [
-    "administrator_login_password","password",
-]
-
-[[rules]]
-id = "heroku-api-key"
-description = "Detected a Heroku API Key, potentially compromising cloud application deployments and operational security."
-regex = '''(?i)(?:heroku)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "heroku",
-]
-
-[[rules]]
-id = "hubspot-api-key"
-description = "Found a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations."
-regex = '''(?i)(?:hubspot)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hubspot",
-]
-
-[[rules]]
-id = "huggingface-access-token"
-description = "Discovered a Hugging Face Access token, which could lead to unauthorized access to AI models and sensitive data."
-regex = '''(?:^|[\\'"` >=:])(hf_[a-zA-Z]{34})(?:$|[\\'"` <])'''
-entropy = 1
-keywords = [
-    "hf_",
-]
-
-[[rules]]
-id = "huggingface-organization-api-token"
-description = "Uncovered a Hugging Face Organization API token, potentially compromising AI organization accounts and associated data."
-regex = '''(?:^|[\\'"` >=:\(,)])(api_org_[a-zA-Z]{34})(?:$|[\\'"` <\),])'''
-entropy = 2
-keywords = [
-    "api_org_",
-]
-
-[[rules]]
-id = "infracost-api-token"
-description = "Detected an Infracost API Token, risking unauthorized access to cloud cost estimation tools and financial data."
-regex = '''(?i)\b(ico-[a-zA-Z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ico-",
-]
-
-[[rules]]
-id = "intercom-api-key"
-description = "Identified an Intercom API Token, which could compromise customer communication channels and data privacy."
-regex = '''(?i)(?:intercom)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "intercom",
-]
-
-[[rules]]
-id = "intra42-client-secret"
-description = "Found a Intra42 client secret, which could lead to unauthorized access to the 42School API and sensitive data."
-regex = '''(?i)\b(s-s4t2(?:ud|af)-[abcdef0123456789]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "intra","s-s4t2ud-","s-s4t2af-",
-]
-
-[[rules]]
-id = "jfrog-api-key"
-description = "Found a JFrog API Key, posing a risk of unauthorized access to software artifact repositories and build pipelines."
-regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{73})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "jfrog","artifactory","bintray","xray",
-]
-
-[[rules]]
-id = "jfrog-identity-token"
-description = "Discovered a JFrog Identity Token, potentially compromising access to JFrog services and sensitive software artifacts."
-regex = '''(?i)(?:jfrog|artifactory|bintray|xray)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "jfrog","artifactory","bintray","xray",
-]
-
-[[rules]]
-id = "jwt"
-description = "Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data."
-regex = '''\b(ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "ey",
-]
-
-[[rules]]
-id = "jwt-base64"
-description = "Detected a Base64-encoded JSON Web Token, posing a risk of exposing encoded authentication and data exchange information."
-regex = '''\bZXlK(?:(?P<alg>aGJHY2lPaU)|(?P<apu>aGNIVWlPaU)|(?P<apv>aGNIWWlPaU)|(?P<aud>aGRXUWlPaU)|(?P<b64>aU5qUWlP)|(?P<crit>amNtbDBJanBi)|(?P<cty>amRIa2lPaU)|(?P<epk>bGNHc2lPbn)|(?P<enc>bGJtTWlPaU)|(?P<jku>cWEzVWlPaU)|(?P<jwk>cWQyc2lPb)|(?P<iss>cGMzTWlPaU)|(?P<iv>cGRpSTZJ)|(?P<kid>cmFXUWlP)|(?P<key_ops>clpYbGZiM0J6SWpwY)|(?P<kty>cmRIa2lPaUp)|(?P<nonce>dWIyNWpaU0k2)|(?P<p2c>d01tTWlP)|(?P<p2s>d01uTWlPaU)|(?P<ppt>d2NIUWlPaU)|(?P<sub>emRXSWlPaU)|(?P<svt>emRuUWlP)|(?P<tag>MFlXY2lPaU)|(?P<typ>MGVYQWlPaUp)|(?P<url>MWNtd2l)|(?P<use>MWMyVWlPaUp)|(?P<ver>MlpYSWlPaU)|(?P<version>MlpYSnphVzl1SWpv)|(?P<x>NElqb2)|(?P<x5c>NE5XTWlP)|(?P<x5t>NE5YUWlPaU)|(?P<x5ts256>NE5YUWpVekkxTmlJNkl)|(?P<x5u>NE5YVWlPaU)|(?P<zip>NmFYQWlPaU))[a-zA-Z0-9\/\\_+\-\r\n]{40,}={0,2}'''
-keywords = [
-    "zxlk",
-]
-
-[[rules]]
-id = "kraken-access-token"
-description = "Identified a Kraken Access Token, potentially compromising cryptocurrency trading accounts and financial security."
-regex = '''(?i)(?:kraken)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9\/=_\+\-]{80,90})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kraken",
-]
-
-[[rules]]
-id = "kucoin-access-token"
-description = "Found a Kucoin Access Token, risking unauthorized access to cryptocurrency exchange services and transactions."
-regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kucoin",
-]
-
-[[rules]]
-id = "kucoin-secret-key"
-description = "Discovered a Kucoin Secret Key, which could lead to compromised cryptocurrency operations and financial data breaches."
-regex = '''(?i)(?:kucoin)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "kucoin",
-]
-
-[[rules]]
-id = "launchdarkly-access-token"
-description = "Uncovered a Launchdarkly Access Token, potentially compromising feature flag management and application functionality."
-regex = '''(?i)(?:launchdarkly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "launchdarkly",
-]
-
-[[rules]]
-id = "linear-api-key"
-description = "Detected a Linear API Token, posing a risk to project management tools and sensitive task data."
-regex = '''lin_api_(?i)[a-z0-9]{40}'''
-keywords = [
-    "lin_api_",
-]
-
-[[rules]]
-id = "linear-client-secret"
-description = "Identified a Linear Client Secret, which may compromise secure integrations and sensitive project management data."
-regex = '''(?i)(?:linear)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linear",
-]
-
-[[rules]]
-id = "linkedin-client-id"
-description = "Found a LinkedIn Client ID, risking unauthorized access to LinkedIn integrations and professional data exposure."
-regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{14})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linkedin","linked-in",
-]
-
-[[rules]]
-id = "linkedin-client-secret"
-description = "Discovered a LinkedIn Client secret, potentially compromising LinkedIn application integrations and user data."
-regex = '''(?i)(?:linkedin|linked-in)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "linkedin","linked-in",
-]
-
-[[rules]]
-id = "lob-api-key"
-description = "Uncovered a Lob API Key, which could lead to unauthorized access to mailing and address verification services."
-regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((live|test)_[a-f0-9]{35})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "test_","live_",
-]
-
-[[rules]]
-id = "lob-pub-api-key"
-description = "Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations."
-regex = '''(?i)(?:lob)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}((test|live)_pub_[a-f0-9]{31})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "test_pub","live_pub","_pub",
-]
-
-[[rules]]
-id = "mailchimp-api-key"
-description = "Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data."
-regex = '''(?i)(?:MailchimpSDK.initialize|mailchimp)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32}-us\d\d)(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailchimp",
-]
-
-[[rules]]
-id = "mailgun-private-api-token"
-description = "Found a Mailgun private API token, risking unauthorized email service operations and data breaches."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(key-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mailgun-pub-key"
-description = "Discovered a Mailgun public validation key, which could expose email verification processes and associated data."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pubkey-[a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mailgun-signing-key"
-description = "Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity."
-regex = '''(?i)(?:mailgun)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-h0-9]{32}-[a-h0-9]{8}-[a-h0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mailgun",
-]
-
-[[rules]]
-id = "mapbox-api-token"
-description = "Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure."
-regex = '''(?i)(?:mapbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(pk\.[a-z0-9]{60}\.[a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mapbox",
-]
-
-[[rules]]
-id = "mattermost-access-token"
-description = "Identified a Mattermost Access Token, which may compromise team communication channels and data privacy."
-regex = '''(?i)(?:mattermost)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{26})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "mattermost",
-]
-
-[[rules]]
-id = "messagebird-api-token"
-description = "Found a MessageBird API token, risking unauthorized access to communication platforms and message data."
-regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "messagebird","message-bird","message_bird",
-]
-
-[[rules]]
-id = "messagebird-client-id"
-description = "Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data."
-regex = '''(?i)(?:messagebird|message-bird|message_bird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "messagebird","message-bird","message_bird",
-]
-
-[[rules]]
-id = "microsoft-teams-webhook"
-description = "Uncovered a Microsoft Teams Webhook, which could lead to unauthorized access to team collaboration tools and data leaks."
-regex = '''https:\/\/[a-z0-9]+\.webhook\.office\.com\/webhookb2\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}@[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}\/IncomingWebhook\/[a-z0-9]{32}\/[a-z0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}'''
-keywords = [
-    "webhook.office.com","webhookb2","incomingwebhook",
-]
-
-[[rules]]
-id = "netlify-access-token"
-description = "Detected a Netlify Access Token, potentially compromising web hosting services and site management."
-regex = '''(?i)(?:netlify)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{40,46})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "netlify",
-]
-
-[[rules]]
-id = "new-relic-browser-api-token"
-description = "Identified a New Relic ingest browser API token, risking unauthorized access to application performance data and analytics."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRJS-[a-f0-9]{19})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrjs-",
-]
-
-[[rules]]
-id = "new-relic-insert-key"
-description = "Discovered a New Relic insight insert key, compromising data injection into the platform."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRII-[a-z0-9-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrii-",
-]
-
-[[rules]]
-id = "new-relic-user-api-id"
-description = "Found a New Relic user API ID, posing a risk to application monitoring services and data integrity."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "new-relic","newrelic","new_relic",
-]
-
-[[rules]]
-id = "new-relic-user-api-key"
-description = "Discovered a New Relic user API Key, which could lead to compromised application insights and performance monitoring."
-regex = '''(?i)(?:new-relic|newrelic|new_relic)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(NRAK-[a-z0-9]{27})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nrak",
-]
-
-[[rules]]
-id = "npm-access-token"
-description = "Uncovered an npm access token, potentially compromising package management and code repository access."
-regex = '''(?i)\b(npm_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "npm_",
-]
-
-[[rules]]
-id = "nytimes-access-token"
-description = "Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services."
-regex = '''(?i)(?:nytimes|new-york-times,|newyorktimes)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "nytimes","new-york-times","newyorktimes",
-]
-
-[[rules]]
-id = "okta-access-token"
-description = "Identified an Okta Access Token, which may compromise identity management services and user authentication data."
-regex = '''(?i)(?:okta)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9=_\-]{42})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "okta",
-]
-
-[[rules]]
-id = "openai-api-key"
-description = "Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation."
-regex = '''(?i)\b(sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "t3blbkfj",
-]
-
-[[rules]]
-id = "plaid-api-token"
-description = "Discovered a Plaid API Token, potentially compromising financial data aggregation and banking services."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(access-(?:sandbox|development|production)-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "plaid-client-id"
-description = "Uncovered a Plaid Client ID, which could lead to unauthorized financial service integrations and data breaches."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "plaid-secret-key"
-description = "Detected a Plaid Secret key, risking unauthorized access to financial accounts and sensitive transaction data."
-regex = '''(?i)(?:plaid)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3.5
-keywords = [
-    "plaid",
-]
-
-[[rules]]
-id = "planetscale-api-token"
-description = "Identified a PlanetScale API token, potentially compromising database management and operations."
-regex = '''(?i)\b(pscale_tkn_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_tkn_",
-]
-
-[[rules]]
-id = "planetscale-oauth-token"
-description = "Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity."
-regex = '''(?i)\b(pscale_oauth_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_oauth_",
-]
-
-[[rules]]
-id = "planetscale-password"
-description = "Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches."
-regex = '''(?i)\b(pscale_pw_(?i)[a-z0-9=\-_\.]{32,64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pscale_pw_",
-]
-
-[[rules]]
-id = "postman-api-token"
-description = "Uncovered a Postman API token, potentially compromising API testing and development workflows."
-regex = '''(?i)\b(PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pmak-",
-]
-
-[[rules]]
-id = "prefect-api-token"
-description = "Detected a Prefect API token, risking unauthorized access to workflow management and automation services."
-regex = '''(?i)\b(pnu_[a-z0-9]{36})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pnu_",
-]
-
-[[rules]]
-id = "private-key"
-description = "Identified a Private Key, which may compromise cryptographic security and sensitive data encryption."
-regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY( BLOCK)?-----[\s\S-]*KEY( BLOCK)?----'''
-keywords = [
-    "-----begin",
-]
-
-[[rules]]
-id = "pulumi-api-token"
-description = "Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management."
-regex = '''(?i)\b(pul-[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "pul-",
-]
-
-[[rules]]
-id = "pypi-upload-token"
-description = "Discovered a PyPI upload token, potentially compromising Python package distribution and repository integrity."
-regex = '''pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\-_]{50,1000}'''
-keywords = [
-    "pypi-ageichlwas5vcmc",
-]
-
-[[rules]]
-id = "rapidapi-access-token"
-description = "Uncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services."
-regex = '''(?i)(?:rapidapi)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rapidapi",
-]
-
-[[rules]]
-id = "readme-api-token"
-description = "Detected a Readme API token, risking unauthorized documentation management and content exposure."
-regex = '''(?i)\b(rdme_[a-z0-9]{70})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rdme_",
-]
-
-[[rules]]
-id = "rubygems-api-token"
-description = "Identified a Rubygem API token, potentially compromising Ruby library distribution and package management."
-regex = '''(?i)\b(rubygems_[a-f0-9]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "rubygems_",
-]
-
-[[rules]]
-id = "scalingo-api-token"
-description = "Found a Scalingo API token, posing a risk to cloud platform services and application deployment security."
-regex = '''\b(tk-us-[a-zA-Z0-9-_]{48})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "tk-us-",
-]
-
-[[rules]]
-id = "sendbird-access-id"
-description = "Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations."
-regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sendbird",
-]
-
-[[rules]]
-id = "sendbird-access-token"
-description = "Uncovered a Sendbird Access Token, potentially risking unauthorized access to communication services and user data."
-regex = '''(?i)(?:sendbird)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sendbird",
-]
-
-[[rules]]
-id = "sendgrid-api-token"
-description = "Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure."
-regex = '''(?i)\b(SG\.(?i)[a-z0-9=_\-\.]{66})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sg.",
-]
-
-[[rules]]
-id = "sendinblue-api-token"
-description = "Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy."
-regex = '''(?i)\b(xkeysib-[a-f0-9]{64}\-(?i)[a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "xkeysib-",
-]
-
-[[rules]]
-id = "sentry-access-token"
-description = "Found a Sentry Access Token, risking unauthorized access to error tracking services and sensitive application data."
-regex = '''(?i)(?:sentry)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sentry",
-]
-
-[[rules]]
-id = "shippo-api-token"
-description = "Discovered a Shippo API token, potentially compromising shipping services and customer order data."
-regex = '''(?i)\b(shippo_(live|test)_[a-f0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "shippo_",
-]
-
-[[rules]]
-id = "shopify-access-token"
-description = "Uncovered a Shopify access token, which could lead to unauthorized e-commerce platform access and data breaches."
-regex = '''shpat_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpat_",
-]
-
-[[rules]]
-id = "shopify-custom-access-token"
-description = "Detected a Shopify custom access token, potentially compromising custom app integrations and e-commerce data security."
-regex = '''shpca_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpca_",
-]
-
-[[rules]]
-id = "shopify-private-app-access-token"
-description = "Identified a Shopify private app access token, risking unauthorized access to private app data and store operations."
-regex = '''shppa_[a-fA-F0-9]{32}'''
-keywords = [
-    "shppa_",
-]
-
-[[rules]]
-id = "shopify-shared-secret"
-description = "Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security."
-regex = '''shpss_[a-fA-F0-9]{32}'''
-keywords = [
-    "shpss_",
-]
-
-[[rules]]
-id = "sidekiq-secret"
-description = "Discovered a Sidekiq Secret, which could lead to compromised background job processing and application data breaches."
-regex = '''(?i)(?:BUNDLE_ENTERPRISE__CONTRIBSYS__COM|BUNDLE_GEMS__CONTRIBSYS__COM)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{8}:[a-f0-9]{8})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "bundle_enterprise__contribsys__com","bundle_gems__contribsys__com",
-]
-
-[[rules]]
-id = "sidekiq-sensitive-url"
-description = "Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details."
-regex = '''(?i)\b(http(?:s??):\/\/)([a-f0-9]{8}:[a-f0-9]{8})@(?:gems.contribsys.com|enterprise.contribsys.com)(?:[\/|\#|\?|:]|$)'''
-secretGroup = 2
-keywords = [
-    "gems.contribsys.com","enterprise.contribsys.com",
-]
-
-[[rules]]
-id = "slack-app-token"
-description = "Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data."
-regex = '''(?i)(xapp-\d-[A-Z0-9]+-\d+-[a-z0-9]+)'''
-keywords = [
-    "xapp",
-]
-
-[[rules]]
-id = "slack-bot-token"
-description = "Identified a Slack Bot token, which may compromise bot integrations and communication channel security."
-regex = '''(xoxb-[0-9]{10,13}\-[0-9]{10,13}[a-zA-Z0-9-]*)'''
-keywords = [
-    "xoxb",
-]
-
-[[rules]]
-id = "slack-config-access-token"
-description = "Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access."
-regex = '''(?i)(xoxe.xox[bp]-\d-[A-Z0-9]{163,166})'''
-keywords = [
-    "xoxe.xoxb-","xoxe.xoxp-",
-]
-
-[[rules]]
-id = "slack-config-refresh-token"
-description = "Discovered a Slack Configuration refresh token, potentially allowing prolonged unauthorized access to configuration settings."
-regex = '''(?i)(xoxe-\d-[A-Z0-9]{146})'''
-keywords = [
-    "xoxe-",
-]
-
-[[rules]]
-id = "slack-legacy-bot-token"
-description = "Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure."
-regex = '''(xoxb-[0-9]{8,14}\-[a-zA-Z0-9]{18,26})'''
-keywords = [
-    "xoxb",
-]
-
-[[rules]]
-id = "slack-legacy-token"
-description = "Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data."
-regex = '''(xox[os]-\d+-\d+-\d+-[a-fA-F\d]+)'''
-keywords = [
-    "xoxo","xoxs",
-]
-
-[[rules]]
-id = "slack-legacy-workspace-token"
-description = "Identified a Slack Legacy Workspace token, potentially compromising access to workspace data and legacy features."
-regex = '''(xox[ar]-(?:\d-)?[0-9a-zA-Z]{8,48})'''
-keywords = [
-    "xoxa","xoxr",
-]
-
-[[rules]]
-id = "slack-user-token"
-description = "Found a Slack User token, posing a risk of unauthorized user impersonation and data access within Slack workspaces."
-regex = '''(xox[pe](?:-[0-9]{10,13}){3}-[a-zA-Z0-9-]{28,34})'''
-keywords = [
-    "xoxp-","xoxe-",
-]
-
-[[rules]]
-id = "slack-webhook-url"
-description = "Discovered a Slack Webhook, which could lead to unauthorized message posting and data leakage in Slack channels."
-regex = '''(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}'''
-keywords = [
-    "hooks.slack.com",
-]
-
-[[rules]]
-id = "snyk-api-token"
-description = "Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security."
-regex = '''(?i)(?:snyk_token|snyk_key|snyk_api_token|snyk_api_key|snyk_oauth_token)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "snyk_token","snyk_key","snyk_api_token","snyk_api_key","snyk_oauth_token",
-]
-
-[[rules]]
-id = "square-access-token"
-description = "Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure."
-regex = '''(?i)\b((EAAA|sq0atp-)[0-9A-Za-z\-_]{22,60})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sq0atp-","eaaa",
-]
-
-[[rules]]
-id = "squarespace-access-token"
-description = "Identified a Squarespace Access Token, which may compromise website management and content control on Squarespace."
-regex = '''(?i)(?:squarespace)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "squarespace",
-]
-
-[[rules]]
-id = "stripe-access-token"
-description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data."
-regex = '''(?i)\b((sk|rk)_(test|live|prod)_[0-9a-z]{10,99})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "sk_test","sk_live","sk_prod","rk_test","rk_live","rk_prod",
-]
-
-[[rules]]
-id = "sumologic-access-id"
-description = "Discovered a SumoLogic Access ID, potentially compromising log management services and data analytics integrity."
-regex = '''(?i:(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3})(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(su[a-zA-Z0-9]{12})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3
-keywords = [
-    "sumo",
-]
-
-[rules.allowlist]
-
-regexTarget = "line"
-regexes = [
-    "sumOf",
-]
-
-[[rules]]
-id = "sumologic-access-token"
-description = "Uncovered a SumoLogic Access Token, which could lead to unauthorized access to log data and analytics insights."
-regex = '''(?i)(?:sumo)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-entropy = 3
-keywords = [
-    "sumo",
-]
-
-[[rules]]
-id = "telegram-bot-api-token"
-description = "Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram."
-regex = '''(?i:(?:telegr)(?:[0-9a-z\(-_\t .\\]{0,40})(?:[\s|']|[\s|"]){0,3})(?:=|\|\|:|<=|=>|:|\?=|\()(?:'|\"|\s|=|\x60){0,5}([0-9]{5,16}:A[a-z0-9_\-]{34})(?:['|\"|\n|\r|\s|\x60|;|\\]|$)'''
-keywords = [
-    "telegr",
-]
-
-[[rules]]
-id = "travisci-access-token"
-description = "Identified a Travis CI Access Token, potentially compromising continuous integration services and codebase security."
-regex = '''(?i)(?:travis)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{22})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "travis",
-]
-
-[[rules]]
-id = "twilio-api-key"
-description = "Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data."
-regex = '''SK[0-9a-fA-F]{32}'''
-keywords = [
-    "twilio",
-]
-
-[[rules]]
-id = "twitch-api-token"
-description = "Discovered a Twitch API token, which could compromise streaming services and account integrations."
-regex = '''(?i)(?:twitch)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitch",
-]
-
-[[rules]]
-id = "twitter-access-secret"
-description = "Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{45})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-access-token"
-description = "Detected a Twitter Access Token, posing a risk of unauthorized account operations and social media data exposure."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([0-9]{15,25}-[a-zA-Z0-9]{20,40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-api-key"
-description = "Identified a Twitter API Key, which may compromise Twitter application integrations and user data security."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{25})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-api-secret"
-description = "Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{50})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "twitter-bearer-token"
-description = "Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter."
-regex = '''(?i)(?:twitter)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(A{22}[a-zA-Z0-9%]{80,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "twitter",
-]
-
-[[rules]]
-id = "typeform-api-token"
-description = "Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection."
-regex = '''(?i)(?:typeform)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(tfp_[a-z0-9\-_\.=]{59})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "tfp_",
-]
-
-[[rules]]
-id = "vault-batch-token"
-description = "Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data."
-regex = '''(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hvb",
-]
-
-[[rules]]
-id = "vault-service-token"
-description = "Identified a Vault Service Token, potentially compromising infrastructure security and access to sensitive credentials."
-regex = '''(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "hvs",
-]
-
-[[rules]]
-id = "yandex-access-token"
-description = "Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(t1\.[A-Z0-9a-z_-]+[=]{0,2}\.[A-Z0-9a-z_-]{86}[=]{0,2})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "yandex-api-key"
-description = "Discovered a Yandex API Key, which could lead to unauthorized access to Yandex services and data manipulation."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(AQVN[A-Za-z0-9_\-]{35,38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "yandex-aws-access-token"
-description = "Uncovered a Yandex AWS Access Token, potentially compromising cloud resource access and data security on Yandex Cloud."
-regex = '''(?i)(?:yandex)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}(YC[a-zA-Z0-9_\-]{38})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "yandex",
-]
-
-[[rules]]
-id = "zendesk-secret-key"
-description = "Detected a Zendesk Secret Key, risking unauthorized access to customer support services and sensitive ticketing data."
-regex = '''(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
-keywords = [
-    "zendesk",
-]
-

From 6a5e890a744465808f4e2cc5e21c03c314f6311a Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:26:52 +0530
Subject: [PATCH 111/136] Update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index a4e14aa..ff72986 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -22,6 +22,8 @@ jobs:
           fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v2.3.4
         name: Check any Leaked Secrets
+        with:
+         args: ./gitleaks detect --redact -v -f sarif -r ./gitleaks_scan.sarif
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_ENABLE_COMMENTS: 'true'

From eedd113422ce45eb7481c4da69ab986900f98f51 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:28:53 +0530
Subject: [PATCH 112/136] Update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index ff72986..cf0962d 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -23,7 +23,7 @@ jobs:
       - uses: gitleaks/gitleaks-action@v2.3.4
         name: Check any Leaked Secrets
         with:
-         args: ./gitleaks detect --redact -v -f sarif -r ./gitleaks_scan.sarif
+         args: detect --redact -v -f sarif -r ./gitleaks_scan.sarif
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_ENABLE_COMMENTS: 'true'

From 1dad9e50303d6bd16f0029a93252a1710b4397f7 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:41:09 +0530
Subject: [PATCH 113/136] update gitleaks

---
 .github/workflows/gitleaks.yml | 56 +++++++++++++++++-----------------
 .github/workflows/main.yml     | 41 +++++++++++++------------
 2 files changed, 49 insertions(+), 48 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index cf0962d..10a3cd5 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -1,32 +1,32 @@
-name: "Find Secrets"
-on:
-  pull_request:
-  push:
-  workflow_dispatch:
-  # schedule:
-  #   - cron: "0 6 * * *" 
+# name: "Find Secrets"
+# on:
+#   pull_request:
+#   push:
+#   workflow_dispatch:
+#   # schedule:
+#   #   - cron: "0 6 * * *" 
 
-permissions:
- id-token: write
- contents: read
- actions: read
- security-events: write
+# permissions:
+#  id-token: write
+#  contents: read
+#  actions: read
+#  security-events: write
 
-jobs:
-  scan:
-    name: gitleaks
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: gitleaks/gitleaks-action@v2.3.4
-        name: Check any Leaked Secrets
-        with:
-         args: detect --redact -v -f sarif -r ./gitleaks_scan.sarif
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_ENABLE_COMMENTS: 'true'
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
+# jobs:
+#   scan:
+#     name: gitleaks
+#     runs-on: ubuntu-latest
+#     steps:
+#       - uses: actions/checkout@v4
+#         with:
+#           fetch-depth: 0
+#       - uses: gitleaks/gitleaks-action@v2.3.4
+#         name: Check any Leaked Secrets
+#         with:
+#          args: detect --redact -v -f sarif -r ./gitleaks_scan.sarif
+#         env:
+#           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+#           GITLEAKS_ENABLE_COMMENTS: 'true'
+#           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
 
           
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 954a7b0..3231a62 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -242,25 +242,26 @@ jobs:
           vuln-type: 'os,library'
         continue-on-error: true
 
-      # # Gitleaks
-      # - name: Checkout repository
-      #   uses: actions/checkout@v4
-      #   with:
-      #     fetch-depth: 0
-      #     clean: false
+      # Gitleaks
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          clean: false
           
-      # - name: Run Gitleaks manually
-      #   env:
-      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
-      #   run: |
-      #     git clone https://github.com/gitleaks/gitleaks.git
-      #     cd gitleaks
-      #     make build
-      #     ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
+      - name: Run Gitleaks manually
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
+        run: |
+          git clone https://github.com/gitleaks/gitleaks.git
+          cd gitleaks
+          make build
+          ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
         
-      # - name: Upload Gitleaks scan results to GitHub Security tab
-      #   if: always()
-      #   uses: github/codeql-action/upload-sarif@v3
-      #   with:
-      #     sarif_file: 'gitleaks_scan.sarif'
+      - name: Upload Gitleaks scan results to GitHub Security tab
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: my-artifact
+          path: ../gitleaks_scan.sarif

From a3334f32677c6496881f176550f8d7b85dcbc540 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:45:31 +0530
Subject: [PATCH 114/136] update gitleaks

---
 .github/workflows/gitleaks.yml | 28 +++++++++++++++++++++++
 .github/workflows/main.yml     | 42 +++++++++++++++++-----------------
 2 files changed, 49 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 10a3cd5..adffdf2 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -30,3 +30,31 @@
 #           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
 
           
+name: Gitleaks Scan
+
+on: [push, pull_request]
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Install Gitleaks
+      run: |
+        curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.4.0/gitleaks_8.4.0_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks
+
+    - name: Run Gitleaks
+      run: |
+        gitleaks detect --redact -v --exit-code=2 --report-format=sarif --report-path=results.sarif --log-level=debug
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GITLEAKS_ENABLE_COMMENTS: 'true'
+        GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
+
+    - name: Upload SARIF report
+      uses: actions/upload-artifact@v4
+      with:
+        name: gitleaks-sarif-report
+        path: results.sarif
\ No newline at end of file
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 3231a62..387cbb9 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -242,26 +242,26 @@ jobs:
           vuln-type: 'os,library'
         continue-on-error: true
 
-      # Gitleaks
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          clean: false
+      # # Gitleaks
+      # - name: Checkout repository
+      #   uses: actions/checkout@v4
+      #   with:
+      #     fetch-depth: 0
+      #     clean: false
           
-      - name: Run Gitleaks manually
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
-        run: |
-          git clone https://github.com/gitleaks/gitleaks.git
-          cd gitleaks
-          make build
-          ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
+      # - name: Run Gitleaks manually
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
+      #   run: |
+      #     git clone https://github.com/gitleaks/gitleaks.git
+      #     cd gitleaks
+      #     make build
+      #     ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
         
-      - name: Upload Gitleaks scan results to GitHub Security tab
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: my-artifact
-          path: ../gitleaks_scan.sarif
+      # - name: Upload Gitleaks scan results to GitHub Security tab
+      #   if: always()
+      #   uses: actions/upload-artifact@v4
+      #   with:
+      #     name: my-artifact
+      #     path: ../gitleaks_scan.sarif

From 8c7c6841f2d87d235b2f5448b4949b17a9de7317 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:48:20 +0530
Subject: [PATCH 115/136] gitleaks

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index adffdf2..61b4c26 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -43,7 +43,7 @@ jobs:
 
     - name: Install Gitleaks
       run: |
-        curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.4.0/gitleaks_8.4.0_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks
+        curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.18.4/gitleaks_8.18.4_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks
 
     - name: Run Gitleaks
       run: |

From 7218e676e687d5b516a90dec773f6fe40fc394cc Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:53:15 +0530
Subject: [PATCH 116/136] update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 61b4c26..2bb2aaa 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -57,4 +57,4 @@ jobs:
       uses: actions/upload-artifact@v4
       with:
         name: gitleaks-sarif-report
-        path: results.sarif
\ No newline at end of file
+        path: results.sarif
\ No newline at end of file

From 949d257b6d7c936231f31f92281febd66b13d043 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:55:01 +0530
Subject: [PATCH 117/136] updated gitleaks.yml

---
 .github/workflows/gitleaks.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 2bb2aaa..19aef90 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -54,6 +54,7 @@ jobs:
         GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
 
     - name: Upload SARIF report
+      if: always()
       uses: actions/upload-artifact@v4
       with:
         name: gitleaks-sarif-report

From 1d71d3eac4250ce702be160ec48687851883b66f Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 16:58:08 +0530
Subject: [PATCH 118/136] gitleaks.yml

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 19aef90..480ac49 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -57,5 +57,5 @@ jobs:
       if: always()
       uses: actions/upload-artifact@v4
       with:
-        name: gitleaks-sarif-report
+        name: gitleaks-sarif-report.sarif
         path: results.sarif
\ No newline at end of file

From a4ae8917672aebd7fc4937974e849b71f985ba14 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:03:54 +0530
Subject: [PATCH 119/136] update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 35 +---------------------------------
 1 file changed, 1 insertion(+), 34 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 480ac49..4a3016c 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -1,37 +1,4 @@
-# name: "Find Secrets"
-# on:
-#   pull_request:
-#   push:
-#   workflow_dispatch:
-#   # schedule:
-#   #   - cron: "0 6 * * *" 
-
-# permissions:
-#  id-token: write
-#  contents: read
-#  actions: read
-#  security-events: write
-
-# jobs:
-#   scan:
-#     name: gitleaks
-#     runs-on: ubuntu-latest
-#     steps:
-#       - uses: actions/checkout@v4
-#         with:
-#           fetch-depth: 0
-#       - uses: gitleaks/gitleaks-action@v2.3.4
-#         name: Check any Leaked Secrets
-#         with:
-#          args: detect --redact -v -f sarif -r ./gitleaks_scan.sarif
-#         env:
-#           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-#           GITLEAKS_ENABLE_COMMENTS: 'true'
-#           GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
-
-          
 name: Gitleaks Scan
-
 on: [push, pull_request]
 
 jobs:
@@ -57,5 +24,5 @@ jobs:
       if: always()
       uses: actions/upload-artifact@v4
       with:
-        name: gitleaks-sarif-report.sarif
+        name: gitleaks-results.sarif
         path: results.sarif
\ No newline at end of file

From e24a6a548c472f71e973e01fc19da3ff99a41b06 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:17:18 +0530
Subject: [PATCH 120/136] update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 4a3016c..3043a8b 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -25,4 +25,9 @@ jobs:
       uses: actions/upload-artifact@v4
       with:
         name: gitleaks-results.sarif
-        path: results.sarif
\ No newline at end of file
+        path: results.sarif
+    
+    - name: Output Gitleaks results to console
+      if: always()
+      run: cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
+      continue-on-error: true
\ No newline at end of file

From 7d242a13aac5b82a42f4ad423704a75d7126972c Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:22:16 +0530
Subject: [PATCH 121/136] gitleaks.yml

---
 .github/workflows/gitleaks.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 3043a8b..8b24246 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -29,5 +29,6 @@ jobs:
     
     - name: Output Gitleaks results to console
       if: always()
-      run: cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
+      run: |
+        cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
       continue-on-error: true
\ No newline at end of file

From 7cfd0b50d2d1995921ed0a33187913993ed20c14 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:25:29 +0530
Subject: [PATCH 122/136] gitleaks

---
 .github/workflows/gitleaks.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 8b24246..0f60a33 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -30,5 +30,8 @@ jobs:
     - name: Output Gitleaks results to console
       if: always()
       run: |
-        cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
+        echo "### Gitleaks detected secrets" >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "🔴 *File:* \(.locations[].physicalLocation.artifactLocation.uri)\n  - *Secret:* \(.message.text)\n  - *Rule ID:* \(.ruleId)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        cat $GITHUB_STEP_SUMMARY
+      #  cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
       continue-on-error: true
\ No newline at end of file

From f24a48901e1245f5ad52873e14241b62043890e9 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:28:44 +0530
Subject: [PATCH 123/136] update gitleaks.yml for output on console

---
 .github/workflows/gitleaks.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 0f60a33..cf56a0b 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -31,7 +31,8 @@ jobs:
       if: always()
       run: |
         echo "### Gitleaks detected secrets" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "🔴 *File:* \(.locations[].physicalLocation.artifactLocation.uri)\n  - *Secret:* \(.message.text)\n  - *Rule ID:* \(.ruleId)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        echo "| 🔴 *File* | *Secret* | *Rule ID* |" >> $GITHUB_STEP_SUMMARY
+        echo "| --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.locations[].physicalLocation.artifactLocation.uri) | \(.message.text) | \(.ruleId) |"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
-      #  cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}'
       continue-on-error: true
\ No newline at end of file

From 45920a822dd7ad7ec65f042e3980c363c33afd49 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:33:44 +0530
Subject: [PATCH 124/136] update gitleaks.yml

---
 .github/workflows/gitleaks.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index cf56a0b..b76a14b 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -30,9 +30,9 @@ jobs:
     - name: Output Gitleaks results to console
       if: always()
       run: |
-        echo "### Gitleaks detected secrets" >> $GITHUB_STEP_SUMMARY
-        echo "| 🔴 *File* | *Secret* | *Rule ID* |" >> $GITHUB_STEP_SUMMARY
-        echo "| --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.locations[].physicalLocation.artifactLocation.uri) | \(.message.text) | \(.ruleId) |"' results.sarif >> $GITHUB_STEP_SUMMARY
+        echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
+        echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
+        echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.locations[0].physicalLocation.artifactLocation.uriBaseId) | \(.locations[0].physicalLocation.artifactLocation.uri)?\(.locations[0].physicalLocation.region.startLine) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.commit) | \(.partialFingerprints.authorName) | \(.partialFingerprints.authorTime) | \(.partialFingerprints.authorEmail) | \(.locations[0].physicalLocation.artifactLocation.uri) |"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 8d55c6ad0295c78d9594f133ab23378699b5570a Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:43:51 +0530
Subject: [PATCH 125/136] gitleaks

---
 .github/workflows/gitleaks.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index b76a14b..d9af33e 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -33,6 +33,7 @@ jobs:
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
         echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.locations[0].physicalLocation.artifactLocation.uriBaseId) | \(.locations[0].physicalLocation.artifactLocation.uri)?\(.locations[0].physicalLocation.region.startLine) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.commit) | \(.partialFingerprints.authorName) | \(.partialFingerprints.authorTime) | \(.partialFingerprints.authorEmail) | \(.locations[0].physicalLocation.artifactLocation.uri) |"' results.sarif >> $GITHUB_STEP_SUMMARY
+       # jq -r '.runs[0].results[] | "| \(.ruleId) | \(.locations[0].physicalLocation.artifactLocation.uriBaseId) | \(.locations[0].physicalLocation.artifactLocation.uri)?\(.locations[0].physicalLocation.region.startLine) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.commit) | \(.partialFingerprints.authorName) | \(.partialFingerprints.authorTime) | \(.partialFingerprints.authorEmail) | \(.locations[0].physicalLocation.artifactLocation.uri) |"' results.sarif >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 34011b8160916dbd84535eea0871109087060e78 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 17:45:15 +0530
Subject: [PATCH 126/136] gitleaks

---
 .github/workflows/gitleaks.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index d9af33e..a47a11b 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -33,7 +33,6 @@ jobs:
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
         echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-       # jq -r '.runs[0].results[] | "| \(.ruleId) | \(.locations[0].physicalLocation.artifactLocation.uriBaseId) | \(.locations[0].physicalLocation.artifactLocation.uri)?\(.locations[0].physicalLocation.region.startLine) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.commit) | \(.partialFingerprints.authorName) | \(.partialFingerprints.authorTime) | \(.partialFingerprints.authorEmail) | \(.locations[0].physicalLocation.artifactLocation.uri) |"' results.sarif >> $GITHUB_STEP_SUMMARY
         jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 2ce563ee536f936752fe6d59e00cfc61059e8bfc Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 18:20:36 +0530
Subject: [PATCH 127/136] gitleaks

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index a47a11b..1eae09f 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -33,6 +33,6 @@ jobs:
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
         echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 3557b47d21e80af50d96a685de158d26c1e030e3 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 18:53:22 +0530
Subject: [PATCH 128/136] gitleaks

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 1eae09f..491af4f 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -33,6 +33,6 @@ jobs:
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
         echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 7b3f617434113353fee45c15db4888ffc5f9aff9 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 19:12:55 +0530
Subject: [PATCH 129/136] update gitleaks to output to console

---
 .github/workflows/gitleaks.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 491af4f..83946e4 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -31,8 +31,8 @@ jobs:
       if: always()
       run: |
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
-        echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
+        echo "|  *Rule ID* | *Commit* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From b4e9953fa90e89cf798b048f5c87d1b42651cfd6 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 19:15:50 +0530
Subject: [PATCH 130/136] gitleaks console output

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 83946e4..9c9fea9 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -31,7 +31,7 @@ jobs:
       if: always()
       run: |
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
-        echo "|  *Rule ID* | *Commit* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
+        echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
         jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY

From 95e5a60533c4a4c835a59d3cd5f4db5585366d97 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 19:17:04 +0530
Subject: [PATCH 131/136] gitleaks changes

---
 .github/workflows/gitleaks.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 9c9fea9..491af4f 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -33,6 +33,6 @@ jobs:
         echo "### 🛑 Gitleaks Detected Secrets 🛑" >> $GITHUB_STEP_SUMMARY
         echo "|  *Rule ID* | *Commit* | *Secret URL* | *Start Line* | *Author* | *Date* | *Email* | *File* |" >> $GITHUB_STEP_SUMMARY
         echo "| --- | --- | --- | --- | --- | --- | --- | --- |" >> $GITHUB_STEP_SUMMARY
-        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
+        jq -r '.runs[0].results[] | "| \(.ruleId) | \(.partialFingerprints.commitSha[:7]) | \(.locations[0].physicalLocation.artifactLocation.uri) | \(.locations[0].physicalLocation.region.startLine) | \(.partialFingerprints.author) | \(.partialFingerprints.date) | \(.partialFingerprints.email | split("+")[1]) | \(.locations[0].physicalLocation.artifactLocation.uri)"' results.sarif >> $GITHUB_STEP_SUMMARY
         cat $GITHUB_STEP_SUMMARY
       continue-on-error: true
\ No newline at end of file

From 3723340fb133bd1bbd29f6f5395c90152d5b4b34 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Mon, 15 Jul 2024 19:24:31 +0530
Subject: [PATCH 132/136] Update main.yml

---
 .github/workflows/main.yml | 63 ++------------------------------------
 1 file changed, 3 insertions(+), 60 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 387cbb9..1c6f721 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -16,33 +16,21 @@ on:
     branches: [ "docker-pipeline", "test" ]
   pull_request:
     branches: [ "docker-pipeline", "test" ]
-  # schedule:
-  #   - cron: '33 7 * * 5'
 
 env:
-  # Use docker.io for Docker Hub if empty
   REGISTRY: ghcr.io
-  # github.repository as <account>/<repo>
   IMAGE_NAME: ${{ github.repository }}
   TG: docker-pipeline
 
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    # Runner size impacts CodeQL analysis time. To learn more, please see:
-    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
-    #   - https://gh.io/supported-runners-and-hardware-resources
-    #   - https://gh.io/using-larger-runners (GitHub.com only)
-    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
     permissions:
       # required for all workflows
       security-events: write
-
-      # required to fetch internal or private CodeQL packs
       packages: read
-
       # only required for workflows in private repositories
       actions: read
       contents: read
@@ -52,15 +40,7 @@ jobs:
       matrix:
         include:
         - language: java-kotlin
-          build-mode: none # This mode only analyzes Java. Set this to 'autobuild' or 'manual' to analyze Kotlin too.
-        # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
-        # Use `c-cpp` to analyze code written in C, C++ or both
-        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
-        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
-        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
-        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
-        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
-        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
+          build-mode: none # This mode only analyzes Java.
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
@@ -71,19 +51,7 @@ jobs:
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-
-        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-        # queries: security-extended,security-and-quality
-
-    # If the analyze step fails for one of the languages you are analyzing with
-    # "We were unable to automatically build your code", modify the matrix above
-    # to set the build mode to "manual" for that language. Then modify this step
-    # to build your code.
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+        
     - if: matrix.build-mode == 'manual'
       shell: bash
       run: |
@@ -93,8 +61,7 @@ jobs:
         echo '  make bootstrap'
         echo '  make release'
         exit 1
-
-      
+ 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
       with:
@@ -241,27 +208,3 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
         continue-on-error: true
-
-      # # Gitleaks
-      # - name: Checkout repository
-      #   uses: actions/checkout@v4
-      #   with:
-      #     fetch-depth: 0
-      #     clean: false
-          
-      # - name: Run Gitleaks manually
-      #   env:
-      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      #     GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} # Required for Organizations, not personal accounts.
-      #   run: |
-      #     git clone https://github.com/gitleaks/gitleaks.git
-      #     cd gitleaks
-      #     make build
-      #     ./gitleaks detect -v -f sarif -r ../gitleaks_scan.sarif -s ../        
-        
-      # - name: Upload Gitleaks scan results to GitHub Security tab
-      #   if: always()
-      #   uses: actions/upload-artifact@v4
-      #   with:
-      #     name: my-artifact
-      #     path: ../gitleaks_scan.sarif

From de03e7b64e893def1c184266c8c8a71d7ca7bee9 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 18 Jul 2024 19:01:54 +0530
Subject: [PATCH 133/136] Update build.gradle

---
 build.gradle | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.gradle b/build.gradle
index 0842816..017571b 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,6 +3,7 @@ plugins {
     id 'io.spring.dependency-management' version '1.0.11.RELEASE'
     id 'java'
     id 'org.barfuin.gradle.jacocolog' version '3.1.0'
+    id 'com.github.jk1.dependency-license-report' version '2.8'
 }
 
 group = 'com.scania.sdip'

From 2a33f35c593926011fa43d4d0980a846e345e9fb Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 18 Jul 2024 19:05:17 +0530
Subject: [PATCH 134/136] Update main.yml

---
 .github/workflows/main.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1c6f721..6f612cf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -104,7 +104,10 @@ jobs:
         with:
           dependency-graph: generate-and-upload
           cache-disabled: true
-      - run: ./gradlew build
+      - run: |
+          ./gradlew build
+          ./gradlew generateLicenseReport
+          ./gradlew checkLicense          
           
       - uses: actions/upload-artifact@master
         with:

From 047b6b5b037f35b47ef8129556609e36cb084d0d Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 18 Jul 2024 19:19:09 +0530
Subject: [PATCH 135/136] Update build.gradle

---
 build.gradle | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/build.gradle b/build.gradle
index 017571b..3643229 100644
--- a/build.gradle
+++ b/build.gradle
@@ -38,6 +38,10 @@ repositories {
 
 ext['log4j2.version'] = '2.22.1'
 
+ext {
+    allowedLicenseFile = project.hasProperty('allowedLicenseFile') ? allowedLicenseFile : null
+}
+
 
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-actuator'

From 9704d3cb471b0d50e869ae9c6a7346da2f36aa18 Mon Sep 17 00:00:00 2001
From: iamramashishsharma
 <168178915+iamramashishsharma@users.noreply.github.com>
Date: Thu, 18 Jul 2024 19:27:00 +0530
Subject: [PATCH 136/136] Update build.gradle

---
 build.gradle | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index 3643229..9cf3607 100644
--- a/build.gradle
+++ b/build.gradle
@@ -38,11 +38,10 @@ repositories {
 
 ext['log4j2.version'] = '2.22.1'
 
-ext {
+checkLicense {
     allowedLicenseFile = project.hasProperty('allowedLicenseFile') ? allowedLicenseFile : null
 }
 
-
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-actuator'
     implementation("org.springframework.boot:spring-boot-starter-web") {