I built a secret detector. GitHub blocked my push for containing secrets.

Every rule in a secret scanner needs a fixture — a value that proves the pattern fires. Mine looked like this:

{ id: "stripe-secret", label: "Stripe secret key", severity: "critical",

re: /\b(?:sk|rk)_live_[0-9a-zA-Z]{24,}\b/g,

example: "sk_live_0123456789abcdefghijklmn" }

Enter fullscreen mode