Observação
O acesso a essa página exige autorização. Você pode tentar entrar ou alterar diretórios.
O acesso a essa página exige autorização. Você pode tentar alterar os diretórios.
A Segurança Avançada mantém vários conjuntos de padrões de escaneamento de segredos padrão:
- Padrões de proteção por push – usados para detectar possíveis segredos no momento do push em repositórios com a proteção por push de verificação secreta habilitada.
- Padrões de alerta do usuário: usados para detectar possíveis segredos em repositórios com alertas de verificação de segredo habilitados.
- Padrões de não provedor: usados para detectar ocorrências comuns de segredos estruturados em repositórios com alertas de verificação de segredo habilitados.
Segredos suportados
| Seção | Explicação |
|---|---|
| Provedor | O nome do provedor de token. |
| Nome do Token | O tipo de token descoberto pela verificação de segredo da Segurança Avançada. |
| Usuário | Um token pelo qual os usuários são informados sobre vazamentos após um push. Aplica-se a todos os repositórios em que a Segurança Avançada está habilitada |
| Proteção por push | Um token para o qual vazamentos são relatados aos usuários no push. Aplica-se a todos os repositórios em que a proteção por push secreta está ativada. |
| Validade | Tokens para os quais a Segurança Avançada tenta executar uma verificação de validade. |
Padrões de provedores de parceiros
A tabela a seguir lista os padrões de provedor de parceiros suportados pela verificação de segredo.
| ID da regra | Nome do Token | Proteção por push | Alertas do usuário | Verificação de validade |
|---|---|---|---|---|
| SEC101/828 | ASAASApiToken |
|
|
|
| SEC101/156 | AadClientAppIdentifiableCredentials |
|
|
|
| SEC101/501 | AdafruitIOKey |
|
|
|
| SEC101/201 | AdoIdentifiablePat |
|
|
|
| SEC101/600 | AdobeDeviceToken |
|
|
|
| SEC101/601 | AdobeServiceToken |
|
|
|
| SEC101/602 | AdobeShortLivedAccessToken |
|
|
|
| SEC101/869 | AikidoApiClientSecret |
|
|
|
| SEC101/870 | AikidoCiScanningToken |
|
|
|
| SEC101/897 | AirtableApiKey |
|
|
|
| SEC101/898 | AirtablePersonalAccessToken |
|
|
|
| SEC101/015 | AkamaiCredentials |
|
|
|
| SEC101/029 | AlibabaCloudCredentials |
|
|
|
| SEC101/023 | AmazonMwsAuthToken |
|
||
| SEC101/503 | AmazonOAuthCredentials |
|
|
|
| SEC101/701 | AnthropicApiKey |
|
|
|
| SEC101/735 | AnthropicManagementApiKey |
|
|
|
| SEC101/737 | AntropicSessionToken |
|
|
|
| SEC101/767 | ApifyApiToken |
|
|
|
| SEC101/768 | ApifyProxyPassword |
|
|
|
| SEC101/504 | AsanaPat |
|
|
|
| SEC101/605 | AtlassianJwt |
|
|
|
| SEC101/604 | AtlassianLegacyApiToken |
|
|
|
| SEC101/740 | AwsApiKey |
|
||
| SEC101/008 | AwsCredentials |
|
|
|
| SEC101/505 | Credenciais Temporárias da AWS |
|
|
|
| SEC101/264 | AzureApimDirectManagementIdentifiableSas |
|
|
|
| SEC101/157 | AzureApimDirectManagementSas |
|
|
|
| SEC101/186 | AzureApimGatewaySas |
|
||
| SEC101/181 | AzureApimIdentifiableDirectManagementKey |
|
|
|
| SEC101/183 | AzureApimIdentifiableGatewayKey |
|
|
|
| SEC101/184 | AzureApimIdentifiableRepositoryKey |
|
|
|
| SEC101/182 | AzureApimIdentifiableSubscriptionKey |
|
|
|
| SEC101/132 | AzureApimLegacyDirectManagementKey |
|
|
|
| SEC101/187 | AzureApimLegacyGatewayKey |
|
|
|
| SEC101/188 | AzureApimLegacyRepositoryKey |
|
|
|
| SEC101/133 | AzureApimLegacySubscriptionKey |
|
|
|
| SEC101/185 | AzureApimRepositorySas |
|
||
| SEC101/197 | AzureAppConfigurationIdentifiableCredentials |
|
|
|
| SEC101/131 | AzureAppConfigurationLegacyCredentials |
|
|
|
| SEC101/138 | AzureApplicationInsightsCredentials |
|
|
|
| SEC101/194 | AzureAutomationAccountKey |
|
||
| SEC101/163 | AzureBatchIdentifiableKey |
|
|
|
| SEC101/113 | AzureBatchLegacyKey |
|
|
|
| SEC101/118 | AzureBlockchainCredentials |
|
||
| SEC101/154 | AzureCacheForRedisIdentifiableKey |
|
|
|
| SEC101/155 | AzureCacheForRedisIdentifiablePrivateServiceKey |
|
||
| SEC101/103 | AzureCacheForRedisLegacyKey |
|
|
|
| SEC101/151 | AzureCdnSas |
|
|
|
| SEC101/125 | AzureCognitiveServicesLegacyKey |
|
|
|
| SEC101/134 | AzureCognitiveServicesTranslatorLegacyKey |
|
|
|
| SEC101/204 | AzureCommunicationServicesIdentifiableKey |
|
|
|
| SEC101/137 | AzureCommunicationServicesLegacyKey |
|
|
|
| SEC101/176 | ChaveIdentificávelDoRegistroDeContêineresAzure |
|
|
|
| SEC101/109 | AzureContainerRegistryLegacyKey |
|
|
|
| SEC101/160 | AzureCosmosDBIdentifiableKey |
|
|
|
| SEC101/161 | AzureCosmosDBIdentifiablePrivateServiceKey |
|
||
| SEC101/104 | AzureCosmosDBLegacyKey |
|
|
|
| SEC101/250 | AzureCosmosDBSas |
|
|
|
| SEC101/110 | AzureDatabricksPat |
|
|
|
| SEC101/256 | AzureDatabricksPrivateServiceKey |
|
|
|
| SEC101/148 | AzureDevOpsOAuthToken |
|
|
|
| SEC101/199 | AzureEventGridIdentifiableKey (Chave Identificável de Azure Event Grid) |
|
|
|
| SEC101/119 | AzureEventGridLegacyKey |
|
|
|
| SEC101/172 | AzureEventHubIdentifiableKey |
|
|
|
| SEC101/175 | AzureEventHubIdentifiablePrivateServiceSystemKey |
|
||
| SEC101/198 | AzureFluidRelayIdentifiableKey |
|
|
|
| SEC101/190 | AzureFluidRelayLegacyKey |
|
|
|
| SEC101/158 | AzureFunctionIdentifiableKey |
|
|
|
| SEC101/112 | AzureFunctionLegacyKey |
|
|
|
| SEC101/141 | AzureHDInsightCredentials |
|
|
|
| SEC101/180 | AzureIotDeviceIdentifiableKey |
|
|
|
| SEC101/146 | AzureIotDeviceLegacyCredentials |
|
|
|
| SEC101/179 | AzureIotDeviceProvisioningIdentifiableKey |
|
|
|
| SEC101/115 | AzureIotDeviceProvisioningLegacyCredentials |
|
|
|
| SEC101/178 | AzureIotHubIdentifiableKey (Chave Identificável do AzureIotHub) |
|
|
|
| SEC101/114 | AzureIotHubLegacyCredentials |
|
|
|
| SEC101/150 | AzureLogicAppSas |
|
|
|
| SEC101/259 | AzureMLIdentifiableInferenceKey |
|
|
|
| SEC101/169 | AzureMLIdentifiablePrivateServicePrincipalCredentials |
|
|
|
| SEC101/170 | AzureMLWebServiceClassicIdentifiableKey |
|
|
|
| SEC101/123 | AzureMLWebServiceKey |
|
|
|
| SEC101/129 | AzureManagementCertificate |
|
||
| SEC101/203 | AzureMapsIdentifiableKey |
|
|
|
| SEC101/116 | AzureMapsLegacyKey |
|
|
|
| SEC101/105 | AzureMessagingLegacyCredentials |
|
|
|
| SEC101/189 | AzureOpenAILegacyKey |
|
|
|
| SEC101/263 | AzureQuantumIdentifiableKey |
|
|
|
| SEC101/246 | AzureRateCardSas |
|
|
|
| SEC101/173 | AzureRelayIdentifiableKey |
|
|
|
| SEC101/167 | AzureSearchIdentifiableAdminKey |
|
|
|
| SEC101/168 | AzureSearchIdentifiablePrivateServiceAdminKey |
|
||
| SEC101/166 | AzureSearchIdentifiableQueryKey |
|
|
|
| SEC101/111 | AzureSearchLegacyKey |
|
|
|
| SEC101/171 | AzureServiceBusIdentifiableKey |
|
|
|
| SEC101/174 | AzureServiceBusIdentifiablePrivateServiceSystemKey |
|
||
| SEC101/121 | AzureServiceDeploymentCredentials |
|
|
|
| SEC101/253 | AzureSignalRIdentifiableKey |
|
|
|
| SEC101/254 | AzureSignalRIdentifiableTemporaryKey |
|
|
|
| SEC101/117 | AzureSignalRLegacyKey |
|
|
|
| SEC101/258 | AzureSpringAppTestEndpointKey |
|
|
|
| SEC101/152 | AzureStorageAccountIdentifiableCredentials |
|
|
|
| SEC101/261 | AzureStorageAccountIdentifiableSystemCredentials |
|
|
|
| SEC101/106 | AzureStorageAccountLegacyCredentials |
|
|
|
| SEC101/251 | AzureStorageIdentifiablePrivateServiceKerberosKey |
|
|
|
| SEC101/153 | AzureStorageIdentifiablePrivateServiceKey |
|
||
| SEC101/120 | AzureWebAppBotCredentials |
|
|
|
| SEC101/257 | AzureWebAppBotIdentifiableKey |
|
|
|
| SEC101/142 | AzureWebAppBotLegacyKey |
|
|
|
| SEC101/248 | AzureWebPubSubIdentifiableCredentials |
|
|
|
| SEC101/249 | AzureWebPubSubIdentifiableTemporaryCredentials |
|
|
|
| SEC101/144 | AzureWebPubSubLegacyCredentials |
|
|
|
| SEC101/606 | BeamerApiKey |
|
|
|
| SEC101/754 | BitrisePat |
|
|
|
| SEC101/755 | BitriseWorkspaceApiToken |
|
|
|
| SEC101/799 | BlockProtocolApiKey |
|
|
|
| SEC101/566 | BrevoApiKey |
|
|
|
| SEC101/567 | BrevoSmtpKey |
|
|
|
| SEC101/692 | BrowserStackCredentials |
|
|
|
| SEC101/803 | BuildkiteAgentRegistrationToken |
|
||
| SEC101/804 | BuildkiteClusterQueueToken |
|
||
| SEC101/805 | BuildkiteClusterToken |
|
||
| SEC101/806 | BuildkitePackagesTemporaryToken |
|
||
| SEC101/808 | BuildkitePortalSecret |
|
||
| SEC101/809 | BuildkitePortalToken |
|
||
| SEC101/801 | BuildkiteUserAccessToken |
|
||
| SEC101/594 | CdsCanadaNotifyApiKey |
|
|
|
| SEC101/741 | CfxreServerKey |
|
||
| SEC101/507 | CheckoutApiKey |
|
|
|
| SEC101/579 | ChiefToolsToken |
|
|
|
| SEC101/508 | ClojarsDeployToken |
|
|
|
| SEC101/035 | Credenciais do Cloudant |
|
|
|
| SEC101/862 | CloudflareAccountApiToken |
|
|
|
| SEC101/863 | CloudflareGlobalUserApiKey |
|
|
|
| SEC101/864 | CloudflareUserApiToken |
|
|
|
| SEC101/800 | CockroachDBCloudApiKey |
|
|
|
| SEC101/697 | CohereApiKey |
|
|
|
| SEC101/609 | ContentfulPersonalAccessToken |
|
|
|
| SEC101/034 | CredentialObject |
|
||
| SEC101/798 | DatabentoApiKey |
|
|
|
| SEC101/843 | DatabricksAccountSessionToken |
|
||
| SEC101/844 | DatabricksFederatedAccountSessionToken |
|
||
| SEC101/845 | DatabricksOAuthCode |
|
|
|
| SEC101/846 | DatabricksOAuthRefreshToken |
|
|
|
| SEC101/847 | DatabricksOAuthSecretToken |
|
||
| SEC101/848 | DatabricksOAuthSingleUseRefreshTokenChild |
|
|
|
| SEC101/849 | DatabricksOAuthSingleUseRefreshTokenParent |
|
|
|
| SEC101/850 | DatabricksWorkspaceSessionToken |
|
|
|
| SEC101/823 | DatadogRCMToken |
|
||
| SEC101/750 | DatastaxAstracsToken |
|
|
|
| SEC101/509 | DevCycleClientApiKey |
|
|
|
| SEC101/557 | DevCycleManagementApiToken |
|
|
|
| SEC101/510 | DevCycleMobileApiKey |
|
|
|
| SEC101/511 | DevCycleServerApiKey |
|
|
|
| SEC101/512 | DigitalOceanOAuthToken |
|
|
|
| SEC101/513 | DigitalOceanPat |
|
|
|
| SEC101/514 | DigitalOceanRefreshToken |
|
|
|
| SEC101/515 | DigitalOceanSystemToken |
|
|
|
| SEC101/046 | DiscordApiCredentials |
|
|
|
| SEC101/516 | DiscordApiToken |
|
|
|
| SEC101/736 | DockerOrganizationAccessToken |
|
|
|
| SEC101/759 | DockerSwarmJoinToken |
|
||
| SEC101/763 | DockerSwarmUnlockKey |
|
||
| SEC101/517 | DopplerAuditToken |
|
|
|
| SEC101/518 | DopplerCliToken |
|
|
|
| SEC101/519 | DopplerPersonalToken |
|
|
|
| SEC101/520 | DopplerScimToken |
|
|
|
| SEC101/521 | DopplerServiceToken |
|
|
|
| SEC101/020 | DropboxAccessToken |
|
|
|
| SEC101/021 | DropboxAppCredentials |
|
|
|
| SEC101/522 | DropboxOAuth2ShortLivedAccessToken |
|
|
|
| SEC101/523 | DuffelAccessToken |
|
|
|
| SEC101/611 | DynatraceInternalToken |
|
||
| SEC101/613 | EBayProductionClientCredentials |
|
|
|
| SEC101/614 | EBaySandboxClientCredentials |
|
|
|
| SEC101/524 | EasyPostApiKey |
|
|
|
| SEC101/682 | ElasticCloudApiKey (Chave de API do ElasticCloud) |
|
|
|
| SEC101/681 | ElasticStackApiKey |
|
|
|
| SEC101/196 | EntraToken |
|
|
|
| SEC101/014 | FacebookAccessToken |
|
||
| SEC101/617 | FastlyApiToken |
|
|
|
| SEC101/525 | FigmaPat |
|
|
|
| SEC101/882 | FigmaScimToken |
|
|
|
| SEC101/618 | FinicityAppKey |
|
||
| SEC101/625 | FirebaseCloudMessagingServerKey |
|
||
| SEC101/687 | FlickrApiKey |
|
|
|
| SEC101/526 | FlutterwaveLiveApiSecretKey |
|
|
|
| SEC101/619 | FlutterwaveTestApiSecretKey |
|
|
|
| SEC101/621 | FrameIODeveloperToken |
|
||
| SEC101/620 | FrameIOJwt |
|
|
|
| SEC101/527 | FullStoryApiKey |
|
|
|
| SEC101/007 | GitHubAppCredentials |
|
|
|
| SEC101/529 | GitHubAppToken |
|
|
|
| SEC101/530 | GitHubOAuthAccessToken |
|
|
|
| SEC101/690 | GitHubOauth2Credentials |
|
|
|
| SEC101/534 | GitHubPat |
|
|
|
| SEC101/531 | GitHubRefreshToken |
|
|
|
| SEC101/532 | GitHubServerToServerToken |
|
|
|
| SEC101/535 | GitHubUserToServerToken |
|
|
|
| SEC101/622 | GitLabAccessToken |
|
||
| SEC101/832 | GitLabCicdJobToken |
|
|
|
| SEC101/833 | GitLabDeployToken |
|
||
| SEC101/834 | GitLabFeatureFlagClientToken |
|
|
|
| SEC101/835 | GitLabFeedTokenV2 |
|
|
|
| SEC101/836 | GitLabIncomingEmailToken |
|
|
|
| SEC101/837 | GitLabKubernetesAgentToken |
|
|
|
| SEC101/838 | GitLabOAuthAppSecret |
|
|
|
| SEC101/839 | GitLabPipelineTriggerToken |
|
||
| SEC101/840 | GitLabRunnerAuthToken |
|
|
|
| SEC101/841 | GitLabRunnerRegistrationToken |
|
|
|
| SEC101/842 | GitLabScimToken |
|
|
|
| SEC101/623 | GoCardlessLiveAccessToken |
|
|
|
| SEC101/624 | GoCardlessSandboxAccessToken |
|
|
|
| SEC101/003 | GoogleApiKey |
|
|
|
| SEC101/626 | GoogleCloudPrivateKeyId |
|
|
|
| SEC101/536 | GoogleCloudStorageServiceAccountAccessKey (Chave de Acesso da Conta de Serviço do Google Cloud Storage) |
|
|
|
| SEC101/537 | Chave de Acesso do Usuário do Armazenamento na Nuvem do Google |
|
|
|
| SEC101/627 | GoogleOAuthAccessToken |
|
|
|
| SEC101/002 | GoogleOAuthCredentials |
|
|
|
| SEC101/628 | GoogleOAuthRefreshToken |
|
||
| SEC101/742 | GoogleServiceAccountBoundApiKey |
|
||
| SEC101/030 | GoogleServiceAccountKey |
|
||
| SEC101/538 | GrafanaCloudApiKey |
|
|
|
| SEC101/629 | GrafanaCloudApiToken |
|
|
|
| SEC101/630 | GrafanaProjectApiKey |
|
|
|
| SEC101/631 | GrafanaProjectServiceAccountToken |
|
|
|
| SEC101/746 | GroqApiKey |
|
|
|
| SEC101/871 | GuardsquareAppsweepApiKey |
|
|
|
| SEC101/872 | GuardsquareCliAccessToken |
|
|
|
| SEC101/873 | GuardsquareMavenToken |
|
|
|
| SEC101/884 | HCaptchaSiteverifySecret |
|
|
|
| SEC101/883 | HackClubAiApiKey |
|
|
|
| SEC101/581 | HashiCorpVaultBatchLegacyToken |
|
|
|
| SEC101/582 | HashiCorpVaultBatchToken |
|
|
|
| SEC101/580 | HashiCorpVaultRootServiceToken |
|
|
|
| SEC101/583 | HashiCorpVaultServiceLegacyToken |
|
|
|
| SEC101/584 | HashiCorpVaultServiceToken |
|
|
|
| SEC101/732 | HereApiKey |
|
|
|
| SEC101/775 | HerokuPlatformApiToken |
|
|
|
| SEC101/585 | HighnoteRkKey |
|
|
|
| SEC101/586 | HighnoteSkKey |
|
|
|
| SEC101/589 | HubSpotApiPersonalAccessKey |
|
|
|
| SEC101/539 | HubspotApiKey |
|
|
|
| SEC101/829 | HubspotPrivateAppsUserToken |
|
|
|
| SEC101/686 | HuggingFaceAccessToken |
|
|
|
| SEC101/792 | IbmCloudIamKey |
|
||
| SEC101/791 | IbmSoftLayerApiKey |
|
||
| SEC101/693 | InfuraApiKey |
|
|
|
| SEC101/540 | IntercomAccessToken |
|
|
|
| SEC101/541 | IonicPat |
|
|
|
| SEC101/542 | IonicRefreshToken |
|
|
|
| SEC101/590 | JFrogPlatformAccessToken |
|
|
|
| SEC101/543 | JFrogPlatformApiKey |
|
|
|
| SEC101/632 | JdCloudAccessKey |
|
||
| SEC101/696 | KaggleApiToken |
|
|
|
| SEC101/700 | LangChainApiKey |
|
|
|
| SEC101/874 | LangSmithLicenseKey |
|
|
|
| SEC101/875 | LangSmithScimBearerToken |
|
|
|
| SEC101/857 | LarkApaasClientSecret |
|
|
|
| SEC101/858 | LarkAppSecret |
|
||
| SEC101/859 | LarkMcpGrantToken |
|
||
| SEC101/860 | LarkMeegoPluginSecret |
|
|
|
| SEC101/861 | LarkUserSession |
|
|
|
| SEC101/691 | LaunchDarklyApiKey |
|
|
|
| SEC101/794 | LichessOAuthAccessToken |
|
|
|
| SEC101/793 | LichessOAuthAuthorizationCode |
|
||
| SEC101/795 | LichessPat |
|
|
|
| SEC101/886 | LimbarToken |
|
|
|
| SEC101/544 | LinearApiKey |
|
|
|
| SEC101/545 | LinearOAuthAccessToken |
|
|
|
| SEC101/705 | LinkedInOAuthClientCredentials |
|
||
| SEC101/633 | LobLiveApiKey |
|
|
|
| SEC101/634 | LobTestApiKey |
|
|
|
| SEC101/635 | LocalStackApiKey |
|
||
| SEC101/546 | LogicMonitorBearerToken |
|
|
|
| SEC101/547 | LogicMonitorLmv1AccessKey |
|
|
|
| SEC101/027 | MailChimpApiKey |
|
|
|
| SEC101/876 | MailerSendApiToken |
|
||
| SEC101/877 | MailerSendSmtpPassword |
|
||
| SEC101/026 | MailgunApiKey |
|
|
|
| SEC101/636 | MapboxSecretAccessToken |
|
||
| SEC101/637 | MessageBirdApiKey |
|
|
|
| SEC101/548 | MidtransServerKey |
|
|
|
| SEC101/699 | MistralApiKey |
|
|
|
| SEC101/765 | MongoDbAtlasServiceAccountOAuthCredentials |
|
|
|
| SEC101/824 | NaverCloudGovAccessKey |
|
||
| SEC101/825 | NaverCloudGovSTSToken |
|
||
| SEC101/826 | NaverCloudPublicAccessKey |
|
||
| SEC101/827 | NaverCloudPublicSTSToken |
|
||
| SEC101/744 | NetflixNetKey |
|
||
| SEC101/549 | NewRelicInsightsQueryKey |
|
|
|
| SEC101/639 | NewRelicLicenseKey |
|
||
| SEC101/550 | NewRelicPersonalApiKey |
|
|
|
| SEC101/694 | NitroApiKey |
|
|
|
| SEC101/766 | NotionApiToken |
|
|
|
| SEC101/640 | NotionIntegrationToken |
|
|
|
| SEC101/641 | NotionOAuthClientCredentials |
|
|
|
| SEC101/050 | NpmAuthorToken |
|
|
|
| SEC101/044 | NpmCredentials |
|
|
|
| SEC101/031 | NuGetApiKey |
|
|
|
| SEC101/043 | NuGetCredentials |
|
|
|
| SEC101/260 | NuGetIdentifiableShortLivedApiKey |
|
|
|
| SEC101/642 | OctopusDeployApiKey |
|
||
| SEC101/643 | OculusAccessToken |
|
||
| SEC101/598 | OnePasswordServiceAccountToken |
|
||
| SEC101/552 | OnfidoApiToken |
|
|
|
| SEC101/743 | OpenAIApiKey |
|
|
|
| SEC101/553 | OpenAIApiKeyV2 |
|
|
|
| SEC101/745 | OpenRouterProvisioningOrApiKey |
|
|
|
| SEC101/814 | OpenVsxAccessToken |
|
|
|
| SEC101/695 | OpenWeatherApiKey |
|
|
|
| SEC101/878 | PaddleApiKey |
|
|
|
| SEC101/879 | PaddleSandboxApiKey |
|
|
|
| SEC101/645 | PalantirJwt |
|
|
|
| SEC101/738 | PangeaToken |
|
||
| SEC101/022 | PayPalBraintreeAccessToken |
|
||
| SEC101/698 | PerplexityApiKey |
|
|
|
| SEC101/646 | PersonaProductionApiKey |
|
|
|
| SEC101/647 | PersonaSandboxApiKey |
|
|
|
| SEC101/019 | PicaticApiKey |
|
||
| SEC101/887 | PineappleTechnologiesIncidentApiKey |
|
|
|
| SEC101/680 | PineconeApiKey |
|
|
|
| SEC101/554 | PlanetScaleDatabasePassword |
|
|
|
| SEC101/555 | PlanetScaleOAuthToken |
|
|
|
| SEC101/556 | PlanetScaleServiceToken |
|
|
|
| SEC101/758 | PlanningCenterCredentials |
|
|
|
| SEC101/757 | PlanningCenterOAuthAccessToken |
|
|
|
| SEC101/756 | PlanningCenterOAuthApplicationCredentials |
|
|
|
| SEC101/648 | PlivoCredentials |
|
|
|
| SEC101/776 | PolarCustomerSessionToken |
|
|
|
| SEC101/780 | PolarOAuthClientCredentials |
|
|
|
| SEC101/779 | PolarOAuthClientLegacyCredentials |
|
|
|
| SEC101/777 | PolarOrganizationAccessToken |
|
|
|
| SEC101/788 | PolarPat |
|
|
|
| SEC101/868 | PostHogFeatureFlagsSecureApiKey |
|
|
|
| SEC101/866 | PostHogOAuthAccessToken |
|
||
| SEC101/867 | PostHogOAuthRefreshToken |
|
||
| SEC101/865 | PostHogPersonalApiKey |
|
|
|
| SEC101/045 | PostmanApiKey |
|
|
|
| SEC101/265 | PowerAutomateWorkflowWebhookSas |
|
|
|
| SEC101/558 | PrefectServerApiToken |
|
|
|
| SEC101/559 | PrefectUserApiToken |
|
|
|
| SEC101/650 | ProctorioConsumerKey |
|
||
| SEC101/651 | ProctorioLinkageKey |
|
||
| SEC101/652 | ProctorioRegistrationKey |
|
||
| SEC101/560 | ProctorioSecretKeyV2 |
|
|
|
| SEC101/888 | ProofFullAccessApiKey |
|
|
|
| SEC101/653 | PulumiAccessToken |
|
|
|
| SEC101/654 | PyPiApiToken |
|
||
| SEC101/880 | RainforestApiKey |
|
|
|
| SEC101/881 | RainforestSandboxApiKey |
|
|
|
| SEC101/820 | RampOAuthClientSecret |
|
||
| SEC101/821 | RampOAuthRefreshToken |
|
||
| SEC101/889 | RaycastAccessToken |
|
|
|
| SEC101/561 | ReadMeApiKey |
|
|
|
| SEC101/562 | RedirectPizzaApiToken |
|
|
|
| SEC101/733 | ReplicateApiToken |
|
|
|
| SEC101/655 | RubyGemsApiKey |
|
|
|
| SEC101/751 | RunpodApiKey |
|
|
|
| SEC101/664 | SSLMateApiKey |
|
||
| SEC101/665 | SSLMateClusterSecret |
|
||
| SEC101/895 | SalesforceAccessToken |
|
|
|
| SEC101/896 | SalesforceMarketingCloudApiOAuth2Token |
|
|
|
| SEC101/734 | SalesforceOAuthConsumerCredentials |
|
|
|
| SEC101/563 | SamsaraApiAccessToken |
|
|
|
| SEC101/564 | SamsaraOAuth2AccessToken |
|
|
|
| SEC101/764 | ScalrApiToken |
|
|
|
| SEC101/656 | SegmentPublicApiToken |
|
||
| SEC101/025 | SendGridApiKey |
|
|
|
| SEC101/762 | SentryIntegrationToken |
|
|
|
| SEC101/760 | SentryOrganizationAuthToken |
|
|
|
| SEC101/890 | SentryUserAppAuthToken |
|
|
|
| SEC101/761 | SentryUserAuthToken |
|
|
|
| SEC101/568 | ShippoLiveApiToken |
|
|
|
| SEC101/657 | ShippoTestApiToken |
|
||
| SEC101/039 | ShopifyAccessToken |
|
|
|
| SEC101/658 | ShopifyAppClientCredentials |
|
||
| SEC101/659 | ShopifyAppClientSecret |
|
||
| SEC101/608 | ShopifyAppOAuthAccessToken |
|
|
|
| SEC101/603 | ShopifyCustomAppAccessToken |
|
||
| SEC101/661 | ShopifyMarketplaceToken |
|
|
|
| SEC101/660 | ShopifyMerchantToken |
|
||
| SEC101/662 | ShopifyPartnerApiToken |
|
|
|
| SEC101/666 | ShopifyPrivateAppPassword |
|
||
| SEC101/040 | ShopifySharedSecret |
|
|
|
| SEC101/752 | SiemensApiToken |
|
|
|
| SEC101/822 | SindriApiKey |
|
||
| SEC101/005 | SlackApiToken |
|
|
|
| SEC101/571 | SlackAppLevelToken |
|
|
|
| SEC101/012 | SlackWebhook |
|
|
|
| SEC101/048 | SlackWorkflowKey |
|
|
|
| SEC101/891 | SnowflakePostgresConnectionString |
|
|
|
| SEC101/892 | SnowflakePostgresPassword |
|
|
|
| SEC101/830 | SnowflakeProgrammaticAccessToken |
|
||
| SEC101/815 | SourcegraphAccessToken |
|
|
|
| SEC101/817 | SourcegraphInstanceIdentifierAccessToken |
|
|
|
| SEC101/818 | SourcegraphLicenseKeyToken |
|
||
| SEC101/819 | SourcegraphProductSubscriptionToken |
|
||
| SEC101/816 | SourcegraphUserGatewayAccessToken |
|
||
| SEC101/683 | SplunkHecApiKey |
|
|
|
| SEC101/684 | SplunkJwtToken |
|
|
|
| SEC101/685 | SplunkSessionKey |
|
|
|
| SEC101/663 | SquareApplicationSecret |
|
|
|
| SEC101/011 | SquareCredentials |
|
|
|
| SEC101/010 | SquarePat |
|
|
|
| SEC101/016 | StripeLiveApiKey |
|
|
|
| SEC101/052 | StripeLiveRestrictedApiKey |
|
|
|
| SEC101/051 | StripeTestApiKey |
|
|
|
| SEC101/053 | StripeTestRestrictedApiKey |
|
|
|
| SEC101/667 | StripeWebhookSigningSecret |
|
||
| SEC101/668 | SupabaseServiceKey |
|
|
|
| SEC101/689 | SupabaseServiceLegacyKey |
|
||
| SEC101/669 | TableauPersonalAccessToken |
|
||
| SEC101/813 | TailscaleApiKey |
|
|
|
| SEC101/049 | TelegramBotToken |
|
|
|
| SEC101/670 | TelnyxApiV2Key |
|
||
| SEC101/572 | TencentCloudCredentials |
|
|
|
| SEC101/831 | TencentWeChatApiCredentials |
|
||
| SEC101/573 | TerraformCloudEnterpriseToken |
|
|
|
| SEC101/753 | ThunderstoreApiToken |
|
|
|
| SEC101/797 | TravisCIToken |
|
|
|
| SEC101/024 | TwilioApiKeyCredentials |
|
|
|
| SEC101/018 | TwilioCredentials |
|
|
|
| SEC101/574 | TypeformPat |
|
|
|
| SEC101/200 | Chave de Segurança Comum Anotada Não Classificada |
|
|
|
| SEC101/812 | UnkeyRootKey |
|
|
|
| SEC101/811 | ValTownApiToken |
|
|
|
| SEC101/851 | VercelApiKey |
|
|
|
| SEC101/852 | VercelAppRefreshToken |
|
||
| SEC101/853 | VercelAppUserAccessToken |
|
||
| SEC101/854 | VercelIntegrationAccessToken |
|
|
|
| SEC101/855 | VercelPersonalAccessToken |
|
|
|
| SEC101/856 | VercelSupportAccessToken |
|
|
|
| SEC101/124 | VisualStudioAppCenterKey |
|
||
| SEC101/575 | WISEFlowApiKey |
|
|
|
| SEC101/894 | WSO2ChoreoPersonalAccessToken |
|
|
|
| SEC101/591 | WakaTimeAppCredentials (Credenciais do aplicativo WakaTime) |
|
|
|
| SEC101/592 | WakaTimeOAuthAccessToken |
|
|
|
| SEC101/593 | WakaTimeOAuthRefreshToken |
|
|
|
| SEC101/893 | WandbApiKey |
|
|
|
| SEC101/688 | WeatherstackApiKey |
|
|
|
| SEC101/576 | WorkOSProductionApiKey |
|
|
|
| SEC101/671 | WorkOSStagingApiKey |
|
|
|
| SEC101/747 | XAIApiKey |
|
|
|
| SEC101/748 | XAIManagementApiKey |
|
|
|
| SEC101/255 | XboxLiveSas |
|
|
|
| SEC101/672 | YandexCloudApiKey |
|
||
| SEC101/676 | YandexCloudIamAccessSecret |
|
||
| SEC101/673 | YandexCloudIamCookie |
|
||
| SEC101/674 | YandexCloudIamToken |
|
||
| SEC101/675 | YandexDictionaryApiKey |
|
||
| SEC101/577 | YandexPassportOAuthToken |
|
|
|
| SEC101/677 | YandexPredictorApiKey |
|
||
| SEC101/678 | YandexTranslateApiKey |
|
||
| SEC101/885 | ZenHubPersonalApiKey |
|
|
|
| SEC101/578 | ZuploConsumerApiKey |
|
|
|
Padrões que não são de provedor
A tabela a seguir lista os segredos gerados por não provedor detectados pela verificação de segredo. Segredos de não provedor podem ser visualizados selecionando "Outro" na lista suspensa de confiança na guia de verificação de segredo. Para obter mais informações, consulte Gerenciar alertas de verificação de segredo.
Dica
A detecção de padrões de não provedor está atualmente em versão beta e sujeita a alterações.
| ID da regra | Nome do Token | Alertas do usuário | Verificação de validade |
|---|---|---|---|
| SEC101/122 | AspNetMachineKey |
|
|
| SEC101/042 | DynatraceToken |
|
|
| SEC101/032 | GpgCredentials |
|
|
| SEC101/009 | Credenciais do LinkedIn |
|
|
| SEC101/033 | MongoDbCredentials |
|
|
| SEC101/036 | MySqlCredentials |
|
|
| SEC101/056 | OpenSshPrivateKey |
|
|
| SEC101/013 | PemPrivateKey |
|
|
| SEC101/058 | PgpPrivateKey |
|
|
| SEC101/055 | Pkcs12CertificatePrivateKeyBundle |
|
|
| SEC101/054 | PkcsPrivateKey (chave privada PKCS) |
|
|
| SEC101/038 | Credenciais do PostgreSQL |
|
|
| SEC101/057 | PuttyPrivateKey |
|
|
| SEC101/041 | RabbitMQCredentials |
|
|
| SEC101/059 | RsaPrivateKey |
|
|
| SEC101/037 | SqlLegacyCredentials |
|
|
| SEC101/528 | UnclassifiedJwt |
|
|
| SEC101/127 | UrlCredentials |
|