# mazen160/secrets-patterns-db

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Repository: https://github.com/mazen160/secrets-patterns-db
Canonical: https://ross.abutalabs.com/products/secrets-patterns-db
Homepage: https://mazinahmed.net/blog/secrets-patterns-db/
Language: Python
License: CC-BY-SA-4.0
License Family: other
Topics: gitleaks, regex, regular-expression, regular-expressions, secrets, secrets-detection, trufflehog, trufflehog3
Last push: 2025-08-06T21:28:12+00:00

## Health v2 (maintenance only)
Score: 47/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 35, release rhythm 35, longevity 93
- inputs: {"age_days": 1303, "days_push": 392, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1609, forks 190 (observed 2026-08-28T04:05:10.776180+00:00)

## What it is
Secrets Patterns DB is the largest open-source database of over 1600 tested regular expressions for detecting secrets, API keys, passwords, and tokens. It provides conversion scripts to feed secret scanning engines like TruffleHog and Gitleaks with curated, ReDoS-validated patterns categorized by confidence level.

## Use cases
- find leaked api keys in git repositories
- feed custom regex rules into gitleaks
- convert secret patterns for trufflehog v3
- improve secret detection coverage in an appsec program
- detect hardcoded passwords and tokens in source code
- source regex rules for a custom secret scanning engine

## When to choose
- you need broader secret detection coverage than built-in TruffleHog or Gitleaks rules provide
- you want curated, ReDoS-tested regex patterns categorized by confidence
- you maintain a secret scanning pipeline and want a community-maintained rule database

## When to avoid
- you need entropy-based secret detection rather than regex pattern matching
- you need a full secret scanning tool rather than a pattern dataset
- you require severity-level classification, which is not yet supported

## Facets
- artifact type: dataset
- maturity: active
- function: security, vulnerability-scanning, parser
- domain: security, developer-tools, privacy
- platform: cross-platform, python, cli
- tags: secrets-detection, regex-patterns, gitleaks, trufflehog, api-keys, secret-scanning, appsec

## Member repositories
- mazen160/secrets-patterns-db (main) score 47

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:10.776180+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:51:17.460734+00:00, confidence not recorded.
  - readme: https://github.com/mazen160/secrets-patterns-db (fetched 2026-08-28T04:05:10.776180+00:00, sha 47ec57cae1c6)
  - homepage: https://mazinahmed.net/blog/secrets-patterns-db/ (fetched 2026-08-29T11:23:28.705821+00:00, sha 509bfb71ae9f)
  - site_page: https://mazinahmed.net/about (fetched 2026-08-29T11:23:28.715131+00:00, sha e1fffb7cc227)
- Data as of 2026-08-30T08:39:29.467469+00:00.