36 lines
1.0 KiB
Python
36 lines
1.0 KiB
Python
|
#!/usr/bin/env python3
|
|||
|
|
|
|||
|
|
import re
|
|||
|
|
|
|||
|
|
EXCLUDE_PATH_PARTS = {'Infrastructure', 'Home-Automation', '00_Inbox', '04_Archive'}
|
|||
|
|
EXCLUDE_DIR_NAMES = {'.git', '.obsidian', '.claude', '.venv-memory', '.memory', '.chroma_data'}
|
|||
|
|
EXCLUDE_FILENAME_KEYWORDS = ['password', 'secret', 'credential', 'token', 'apikey', '.env']
|
|||
|
|
|
|||
|
|
SENSITIVE_LITERAL_MARKERS = [
|
|||
|
|
'-----begin',
|
|||
|
|
'authorization: bearer ',
|
|||
|
|
'x-api-key:',
|
|||
|
|
'private key',
|
|||
|
|
'aws_access_key_id',
|
|||
|
|
'password:',
|
|||
|
|
'passwd:',
|
|||
|
|
'api_key',
|
|||
|
|
'access_key',
|
|||
|
|
'账号：',
|
|||
|
|
'账号:',
|
|||
|
|
'用户名：',
|
|||
|
|
'用户名:',
|
|||
|
|
'密码：',
|
|||
|
|
'密码:',
|
|||
|
|
]
|
|||
|
|
|
|||
|
|
SENSITIVE_REGEX_PATTERNS = [
|
|||
|
|
re.compile(r'-----BEGIN [A-Z ]*PRIVATE KEY-----'),
|
|||
|
|
re.compile(r'AKIA[0-9A-Z]{16}'),
|
|||
|
|
re.compile(r'ASIA[0-9A-Z]{16}'),
|
|||
|
|
re.compile(r'ghp_[A-Za-z0-9]{36}'),
|
|||
|
|
re.compile(r'eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}'),
|
|||
|
|
re.compile(r'(?i)\b(password|passwd|pwd|token|secret|api[_-]?key)\b\s*[:=]\s*\S{4,}'),
|
|||
|
|
re.compile(r'(账号|用户名|密码)\s*[：:]\s*\S{2,}'),
|
|||
|
|
]
|