[{"_1":2,"_238":-5,"_239":-5},"loaderData",{"_3":4,"_91":92,"_227":228,"_237":-5},"root",{"_5":6,"_32":33,"_58":59,"_89":90},"ctx",{"_7":8,"_18":19,"_20":-5,"_21":22,"_23":24,"_25":26,"_27":26,"_28":29,"_30":31},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5},"sessionClaims","sessionId","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","environmentVariableKeys",[],"user","preferences_keybindings","default","preferences_theme","light","preferences_fixers",false,"preferences_copilot","preferences_model","claude-3-5-haiku-20241022","notification_count",0,"ENV",{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","fa80b67e1f763bfb4b247c3f5ca4f0b0730f3f5c","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","API_URL","https://api.val.town","WORKER_FINGERPRINT","799d99f2805306c2714a7cfefbeae178","clerkState",{"_60":61},"__internal_clerk_state",{"_62":63,"_64":43,"_65":66,"_67":66,"_68":26,"_69":66,"_70":66,"_71":66,"_72":66,"_73":66,"_74":66,"_75":66,"_76":66,"_77":78,"_87":26,"_88":26},"__clerk_ssr_state",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__signInForceRedirectUrl","__signUpForceRedirectUrl","__signInFallbackRedirectUrl","__signUpFallbackRedirectUrl","__clerk_debug",{"_79":26,"_80":66,"_81":82,"_83":66,"_84":43,"_85":26,"_86":66},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","remixVersion",2,"routes/_app.x.$handle.$name",{"_93":94,"_95":96,"_97":41,"_98":99,"_100":101,"_102":103,"_135":136,"_214":215,"_221":222,"_149":223,"_226":-5},"handle","stevekrouse","name","secret_scanner","branchName","path","detectSecretsTestCases","version",118,"project",{"_104":105,"_95":96,"_106":107,"_108":-5,"_109":110,"_111":-5,"_112":-5,"_11":113,"_114":-5,"_115":26,"_116":117,"_118":117,"_119":120,"_121":120,"_122":120,"_123":117,"_124":26,"_20":125,"_128":129},"id","b52a6f36-b966-11ef-b059-e6cdfca9ef9f","createdAt",["D",1734103624902],"deletedAt","privacy","unlisted","description","imageUrl","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","isOwned",{"_93":94,"_126":127},"profileImageUrl","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","branch",{"_100":130,"_95":41,"_104":131,"_132":105,"_133":-5,"_134":-5},119,"2832caf4-d452-11ef-a9e9-e6cdfca9ef9f","projectId","forkedBranchId","forkedBranchVersion","tree",[137,156,168,176,187,195,205],{"_104":138,"_95":139,"_140":141,"_142":-5,"_143":131,"_144":101,"_145":26,"_106":146,"_100":147,"_148":149,"_150":151,"_152":26,"_153":154,"_98":155},"42b486c4-be27-11ef-8bd8-e6cdfca9ef9f","courteousGoldTortoise.md","fileId","2e206e58-be27-11ef-99cd-e6cdfca9ef9f","parentId","branchId","branchVersion","latest",["D",1734626130382],3,"fileType","file","content","

hi

","deleted","children",[],[139],{"_104":157,"_95":158,"_140":159,"_142":-5,"_143":131,"_144":160,"_145":161,"_106":162,"_100":163,"_148":164,"_150":165,"_152":26,"_153":166,"_98":167},"c9c0d7e2-bca3-11ef-8e94-e6cdfca9ef9f","detectSecrets","3c32dd34-b96b-11ef-89cc-e6cdfca9ef9f",110,true,["D",1734459712225],34,"script","const COMMON_SECRET_PATTERNS: [RegExp, string][] = [\n [/sk-[a-zA-Z0-9]{40,}/i, \"OpenAI API Key\"],\n [/[g|G][i|I][t|T][h|H][u|U][b|B].*['|\\\"][0-9a-zA-Z]{35,40}['|\\\"]/, \"GitHub\"],\n [/AIza[0-9A-Za-z-_]{35}/i, \"Google API Key\"],\n [/[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com/i, \"Google OAuth Client ID\"],\n [/ya29\\.[0-9A-Za-z_-]+/i, \"Google OAuth Access Token\"],\n [/AKIA[0-9A-Z]{16}/i, \"AWS Access Key ID\"],\n [/amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i, \"Amazon MWS Auth Token\"],\n [/SK[0-9a-fA-F]{32}/i, \"Twilio API Key\"],\n [/SG\\.[0-9A-Za-z-_]{22}\\.[0-9A-Za-z-_]{43}/i, \"SendGrid API Key\"],\n [/key-[0-9a-zA-Z]{32}/i, \"MailChimp API Key\"],\n [/[0-9a-f]{32}-us[0-9]{1,2}/i, \"MailChimp API Key (alternative format)\"],\n [/rk_live_[0-9a-zA-Z]{24}/i, \"Stripe Live API Key\"],\n [/sk_live_[0-9a-zA-Z]{24}/i, \"Stripe Live Secret Key\"],\n [/sq0csp-[0-9A-Za-z-_]{43}/i, \"Square Access Token\"],\n [/sqOatp-[0-9A-Za-z-_]{22}/i, \"Square OAuth Secret\"],\n [/access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-f]{32}/i, \"PayPal Access Token\"],\n [/-----BEGIN [A-Z]+ PRIVATE KEY-----/i, \"Private Key\"],\n [/-----BEGIN CERTIFICATE-----/i, \"SSL/TLS Certificate\"],\n [/^xox[baprs]-([0-9a-zA-Z]{10,48})?$/, \"Slack API Token\"],\n [/^sk-[a-zA-Z0-9]{48}$/, \"OpenAI API Key\"],\n [/^[0-9]{4}-[0-9]{4}-[0-9]{4}-[0-9]{4}$/, \"Credit Card Number\"],\n];\n\ninterface SecretDetectionResult {\n string: string;\n likelihood: number;\n reason: string;\n lineNumber: number;\n}\n\nfunction calculateShannonEntropy(str: string): number {\n const len = str.length;\n const frequencies = new Map();\n\n for (const char of str) {\n frequencies.set(char, (frequencies.get(char) || 0) + 1);\n }\n\n return Array.from(frequencies.values()).reduce((sum, frequency) => {\n const p = frequency / len;\n return sum - p * Math.log2(p);\n }, 0);\n}\n\nfunction analyzeSecret(str: string): { likelihood: number; reason: string } {\n if (str.startsWith(\"http\")) return { likelihood: 0, reason: \"URLs are not searched\" };\n if (str.startsWith(\"Mozilla/5.0\")) return { likelihood: 0, reason: \"HTTP headers are not searched\" };\n if (str.startsWith(\"data:\")) return { likelihood: 0, reason: \"Image URLs are not searched\" };\n\n // Check if the line contains any common secret patterns\n for (const [pattern, patternReason] of COMMON_SECRET_PATTERNS) {\n if (pattern.test(str)) {\n return { likelihood: 0.8, reason: `Likely ${patternReason}` };\n }\n }\n\n // Shannon entropy check\n const entropy = calculateShannonEntropy(str);\n const entropyThreshold = 4.99;\n if (str.length > 16 && entropy > entropyThreshold) {\n const likelihood = Math.min((entropy - entropyThreshold) / 1.5, 1);\n return { likelihood, reason: `High entropy (${entropy.toFixed(2)})` };\n }\n\n return { likelihood: 0, reason: \"Not likely a secret\" };\n}\n\nexport default function detectSecrets(code: string): SecretDetectionResult[] {\n const potentialSecrets: SecretDetectionResult[] = [];\n const lines = code.split(\"\\n\");\n\n for (let i = 0; i < lines.length; i++) {\n const line = lines[i];\n const matches = line.match(/\"([^\"]*)\"|'([^']*)'|`([^`]*)`/g);\n\n if (matches) {\n for (const match of matches) {\n const str = match.slice(1, -1); // Remove quotes\n if (str.length > 8) { // Ignore short strings\n let { likelihood, reason } = analyzeSecret(str);\n if (likelihood > 0.3) {\n potentialSecrets.push({\n string: str,\n likelihood,\n reason,\n lineNumber: i + 1,\n });\n }\n }\n }\n }\n }\n\n return potentialSecrets;\n}",[],[158],{"_104":169,"_95":99,"_140":170,"_142":-5,"_143":131,"_144":171,"_145":161,"_106":172,"_100":31,"_148":164,"_150":173,"_152":26,"_153":174,"_98":175},"e0d37a0c-b96f-11ef-a7ad-e6cdfca9ef9f","e0d37aca-b96f-11ef-a7ad-e6cdfca9ef9f",30,["D",1734107563618],"export const tests = [\n {\n name: `empty string`,\n input: \"\",\n expected: [],\n },\n {\n name: `white space string`,\n input: \" \\n\\n\\n\",\n expected: [],\n },\n {\n name: `string with no secrets`,\n input: \"`hi`\\n\\\"there\\\"\\n'friend'\",\n expected: [],\n },\n {\n name: `string with one secrets`,\n input: \"hi\\nthere\\nfriend\\n\\\"sk-1234567890abcdefghijklmnopqrstuvwxyz123456\\\"\",\n expected: [{\n \"string\": \"sk-1234567890abcdefghijklmnopqrstuvwxyz123456\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely OpenAI API Key\",\n \"lineNumber\": 4,\n }],\n },\n {\n name: `string with many secrets`,\n input: `\n // Generic API Key and Tokens\n const apiKey = \"api_key_1234567890abcdefghijk\";\n const authToken = \"auth_token_ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\n const accessToken = \"access_token_1234567890abcdefghijkABCDEFGHIJK\";\n const secretKey = \"secret_key_very_secret_and_long_string\";\n const password = \"super_secret_password_123!@#\";\n const credentials = \"username:password_very_sensitive\";\n\n // OpenAI API Key\n const openaiKey = \"sk-1234567890abcdefghijklmnopqrstuvwxyz123456\";\n\n // GitHub Tokens\n const githubToken = \"ghp_1234567890abcdefghijklmnopqrstuvwxyz\";\n const githubFineGrainedToken = \"github_pat_11ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz\";\n const githubSSHKey = \"AAAAB3NzaC1yc2EAAAADAQABAAABAQCl5Uh4OI0Oi8uJxKxT4iBGdHqFNXOEjrTFYSLnmwHc\";\n\n // Google API and OAuth\n const googleApiKey = \"AIzaSyDCvp7sMRdJ6tL_XyQBb-XweGdFqq\";\n const googleOAuthClientId = \"123456789012-abcdefghijklmnopqrstuvwxyz123456.apps.googleusercontent.com\";\n const googleOAuthAccessToken = \"ya29.a0AfH6SMBx-VjvJbF3FkE_fqIVl_1sGxXJI-5uRhMctBg\";\n\n // AWS Keys\n const awsAccessKeyId = \"AKIAIOSFODNN7EXAMPLE\";\n const awsSecretAccessKey = \"wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\";\n\n // Amazon MWS Auth Token\n const amazonMWSAuthToken = \"amzn.mws.4ea38b7b-f563-7709-4bae-87cbd51e983d\";\n\n // Twilio API Key\n const twilioApiKey = \"SK123a456b789c012d34e56f78g9h0i1jk\";\n\n // SendGrid API Key\n const sendGridApiKey = \"SG.1234567890abcdefghijklmn.opqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ12345\";\n\n // MailChimp API Keys\n const mailChimpApiKey1 = \"key-us1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6\";\n const mailChimpApiKey2 = \"1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6-us7\";\n\n // Stripe API Keys\n const stripeLiveApiKey = \"rk_live_1234567890abcdefghijklmn\";\n const stripeLiveSecretKey = \"sk_live_1234567890abcdefghijklmn\";\n\n // Square Access Token and OAuth Secret\n const squareAccessToken = \"sq0csp-1234567890abcdefghijklmnopqrstuvwxyzABCDEFG\";\n const squareOAuthSecret = \"sqOatp-1234567890abcdefghijkl\";\n\n // PayPal Access Token\n const paypalAccessToken = \"access_token$production$1234567890abcdef$1234567890abcdef1234567890abcdef\";\n\n // Generic UUID\n const uuid = \"550e8400-e29b-41d4-a716-446655440000\";\n\n // Private Key and Certificate\n const privateKey = \"-----BEGIN RSA PRIVATE KEY-----\\nMIIEoQIBAAKCAQEAwUPEM\";\n const certificate = \"-----BEGIN CERTIFICATE-----\\nMIIDQTCCAimgAwIBAgITBmyfz5\";\n\n // Common Secret Formats\n const commonApiKey = \"abcdefghijklmnopqrstuvwxyz123456\";\n const md5Hash = \"098f6bcd4621d373cade4e832627b4f6\";\n const sha1Hash = \"a94a8fe5ccb19ba61c4c0873d391e987982fbbd3\";\n const sha256Hash = \"9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08\";\n\n // Slack API Token\n const slackApiToken = \"xoxb-1234567890-1234567890123-1234567890abcdef1234567890abcdef\";\n\n // Facebook Access Token\n const facebookAccessToken = \"EAACEdEose0cBAAbcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789\";\n\n // Base64 Encoded Secrets\n const base64Secret88 = \"VGhpcyBpcyBhIHZlcnkgbG9uZyBzZWNyZXQgdGhhdCBpcyBlbmNvZGVkIGluIGJhc2U2NCBmb3IgdGVzdGluZyBwdXJwb3Nlcw==\";\n const base64Secret86 = \"QSBzbGlnaHRseSBzaG9ydGVyIHNlY3JldCB0aGF0IGlzIGVuY29kZWQgaW4gYmFzZTY0IGZvciB0ZXN0aW5nIHB1cnBvc2Vz\";\n const base64Secret43 = \"QSBzaG9ydCBzZWNyZXQgZW5jb2RlZCBpbiBiYXNlNjQ=\";\n\n // Social Security Number\n const ssn = \"123-45-6789\";\n\n // Credit Card Number\n const creditCardNumber = \"4111-1111-1111-1111\";\n\n // High Entropy String\n const highEntropyString = \"p@X8Kq#mF9$vL2zN4yR7bT1jH6gC3sA5\";\n\n // Potential JWT Token\n const jwtToken = \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\";\n\n // Hex Encoded Secret\n const hexEncodedSecret = \"7365637265746d657373616765\";\n\n console.log(\"This is not a secret.\");\n`,\n expected: [\n {\n \"string\": \"api_key_1234567890abcdefghijk\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 3,\n },\n {\n \"string\": \"auth_token_ABCDEFGHIJKLMNOPQRSTUVWXYZ\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Authentication Token\",\n \"lineNumber\": 4,\n },\n {\n \"string\": \"access_token_1234567890abcdefghijkABCDEFGHIJK\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Access Token\",\n \"lineNumber\": 5,\n },\n {\n \"string\": \"secret_key_very_secret_and_long_string\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Secret Key\",\n \"lineNumber\": 6,\n },\n { \"string\": \"super_secret_password_123!@#\", \"likelihood\": 0.8, \"reason\": \"Likely Password\", \"lineNumber\": 7 },\n { \"string\": \"username:password_very_sensitive\", \"likelihood\": 0.8, \"reason\": \"Likely Password\", \"lineNumber\": 8 },\n {\n \"string\": \"sk-1234567890abcdefghijklmnopqrstuvwxyz123456\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely OpenAI API Key\",\n \"lineNumber\": 11,\n },\n {\n \"string\": \"ghp_1234567890abcdefghijklmnopqrstuvwxyz\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely GitHub Personal Access Token\",\n \"lineNumber\": 14,\n },\n {\n \"string\": \"github_pat_11ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 15,\n },\n {\n \"string\": \"AAAAB3NzaC1yc2EAAAADAQABAAABAQCl5Uh4OI0Oi8uJxKxT4iBGdHqFNXOEjrTFYSLnmwHc\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 16,\n },\n {\n \"string\": \"AIzaSyDCvp7sMRdJ6tL_XyQBb-XweGdFqq\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 19,\n },\n {\n \"string\": \"123456789012-abcdefghijklmnopqrstuvwxyz123456.apps.googleusercontent.com\",\n \"likelihood\": 1,\n \"reason\": \"Likely Google OAuth Client ID\",\n \"lineNumber\": 20,\n },\n {\n \"string\": \"ya29.a0AfH6SMBx-VjvJbF3FkE_fqIVl_1sGxXJI-5uRhMctBg\",\n \"likelihood\": 1,\n \"reason\": \"Likely Access Token\",\n \"lineNumber\": 21,\n },\n { \"string\": \"AKIAIOSFODNN7EXAMPLE\", \"likelihood\": 0.9, \"reason\": \"Likely AWS Access Key ID\", \"lineNumber\": 24 },\n {\n \"string\": \"wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\",\n \"likelihood\": 0.8,\n \"reason\": \"Likely AWS Secret Access Key\",\n \"lineNumber\": 25,\n },\n {\n \"string\": \"amzn.mws.4ea38b7b-f563-7709-4bae-87cbd51e983d\",\n \"likelihood\": 0.8,\n \"reason\": \"Likely Authentication Token\",\n \"lineNumber\": 28,\n },\n {\n \"string\": \"SK123a456b789c012d34e56f78g9h0i1jk\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 31,\n },\n {\n \"string\": \"SG.1234567890abcdefghijklmn.opqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ12345\",\n \"likelihood\": 1,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 34,\n },\n {\n \"string\": \"key-us1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 37,\n },\n {\n \"string\": \"1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6-us7\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 38,\n },\n {\n \"string\": \"rk_live_1234567890abcdefghijklmn\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 41,\n },\n {\n \"string\": \"sk_live_1234567890abcdefghijklmn\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Secret Key\",\n \"lineNumber\": 42,\n },\n {\n \"string\": \"sq0csp-1234567890abcdefghijklmnopqrstuvwxyzABCDEFG\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Access Token\",\n \"lineNumber\": 45,\n },\n {\n \"string\": \"sqOatp-1234567890abcdefghijkl\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Square OAuth Secret\",\n \"lineNumber\": 46,\n },\n {\n \"string\": \"access_token$production$1234567890abcdef$1234567890abcdef1234567890abcdef\",\n \"likelihood\": 0.8,\n \"reason\": \"Likely Access Token\",\n \"lineNumber\": 49,\n },\n {\n \"string\": \"550e8400-e29b-41d4-a716-446655440000\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic UUID\",\n \"lineNumber\": 52,\n },\n {\n \"string\": \"abcdefghijklmnopqrstuvwxyz123456\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Generic API Key\",\n \"lineNumber\": 61,\n },\n {\n \"string\": \"098f6bcd4621d373cade4e832627b4f6\",\n \"likelihood\": 0.9,\n \"reason\": \"Common format for API keys and tokens\",\n \"lineNumber\": 62,\n },\n {\n \"string\": \"a94a8fe5ccb19ba61c4c0873d391e987982fbbd3\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely AWS Secret Access Key\",\n \"lineNumber\": 63,\n },\n {\n \"string\": \"9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 64,\n },\n {\n \"string\": \"xoxb-1234567890-1234567890123-1234567890abcdef1234567890abcdef\",\n \"likelihood\": 0.9,\n \"reason\": \"Common format for API keys and tokens\",\n \"lineNumber\": 67,\n },\n {\n \"string\": \"EAACEdEose0cBAAbcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely Access Token\",\n \"lineNumber\": 70,\n },\n {\n \"string\":\n \"VGhpcyBpcyBhIHZlcnkgbG9uZyBzZWNyZXQgdGhhdCBpcyBlbmNvZGVkIGluIGJhc2U2NCBmb3IgdGVzdGluZyBwdXJwb3Nlcw==\",\n \"likelihood\": 0.8,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 73,\n },\n {\n \"string\": \"QSBzbGlnaHRseSBzaG9ydGVyIHNlY3JldCB0aGF0IGlzIGVuY29kZWQgaW4gYmFzZTY0IGZvciB0ZXN0aW5nIHB1cnBvc2Vz\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 74,\n },\n {\n \"string\": \"QSBzaG9ydCBzZWNyZXQgZW5jb2RlZCBpbiBiYXNlNjQ=\",\n \"likelihood\": 0.9,\n \"reason\": \"Likely AWS Secret Access Key\",\n \"lineNumber\": 75,\n },\n { \"string\": \"4111-1111-1111-1111\", \"likelihood\": 0.9, \"reason\": \"Credit Card Number\", \"lineNumber\": 81 },\n {\n \"string\": \"p@X8Kq#mF9$vL2zN4yR7bT1jH6gC3sA5\",\n \"likelihood\": 1,\n \"reason\": \"High entropy (5.00)\",\n \"lineNumber\": 84,\n },\n {\n \"string\":\n \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c\",\n \"likelihood\": 1,\n \"reason\": \"Likely GitHub SSH Key\",\n \"lineNumber\": 87,\n },\n {\n \"string\": \"7365637265746d657373616765\",\n \"likelihood\": 0.9,\n \"reason\": \"Common format for API keys and tokens\",\n \"lineNumber\": 90,\n },\n ],\n },\n];",[],[99],{"_104":177,"_95":178,"_140":179,"_142":-5,"_143":131,"_144":180,"_145":161,"_106":181,"_100":182,"_148":183,"_150":184,"_152":26,"_153":185,"_98":186},"9b667c36-bca2-11ef-81e0-e6cdfca9ef9f","detectSecretsTests","8caeb42c-b96b-11ef-8cce-e6cdfca9ef9f",107,["D",1734459204961],13,"http","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { isEqual } from \"npm:lodash-es\";\nimport { renderToString } from \"npm:react-dom@18.2.0/server\";\nimport detectSecrets from \"./detectSecrets\";\nimport { tests } from \"./detectSecretsTestCases\";\n\nexport default () => {\n const results = tests.map(test => {\n const output = detectSecrets(test.input);\n return {\n ...test,\n output,\n pass: isEqual(test.expected, output),\n };\n });\n return new Response(\n renderToString(\n

Detect Secrets

\n {results.map(result => (\n

\n {result.name}\n \n {result.pass ? \"✓\" : \"✕\"}\n \n

\n {result.pass\n ? null\n : (\n

\n          Input: {JSON.stringify(result.input)}{\"\\n\"}\n          Expected: {JSON.stringify(result.expected)}{\"\\n\"}\n          Output: {JSON.stringify(result.output)}{\"\\n\"}\n

\n )}\n

\n ))}\n

,\n ),\n {\n headers: {\n \"content-type\": \"text/html\",\n },\n },\n );\n};",[],[178],{"_104":188,"_95":189,"_140":190,"_142":-5,"_143":131,"_144":191,"_145":161,"_106":192,"_100":31,"_148":183,"_150":66,"_152":26,"_153":193,"_98":194},"94b8bdda-bca3-11ef-9810-e6cdfca9ef9f","fascinatingYellowRhinoceros","94b8be84-bca3-11ef-9810-e6cdfca9ef9f",108,["D",1734459623254],[],[189],{"_104":196,"_95":197,"_140":198,"_142":-5,"_143":131,"_144":199,"_145":161,"_106":200,"_100":201,"_148":183,"_150":202,"_152":26,"_153":203,"_98":204},"d01142ec-b980-11ef-bd9a-e6cdfca9ef9f","index","b52b7f7a-b966-11ef-b059-e6cdfca9ef9f",104,["D",1734114836945],54,"import { zip } from \"https://esm.town/v/pomdtr/sql\";\nimport { db } from \"https://esm.town/v/sqlite/db\";\nimport detectSecrets from \"./detectSecrets\";\n\n// const res = await db.execute(\n// `SELECT author_username, name, code\n// from vals\n// where code NOT like '// set%'\n// order by version desc\n// limit 10`,\n// );\n\n// const res = await db.execute(\n// `SELECT created_at\n// from vals\n// where code NOT like '// set%'\n// order by created_at desc\n// limit 10`,\n// );\n\nconst res = await db.execute(\n `SELECT author_username, name, code\n from vals\n where code NOT like '// set%'\n limit 3000\n offset 3000`,\n);\nconst rows = zip(res);\n\nconst scannedCode = rows.map(\n row => ({\n ...row,\n code: undefined, // hide from screen for now\n secrets: detectSecrets(row.code),\n }),\n).filter(row => row.secrets.length > 0);\n\nconst secrets = scannedCode.flatMap(row =>\n row.secrets.map(s => ({\n ...s,\n link: `https://val.town/v/${row.author_username}/${row.name}`,\n }))\n);\n\nexport default () =>\n Response.json(\n secrets.sort((a, b) => b.likelihood - a.likelihood)\n .slice(0, 100),\n );",[],[197],{"_104":206,"_95":207,"_140":208,"_142":-5,"_143":131,"_144":209,"_145":161,"_106":210,"_100":147,"_148":164,"_150":211,"_152":26,"_153":212,"_98":213},"157e617c-be25-11ef-8441-e6cdfca9ef9f","punctualBlackWildebeest","bdd9e35c-be23-11ef-96db-e6cdfca9ef9f",114,["D",1734625195533],"console.log(\"hi\");\n\nconsole.log(\"hi2\");",[],[207],"counts",{"_216":31,"_217":218,"_219":31,"_220":31},"pulls","branches",1,"forks","envVars","contents",[],{"_104":169,"_95":99,"_140":170,"_142":-5,"_143":131,"_144":171,"_145":161,"_106":224,"_100":31,"_148":164,"_150":173,"_152":26,"_98":225},["D",1734107563618],[99],"upstream","routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_93":94,"_95":96,"_97":41,"_100":101,"_98":99,"_102":229,"_149":233,"_221":235,"_226":-5,"_236":-5},{"_104":105,"_95":96,"_106":230,"_108":-5,"_109":110,"_111":-5,"_112":-5,"_11":113,"_114":-5,"_115":26,"_116":117,"_118":117,"_119":120,"_121":120,"_122":120,"_123":117,"_124":26,"_20":231,"_128":232},["D",1734103624902],{"_93":94,"_126":127},{"_100":130,"_95":41,"_104":131,"_132":105,"_133":-5,"_134":-5},{"_104":169,"_95":99,"_140":170,"_142":-5,"_143":131,"_144":171,"_145":161,"_106":224,"_100":31,"_148":164,"_150":173,"_152":26,"_98":234},[99],[],"pull","routes/_app","actionData","errors"]