mirror of
https://github.com/pre-commit/pre-commit-hooks.git
synced 2026-03-29 18:16:52 +00:00
Implements detect-azure-credentials hook based on Microsoft AzSK credential patterns. Features: - 33 credential detection patterns aligned with official AzSK specification - Covers Azure-specific credentials (Data Factory, Storage, DevOps, etc.) - Detects generic secrets (passwords, API keys, tokens, certificates) - Comprehensive test suite with 22 test cases - Pattern name identification in output for easier debugging Patterns include (CSCAN codes): - Azure Data Factory SHIR keys (0010) - Azure Storage credentials (0020, 0040) - App Service deployment secrets (0050) - Connection strings and passwords (0090, 0100, 0120) - Machine keys and network credentials (0130, 0150) - DevOps PAT tokens (0160) - PublishSettings passwords (0030) - PEM private keys (0060) - Git credentials (0210) - JWT and refresh tokens (0250) - Ansible Vault (0260) - Azure PowerShell token cache (0270) - Default/known passwords (0140) All tests passing (22 Azure + 36 AWS = 58 total) |
||
|---|---|---|
| .. | ||
| aws_config_with_multiple_sections.ini | ||
| aws_config_with_secret.ini | ||
| aws_config_with_secret_and_session_token.ini | ||
| aws_config_with_session_token.ini | ||
| aws_config_without_secrets.ini | ||
| aws_config_without_secrets_with_spaces.ini | ||
| azure_credentials.txt | ||
| azure_no_credentials.txt | ||
| bad_json.notjson | ||
| bad_json_latin1.nonjson | ||
| bad_xml.notxml | ||
| bad_yaml.notyaml | ||
| cannot_parse_ast.notpy | ||
| does_exist | ||
| duplicate_key_json.notjson | ||
| img1.jpg | ||
| non_ascii_pretty_formatted_json.json | ||
| nonsense.txt | ||
| not_pretty_formatted_json.json | ||
| ok_json.json | ||
| ok_xml.xml | ||
| ok_yaml.yaml | ||
| pretty_formatted_json.json | ||
| tab_pretty_formatted_json.json | ||
| top_sorted_json.json | ||
| unsorted_pretty_formatted_json.json | ||