Find secrets with regular expressions
Recipe ID
org.openrewrite.java.security.secrets.FindSecretsByPatternArtifact
org.openrewrite.recipe:rewrite-java-securityA secret is a literal that matches any one of the provided patterns.
Usage
You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.secrets.FindSecretsByPattern --recipe-option "secretName=AWS Access Key" --recipe-option "valuePattern=[a-zA-Z0-9+\/=]{88}"If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Options
| Name | Type | Description |
|---|---|---|
secretNamerequired | String | The type of secret that this recipe is looking for. e.g. AWS Access Key |
keyPattern | String | A regular expression to match a 'key' against. For example, a key e.g. [a-zA-Z0-9+\/=]{88} |
valuePatternrequired | String | A regular expression to search for. e.g. [a-zA-Z0-9+\/=]{88} |
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats