litellm/enterprise/enterprise_hooks/secrets_plugins/vault.py
2024-06-27 15:12:13 -07:00

24 lines
653 B
Python

import re
from detect_secrets.plugins.base import RegexBasedDetector
class VaultDetector(RegexBasedDetector):
"""Scans for Vault Batch Tokens and Vault Service Tokens."""
@property
def secret_type(self) -> str:
return "Vault Token"
@property
def denylist(self) -> list[re.Pattern]:
return [
# Vault Batch Token
re.compile(
r"""(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)"""
),
# Vault Service Token
re.compile(
r"""(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)"""
),
]