Rule Center

A full browsable index of AppInfoScanner's built-in rules — credentials, PII, component detection, packer signatures, sensitive permissions, public domain suffixes and more — synced from the main repo's default_config.py (generated by scripts/sync-rules.py, config version follows the program release). See Custom Rules for how rules take effect and how to override them.

9 categories / 375 rules in total, synced from the built-in config (config version 1.0.11).

Cloud keys/tokens, JWT, private keys and generic credentials (filter_ak_map)

Aliyun_OSS3 regex

(?i)(?:aliyun|ali|oss)[_-]?(?:access[_-]?key[_-]?id|access[_-]?key[_-]?secret)[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z]{10,}[\'"](?i)(?:aliyun|ali|oss)[_-]?secret[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z]{20,}[\'"]LTAI[A-Za-z0-9]{12,20}

Tencent_Cloud1 regex

AKID[A-Za-z0-9]{32}

Amazon_AWS_AccessKeyID1 regex

(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|A3T)[A-Z0-9]{16}

Google_APIKey1 regex

AIza[0-9A-Za-z\-_]{35}

Google_OAuth_ClientID1 regex

[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com

Cloudinary1 regex

cloudinary://[0-9]{15}:[0-9A-Za-z]+@[a-z]+

GitHub_Token2 regex

(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36}github_pat_[A-Za-z0-9_]{20,}

GitLab_PAT1 regex

glpat-[A-Za-z0-9\-_]{20}

Slack_Token1 regex

xox[bapoir]-[A-Za-z0-9\-]{10,}

Slack_Webhook1 regex

https://hooks\.slack\.com/services/T[A-Za-z0-9_]{8,}/B[A-Za-z0-9_]{8,}/[A-Za-z0-9_]{24}

Stripe_Key1 regex

[sr]k_live_[0-9a-zA-Z]{24}

Square_Token2 regex

sq0atp-[0-9A-Za-z\-_]{22}sq0csp-[0-9A-Za-z\-_]{43}

PayPal_Braintree1 regex

access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}

Twilio_APIKey1 regex

SK[0-9a-fA-F]{32}

SendGrid_Key1 regex

SG\.[A-Za-z0-9\-_]{22}\.[A-Za-z0-9\-_]{43}

Mailgun_Key1 regex

key-[0-9a-zA-Z]{32}

Facebook_AccessToken1 regex

EAACEdEose0c[A-Za-z0-9]+

Discord_Bot_Token1 regex

[NMz][A-Za-z0-9]{23}\.[A-Za-z0-9]{6}\.[A-Za-z0-9]{27}

JWT1 regex

eyJ[A-Za-z0-9_\-]{8,}\.[A-Za-z0-9_\-]{8,}\.[A-Za-z0-9_\-]*

Private_Key_Block1 regex

-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----

Authorization_Header2 regex

(?i)basic\s+[A-Za-z0-9_\-:\.=]{16,}(?i)bearer\s+[A-Za-z0-9_\-:\.=]{16,}

Password_In_URL1 regex

://[A-Za-z0-9_\-]+:[A-Za-z0-9_@!#$%^&*\-]{3,}@

Generic_API_Key1 regex

(?i)(?:api[_-]?key|apikey|app[_-]?key|access[_-]?key)[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z\-_]{8,}[\'"]

Generic_Secret1 regex

(?i)(?:secret|password|passwd|pwd|pass)[a-z_-]*[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z\-_!@#$%^&*]{8,}[\'"]

Generic_Token1 regex

(?i)token[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z\-_.=+]{8,}[\'"]

Cloud_OSS_Key1 regex

(?i)(?:oss|cos|s3|storage)[_-]?(?:access[_-]?(?:key|id)|secret|key)[a-z]*[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z\-_]{8,}[\'"]

WeChat_SDK2 regex

(?i)(?:wx|wechat|weixin)[_-]?(?:app[_-]?secret|secret)[\'"]?\s*[:=]\s*[\'"][0-9a-f]{32}[\'"](?i)(?:app[_-]?id)[\'"]?\s*[:=]\s*[\'"]wx[0-9a-f]{16}[\'"]

Alipay_SDK2 regex

(?i)(?:alipay|ali)[_-]?(?:app[_-]?id|pid|merchant[_-]?id)[\'"]?\s*[:=]\s*[\'"]\d{16}[\'"](?i)(?:alipay|ali)[_-]?(?:private[_-]?key|secret)[\'"]?\s*[:=]\s*[\'"]MIIC[a-zA-Z0-9+/=]{50,}[\'"]

Weibo_SDK1 regex

(?i)(?:weibo|sina)[_-]?(?:app[_-]?key|secret)[\'"]?\s*[:=]\s*[\'"][0-9a-f]{10,32}[\'"]

Database_Auth2 regex

(?i)(?:mongo(?:db)?|postgres(?:ql)?|mysql|mariadb|amqp|rabbitmq)://[^\s"\':]+:[^\s"\']+@[^\s"\']+(?i)redis://:[^\s"\']+@

Huawei_Cloud1 regex

(?i)(?:huawei|hw)[_-]?(?:ak|access[_-]?key)[\'"]?\s*[:=]\s*[\'"][A-Z0-9]{10,}[\'"]

Azure_Storage1 regex

AccountKey=[A-Za-z0-9+/=]{50,}

AWS_SecretKey1 regex

(?i)aws[_-]?secret[_-]?access[_-]?key[\'"]?\s*[:=]\s*[\'"][A-Za-z0-9/+=]{40}[\'"]

Sentry_DSN1 regex

https://[0-9a-f]{32}@[0-9a-f]{16}\.ingest\.sentry\.io

AI_OpenAI1 regex

sk-(?!ant-)(?:proj-)?[a-zA-Z0-9_-]{20,}

AI_Anthropic1 regex

sk-ant-(?:api03-)?[a-zA-Z0-9_-]{20,}

AI_HuggingFace1 regex

hf_[a-zA-Z0-9]{20,}

AI_DashScope1 regex

(?i)(?:dashscope|qwen|tongyi)[_-]?(?:key|secret)[\'"]?\s*[:=]\s*[\'"]sk-[a-zA-Z0-9]{10,}[\'"]

AI_GLM1 regex

(?i)(?:zhipu|glm|chatglm)[_-]?(?:key|api[_-]?key)[\'"]?\s*[:=]\s*[\'"]\w{6,12}\.[a-zA-Z0-9]{8,}[\'"]

AI_Baidu_ERNIE1 regex

(?i)(?:ernie|wenxin|baidu[_-]?ai|千帆)[_-]?(?:secret[_-]?key)[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z]{20,}[\'"]

Map_AMap1 regex

(?i)(?:amap|gaode|高德)[_-]?(?:key|api[_-]?key|secret)[\'"]?\s*[:=]\s*[\'"][0-9a-f]{32}[\'"]

Map_Baidu1 regex

(?i)(?:bmap|baidu[_-]?map|百度地图)[_-]?(?:ak|api[_-]?key|sn)[\'"]?\s*[:=]\s*[\'"][0-9a-zA-Z]{24}[\'"]

Map_Tencent1 regex

(?i)(?:qq[_-]?map|tencent[_-]?map|腾讯地图)[_-]?(?:key|sk)[\'"]?\s*[:=]\s*[\'"][0-9A-Z]{26,32}[\'"]

Map_Box1 regex

(?:pk|sk)\.eyJ[a-zA-Z0-9._-]{40,}

AI_DeepSeek2 regex

(?i)deepseek[_-]?(?:key|api[_-]?key|token)[\'"]?\s*[:=]\s*[\'"]sk-[a-zA-Z0-9]{20,}[\'"]api\.deepseek\.com

AI_Moonshot2 regex

(?i)(?:moonshot|kimi)[_-]?(?:key|api[_-]?key|token)[\'"]?\s*[:=]\s*[\'"]sk-[a-zA-Z0-9]{20,}[\'"]api\.moonshot\.cn

AI_MiniMax2 regex

(?i)minimax[_-]?(?:key|api[_-]?key|token)[\'"]?\s*[:=]\s*[\'"]eyJ[a-zA-Z0-9._-]{20,}[\'"]api\.minimaxi?\.chat

AI_Volcengine2 regex

(?i)(?:volcengine|doubao|huoshan|ark)[_-]?(?:key|api[_-]?key|token|secret)[\'"]?\s*[:=]\s*[\'"][a-zA-Z0-9\-_.]{16,}[\'"]ark\.cn-[a-z]+\.volces\.com

AI_SiliconCloud2 regex

(?i)silicon(?:cloud|flow)[_-]?(?:key|api[_-]?key)[\'"]?\s*[:=]\s*[\'"]sk-[a-zA-Z0-9]{20,}[\'"]api\.siliconflow\.cn

AI_Iflytek_Spark1 regex

(?i)(?:spark|xunfei|iflytek)[_-]?(?:api[_-]?key|api[_-]?secret)[\'"]?\s*[:=]\s*[\'"][0-9a-f]{16,}[\'"]

AI_Groq1 regex

gsk_[a-zA-Z0-9]{20,}

AI_OpenRouter1 regex

sk-or-(?:v1-)?[a-zA-Z0-9-]{20,}

AI_Together1 regex

tgp_[a-zA-Z0-9_]{20,}

AI_Endpoints7 regex

https?://api\.(?:openai|deepseek|anthropic|groq|together)\.com[/\w.-]*https?://api\.(?:moonshot\.cn|minimaxi?\.chat|siliconflow\.cn)[/\w.-]*https?://dashscope\.aliyuncs\.com[/\w.-]*https?://ark\.cn-[a-z]+\.volces\.com[/\w.-]*https?://open\.bigmodel\.cn[/\w.-]*https?://aip\.baidubce\.com[/\w.-]*https?://api\.minimax\.chat[/\w.-]*

Coding_AI1 regex

(?i)(?:cursor|windsurf|codeium|tabnine|copilot|jetbrains[_-]?ai|cody|sourcegraph|augment)[_-]?(?:key|token|api[_-]?key)[\'"]?\s*[:=]\s*[\'"][a-zA-Z0-9\-_.=+]{16,}[\'"]

Firebase_Config1 regex

(?i)firebase[_-]?(?:api[_-]?key|config)[\'"]?\s*[:=]\s*[\'"][A-Za-z0-9\-_]{30,}[\'"]

Rule names and descriptions are kept in their original Chinese as they appear in the shipped configuration.

Contributing Rules

New rules are welcome — new cloud-provider credentials, PII types, component / packer signatures, sensitive permissions, etc. Two ways to submit:

1. Issue (recommended): open an issue with the rule submission template — category, regex, rationale and test cases.
2. Direct PR: edit shared/community-rules.ts in the site repo and append entries following the in-file example.

Requirements (review criteria):

• Python re syntax, same as the program; provide both a should-match and a should-NOT-match sample to avoid false positives.
• Credential / PII rules need a rationale (official docs, public format spec, or real samples).
• Component / packer rules need the package identifier (or binary marker) plus a risk note; attach the CVE id and safe version when available.

Once merged, rules appear in the "Community Rules" section above; durable ones get baked into the built-in config with the next program release and synced back to the official list.