feat(security-patterns): expand sensitive patterns list to include additional security-related variables
This commit is contained in:
@@ -440,7 +440,9 @@ class EnvironmentVariable extends Model
|
|||||||
{
|
{
|
||||||
$sensitivePatterns = [
|
$sensitivePatterns = [
|
||||||
'PASSWORD', 'SECRET', 'KEY', 'TOKEN', 'API_KEY',
|
'PASSWORD', 'SECRET', 'KEY', 'TOKEN', 'API_KEY',
|
||||||
'DATABASE_URL', 'REDIS_URL', 'PRIVATE'
|
'DATABASE_URL', 'REDIS_URL', 'PRIVATE', 'CREDENTIAL',
|
||||||
|
'AUTH', 'CERTIFICATE', 'ENCRYPTION', 'SALT', 'HASH',
|
||||||
|
'OAUTH', 'JWT', 'BEARER', 'ACCESS', 'REFRESH'
|
||||||
];
|
];
|
||||||
|
|
||||||
foreach ($sensitivePatterns as $pattern) {
|
foreach ($sensitivePatterns as $pattern) {
|
||||||
|
|||||||
Reference in New Issue
Block a user