support quay robot token pattern about ripsecrets HOT 3 CLOSED

This particular pattern might be overly susceptible to false positives, but maybe sufficient to only check within word-boundaries, "\b[A-Z0-9]{64}\b"

from ripsecrets.

Seems awfully slow too 😓 . Seeing almost 100x runtime overhead :/

from ripsecrets.

Hi @jmelahman, for patterns without a predefined prefix, ripsecrets relies on the random secret detector (found here: https://github.com/sirwart/ripsecrets/blob/main/src/matcher/mod.rs#L9). This will catch these tokens as long as they're on the same line as something that indicates it's a secret (such as "token", "secret", or "password").

from ripsecrets.