Skip to content

Make `keywords` optimization work automatically in Secret Detection rules

Proposal

Secret Detection now supports the use of keywords in rule blocks to trigger an exact string match before regexps are even evaluated. It would be better to have this work transparently, that is, not to require manual specification of keywords values. The optimization should instead apply automatically based on the contents of the pattern. Doing so removes a potential source of errors when keywords are not kept in sync with the detection pattern.