Skip to content

Improve Secret Detection rule "Heroku API Key"

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Problem

Real examples for rule Heroku API Key all include a prefix, which we are not leveraging in the pattern.

Solution

Update the regex to detect only the prefixed secret, not requiring a particular assignment-like structure.

Edited by 🤖 GitLab Bot 🤖