diff --git a/packages/dsh-loopx-plugin/src/observer.ts b/packages/dsh-loopx-plugin/src/observer.ts index dcfcf3b3c7..078ec632f6 100644 --- a/packages/dsh-loopx-plugin/src/observer.ts +++ b/packages/dsh-loopx-plugin/src/observer.ts @@ -103,6 +103,8 @@ const SECRET_LIKE_SURFACES = [ /\bxox[baprs]-[a-z0-9-]{10,}/iu, /\baiza[a-z0-9_-]{20,}/iu, /\b(?:sk|rk)_(?:live|test)_[a-z0-9]{12,}/iu, + /\bsk-(?:proj|svcacct|admin)-[a-z0-9_-]{20,}/iu, + /\bsk-ant-[a-z0-9_-]{20,}/iu, /\bnpm_[a-z0-9]{20,}/iu, /\bpypi-[a-z0-9_-]{20,}/iu, /\beyj[a-z0-9_-]{10,}\.[a-z0-9_-]{10,}\.[a-z0-9_-]{10,}\b/iu, diff --git a/packages/dsh-loopx-plugin/tests/observer.spec.ts b/packages/dsh-loopx-plugin/tests/observer.spec.ts index 5cbad823a1..abb9a4f292 100644 --- a/packages/dsh-loopx-plugin/tests/observer.spec.ts +++ b/packages/dsh-loopx-plugin/tests/observer.spec.ts @@ -331,6 +331,10 @@ describe('shadow observer envelopes', () => { ['slack_app_token', slackApp + '123456789012-123456789012-abcdefghijklmnopqrstuvwx'], ['google_api_key', googleKey + 'SyA1234567890abcdefghijklmnopqrstuvw'], ['stripe_restricted_key', stripeRestricted + 'abcdefghijklmnopqrstuvwx'], + ['openai_project_key', 'sk' + '-proj-' + 'a'.repeat(20)], + ['openai_service_account_key', 'sk' + '-svcacct-' + 'a'.repeat(20)], + ['openai_admin_key', 'sk' + '-admin-' + 'a'.repeat(20)], + ['anthropic_key', 'sk' + '-ant-' + 'a'.repeat(20)], ['npm_token', npmToken + 'abcdefghijklmnopqrstuvwxyz0123456789'], ['pypi_token', pypiToken + 'AgEIcHlwaS5vcmcabcdefghijklmnop'], ['api_key_label_without_floor', 'api' + '_key:abc'],