builtin

Overview ¶

Command builtin derives the compiled builtin secret value-patterns from patterns.toml and emits a generated Go source file (patterns_builtin_gen.go) for package scanner.

Unlike the gitleaks generator, every [[rules]] entry is carried through verbatim (no admit filtering): patterns.toml is the curated set. id and regex map onto ValuePattern; description/confidence/tags/entropy/keywords are documentation/pre-filter hints that value-shape matching does not use.

Regenerate with: go generate ./pkg/scanner