Initial implementation

testfiles/.env

@@ -0,0 +1,8 @@
+AWS_KEY=AKIAIOSFODNN7EXAMPLE
+AWS_SECRET=abcd1234abcd1234abcd1234abcd1234
+
+GITHUB_TOKEN=ghp_ABCDEF1234567890ABCDEF1234567890AB
+
+SLACK_TOKEN=xoxb-1234567890-abcdefghij
+
+DATABASE_URL=postgres://admin:SuperSecret@localhost:5432/prod

testfiles/appSettings.dev.json

@@ -0,0 +1,10 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information"
+    }
+  },
+  "ConnectionStrings": {
+    "DefaultConnection": "Server=localhost;Database=GameDb;Trusted_Connection=true;"
+  }
+}

testfiles/appsettings.json

@@ -0,0 +1,8 @@
+{
+  "ConnectionStrings": {
+    "DefaultConnection": "Server=mydb;Database=Prod;User Id=admin;Password=SuperSecret123;"
+  },
+  "Stripe": {
+    "SecretKey": "sk_live_9x8y7z6w5v4u3t2s"
+  }
+}

testfiles/clean_code.cs

@@ -0,0 +1,5 @@
+public class Config
+{
+    public string ApiKeyName = "access_key";
+    public string TokenDescription = "used for authentication flow";
+}

testfiles/mixed.cs

@@ -0,0 +1,14 @@
+public class Startup
+{
+    // safe config name
+    public const string ApiKeyName = "access_key";
+
+    // suspicious placeholder
+    private string tokenExample = "your_token_here_1234567890abcdef";
+
+    // real secret
+    private string stripeKey = "sk_live_1234567890abcdef";
+
+    // connection string
+    private string db = "Server=prod;Database=Main;User Id=admin;Password=SuperSecret;";
+}

testfiles/mixed.json

@@ -0,0 +1,14 @@
+{
+  "Logging": {
+    "Level": "Debug"
+  },
+  "ApiKeyHint": "use environment variable API_KEY",
+
+  "Stripe": {
+    "Secret": "sk_live_1234567890abcdef"
+  },
+
+  "ConnectionStrings": {
+    "Default": "postgres://user:pass@localhost/db"
+  }
+}

testfiles/mixed.txt

@@ -0,0 +1,9 @@
+This file contains notes about API keys and tokens.
+
+DO NOT COMMIT REAL VALUES.
+
+Example:
+API_KEY=example_value_1234567890
+
+Actual production key:
+ghp_ABCDEF1234567890ABCDEF1234567890AB

testfiles/private.pem

@@ -0,0 +1,4 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEA7examplefakekeydataaaaaaaaaaaaaaaaaaaaa
+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+-----END RSA PRIVATE KEY-----

testfiles/secrets.cs

@@ -0,0 +1,7 @@
+public class Config
+{
+    public string ApiKey = "sk_live_1234567890abcdef";
+    public string Secret = "ghp_ABCDEF1234567890ABCDEF1234567890AB";
+
+    string conn = "Server=db;User Id=admin;Password=123456;";
+}

testfiles/suspicious_config.cs

@@ -0,0 +1,5 @@
+public class Settings
+{
+    public string ApiKeyPlaceholder = "your_api_key_here_123456789";
+    public string TokenExample = "example_token_value_1234567890abcdef";
+}

testfiles/suspicious_env.txt

@@ -0,0 +1,5 @@
+# development environment
+
+DATABASE_URL=postgres://user:password@localhost:5432/db
+API_KEY=replace_this_value
+SECRET_TOKEN=example_only_but_long_enough_1234567890

testfiles/suspicious_log.txt

@@ -0,0 +1,4 @@
+
+User login failed
+Auth token received: abcdef1234567890abcdef1234567890abcdef
+Request processed successfully