SAST Rules
Exhaustive, high-fidelity hardcoded-secret detection rules grouped by category.
Vulnetix detects hardcoded credentials, API keys, tokens and private keys across source code, configuration, binaries (via printable-string and EXIF extraction) and full git history. Each rule runs a cheap keyword/prefix prefilter, extracts the candidate token, then applies allowlist and Shannon-entropy filtering to suppress false positives before reporting a SARIF finding.