The user requests a new detector for Codeberg API tokens, which are 40-character lowercase hexadecimal strings. This would enhance secret detection for Codeberg users.
Description Request a new detector for Codeberg API tokens. Codeberg is a non-profit, privacy-focused Git forge hosting significant open-source projects including FSFE, KDE community projects, and Libreoffice extensions. Tokens are 40-character lowercase hexadecimal strings that provide authenticated API access. Preferred Solution Add a detector that identifies Codeberg API tokens. Tokens commonly appear with these variable names: - CODEBERG_TOKEN - CODEBERG_API_TOKEN - CODEBERG_ACCESS_TOKEN Suggested regex pattern: (?i)(?:codeberg[_-]?(?:api[_-]?)?(?:access[_-]?)?token)\s*[:=]\s*["']?([a-f0-9]{40})["']? Tokens also appear in git remote URLs and Authorization headers: https://<username>:<token>@codeberg.org/owner/repo.git Authorization: token <token> Verification curl -s -H "Authorization: token <TOKEN>" "https://codeberg.org/api/v1/user" ┌──────────────────┬───────────────────────┐ │ Response │ Meaning │ ├──────────────