The user requests a new detector for Gitea API tokens, which are 40-character lowercase hexadecimal strings. This would enhance secret detection for Gitea users.
Description Request a new detector for Gitea API tokens. Gitea is a widely-used self-hosted Git service (similar to GitHub/GitLab) with a public hosted instance at gitea.com. API tokens are 40-character lowercase hexadecimal strings that provide authenticated access to repositories, organizations, issues, and administrative functions. Preferred Solution Add a detector that identifies Gitea API tokens. Tokens commonly appear with these variable names: - GITEA_TOKEN - GITEA_API_TOKEN - GITEA_ACCESS_TOKEN Suggested regex pattern: (?i)(?:gitea[_-]?(?:api[_-]?)?(?:access[_-]?)?token)\s*[:=]\s*["']?([a-f0-9]{40})["']? Additionally, tokens appear in git remote URLs and Authorization headers: https://<username>:<token>@gitea.com/owner/repo.git Authorization: token <token> Verification Tokens can be verified against any Gitea instance API. For gitea.com: curl -s -H "Authorization: token <TOKEN>" "https://gitea.com/api/v1/user" ┌──────────────────┬─