// Detected
const accessKey = "AKIAIOSFODNN7EXAMPLE";
const secretKey = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY";

// All detected (example values)
const stripe = {
  secret: "sk_test_EXAMPLEKEY123456789...",
  publishable: "pk_test_EXAMPLEKEY123456789...",
  webhook: "whsec_EXAMPLEWEBHOOK123..."
};

// All detected (example values)
const dbs = {
  pg: "postgres://admin:examplepass@db.internal:5432/app",
  mongo: "mongodb+srv://user:examplepass@cluster.example.net/db",
  redis: "redis://:examplepass@cache.internal:6379"
};

// Detected (this is the standard example JWT from jwt.io - not a real token)
const jwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U";

// All detected
const password = "secret123";
const db_password = "secret123";
const PASSWORD = "secret123";
const userPassword = "secret123";
const api_key = "abc123";
const apiSecret = "xyz789";

// NOT detected (not suspicious names)
const username = "admin";
const greeting = "hello";
const count = 42;

# config.yaml - all detected
database:
  password: "secret123"     # Detected (key is "password")
  secret: "abc123"          # Detected (key is "secret")
  api_key: "xyz789"         # Detected (key is "api_key")

  host: "localhost"         # NOT detected
  port: 5432                # NOT detected
  name: "myapp"             # NOT detected

# .env - all detected
DATABASE_PASSWORD=secret123
API_KEY=abc123
JWT_SECRET=xyz789

# NOT detected
NODE_ENV=production
PORT=3000
DEBUG=true