litellm/enterprise/litellm_enterprise/enterprise_callbacks/secrets_plugins/vault.py
Ishaan Jaff 3130c4f8f9
[Refactor] Move LLM Guard, Secret Detection to Enterprise Pip packagea (#10782)
* refactor: move guardrails to pip

* refactor: move guardrails to pip

* testing fix: move guardrails to pip

* git commit setup_litellm_enterprise_pip
2025-05-13 09:42:22 -07:00

24 lines
653 B
Python

import re
from detect_secrets.plugins.base import RegexBasedDetector
class VaultDetector(RegexBasedDetector):
"""Scans for Vault Batch Tokens and Vault Service Tokens."""
@property
def secret_type(self) -> str:
return "Vault Token"
@property
def denylist(self) -> list[re.Pattern]:
return [
# Vault Batch Token
re.compile(
r"""(?i)\b(hvb\.[a-z0-9_-]{138,212})(?:['|\"|\n|\r|\s|\x60|;]|$)"""
),
# Vault Service Token
re.compile(
r"""(?i)\b(hvs\.[a-z0-9_-]{90,100})(?:['|\"|\n|\r|\s|\x60|;]|$)"""
),
]