Detect likely plaintext secrets in config assignments.
\b(api[_-]?key|secret|token)\s*=\s*['"][A-Za-z0-9_-]{16,}['"]api_key="abcDEF0123456789" Match mode="debug" No Match Create high-signal regex signatures for static security scanning with lower false positives and better triage for engineering teams.
A practical review checklist to catch maintainability, performance, and security issues before regex patterns hit production.