/** * Credential Security Detection Patterns * Detects weak password hashing, hardcoded credentials, and exposed secrets */ export interface CredentialPattern { id: string; name: string; description: string; severity: 'critical' | 'high' | 'medium'; hipaaReference: string; patterns: RegExp[]; negativePatterns?: RegExp[]; recommendation: string; category: string; } /** * CRED-001: Weak Password Hashing Algorithm * Detects MD5, SHA1, SHA256 for password hashing instead of bcrypt/argon2/scrypt */ export declare const WEAK_PASSWORD_HASH: CredentialPattern; /** * CRED-002: Hardcoded Credentials in Code * Detects credentials assigned to string literals */ export declare const HARDCODED_CREDENTIALS: CredentialPattern; /** * CRED-003: Secrets Exposed via NEXT_PUBLIC_ Prefix * Detects sensitive values exposed to client-side via Next.js public env vars */ export declare const NEXT_PUBLIC_SECRETS: CredentialPattern; export declare const ALL_CREDENTIAL_PATTERNS: CredentialPattern[]; //# sourceMappingURL=patterns.d.ts.map