# Recognizer pour clés API et secrets techniques
recognizer_registry:
  recognizers:
    - name: APISecretsRecognizer
      supported_language: fr
      supported_entity: CLE_API_SECRETE
      patterns:
        - name: Clé API générique
          regex: "\\b(?:API[_\\s]?KEY|api[_\\s]?key)\\s*[=:]\\s*[A-Za-z0-9\\-_]{16,64}\\b"
          score: 1.0
        - name: Token d'accès
          regex: "\\b(?:access[_\\s]?token|token)\\s*[=:]\\s*[A-Za-z0-9\\-_\\.]{20,128}\\b"
          score: 0.95
        - name: Secret AWS
          regex: "\\b(?:AWS[_\\s]?SECRET|aws[_\\s]?secret)\\s*[=:]\\s*[A-Za-z0-9/+=]{40}\\b"
          score: 1.0
        - name: Clé privée
          regex: "\\b(?:private[_\\s]?key|secret[_\\s]?key)\\s*[=:]\\s*[A-Za-z0-9\\-_]{16,64}\\b"
          score: 0.95
      context: ["API", "clé", "secret", "token", "authentification", "accès"]