{
  "id": "hashicorp_vault_token",
  "name": "HashiCorp Vault token",
  "status": "draft",
  "doc": "Token that authenticates a client to HashiCorp Vault. Since Vault 1.10 the prefix names the token type - hvs. for service tokens, hvb. for batch tokens and hvr. for recovery tokens - and at least 24 random characters follow; service tokens in practice are much longer. Vault 1.9 and earlier used the prefixes s., b. and r., which are too short to recognize reliably and are not covered.",
  "parent": {
    "type": "access_token"
  },
  "categories": [
    {
      "id": "secrets",
      "name": "Secrets and credentials (passwords, keys, tokens)"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "classification": "identifier",
  "regexp": "^hv[sbr]\\.[A-Za-z0-9_.-]{24,}$",
  "examples": [
    {
      "value": "s.ExampleTokenNotReal0000",
      "valid": false,
      "description": "Legacy format of Vault 1.9 and earlier"
    },
    {
      "value": "hvs.TooShort",
      "valid": false,
      "description": "Too short"
    }
  ],
  "links": [
    {
      "type": "doc",
      "url": "https://developer.hashicorp.com/vault/docs/concepts/tokens"
    },
    {
      "type": "other",
      "url": "https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml"
    },
    {
      "type": "other",
      "url": "https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/hashicorpvault/hashicorpvaulttoken/hashicorpvaulttoken.go"
    },
    {
      "type": "other",
      "url": "https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/hashicorpvault/hashicorpvaultbatchtoken/hashicorpvaultbatchtoken.go"
    }
  ],
  "type": "datatype",
  "translations": {}
}