Dirty Word Scanner

Abstract

SAND2025-09142O Dirty Word Scanner helps prevent the accidental inclusion of sensitive terms by scaning files in repositories to catch "dirty words" before they are committed. While there are existing solutions focused on passwords and API keys, this tool offers additional features tailored to specific security needs. It will function as a standalone tool, incorporating advanced capabilities from similar tools to provide a comprehensive solution. This tool can unpack HDF5 files and examine their contents. It can display image, audio, and visual files to the user and request a manual determination of whether they are safe. It can also detect arbitrary binary files and ask the user to verify that they're safe. The tool enables sophisticated whitelisting of strings and regular expressions for cases where a term is sensitive in certain contexts but not in others. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.