← all rules

sensitive-file/keepass

KeePass database

criticalSensitive filesensitive-file

What it detects

KeePass password database file (.kdbx).

Remediation

Remove from repo immediately and rotate every entry inside it.

How it runs

Path / basename / content-header match. No content body is stored — only the path.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.