QUIRK_BUILDER_CONSOLE_ACTIVE

Advanced Search Query Maker

Select search qualifiers and regex key patterns below. Generate compiled query blocks ready for GitHub Code Search or export to standard scanner files.

Step 1 — Set Scan Scope (Optional)

Specify a user or organization to lock the search parameters, or select Global to build a query for the entire public GitHub index.

Step 2 — Pick what to look for

Toggle any combination. Selected patterns are OR'd together, then AND'd with your scope from Step 1.

0 selected

AI Provider Keys

OpenAIAnthropicGroqGoogle GeminiHuggingFaceCohereMistralReplicatePerplexityStabilityAIOpenRouter

Audio & Voice APIs

ElevenLabsDeepgramAssemblyAIPlayHTMurf AIResemble AISpeechifyLMNTWellSaid LabsOpenAI Whisper

Databases

Mongoose / MongoDBPostgreSQL URIMySQL URIRedis URISupabase KeyPlanetScale

Cloud & Infra

AWS Access KeyGCP KeyAzure KeyFirebaseDigitalOceanHerokuNPM TokenPyPI TokenGitHub TokenJWT Secret

Payments & Comms

StripeTwilioSendGridSlackMailgunDiscord Bot

Frameworks

Django SECRET_KEYRails secret_key_baseLaravel APP_KEYNext.js .env secretsFlask SECRET_KEYExpress session secretSpring datasource pwdWordPress auth keys

CI/CD & Git

GitHub Actions secretGitLab CI variableCircleCI configTravis CI secure envJenkins credentials.xmlBitbucket Pipelines var.git-credentials fileDocker Hub token

Generic / High-risk Patterns

Private Key BlockBasic Auth URLDB Connection Str.env SECRET=

Narrow the search

filename:

path:

extension:

Exclude testsExclude vendor/node_modulesExclude archivedExclude lockfiles

Step 3 — Your query

Pick your filters above, then generate. Copy runs this query — nothing about it can be edited out after copying.

Fill in Step 1 or select Global to generate a query…

Advanced search: Queries are compiled optimized for GitHub Code Search. If you search on GitHub and receive 0 results, ensure you select "Search in code" (rather than repositories) to fetch matching parameters.

Advanced filter snippets

Standalone GitHub search qualifiers, grouped by what they narrow. Click any card to copy it, then paste into your query above — stack as many as you need.

File targeting

Only .env files

filename:.env

Only config folders

path:config

Only Python files

extension:py

Only JS/TS files

extension:js extension:ts

Only YAML configs

extension:yml extension:yaml

Only JSON configs

extension:json

Only Docker files

filename:Dockerfile

Only docker-compose

filename:docker-compose.yml

Only CI/CD workflows

path:.github/workflows

Only Terraform files

extension:tf

Only Kubernetes manifests

extension:yaml path:k8s

Only Postman collections

extension:json filename:postman

Secret-shaped files

.pem / .key files

extension:pem OR extension:key

credentials.json / secrets.yml

filename:credentials.json OR filename:secrets.yml

.npmrc / .pypirc

filename:.npmrc OR filename:.pypirc

AWS credentials file

path:.aws filename:credentials

.env variants

filename:.env.local OR filename:.env.production OR filename:.env.production.local

Kube config

filename:kubeconfig

SSH private keys

filename:id_rsa

Firebase service account

filename:serviceAccountKey.json

Repo scope

Exclude forks

fork:false

Exclude archived repos

archived:false

Exclude tests

-path:test

Exclude node_modules/vendor

-path:node_modules -path:vendor

Exclude lockfiles

-filename:package-lock.json -filename:yarn.lock

Exclude docs/examples

-path:docs -path:examples

Only a specific language

language:python

Repo size under 5MB

size:<5000

Recency & size

Pushed after a date

pushed:>2025-01-01

Pushed in a range

pushed:2025-01-01..2025-12-31

Created after a date

created:>2024-01-01

Not touched in 2yr+

pushed:<2023-01-01

Compound presets — ready to paste as-is

.env, no tests/vendor/lockfiles

filename:.env -path:test -path:node_modules -path:vendor -filename:package-lock.json -filename:yarn.lock

Config secrets, YAML+JSON only

(extension:yml OR extension:yaml OR extension:json) (filename:secrets OR filename:credentials) -path:test

Recent pushes, active repos only

pushed:>2025-01-01 fork:false archived:false

K8s/Terraform infra secrets

(extension:tf OR extension:yaml) (path:k8s OR filename:secrets) -path:test

Audio API keys in .env only

filename:.env (elevenlabs OR deepgram OR assemblyai OR playht OR murf)

Mongoose URIs outside tests

mongodb -path:test -path:node_modules extension:js extension:ts

Copied