Institutional Repository UIN Sunan Kalijaga YogyakartaRANCANG BANGUN EKSTENSI VISUAL STUDIO CODE UNTUK DETEKSI DINI HARCODED CREDENTIAL MENGGUNAKAN METODE PATTERN MATCHING (REGEX) DAN SHANNON ENTROPYNIM.: 22106050053Aswangga SujatiauthorHardcoded credentials embedded in source code can pose security risks because credentials stored directly in source code may be exposed before they are identified by developers. This research aims to design and develop a Visual Studio Code extension named CredGuard that applies the Shift-Left Security concept to detect hardcoded credentials automatically and in real time during the coding process. The research employs the Extreme Programming (XP) methodology, consisting of iterative planning, design, coding, and testing activities. CredGuard combines Pattern Matching based on Regular Expression (Regex) to detect credentials with specific patterns and Shannon Entropy to analyze strings with high levels of randomness. Testing was conducted using Black-box Testing to verify system functionality and accuracy evaluation using a confusion matrix on 300 samples consisting of 150 Secret and 150 Non-Secret samples. The final evaluation resulted in a Precision of 80.12%, a Recall of 86.00%, and an F1-Score of 82.96%. These results indicate that CredGuard is capable of detecting hardcoded credentials in five supported file types, namely JavaScript, TypeScript, Python, PHP, and .env, with improved detection performance after refinement in the third iteration. Based on the results, CredGuard can be used as an early hardcoded credential detection mechanism within the Visual Studio Code development environment by combining pattern-based detection and string randomness analysis.005.12 Software System Analysis and Design/Sistem Analisa dan Desain Perangkat Lunak2026-08-19UIN SUNAN KALIJAGA YOGYAKARTA;FAKULTAS SAINS DAN TEKNOLOGIThesis

For work being deposited by its own author: In self-archiving this collection of files and associated bibliographic metadata, I grant Institutional Repository UIN Sunan Kalijaga Yogyakarta the right to store them and to make them permanently available publicly for free on-line. I declare that this material is my own intellectual property and I understand that Institutional Repository UIN Sunan Kalijaga Yogyakarta does not assume any responsibility if there is any breach of copyright in distributing these files or metadata. (All authors are urged to prominently assert their copyright on the title page of their work.)

For work being deposited by someone other than its author: I hereby declare that the collection of files and associated bibliographic metadata that I am archiving at Institutional Repository UIN Sunan Kalijaga Yogyakarta) is in the public domain. If this is not the case, I accept full responsibility for any breach of copyright that distributing these files or metadata may entail.

Clicking on the deposit button indicates your agreement to these terms.