Real-World Code Search Recipes

rg -t ts -t tsx 'console\.log\(' src/

# Locate `console.log` usage across a codebase.

rg -t py -t js '\boldApi\(' .

# Search for an old method across target languages.

rg -t tsx '\buseEffect\b' app/

# Search only the frontend component surface.

rg -i 'select\s+\*' .

# Audit SQL anti-patterns in code or migrations.

rg -P 'https?://\S+' .

# Search for HTTP(S) URLs in source and config.

rg -P 'AKIA[0-9A-Z]{16}' .

# Look for common credential shapes.

rg 'BEGIN (RSA |EC |OPENSSH )?PRIVATE KEY' .

# Detect committed key material.

rg -i 'password|secret|token|api[_-]?key' .env*

# Search environment files for suspicious keys.

rg -P '[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+' .

# Search for three-part dot-separated JWT structures.

rg -i 'id_rsa|id_ed25519|IdentityFile' .

# Inspect code and config for private key usage.

rg '\b5\d\d\b|Internal Server Error|Exception' logs/

# Find common server-side error lines.

rg -o '\[[^\]]+\]\([^\)]+\)' docs/

# Extract or inspect inline links in docs.

rg -t yaml 'image:\s' deploy/ charts/

# Search YAML and Helm files for image tags.

rg -t tf '^resource\s+"aws_' infra/

# Search infrastructure code for a resource type.

rg -t yaml -t json '^\s*operationId:' api/

# Search specs for operation identifiers.