Define one custom pattern rule per line using: ruleId|title|severity|pattern|matchingGroup(optional).

Example: oracle-connection-url|Oracle connection string contains a hardcoded password|HIGH|(?i)\b(?:jdbc:)?oracle:[^\s'"<>]+password=([^;&\s'"<>]+)|1

Use \| for a literal pipe inside the title or pattern. Custom pattern rules use the standard credentials recommendation and are applied to both job configuration and inline Pipeline scans.