Просмотр исходного кода

adding access to generic rule keywords and identifiers

Zachary 3 лет назад
Родитель
Сommit
1fc27eebda
2 измененных файлов с 4 добавлено и 2 удалено
  1. 2 0
      cmd/generate/config/rules/generic.go
  2. 2 2
      config/gitleaks.toml

+ 2 - 0
cmd/generate/config/rules/generic.go

@@ -18,6 +18,7 @@ func GenericCredential() *config.Rule {
 			"passwd",
 			"password",
 			"auth",
+			"access",
 		}, `[0-9a-z\-_.=]{10,150}`),
 		SecretGroup: 1,
 		Keywords: []string{
@@ -29,6 +30,7 @@ func GenericCredential() *config.Rule {
 			"passwd",
 			"password",
 			"auth",
+			"access",
 		},
 		Entropy: 3.5,
 		Allowlist: config.Allowlist{

+ 2 - 2
config/gitleaks.toml

@@ -1139,11 +1139,11 @@ keywords = [
 [[rules]]
 description = "Generic API Key"
 id = "generic-api-key"
-regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)'''
+regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)'''
 secretGroup = 1
 entropy = 3.5
 keywords = [
-    "key","api","token","secret","client","passwd","password","auth",
+    "key","api","token","secret","client","passwd","password","auth","access",
 ]
 [rules.allowlist]
 stopwords= [