Просмотр исходного кода

Update authress.go to include alternate form account dash (-) (#1224)

Warren Parad 2 лет назад
Родитель
Сommit
3cbcda20d2
2 измененных файлов с 4 добавлено и 3 удалено
  1. 3 2
      cmd/generate/config/rules/authress.go
  2. 1 1
      config/gitleaks.toml

+ 3 - 2
cmd/generate/config/rules/authress.go

@@ -8,12 +8,13 @@ import (
 )
 
 func Authress() *config.Rule {
-	// define rule
+	// Rule Definition
+	// (Note: When changes are made to this, rerun `cd cmd/generate/config && go run main.go` and commit the config/gitleaks.toml file
 	r := config.Rule{
 		Description: "Authress Service Client Access Key",
 		RuleID:      "authress-service-client-access-key",
 		SecretGroup: 1,
-		Regex:       generateUniqueTokenRegex(`(?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc_[a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120}`),
+		Regex:       generateUniqueTokenRegex(`(?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120}`),
 		Keywords:    []string{"sc_", "ext_", "scauth_", "authress_"},
 	}
 

+ 1 - 1
config/gitleaks.toml

@@ -122,7 +122,7 @@ keywords = [
 [[rules]]
 id = "authress-service-client-access-key"
 description = "Authress Service Client Access Key"
-regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc_[a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
 secretGroup = 1
 keywords = [
     "sc_","ext_","scauth_","authress_",