Răsfoiți Sursa

fix(meraki): restrict keyword case (#1722)

Richard Gomez 1 an în urmă
părinte
comite
3fdaefdaa3
2 a modificat fișierele cu 5 adăugiri și 5 ștergeri
  1. 4 4
      cmd/generate/config/rules/meraki.go
  2. 1 1
      config/gitleaks.toml

+ 4 - 4
cmd/generate/config/rules/meraki.go

@@ -11,10 +11,9 @@ func Meraki() *config.Rule {
 	r := config.Rule{
 		RuleID:      "cisco-meraki-api-key",
 		Description: "Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface.",
-		Regex: utils.GenerateSemiGenericRegex([]string{"meraki"},
-			`[0-9a-f]{40}`, false),
-		Entropy:  3,
-		Keywords: []string{"meraki"},
+		Regex:       utils.GenerateSemiGenericRegex([]string{`(?-i:[Mm]eraki|MERAKI)`}, `[0-9a-f]{40}`, false),
+		Entropy:     3,
+		Keywords:    []string{"meraki"},
 	}
 
 	// validate
@@ -24,6 +23,7 @@ func Meraki() *config.Rule {
 		`meraki-api-key: acdeFf05b1a6d4c890237bf08c5e6e8d2b4d0f2e`,                           // invalid case
 		`meraki: abdefghjk0123456789mnopqrstuvwx12345678`,                                    // invalid character
 		`meraki_token = 5cb4a5f04cd412fe946667b17f0129ba17aeb2e0c7b5b7264efcebf7d022bfe2R21`, // invalid length
+		`ReactNativeCameraKit: f15a5a04b0f6dc6073e6db0296e6ef2d8b8d2522`,
 	}
 	return utils.Validate(r, tps, fps)
 }

+ 1 - 1
config/gitleaks.toml

@@ -208,7 +208,7 @@ keywords = ["bittrex"]
 [[rules]]
 id = "cisco-meraki-api-key"
 description = "Cisco Meraki is a cloud-managed IT solution that provides networking, security, and device management through an easy-to-use interface."
-regex = '''[\w.-]{0,50}?(?i:[\w.-]{0,50}?(?:meraki)(?:[ \t\w.-]{0,20})[\s'"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[\x60'"\s=]{0,5}([0-9a-f]{40})(?:[\x60'"\s;]|\\[nr]|$)'''
+regex = '''[\w.-]{0,50}?(?i:[\w.-]{0,50}?(?:(?-i:[Mm]eraki|MERAKI))(?:[ \t\w.-]{0,20})[\s'"]{0,3})(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[\x60'"\s=]{0,5}([0-9a-f]{40})(?:[\x60'"\s;]|\\[nr]|$)'''
 entropy = 3
 keywords = ["meraki"]