|
@@ -120,14 +120,14 @@ func GitlabPatRoutable() *config.Rule {
|
|
|
RuleID: "gitlab-pat-routable",
|
|
RuleID: "gitlab-pat-routable",
|
|
|
Description: "Identified a GitLab Personal Access Token (routable), risking unauthorized access to GitLab repositories and codebase exposure.",
|
|
Description: "Identified a GitLab Personal Access Token (routable), risking unauthorized access to GitLab repositories and codebase exposure.",
|
|
|
Regex: regexp.MustCompile(`glpat-[0-9a-zA-Z_-]{27,300}\.[0-9a-z]{2}[0-9a-z]{7}`),
|
|
Regex: regexp.MustCompile(`glpat-[0-9a-zA-Z_-]{27,300}\.[0-9a-z]{2}[0-9a-z]{7}`),
|
|
|
- Entropy: 3,
|
|
|
|
|
|
|
+ Entropy: 4,
|
|
|
Keywords: []string{"glpat-"},
|
|
Keywords: []string{"glpat-"},
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
// validate
|
|
// validate
|
|
|
tps := utils.GenerateSampleSecrets("gitlab", "glpat-"+secrets.NewSecret(utils.AlphaNumeric("27"))+"."+secrets.NewSecret(utils.AlphaNumeric("2"))+secrets.NewSecret(utils.AlphaNumeric("7")))
|
|
tps := utils.GenerateSampleSecrets("gitlab", "glpat-"+secrets.NewSecret(utils.AlphaNumeric("27"))+"."+secrets.NewSecret(utils.AlphaNumeric("2"))+secrets.NewSecret(utils.AlphaNumeric("7")))
|
|
|
fps := []string{
|
|
fps := []string{
|
|
|
- "glpat-XXXXXXXXXXXXXXXXXXX",
|
|
|
|
|
|
|
+ "glpat-xxxxxxxx-xxxxxxxxxxxxxxxxxx.xxxxxxxxx",
|
|
|
}
|
|
}
|
|
|
return utils.Validate(r, tps, fps)
|
|
return utils.Validate(r, tps, fps)
|
|
|
}
|
|
}
|