Просмотр исходного кода

Update stripe rule to not alert on publishable keys (#1320)

* Update stripe rule to not alert on publishable keys

* run go gen

---------

Co-authored-by: Erin Browning <ebrowning@makenotion.com>
Co-authored-by: Zachary Rice <zachary.rice@trufflesec.com>
ebrown 2 лет назад
Родитель
Сommit
afe046b3b4
2 измененных файлов с 3 добавлено и 5 удалено
  1. 1 3
      cmd/generate/config/rules/stripe.go
  2. 2 2
      config/gitleaks.toml

+ 1 - 3
cmd/generate/config/rules/stripe.go

@@ -10,12 +10,10 @@ func StripeAccessToken() *config.Rule {
 	r := config.Rule{
 		Description: "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.",
 		RuleID:      "stripe-access-token",
-		Regex:       generateUniqueTokenRegex(`(sk|pk)_(test|live)_[0-9a-z]{10,32}`, true),
+		Regex:       generateUniqueTokenRegex(`(sk)_(test|live)_[0-9a-z]{10,32}`, true),
 		Keywords: []string{
 			"sk_test",
-			"pk_test",
 			"sk_live",
-			"pk_live",
 		},
 	}
 

+ 2 - 2
config/gitleaks.toml

@@ -2688,9 +2688,9 @@ keywords = [
 [[rules]]
 id = "stripe-access-token"
 description = "Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data."
-regex = '''(?i)\b((sk|pk)_(test|live)_[0-9a-z]{10,32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+regex = '''(?i)\b((sk)_(test|live)_[0-9a-z]{10,32})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
 keywords = [
-    "sk_test","pk_test","sk_live","pk_live",
+    "sk_test","sk_live",
 ]
 
 [[rules]]