adobe.go 1.2 KB

123456789101112131415161718192021222324252627282930313233343536373839
  1. package rules
  2. import (
  3. "github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
  4. "github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
  5. "github.com/zricethezav/gitleaks/v8/config"
  6. )
  7. func AdobeClientID() *config.Rule {
  8. // define rule
  9. r := config.Rule{
  10. Description: "Detected a pattern that resembles an Adobe OAuth Web Client ID, posing a risk of compromised Adobe integrations and data breaches.",
  11. RuleID: "adobe-client-id",
  12. Regex: utils.GenerateSemiGenericRegex([]string{"adobe"}, utils.Hex("32"), true),
  13. Keywords: []string{"adobe"},
  14. }
  15. // validate
  16. tps := []string{
  17. utils.GenerateSampleSecret("adobe", secrets.NewSecret(utils.Hex("32"))),
  18. }
  19. return utils.Validate(r, tps, nil)
  20. }
  21. func AdobeClientSecret() *config.Rule {
  22. // define rule
  23. r := config.Rule{
  24. Description: "Discovered a potential Adobe Client Secret, which, if exposed, could allow unauthorized Adobe service access and data manipulation.",
  25. RuleID: "adobe-client-secret",
  26. Regex: utils.GenerateUniqueTokenRegex(`(p8e-)(?i)[a-z0-9]{32}`, true),
  27. Keywords: []string{"p8e-"},
  28. }
  29. // validate
  30. tps := []string{
  31. "adobeClient := \"p8e-" + secrets.NewSecret(utils.Hex("32")) + "\"",
  32. }
  33. return utils.Validate(r, tps, nil)
  34. }