sarif_simple.sarif 5.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
  1. {
  2. "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  3. "version": "2.1.0",
  4. "runs": [
  5. {
  6. "tool": {
  7. "driver": {
  8. "name": "gitleaks",
  9. "semanticVersion": "v8.0.0",
  10. "informationUri": "https://github.com/gitleaks/gitleaks",
  11. "rules": [
  12. {
  13. "id": "aws-access-key",
  14. "shortDescription": {
  15. "text": "AWS Access Key"
  16. }
  17. },
  18. {
  19. "id": "aws-secret-key",
  20. "shortDescription": {
  21. "text": "AWS Secret Key"
  22. }
  23. },
  24. {
  25. "id": "aws-mws-key",
  26. "shortDescription": {
  27. "text": "AWS MWS key"
  28. }
  29. },
  30. {
  31. "id": "facebook-secret-key",
  32. "shortDescription": {
  33. "text": "Facebook Secret Key"
  34. }
  35. },
  36. {
  37. "id": "facebook-client-id",
  38. "shortDescription": {
  39. "text": "Facebook Client ID"
  40. }
  41. },
  42. {
  43. "id": "twitter-secret-key",
  44. "shortDescription": {
  45. "text": "Twitter Secret Key"
  46. }
  47. },
  48. {
  49. "id": "twitter-client-id",
  50. "shortDescription": {
  51. "text": "Twitter Client ID"
  52. }
  53. },
  54. {
  55. "id": "github-pat",
  56. "shortDescription": {
  57. "text": "Github Personal Access Token"
  58. }
  59. },
  60. {
  61. "id": "github-oauth",
  62. "shortDescription": {
  63. "text": "Github OAuth Access Token"
  64. }
  65. },
  66. {
  67. "id": "github-app",
  68. "shortDescription": {
  69. "text": "Github App Token"
  70. }
  71. },
  72. {
  73. "id": "github-refresh",
  74. "shortDescription": {
  75. "text": "Github Refresh Token"
  76. }
  77. },
  78. {
  79. "id": "linkedin-client",
  80. "shortDescription": {
  81. "text": "LinkedIn Client ID"
  82. }
  83. },
  84. {
  85. "id": "linkedin-secret",
  86. "shortDescription": {
  87. "text": "LinkedIn Secret Key"
  88. }
  89. },
  90. {
  91. "id": "slack",
  92. "shortDescription": {
  93. "text": "Slack"
  94. }
  95. },
  96. {
  97. "id": "apkey",
  98. "shortDescription": {
  99. "text": "Asymmetric Private Key"
  100. }
  101. },
  102. {
  103. "id": "google",
  104. "shortDescription": {
  105. "text": "Google (GCP) Service Account"
  106. }
  107. },
  108. {
  109. "id": "google",
  110. "shortDescription": {
  111. "text": "Google (GCP) Service Account"
  112. }
  113. },
  114. {
  115. "id": "heroku",
  116. "shortDescription": {
  117. "text": "Heroku API key"
  118. }
  119. },
  120. {
  121. "id": "mailchimp",
  122. "shortDescription": {
  123. "text": "MailChimp API key"
  124. }
  125. },
  126. {
  127. "id": "mailgun",
  128. "shortDescription": {
  129. "text": "Mailgun API key"
  130. }
  131. },
  132. {
  133. "id": "paypal",
  134. "shortDescription": {
  135. "text": "PayPal Braintree access token"
  136. }
  137. },
  138. {
  139. "id": "piacatic",
  140. "shortDescription": {
  141. "text": "Picatic API key"
  142. }
  143. },
  144. {
  145. "id": "sendgrid",
  146. "shortDescription": {
  147. "text": "SendGrid API Key"
  148. }
  149. },
  150. {
  151. "id": "sidekiq-secret",
  152. "shortDescription": {
  153. "text": "Sidekiq Secret"
  154. }
  155. },
  156. {
  157. "id": "sidekiq-sensitive-url",
  158. "shortDescription": {
  159. "text": "Sidekiq Sensitive URL"
  160. }
  161. },
  162. {
  163. "id": "slack-webhook",
  164. "shortDescription": {
  165. "text": "Slack Webhook"
  166. }
  167. },
  168. {
  169. "id": "stripe",
  170. "shortDescription": {
  171. "text": "Stripe API key"
  172. }
  173. },
  174. {
  175. "id": "square",
  176. "shortDescription": {
  177. "text": "Square access token"
  178. }
  179. },
  180. {
  181. "id": "square-oauth",
  182. "shortDescription": {
  183. "text": "Square OAuth secret"
  184. }
  185. },
  186. {
  187. "id": "twilio",
  188. "shortDescription": {
  189. "text": "Twilio API key"
  190. }
  191. },
  192. {
  193. "id": "dynatrace",
  194. "shortDescription": {
  195. "text": "Dynatrace ttoken"
  196. }
  197. },
  198. {
  199. "id": "shopify",
  200. "shortDescription": {
  201. "text": "Shopify shared secret"
  202. }
  203. },
  204. {
  205. "id": "shopify-access",
  206. "shortDescription": {
  207. "text": "Shopify access token"
  208. }
  209. },
  210. {
  211. "id": "shopify-custom",
  212. "shortDescription": {
  213. "text": "Shopify custom app access token"
  214. }
  215. },
  216. {
  217. "id": "shopify-private",
  218. "shortDescription": {
  219. "text": "Shopify private app access token"
  220. }
  221. },
  222. {
  223. "id": "pypi",
  224. "shortDescription": {
  225. "text": "PyPI upload token"
  226. }
  227. }
  228. ]
  229. }
  230. },
  231. "results": [
  232. {
  233. "message": {
  234. "text": "test-rule has detected secret for file auth.py at commit 0000000000000000."
  235. },
  236. "ruleId": "test-rule",
  237. "locations": [
  238. {
  239. "physicalLocation": {
  240. "artifactLocation": {
  241. "uri": "auth.py"
  242. },
  243. "region": {
  244. "startLine": 1,
  245. "startColumn": 1,
  246. "endLine": 2,
  247. "endColumn": 2,
  248. "snippet": {
  249. "text": "a secret"
  250. }
  251. }
  252. }
  253. }
  254. ],
  255. "partialFingerprints": {
  256. "commitSha": "0000000000000000",
  257. "email": "johndoe@gmail.com",
  258. "author": "John Doe",
  259. "date": "10-19-2003",
  260. "commitMessage": "opps"
  261. },
  262. "properties": {
  263. "tags": [
  264. "tag1",
  265. "tag2",
  266. "tag3"
  267. ]
  268. }
  269. }
  270. ]
  271. }
  272. ]
  273. }