Richard Gomez
961f2e674f
feat(generic-api-key): tune false positives (#1606)
|
1 gadu atpakaļ | |
|---|---|---|
| .. | ||
| 1password.go | 1 gadu atpakaļ | |
| adafruit.go | 1 gadu atpakaļ | |
| adobe.go | 1 gadu atpakaļ | |
| age.go | 1 gadu atpakaļ | |
| airtable.go | 1 gadu atpakaļ | |
| algolia.go | 1 gadu atpakaļ | |
| alibaba.go | 1 gadu atpakaļ | |
| asana.go | 1 gadu atpakaļ | |
| atlassian.go | 1 gadu atpakaļ | |
| authress.go | 1 gadu atpakaļ | |
| aws.go | 1 gadu atpakaļ | |
| azure.go | 1 gadu atpakaļ | |
| beamer.go | 1 gadu atpakaļ | |
| bitbucket.go | 1 gadu atpakaļ | |
| bittrex.go | 1 gadu atpakaļ | |
| clojars.go | 1 gadu atpakaļ | |
| cloudflare.go | 1 gadu atpakaļ | |
| codecov.go | 1 gadu atpakaļ | |
| cohere.go | 1 gadu atpakaļ | |
| coinbase.go | 1 gadu atpakaļ | |
| config.tmpl | 1 gadu atpakaļ | |
| confluent.go | 1 gadu atpakaļ | |
| contentful.go | 1 gadu atpakaļ | |
| curl.go | 1 gadu atpakaļ | |
| databricks.go | 1 gadu atpakaļ | |
| datadog.go | 1 gadu atpakaļ | |
| definednetworking.go | 1 gadu atpakaļ | |
| digitalocean.go | 1 gadu atpakaļ | |
| discord.go | 1 gadu atpakaļ | |
| doppler.go | 1 gadu atpakaļ | |
| droneci.go | 1 gadu atpakaļ | |
| dropbox.go | 1 gadu atpakaļ | |
| duffel.go | 1 gadu atpakaļ | |
| dynatrace.go | 1 gadu atpakaļ | |
| easypost.go | 1 gadu atpakaļ | |
| etsy.go | 1 gadu atpakaļ | |
| facebook.go | 1 gadu atpakaļ | |
| fastly.go | 1 gadu atpakaļ | |
| finicity.go | 1 gadu atpakaļ | |
| finnhub.go | 1 gadu atpakaļ | |
| flickr.go | 1 gadu atpakaļ | |
| flutterwave.go | 1 gadu atpakaļ | |
| flyio.go | 1 gadu atpakaļ | |
| frameio.go | 1 gadu atpakaļ | |
| freshbooks.go | 1 gadu atpakaļ | |
| gcp.go | 1 gadu atpakaļ | |
| generic.go | 1 gadu atpakaļ | |
| github.go | 1 gadu atpakaļ | |
| gitlab.go | 1 gadu atpakaļ | |
| gitter.go | 1 gadu atpakaļ | |
| gocardless.go | 1 gadu atpakaļ | |
| grafana.go | 1 gadu atpakaļ | |
| harness.go | 1 gadu atpakaļ | |
| hashicorp.go | 1 gadu atpakaļ | |
| hashicorp_vault.go | 1 gadu atpakaļ | |
| heroku.go | 1 gadu atpakaļ | |
| hubspot.go | 1 gadu atpakaļ | |
| huggingface.go | 1 gadu atpakaļ | |
| infracost.go | 1 gadu atpakaļ | |
| intercom.go | 1 gadu atpakaļ | |
| intra42.go | 1 gadu atpakaļ | |
| jfrog.go | 1 gadu atpakaļ | |
| jwt.go | 1 gadu atpakaļ | |
| kraken.go | 1 gadu atpakaļ | |
| kubernetes.go | 1 gadu atpakaļ | |
| kucoin.go | 1 gadu atpakaļ | |
| launchdarkly.go | 1 gadu atpakaļ | |
| linear.go | 1 gadu atpakaļ | |
| linkedin.go | 1 gadu atpakaļ | |
| lob.go | 1 gadu atpakaļ | |
| mailchimp.go | 1 gadu atpakaļ | |
| mailgun.go | 1 gadu atpakaļ | |
| mapbox.go | 1 gadu atpakaļ | |
| mattermost.go | 1 gadu atpakaļ | |
| messagebird.go | 1 gadu atpakaļ | |
| netlify.go | 1 gadu atpakaļ | |
| newrelic.go | 1 gadu atpakaļ | |
| npm.go | 1 gadu atpakaļ | |
| nuget.go | 1 gadu atpakaļ | |
| nytimes.go | 1 gadu atpakaļ | |
| okta.go | 1 gadu atpakaļ | |
| openai.go | 1 gadu atpakaļ | |
| openshift.go | 1 gadu atpakaļ | |
| plaid.go | 1 gadu atpakaļ | |
| planetscale.go | 1 gadu atpakaļ | |
| postman.go | 1 gadu atpakaļ | |
| prefect.go | 1 gadu atpakaļ | |
| privateai.go | 1 gadu atpakaļ | |
| privatekey.go | 1 gadu atpakaļ | |
| pulumi.go | 1 gadu atpakaļ | |
| pypi.go | 1 gadu atpakaļ | |
| rapidapi.go | 1 gadu atpakaļ | |
| readme.go | 1 gadu atpakaļ | |
| rubygems.go | 1 gadu atpakaļ | |
| scalingo.go | 1 gadu atpakaļ | |
| sendbird.go | 1 gadu atpakaļ | |
| sendgrid.go | 1 gadu atpakaļ | |
| sendinblue.go | 1 gadu atpakaļ | |
| sentry.go | 1 gadu atpakaļ | |
| shippo.go | 1 gadu atpakaļ | |
| shopify.go | 1 gadu atpakaļ | |
| sidekiq.go | 1 gadu atpakaļ | |
| slack.go | 1 gadu atpakaļ | |
| snyk.go | 1 gadu atpakaļ | |
| square.go | 1 gadu atpakaļ | |
| squarespace.go | 1 gadu atpakaļ | |
| stopwords.go | 1 gadu atpakaļ | |
| stripe.go | 1 gadu atpakaļ | |
| sumologic.go | 1 gadu atpakaļ | |
| teams.go | 1 gadu atpakaļ | |
| telegram.go | 1 gadu atpakaļ | |
| travisci.go | 1 gadu atpakaļ | |
| trello.go | 1 gadu atpakaļ | |
| twilio.go | 1 gadu atpakaļ | |
| twitch.go | 1 gadu atpakaļ | |
| twitter.go | 1 gadu atpakaļ | |
| typeform.go | 1 gadu atpakaļ | |
| yandex.go | 1 gadu atpakaļ | |
| zendesk.go | 1 gadu atpakaļ | |
readme.go
package rules
import (
"github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
"github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
"github.com/zricethezav/gitleaks/v8/config"
)
func ReadMe() *config.Rule {
// define rule
r := config.Rule{
RuleID: "readme-api-token",
Description: "Detected a Readme API token, risking unauthorized documentation management and content exposure.",
Regex: utils.GenerateUniqueTokenRegex(`rdme_[a-z0-9]{70}`, false),
Entropy: 2,
Keywords: []string{
"rdme_",
},
}
// validate
tps := []string{
utils.GenerateSampleSecret("api-token", "rdme_"+secrets.NewSecret(utils.AlphaNumeric("70"))),
}
fps := []string{
`const API_KEY = 'rdme_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';`,
}
return utils.Validate(r, tps, fps)
}
import (
"github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
"github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
"github.com/zricethezav/gitleaks/v8/config"
)
func ReadMe() *config.Rule {
// define rule
r := config.Rule{
RuleID: "readme-api-token",
Description: "Detected a Readme API token, risking unauthorized documentation management and content exposure.",
Regex: utils.GenerateUniqueTokenRegex(`rdme_[a-z0-9]{70}`, false),
Entropy: 2,
Keywords: []string{
"rdme_",
},
}
// validate
tps := []string{
utils.GenerateSampleSecret("api-token", "rdme_"+secrets.NewSecret(utils.AlphaNumeric("70"))),
}
fps := []string{
`const API_KEY = 'rdme_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';`,
}
return utils.Validate(r, tps, fps)
}