messagebird.go 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. package rules
  2. import (
  3. "github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
  4. "github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
  5. "github.com/zricethezav/gitleaks/v8/config"
  6. )
  7. func MessageBirdAPIToken() *config.Rule {
  8. // define rule
  9. r := config.Rule{
  10. Description: "Found a MessageBird API token, risking unauthorized access to communication platforms and message data.",
  11. RuleID: "messagebird-api-token",
  12. Regex: utils.GenerateSemiGenericRegex([]string{"message[_-]?bird"}, utils.AlphaNumeric("25"), true),
  13. Keywords: []string{
  14. "messagebird",
  15. "message-bird",
  16. "message_bird",
  17. },
  18. }
  19. // validate
  20. tps := utils.GenerateSampleSecrets("messagebird", secrets.NewSecret(utils.AlphaNumeric("25")))
  21. tps = append(tps, utils.GenerateSampleSecrets("message-bird", secrets.NewSecret(utils.AlphaNumeric("25")))...)
  22. tps = append(tps, utils.GenerateSampleSecrets("message_bird", secrets.NewSecret(utils.AlphaNumeric("25")))...)
  23. return utils.Validate(r, tps, nil)
  24. }
  25. func MessageBirdClientID() *config.Rule {
  26. // define rule
  27. r := config.Rule{
  28. Description: "Discovered a MessageBird client ID, potentially compromising API integrations and sensitive communication data.",
  29. RuleID: "messagebird-client-id",
  30. Regex: utils.GenerateSemiGenericRegex([]string{"message[_-]?bird"}, utils.Hex8_4_4_4_12(), true),
  31. Keywords: []string{
  32. "messagebird",
  33. "message-bird",
  34. "message_bird",
  35. },
  36. }
  37. // validate
  38. tps := utils.GenerateSampleSecrets("MessageBird", "12345678-ABCD-ABCD-ABCD-1234567890AB") // gitleaks:allow
  39. tps = append(tps,
  40. `const MessageBirdClientID = "12345678-ABCD-ABCD-ABCD-1234567890AB"`, // gitleaks:allow
  41. )
  42. return utils.Validate(r, tps, nil)
  43. }