From 8bf738b98244e175fade596be1f8ec0f1ab5cb86 Mon Sep 17 00:00:00 2001 From: edoardottt Date: Wed, 30 Mar 2022 15:30:38 +0200 Subject: [PATCH] update secret regexes --- scanner/secrets.go | 68 +++++++++++++++++++++++----------------------- 1 file changed, 34 insertions(+), 34 deletions(-) diff --git a/scanner/secrets.go b/scanner/secrets.go index d0c62e9..34ba825 100644 --- a/scanner/secrets.go +++ b/scanner/secrets.go @@ -85,105 +85,105 @@ func GetSecretRegexes() []Secret { { "Facebook Secret Key", "Facebook Secret Key", - "(?i)(facebook|fb)(.{0,20})?(?-i)['\"][0-9a-f]{32}['\"]", + `(?i)(facebook|fb)(.{0,20})?(?-i)['\"][0-9a-f]{32}['\"]`, []string{"facebook.com/", "facebook.svg"}, "?", }, { "Facebook Client ID", "Facebook Client ID", - "(?i)(facebook|fb)(.{0,20})?['\"][0-9]{13,17}['\"]", + `(?i)(facebook|fb)(.{0,20})?['\"][0-9]{13,17}['\"]`, []string{"facebook.com/", "facebook.svg"}, "?", }, { "Cloudinary Basic Auth", "Cloudinary Basic Auth", - "cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+", + `cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+`, []string{}, "?", }, { "Firebase Database", "Firebase Database", - "([a-z0-9.-]+\\.firebaseio\\.com|[a-z0-9.-]+\\.firebaseapp\\.com)", + `([a-z0-9.-]+\.firebaseio\.com|[a-z0-9.-]+\.firebaseapp\.com)`, []string{}, "?", }, { "Twitter Secret Key", "Twitter Secret Key", - "(?i)twitter(.{0,20})?[0-9a-z]{35,44}", + `(?i)twitter(.{0,20})?[0-9a-z]{35,44}`, []string{}, "?", }, { "Twitter Client ID", "Twitter Client ID", - "(?i)twitter(.{0,20})?[0-9a-z]{18,25}", + `(?i)twitter(.{0,20})?[0-9a-z]{18,25}`, []string{}, "?", }, { "Github Personal Access Token", "Github Personal Access Token", - "ghp_[0-9a-zA-Z]{36}", + `ghp_[0-9a-zA-Z]{36}`, []string{}, "?", }, { "Github OAuth Access Token", "Github OAuth Access Token", - "gho_[0-9a-zA-Z]{36}", + `gho_[0-9a-zA-Z]{36}`, []string{}, "?", }, { "Github App Token", "Github App Token", - "(ghu|ghs)_[0-9a-zA-Z]{36}", + `(ghu|ghs)_[0-9a-zA-Z]{36}`, []string{}, "?", }, { "Github Refresh Token", "Github Refresh Token", - "ghr_[0-9a-zA-Z]{76}", + `ghr_[0-9a-zA-Z]{76}`, []string{}, "?", }, { "LinkedIn Client ID", "LinkedIn Client ID", - "(?i)linkedin(.{0,20})?(?-i)[0-9a-z]{12}", + `(?i)linkedin(.{0,20})?(?-i)[0-9a-z]{12}`, []string{"linkedin.com/", "linkedin.svg"}, "?", }, { "LinkedIn Secret Key", "LinkedIn Secret Key", - "(?i)linkedin(.{0,20})?[0-9a-z]{16}", + `(?i)linkedin(.{0,20})?[0-9a-z]{16}`, []string{"linkedin.com/", "linkedin.svg"}, "?", }, { "Slack", "Slack", - "xox[baprs]-([0-9a-zA-Z]{10,48})?", + `xox[baprs]-([0-9a-zA-Z]{10,48})?`, []string{}, "?", }, { "Asymmetric Private Key", "Asymmetric Private Key", - "-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----", + `-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----`, []string{}, "?", }, { "Google API key", "Google API key", - "AIza[0-9A-Za-z\\-_]{35}", + `AIza[0-9A-Za-z\\-_]{35}`, []string{}, "?", }, @@ -197,28 +197,28 @@ func GetSecretRegexes() []Secret { { "Heroku API key", "Heroku API key", - "(?i)heroku(.{0,20})?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}", + `(?i)heroku(.{0,20})?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`, []string{}, "?", }, { "MailChimp API key", "MailChimp API key", - "[0-9a-f]{32}-us[0-9]{1,2}", + `[0-9a-f]{32}-us[0-9]{1,2}`, []string{}, "?", }, { "Mailgun API key", "Mailgun API key", - "key-[0-9a-zA-Z]{32}", + `key\-[0-9a-zA-Z]{32}`, []string{}, "?", }, { "Pictatic API Key", "Pictatic API Key", - "sk_live_[0-9a-z]{32}", + `sk\_live\_[0-9a-z]{32}`, []string{}, "?", }, @@ -232,7 +232,7 @@ func GetSecretRegexes() []Secret { { "Picatic API key", "Picatic API key", - "sk_live_[0-9a-z]{32}", + `sk\_live\_[0-9a-z]{32}`, []string{}, "?", }, @@ -246,35 +246,35 @@ func GetSecretRegexes() []Secret { { "Slack Webhook", "Slack Webhook", - "https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}", + `https\:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}`, []string{}, "?", }, { "Stripe API key", "Stripe API key", - "(?i)stripe(.{0,20})?[sr]k_live_[0-9a-zA-Z]{24}", + `(?i)stripe(.{0,20})?[sr]k_live_[0-9a-zA-Z]{24}`, []string{}, "?", }, { "Square access token", "Square access token", - `sq0atp-[0-9A-Za-z\-_]{22}`, + `sq0atp\-[0-9A-Za-z\-_]{22}`, []string{}, "?", }, { "Square OAuth secret", "Square OAuth secret", - "sq0csp-[0-9A-Za-z\\-_]{43}", + `sq0csp\-[0-9A-Za-z\\-_]{43}`, []string{}, "?", }, { "Twilio API key", "Twilio API key", - "(?i)twilio(.{0,20})?SK[0-9a-f]{32}", + `(?i)twilio(.{0,20})?SK[0-9a-f]{32}`, []string{}, "?", }, @@ -288,51 +288,51 @@ func GetSecretRegexes() []Secret { { "Shopify shared secret", "Shopify shared secret", - "shpss_[a-fA-F0-9]{32}", + `shpss\_[a-fA-F0-9]{32}`, []string{}, "?", }, { "Shopify access token", "Shopify access token", - "shpat_[a-fA-F0-9]{32}", + `shpat\_[a-fA-F0-9]{32}`, []string{}, "?", }, { "Shopify custom app access token", "Shopify custom app access token", - "shpca_[a-fA-F0-9]{32}", + `shpca\_[a-fA-F0-9]{32}`, []string{}, "?", }, { "Shopify private app access token", "Shopify private app access token", - "shppa_[a-fA-F0-9]{32}", + `shppa\_[a-fA-F0-9]{32}`, []string{}, "?", }, { "PyPI upload token", "PyPI upload token", - "pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}", + `pypi\-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}`, []string{}, "?", }, { "Bugsnag API Key", "Bugsnag API Key", - "(?i)(bs|bugsnag)(.{0,20})?[0-9a-f]{32}", + `(?i)(bs|bugsnag)(.{0,20})?[0-9a-f]{32}`, []string{}, "?", }, { "S3 Bucket", "S3 Bucket", - `(?:[a-zA-Z0-9_-]+s3.amazonaws.com|[a-zA-Z0-9_.-]+amazonaws.com|` + - `[a-zA-Z0-9-\.\_]+\.s3\.amazonaws\.com|s3://[a-zA-Z0-9-\.\_]+|` + - `s3-[a-zA-Z0-9-\.\_\/]+|s3.amazonaws.com/[a-zA-Z0-9-\.\_]+)`, + `(?:[a-zA-Z0-9_-]+s3\.amazonaws\.com|[a-zA-Z0-9_.-]+amazonaws\.com|` + + `[a-zA-Z0-9-\.\_]+\.s3\.amazonaws\.com|s3\:\/\/[a-zA-Z0-9-\.\_]+|` + + `s3-[a-zA-Z0-9-\.\_\/]+|s3\.amazonaws\.com/[a-zA-Z0-9-\.\_]+)`, []string{}, "?", },