WEBDIENSTE/cariddi
1
0
Fork 0
mirror of https://github.com/edoardottt/cariddi.git synced 2026-08-17 21:25:48 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
b656d03d581f6c7156b7ed64873f007ac3f870ca
cariddi/pkg/scanner/secrets.go
T

862 lines
22 KiB
Go
Raw Blame History

/*
==========
Cariddi
==========
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see http://www.gnu.org/licenses/.
@Repository: https://github.com/edoardottt/cariddi
@Author: edoardottt, https://edoardottt.com
@License: https://github.com/edoardottt/cariddi/blob/main/LICENSE
*/
package scanner
import (
"regexp"
"sync"
)
// Secret struct.
// Name = the name that identifies the secret.
// Description.
// Regex = The regular expression matching the secret.
// FalsePositives = A list of known false positives.
// PoC = cli command to check if the secret is valid or not.
type Secret struct {
Name string
Description string
Regex regexp.Regexp
FalsePositives []string
Poc string
}
// SecretMatched struct.
// Secret = The secret matched (struct).
// Url = url in which is present the secret.
// Match = the string matching the regex.
type SecretMatched struct {
Secret Secret
URL string
Match string
}
var (
secrets []Secret //nolint: gochecknoglobals
onceSecret sync.Once //nolint: gochecknoglobals
)
// GetSecretRegexes returns a slice of all the secret structs.
func GetSecretRegexes() []Secret {
onceSecret.Do(func() {
secrets = []Secret{
{
"Adafruit API Key",
"Adafruit API Key",
*regexp.MustCompile(`(?i)(?:adafruit)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-z0-9_-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Adobe Client ID",
"Adobe Client ID",
*regexp.MustCompile(`(?i)(?:adobe)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}` +
`=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}([a-f0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Adobe Client Secret",
"Adobe Client Secret",
*regexp.MustCompile(`(?i)\b((p8e-)(?i)[a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Airtable API Key",
"Airtable API Key",
*regexp.MustCompile(`(?i)\b(pat[a-zA-Z0-9]{14}\.[a-f0-9]{64})\b`),
[]string{},
"?",
},
{
"Algolia API Key",
"Algolia API Key",
*regexp.MustCompile(`(?i)(?:algolia)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Alibaba Access Key ID",
"Alibaba Access Key ID",
*regexp.MustCompile(`(?i)(LTAI[a-z0-9]{17,21})\b`),
[]string{},
"?",
},
{
"Alibaba Secret Key",
"Alibaba Secret Key",
*regexp.MustCompile(`(?i)(?:alibaba)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{30})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Anthropic Api Key",
"Anthropic Api Key",
*regexp.MustCompile(`(?i)\b(sk-ant-(admin|api)[0-9]{2}-[a-zA-Z0-9_-]{95})`),
[]string{},
"?",
},
{
"Asana Client ID",
"Asana Client ID",
*regexp.MustCompile(`(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Asana Client Secret",
"Asana Client Secret",
*regexp.MustCompile(`(?i)(?:asana)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Atlassian API Token",
"Atlassian API Token",
*regexp.MustCompile(`(?i)(?:atlassian|confluence|jira)(?:[0-9a-z\-_\t .]{0,20})` +
`(?:[\s|']|[\s|"]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{24})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Atlassian Cloud API Token",
"Atlassian API Token",
*regexp.MustCompile(`(?i)\b(ATATT3xFfGF0[a-zA-Z0-9_-]{20,200}=[0-9A-F]{8})\b`),
[]string{},
"?",
},
{
"AWS Access Key",
"AWS Access Key",
*regexp.MustCompile(`(?i)\b((A3T[A-Z0-9]|AKIA|ACCA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA|ASCA|APKA)[A-Z0-9]{16})\b`),
[]string{},
"?",
},
{
"AWS Bedrock API Key",
"AWS Bedrock API Key",
*regexp.MustCompile(`ABSK[A-Za-z0-9+/]{109,269}={0,2}`),
[]string{},
"?",
},
{
"AWS Secret Key",
"AWS Secret Key",
*regexp.MustCompile(`(?i)aws(.{0,20})?(?-i)['\"][0-9a-zA-Z\/+]{40}['\"]`),
[]string{},
"?",
},
{
"AWS MWS Key",
"AWS MWS Key",
*regexp.MustCompile(`amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`),
[]string{},
"?",
},
{
"Amazon SNS topic",
"Amazon SNS topic",
*regexp.MustCompile(`arn:aws:sns:[a-z0-9\-]+:[0-9]+:[A-Za-z0-9\-_]+`),
[]string{},
"?",
},
{
"Beamer API Token",
"Beamer API Token",
*regexp.MustCompile(`(?i)(?:beamer)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`(b_[a-z0-9=_\-]{44})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"BitBucket Client ID",
"BitBucket Client ID",
*regexp.MustCompile(`(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"BitBucket Client Secret",
"BitBucket Client Secret",
*regexp.MustCompile(`(?i)(?:bitbucket)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9=_\-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"CircleCI Personal Access Token",
"CircleCI Personal Access Token",
*regexp.MustCompile(`(?i)\b(CCIPAT_[_a-z0-9]{65})\b`),
[]string{},
"?",
},
{
"Cloudflare API Key",
"Cloudflare API Key",
*regexp.MustCompile(`(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9_-]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Cloudflare Global API Key",
"Cloudflare Global API Key",
*regexp.MustCompile(`(?i)(?:cloudflare)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-f0-9]{37})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Cloudflare Origin CA Key",
"Cloudflare Origin CA Key",
*regexp.MustCompile(`\b(v1\.0-[a-f0-9]{24}-[a-f0-9]{146})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"CodeCov Access Token",
"CodeCov Access Token",
*regexp.MustCompile(`(?i)(?:codecov)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"CoinBase Access Token",
"CoinBase Access Token",
*regexp.MustCompile(`(?i)(?:coinbase)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9_-]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Confluent Access Token",
"Confluent Access Token",
*regexp.MustCompile(`(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{16})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Confluent Secret Key",
"Confluent Secret Key",
*regexp.MustCompile(`(?i)(?:confluent)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Databricks API Token",
"Databricks API Token",
*regexp.MustCompile(`(?i)\b(dapi[a-h0-9]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"DataDog Access Token",
"DataDog Access Token",
*regexp.MustCompile(`(?i)(?:datadog)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"DigitalOcean Access Token",
"DigitalOcean Access Token",
*regexp.MustCompile(`(?i)\b(doo_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"DigitalOcean Personal Access Token",
"DigitalOcean Personal Access Token",
*regexp.MustCompile(`(?i)\b(dop_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"DigitalOcean Refresh Token",
"DigitalOcean Refresh Token",
*regexp.MustCompile(`(?i)\b(dor_v1_[a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Discord API Token",
"Discord API Token",
*regexp.MustCompile(`(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-f0-9]{64})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Discord Client ID",
"Discord Client ID",
*regexp.MustCompile(`(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([0-9]{18})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Discord Client Secret",
"Discord Client Secret",
*regexp.MustCompile(`(?i)(?:discord)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"DropBox API Token",
"DropBox API Token",
*regexp.MustCompile(`(?i)(?:dropbox)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{15})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
{
"Facebook Access Token",
"Facebook Access Token",
*regexp.MustCompile(`EAACEdEose0cBA[0-9A-Za-z]+`),
[]string{},
"?",
},
{
"Facebook Secret Key",
"Facebook Secret Key",
*regexp.MustCompile(`(?i)(facebook|fb)(.{0,20})?(?-i)['\"][0-9a-f]{32}['\"]`),
[]string{"facebook.com", "facebook.svg"},
"?",
},
{
"Facebook Client ID",
"Facebook Client ID",
*regexp.MustCompile(`(?i)(facebook|fb)(.{0,20})?['\"][0-9]{13,17}['\"]`),
[]string{"facebook.com", "facebook.svg"},
"?",
},
{
"Fastly API Token",
"Fastly API Token",
*regexp.MustCompile(`(?i)(?:fastly)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9=_\-]{32})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{"facebook.com", "facebook.svg"},
"?",
},
{
"Cloudinary Basic Auth",
"Cloudinary Basic Auth",
*regexp.MustCompile(`cloudinary://[0-9]{15}:[0-9A-Za-z\-_]+@[0-9A-Za-z\-_]+`),
[]string{},
"?",
},
{
"Firebase Database",
"Firebase Database",
*regexp.MustCompile(`([a-z0-9.-]+\.firebaseio\.com|[a-z0-9.-]+\.firebaseapp\.com)`),
[]string{},
"?",
},
{
"Twitter Secret Key",
"Twitter Secret Key",
*regexp.MustCompile(`(?i)twitter(.{0,20})?[0-9a-z]{35,44}`),
[]string{"twitter.com"},
"?",
},
{
"Twitter Client ID",
"Twitter Client ID",
*regexp.MustCompile(`(?i)twitter(.{0,20})?[0-9a-z]{18,25}`),
[]string{"twitter.com"},
"?",
},
{
"Github Personal Access Token",
"Github Personal Access Token",
*regexp.MustCompile(`ghp_.{36}`),
[]string{},
"?",
},
{
"Github OAuth Access Token",
"Github OAuth Access Token",
*regexp.MustCompile(`gho_.{36}`),
[]string{},
"?",
},
{
"Github App Token",
"Github App Token",
*regexp.MustCompile(`(ghu|ghs)_.{36}`),
[]string{},
"?",
},
{
"Github Refresh Token",
"Github Refresh Token",
*regexp.MustCompile(`ghr_.{76}`),
[]string{},
"?",
},
{
"Github App Installation Token",
"Github App Installation Token (https://github.blog/changelog/2026-05-15-github-app-installation-tokens-per-request-override-header/)",
*regexp.MustCompile(`ghs_[A-Za-z0-9\._]{36,}`),
[]string{},
"?",
},
{
"GitLab CI/CD Job Token",
"GitLab CI/CD Job Token",
*regexp.MustCompile(`glcbt-[0-9a-zA-Z]{1,5}_[0-9a-zA-Z_-]{20}`),
[]string{},
"?",
},
{
"GitLab Deploy Token",
"GitLab Deploy Token",
*regexp.MustCompile(`gldt-[0-9a-zA-Z_\-]{20}`),
[]string{},
"?",
},
{
"GitLab feature flag client token",
"GitLab feature flag client token",
*regexp.MustCompile(`glffct-[0-9a-zA-Z_\-]{20}`),
[]string{},
"?",
},
{
"GitLab Feed Token",
"GitLab Feed Token",
*regexp.MustCompile(`glft-[0-9a-zA-Z_\-]{20}`),
[]string{},
"?",
},
{
"GitLab Incoming Mail Token",
"GitLab Incoming Mail Token",
*regexp.MustCompile(`glimt-[0-9a-zA-Z_\-]{25}`),
[]string{},
"?",
},
{
"GitLab Kubernetes Agent Token",
"GitLab Kubernetes Agent Token",
*regexp.MustCompile(`glagent-[0-9a-zA-Z_\-]{50}`),
[]string{},
"?",
},
{
"GitLab OIDC Application Secret",
"GitLab OIDC Application Secret",
*regexp.MustCompile(`gloas-[0-9a-zA-Z_\-]{64}`),
[]string{},
"?",
},
{
"GitLab Personal Access Token",
"GitLab Personal Access Token",
*regexp.MustCompile(`glpat-[\w-]{20}`),
[]string{},
"?",
},
{
"GitLab Pipeline Trigger Token",
"GitLab Pipeline Trigger Token",
*regexp.MustCompile(`glptt-[0-9a-f]{40}`),
[]string{},
"?",
},
{
"GitLab Runner Authentication Token",
"GitLab Runner Authentication Token",
*regexp.MustCompile(`glrt-[0-9a-zA-Z_\-]{20}`),
[]string{},
"?",
},
{
"GitLab SCIM Token",
"GitLab SCIM Token",
*regexp.MustCompile(`glsoat-[0-9a-zA-Z_\-]{20}`),
[]string{},
"?",
},
{
"Grafana Service Account Token",
"Grafana Service Account Token",
*regexp.MustCompile(`glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8}`),
[]string{},
"?",
},
{
"LinkedIn Client ID",
"LinkedIn Client ID",
*regexp.MustCompile(`(?i)linkedin(.{0,20})?(?-i)[0-9a-z]{12}`),
[]string{"linkedin.com", "linkedin.svg"},
"?",
},
{
"LinkedIn Secret Key",
"LinkedIn Secret Key",
*regexp.MustCompile(`(?i)linkedin(.{0,20})?[0-9a-z]{16}`),
[]string{"linkedin.com", "linkedin.svg"},
"?",
},
{
"Slack",
"Slack",
*regexp.MustCompile(`xox[baprs]-([0-9a-zA-Z]{10,48})?`),
[]string{},
"?",
},
{
"Asymmetric Private Key",
"Asymmetric Private Key",
*regexp.MustCompile(`-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----`),
[]string{},
"?",
},
{
"Google API key",
"Google API key",
*regexp.MustCompile(`AIza[0-9A-Za-z\-_]{35}`),
[]string{},
"?",
},
{
"Google (GCP) Service Account",
"Google (GCP) Service Account",
*regexp.MustCompile(`"type": "service_account"`),
[]string{},
"?",
},
{
"Heroku API key",
"Heroku API key",
*regexp.MustCompile(`(?i)heroku(.{0,20})?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`),
[]string{},
"?",
},
{
"Heroku API Key v2",
"Heroku API Key v2",
*regexp.MustCompile(`(?i)HRKU-AA[0-9a-zA-Z_-]{58}`),
[]string{},
"?",
},
{
"MailChimp API key",
"MailChimp API key",
*regexp.MustCompile(`[0-9a-f]{32}-us[0-9]{1,2}`),
[]string{},
"?",
},
{
"Mailgun API key",
"Mailgun API key",
*regexp.MustCompile(`key\-[0-9a-zA-Z]{32}`),
[]string{},
"?",
},
{
"OpenAI API key",
"OpenAI API key",
*regexp.MustCompile(`(sk-(?:proj|svcacct|admin)-(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})` +
`T3BlbkFJ(?:[A-Za-z0-9_-]{74}|[A-Za-z0-9_-]{58})\b|sk-[a-zA-Z0-9]{20}T3BlbkFJ[a-zA-Z0-9]{20})`),
[]string{},
"?",
},
{
"PayPal Braintree access token",
"PayPal Braintree access token",
*regexp.MustCompile(`access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}`),
[]string{},
"?",
},
{
"Perplexity API Key",
"Perplexity API Key",
*regexp.MustCompile(`pplx-[a-zA-Z0-9]{48}`),
[]string{},
"?",
},
{
"Picatic API Key",
"Picatic API Key",
*regexp.MustCompile(`sk\_live\_[0-9a-z]{32}`),
[]string{},
"?",
},
{
"Postman API Key",
"Postman API Key",
*regexp.MustCompile(`PMAK-(?i)[a-f0-9]{24}\-[a-f0-9]{34}`),
[]string{},
"?",
},
{
"Rubygems API Key",
"Rubygems API Key",
*regexp.MustCompile(`rubygems_[a-f0-9]{48}`),
[]string{},
"?",
},
{
"SendGrid API Key",
"SendGrid API Key",
*regexp.MustCompile(`SG\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{43}`),
[]string{},
"?",
},
{
"Slack Webhook",
"Slack Webhook",
*regexp.MustCompile(`https\:\/\/hooks\.slack\.com/services/` +
`T[0-9A-Za-z\-_]{8}/B[0-9A-Za-z\-_]{8}/[0-9A-Za-z\-_]{24}`),
[]string{},
"?",
},
{
"Stripe API key",
"Stripe API key",
*regexp.MustCompile(`(?i)stripe(.{0,20})?[sr]k_live_[0-9a-zA-Z]{24}`),
[]string{},
"?",
},
{
"Square access token",
"Square access token",
*regexp.MustCompile(`sq0atp\-[0-9A-Za-z\-_]{22}|EAAAE[a-zA-Z0-9\-_]{59}`),
[]string{},
"?",
},
{
"Square OAuth secret",
"Square OAuth secret",
*regexp.MustCompile(`sq0csp\-[0-9A-Za-z\-_]{43}`),
[]string{},
"?",
},
{
"Twilio API key",
"Twilio API key",
*regexp.MustCompile(`(?i)twilio(.{0,20})?SK[0-9a-f]{32}`),
[]string{},
"?",
},
{
"Dynatrace token",
"Dynatrace token",
*regexp.MustCompile(`dt0[a-zA-Z]{1}[0-9]{2}\.[A-Z0-9]{24}\.[A-Z0-9]{64}`),
[]string{},
"?",
},
{
"Shopify shared secret",
"Shopify shared secret",
*regexp.MustCompile(`shpss\_[a-fA-F0-9]{32}`),
[]string{},
"?",
},
{
"Shopify access token",
"Shopify access token",
*regexp.MustCompile(`shpat\_[a-fA-F0-9]{32}`),
[]string{},
"?",
},
{
"Shopify custom app access token",
"Shopify custom app access token",
*regexp.MustCompile(`shpca\_[a-fA-F0-9]{32}`),
[]string{},
"?",
},
{
"Shopify private app access token",
"Shopify private app access token",
*regexp.MustCompile(`shppa\_[a-fA-F0-9]{32}`),
[]string{},
"?",
},
{
"PyPI upload token",
"PyPI upload token",
*regexp.MustCompile(`pypi\-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}`),
[]string{},
"?",
},
{
"Bugsnag API Key",
"Bugsnag API Key",
*regexp.MustCompile(`(?i)(bs|bugsnag)(.{0,20})?[0-9a-f]{32}`),
[]string{},
"?",
},
{
"AWS Cognito pool",
"AWS Cognito pool",
*regexp.MustCompile(`(us-east-1|us-east-2|us-west-1|us-west-2|sa-east-1):[0-9A-Za-z]{8}-[0-9A-Za-z]{4}` +
`-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}`),
[]string{},
"?",
},
{
"AWS S3 Bucket",
"AWS S3 Bucket",
*regexp.MustCompile(`(?:[a-zA-Z0-9_-]+s3\.amazonaws\.com|[a-zA-Z0-9_.-]+amazonaws\.com|` +
`[a-zA-Z0-9-\.\_]+\.s3\.amazonaws\.com|s3\:\/\/[a-zA-Z0-9-\.\_]+|` +
`s3\.amazonaws\.com\/[a-zA-Z0-9-\.\_]+|` +
`oss\:\/\/[a-zA-Z0-9-\.\_]+)`),
[]string{},
"?",
},
{
"Azure Blob/ADLS Storage",
"Azure Blob/ADLS Storage",
*regexp.MustCompile(`(?i)(?:https?:\/\/)?([a-z0-9]{3,24})\.(blob|dfs)\.core\.windows\.net`),
[]string{},
"?",
},
{
"Google Cloud Storage",
"Google Cloud Storage",
*regexp.MustCompile(`(?i)(?:https?:\/\/storage\.googleapis\.com\/[a-z0-9.\-_]{3,63}\/[^\s"'<>]*|` +
`https?:\/\/[a-z0-9.\-_]{3,63}\.storage\.googleapis\.com\/[^\s"'<>]*|gs:\/\/[a-z0-9.\-_]{3,63}\/[^\s"'<>]*)`),
[]string{},
"?",
},
{
"DigitalOcean Spaces",
"DigitalOcean Spaces",
*regexp.MustCompile(`(?i)https?:\/\/[a-z0-9.\-]{3,63}\.digitaloceanspaces\.com(?:\/[^\s"'<>]*)?`),
[]string{},
"?",
},
{
"Discord Webhook",
"Discord Webhook",
*regexp.MustCompile(`https\:\/\/discordapp\.com\/api\/webhooks\/[0-9]+/[A-Za-z0-9\-]+`),
[]string{},
"?",
},
{
"Google Calendar URI",
"Google Calendar URI",
*regexp.MustCompile(`https\:\/\/(.*)calendar\.google\.com` +
`\/calendar\/[0-9a-z\/]+\/embed\?src=[A-Za-z0-9%@&;=\-_\.\/]+`),
[]string{},
"?",
},
{
"Google OAuth Access Key",
"Google OAuth Access Key",
*regexp.MustCompile(`(?i)\b(ya29\.[a-z0-9_-]{30,})\b`),
[]string{},
"?",
},
{
"Mapbox Token",
"Mapbox Token",
*regexp.MustCompile(`(pk|sk)\.eyJ1Ijoi\w+\.[\w-]*`),
[]string{},
"?",
},
{
"Microsoft Teams Webhook",
"Microsoft Teams Webhook",
*regexp.MustCompile(`https\:\/\/outlook\.office\.com\/webhook` +
`\/[A-Za-z0-9\-@]+\/IncomingWebhook\/[A-Za-z0-9\-]+\/[A-Za-z0-9\-]+`),
[]string{},
"?",
},
{
"Alibaba OSS Bucket",
"Alibaba OSS Bucket",
*regexp.MustCompile(`(?:[a-zA-Z0-9-\.\_]+\.oss-[a-zA-Z0-9-\.\_]+\.aliyuncs\.com|` +
`oss-[a-zA-Z0-9-\.\_]+\.aliyuncs\.com/[a-zA-Z0-9-\.\_]+)`),
[]string{},
"?",
},
{
"Zendesk Secret Key",
"Zendesk Secret Key",
*regexp.MustCompile(`(?i)(?:zendesk)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}` +
`(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|\"|\s|=|\x60){0,5}` +
`([a-z0-9]{40})(?:['|\"|\n|\r|\s|\x60|;]|$)`),
[]string{},
"?",
},
}
})
return secrets
}
// RemoveDuplicateSecrets removes duplicates from secrets found.
func RemoveDuplicateSecrets(input []SecretMatched) []SecretMatched {
keys := make(map[string]bool)
list := []SecretMatched{}
for _, entry := range input {
if _, value := keys[entry.Match]; !value {
keys[entry.Match] = true
list = append(list, entry)
}
}
return list
}
Reference in New Issue View Git Blame Copy Permalink