Merge pull request #73 from edoardottt/devel

update secrets
edoardottt · Oct 14, 2022 · 202304b · 202304b
2 parents 791e54e + b0b7bd4
commit 202304b
Showing 1 changed file with 12 additions and 12 deletions.
diff --git a/pkg/scanner/secrets.go b/pkg/scanner/secrets.go
@@ -57,7 +57,7 @@ func GetSecretRegexes() []Secret {
 		{
 			"AWS Access Key",
 			"AWS Access Key",
-			"(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}",
+			"(A3T[A-Z0-9]|AKIA|ACCA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA|ASCA|APKA)[A-Z0-9]{16}",
 			[]string{},
 			"?",
 		},
@@ -71,7 +71,7 @@ func GetSecretRegexes() []Secret {
 		{
 			"AWS MWS Key",
 			"AWS MWS Key",
-			`amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`,
+			`amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`,
 			[]string{},
 			"?",
 		},
@@ -99,7 +99,7 @@ func GetSecretRegexes() []Secret {
 		{
 			"Cloudinary Basic Auth",
 			"Cloudinary Basic Auth",
-			`cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+`,
+			`cloudinary://[0-9]{15}:[0-9A-Za-z\-_]+@[0-9A-Za-z\-_]+`,
 			[]string{},
 			"?",
 		},
@@ -127,28 +127,28 @@ func GetSecretRegexes() []Secret {
 		{
 			"Github Personal Access Token",
 			"Github Personal Access Token",
-			`ghp_[0-9a-zA-Z]{36}`,
+			`ghp_.{36}`,
 			[]string{},
 			"?",
 		},
 		{
 			"Github OAuth Access Token",
 			"Github OAuth Access Token",
-			`gho_[0-9a-zA-Z]{36}`,
+			`gho_.{36}`,
 			[]string{},
 			"?",
 		},
 		{
 			"Github App Token",
 			"Github App Token",
-			`(ghu|ghs)_[0-9a-zA-Z]{36}`,
+			`(ghu|ghs)_.{36}`,
 			[]string{},
 			"?",
 		},
 		{
 			"Github Refresh Token",
 			"Github Refresh Token",
-			`ghr_[0-9a-zA-Z]{76}`,
+			`ghr_.{76}`,
 			[]string{},
 			"?",
 		},
@@ -183,7 +183,7 @@ func GetSecretRegexes() []Secret {
 		{
 			"Google API key",
 			"Google API key",
-			`AIza[0-9A-Za-z\\-_]{35}`,
+			`AIza[0-9A-Za-z\-_]{35}`,
 			[]string{},
 			"?",
 		},
@@ -232,14 +232,14 @@ func GetSecretRegexes() []Secret {
 		{
 			"SendGrid API Key",
 			"SendGrid API Key",
-			`SG\.[\w_]{16,32}\.[\w_]{16,64}`,
+			`SG\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{43}`,
 			[]string{},
 			"?",
 		},
 		{
 			"Slack Webhook",
 			"Slack Webhook",
-			`https\:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}`,
+			`https://hooks.slack.com/services/T[0-9A-Za-z\-_]{8}/B[0-9A-Za-z\-_]{8}/[0-9A-Za-z\-_]{24}`,
 			[]string{},
 			"?",
 		},
@@ -253,14 +253,14 @@ func GetSecretRegexes() []Secret {
 		{
 			"Square access token",
 			"Square access token",
-			`sq0atp\-[0-9A-Za-z\-_]{22}`,
+			`sq0atp\-[0-9A-Za-z\-_]{22}|EAAAE[a-zA-Z0-9\-_]{59}`,
 			[]string{},
 			"?",
 		},
 		{
 			"Square OAuth secret",
 			"Square OAuth secret",
-			`sq0csp\-[0-9A-Za-z\\-_]{43}`,
+			`sq0csp\-[0-9A-Za-z\-_]{43}`,
 			[]string{},
 			"?",
 		},