kingfisher/crates/kingfisher-rules/data/rules/frameio.yml

rules:
  - name: Frame.io API Token
    id: kingfisher.frameio.1
    pattern: |
      (?x)
      \b
      (
        fio-u-[a-zA-Z0-9\-_=]{64}
      )
    pattern_requirements:
      min_digits: 2
    min_entropy: 3.3
    confidence: medium
    examples:
      - FRAMEIO_TOKEN=fio-u-a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6a7b8c9d0e1f2
      - '"Authorization": "Bearer fio-u-b1c2d3e4f5g6h7i8j9k0l1m2n3o4p5q6r7s8t9u0v1w2x3y4z5a6b7c8d9e0f123"'
    references:
      - https://developer.frame.io/docs/getting-started/authentication
    validation:
      type: Http
      content:
        request:
          method: GET
          url: https://api.frame.io/v2/me
          headers:
            Authorization: 'Bearer {{ TOKEN }}'
            Accept: application/json
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status:
                - 200
- Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. - Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform 2025-10-20 18:23:12 -07:00			`rules:`
			`- name: Frame.io API Token`
			`id: kingfisher.frameio.1`
			`pattern: \|`
v1.86.0 2026-03-05 20:36:27 -08:00			`(?x)`
- Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. - Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform 2025-10-20 18:23:12 -07:00			`\b`
			`(`
v1.86.0 2026-03-05 20:36:27 -08:00			`fio-u-[a-zA-Z0-9\-_=]{64}`
- Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. - Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform 2025-10-20 18:23:12 -07:00			`)`
pattern_requirements for rules — Post-regex character-class gating to cut false positives without lookarounds. Authors can now require minimum counts of digits, uppercase, lowercase, and special characters, with an optional custom special-char set. Why: Hyperscan doesn’t support lookaheads/behinds, so many “must contain X and Y” checks had to be baked into the regex (hurting readability) or were impossible. pattern_requirements applies lightweight, in-memory checks after a match is found, keeping patterns fast and clean. 2025-11-04 13:55:31 -05:00			`pattern_requirements:`
			`min_digits: 2`
- Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. - Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform 2025-10-20 18:23:12 -07:00			`min_entropy: 3.3`
			`confidence: medium`
			`examples:`
			`- FRAMEIO_TOKEN=fio-u-a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6a7b8c9d0e1f2`
			`- '"Authorization": "Bearer fio-u-b1c2d3e4f5g6h7i8j9k0l1m2n3o4p5q6r7s8t9u0v1w2x3y4z5a6b7c8d9e0f123"'`
			`references:`
v1.81.0 2026-02-10 19:24:19 -08:00			`- https://developer.frame.io/docs/getting-started/authentication`
- Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch. - Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform 2025-10-20 18:23:12 -07:00			`validation:`
			`type: Http`
			`content:`
			`request:`
			`method: GET`
			`url: https://api.frame.io/v2/me`
			`headers:`
			`Authorization: 'Bearer {{ TOKEN }}'`
			`Accept: application/json`
			`response_matcher:`
			`- report_response: true`
			`- type: StatusMatch`
			`status:`
			`- 200`