kingfisher/data/rules/jira.yml

52 lines
1.3 KiB
YAML
Raw Normal View History

2025-06-25 14:22:37 -07:00
rules:
- name: Jira Domain
id: kingfisher.jira.1
pattern: |
2025-06-26 11:31:41 -07:00
(?xi)
2025-06-25 14:22:37 -07:00
(
[a-z][a-z0-9-]{5,24}\.atlassian\.net
)
\b
min_entropy: 3.5
visible: false
confidence: medium
examples:
- example-jira.atlassian.net
- jira.sprintUri= https://example.atlassian.net/rest
2025-06-25 14:22:37 -07:00
- name: Jira Token
id: kingfisher.jira.2
pattern: |
2025-06-26 11:31:41 -07:00
(?xi)
2025-06-25 14:22:37 -07:00
\b
jira
(?:.|[\n\r]){0,8}?
(?:SECRET|PRIVATE|ACCESS|KEY|PASSWORD|TOKEN)
(?:.|[\n\r]){0,16}?
\b
(
[a-z0-9-]{24}
)
\b
min_entropy: 3.3
confidence: medium
examples:
- 'Here is my Jira token: VDOheDe1sSCeGkuTARhkFDE2'
- public static final String JIRA_PASSWORD = "VDOheDe1sSCeGkuTARhkFDE2";
validation:
type: Http
content:
request:
headers:
Accept: application/json
Authorization: Basic {{ TOKEN }}
method: GET
response_matcher:
- report_response: true
- status:
- 200
type: StatusMatch
url: https://{{ DOMAIN }}/rest/api/3/dashboard
depends_on_rule:
- rule_id: kingfisher.jira.1
variable: DOMAIN