Skipped per-repository report writes when an output file is specified and emit a single aggregated report after multi-repository scans to preserve full output content in files.

CHANGELOG.md

@@ -7,7 +7,7 @@ All notable changes to this project will be documented in this file.
 - Added Slack Access Map support with granular permissions in the tree view.
 - Improved HTML report
 - Improved several rules
-- Added new rules
+- Added new rules for Apollo, Clay, CodeRabbit, Customer.io, Instantly, Vast.ai
 - Skipped per-repository report writes when an output file is specified and emit a single aggregated report after multi-repository scans to preserve full output content in files.
 
 ## [v1.74.0]

data/rules/apollo.yml

@@ -19,11 +19,7 @@ rules:
       min_lowercase: 1
     min_entropy: 3.0
     confidence: medium
-    categories:
-      - api
-      - secret
     examples:
-      - "x-api-key: QyZ0oxTJblhYp3_o9gJFRA"
       - 'APOLLO_API_KEY="ZNh-14foqIiscbz24oKwww"'
       - apollo_key=8ku3EoDJxz8fOSCdxYozdA
       - apollo.io api_key oD8GCL8MNZIyg0tzeSDuhw

data/rules/customerio.yml

@@ -1,33 +1,6 @@
 rules:
-  - name: Customer.io Site ID (helper)
-    id: kingfisher.customerio.1
-    visible: false
-    pattern: |
-      (?xi)
-      \b
-      (?:customer(?:\.?io)?|customerio|cio)?
-      (?:site[_-]?id|siteid)
-      \b
-      (?:\s*[:=]\s*|["']\s*:\s*["']|=\s*["'])
-      \s*
-      \b
-      (
-        [0-9a-f]{20,22}
-      )
-      \b
-    pattern_requirements:
-      min_digits: 4
-    min_entropy: 3.0
-    confidence: medium
-    examples:
-      - "site id: 683f668681041ec0963a"
-      - "site_id=4666cc67dc875420420d"
-      - "customerio_site_id: 7843e1010e52cda7bc8d"
-    references:
-      - https://docs.customer.io/integrations/api/#track-api
-
   - name: Customer.io Tracking API Key
-    id: kingfisher.customerio.2
+    id: kingfisher.customerio.1
     pattern: |
       (?xi)
       \b
@@ -52,7 +25,7 @@ rules:
       - https://docs.customer.io/integrations/api/#track-api
 
   - name: Customer.io App API Key
-    id: kingfisher.customerio.3
+    id: kingfisher.customerio.2
     pattern: |
       (?xi)
       \b
@@ -70,7 +43,6 @@ rules:
     min_entropy: 3.0
     confidence: medium
     examples:
-      - "app api key: 2500f16b129a6644df32a88ba106f627"
       - "customerio_app_key=6e86f5734527548b7477a8b627bf4855"
       - "customer.io api key 8363e3ca7e897cae7d76b8f46632e155"
       - "cio_app_key: 801b93d4c8627282bbd3524362f1ea9d"

data/rules/instantly.yml

@@ -17,12 +17,8 @@ rules:
       min_digits: 4
     min_entropy: 3.3
     confidence: medium
-    categories:
-      - api
-      - secret
     examples:
-      - 'INSTANTLY_API_KEY="ZGVhZGJlZWYtZGVhZC0xMTEtMjIyLTMzMzM0NDQ0NDQ0NDphYmNkZWZnaGlqaw=="'
-      - '"Authorization: Bearer ZGVhZGJlZWYtZGVhZC0xMTEtMjIyLTMzMzM0NDQ0NDQ0NDphYmNkZWZnaGlqaw=="'
+      - 'INSTANTLY_API_KEY="NmNlMCI1MWUtZDBmMC00NTc4LWE0MDItMDM0NGU0ZWI0MzliOmFzWWtCZUxUY3ZPRg=="'
     references:
       - https://developer.instantly.ai/api/v2/analytics/getdailyaccountanalytics
     validation: