diff --git a/CHANGELOG.md b/CHANGELOG.md index c1b9eb7..21a7424 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,7 +7,7 @@ All notable changes to this project will be documented in this file. - Added Slack Access Map support with granular permissions in the tree view. - Improved HTML report - Improved several rules -- Added new rules +- Added new rules for Apollo, Clay, CodeRabbit, Customer.io, Instantly, Vast.ai - Skipped per-repository report writes when an output file is specified and emit a single aggregated report after multi-repository scans to preserve full output content in files. ## [v1.74.0] diff --git a/data/rules/apollo.yml b/data/rules/apollo.yml index 1914099..14f10d1 100644 --- a/data/rules/apollo.yml +++ b/data/rules/apollo.yml @@ -19,11 +19,7 @@ rules: min_lowercase: 1 min_entropy: 3.0 confidence: medium - categories: - - api - - secret examples: - - "x-api-key: QyZ0oxTJblhYp3_o9gJFRA" - 'APOLLO_API_KEY="ZNh-14foqIiscbz24oKwww"' - apollo_key=8ku3EoDJxz8fOSCdxYozdA - apollo.io api_key oD8GCL8MNZIyg0tzeSDuhw diff --git a/data/rules/customerio.yml b/data/rules/customerio.yml index 1c5e96c..5d8181d 100644 --- a/data/rules/customerio.yml +++ b/data/rules/customerio.yml @@ -1,33 +1,6 @@ rules: - - name: Customer.io Site ID (helper) - id: kingfisher.customerio.1 - visible: false - pattern: | - (?xi) - \b - (?:customer(?:\.?io)?|customerio|cio)? - (?:site[_-]?id|siteid) - \b - (?:\s*[:=]\s*|["']\s*:\s*["']|=\s*["']) - \s* - \b - ( - [0-9a-f]{20,22} - ) - \b - pattern_requirements: - min_digits: 4 - min_entropy: 3.0 - confidence: medium - examples: - - "site id: 683f668681041ec0963a" - - "site_id=4666cc67dc875420420d" - - "customerio_site_id: 7843e1010e52cda7bc8d" - references: - - https://docs.customer.io/integrations/api/#track-api - - name: Customer.io Tracking API Key - id: kingfisher.customerio.2 + id: kingfisher.customerio.1 pattern: | (?xi) \b @@ -52,7 +25,7 @@ rules: - https://docs.customer.io/integrations/api/#track-api - name: Customer.io App API Key - id: kingfisher.customerio.3 + id: kingfisher.customerio.2 pattern: | (?xi) \b @@ -70,7 +43,6 @@ rules: min_entropy: 3.0 confidence: medium examples: - - "app api key: 2500f16b129a6644df32a88ba106f627" - "customerio_app_key=6e86f5734527548b7477a8b627bf4855" - "customer.io api key 8363e3ca7e897cae7d76b8f46632e155" - "cio_app_key: 801b93d4c8627282bbd3524362f1ea9d" diff --git a/data/rules/instantly.yml b/data/rules/instantly.yml index 2331cb8..955c7cc 100644 --- a/data/rules/instantly.yml +++ b/data/rules/instantly.yml @@ -17,12 +17,8 @@ rules: min_digits: 4 min_entropy: 3.3 confidence: medium - categories: - - api - - secret examples: - - 'INSTANTLY_API_KEY="ZGVhZGJlZWYtZGVhZC0xMTEtMjIyLTMzMzM0NDQ0NDQ0NDphYmNkZWZnaGlqaw=="' - - '"Authorization: Bearer ZGVhZGJlZWYtZGVhZC0xMTEtMjIyLTMzMzM0NDQ0NDQ0NDphYmNkZWZnaGlqaw=="' + - 'INSTANTLY_API_KEY="NmNlMCI1MWUtZDBmMC00NTc4LWE0MDItMDM0NGU0ZWI0MzliOmFzWWtCZUxUY3ZPRg=="' references: - https://developer.instantly.ai/api/v2/analytics/getdailyaccountanalytics validation: