diff --git a/data/rules/coderabbit.yml b/data/rules/coderabbit.yml new file mode 100644 index 0000000..f404722 --- /dev/null +++ b/data/rules/coderabbit.yml @@ -0,0 +1,39 @@ +rules: + - name: CodeRabbit API Key + id: kingfisher.coderabbit.1 + pattern: | + (?xi) + \b + ( + cr-[a-f0-9]{58} + ) + \b + pattern_requirements: + min_digits: 4 + min_entropy: 3.5 + confidence: medium + examples: + - "cr-33420bb12fddf6cde6fba5414df88b07f75b2258e30c956b95f2ddbb2d" + references: + - https://coderabbit.ai/ + - https://api.coderabbit.ai/docs + validation: + type: Http + content: + request: + method: GET + url: "https://api.coderabbit.ai/v1/seats/" + headers: + accept: "application/json" + x-coderabbitai-api-key: "{{TOKEN}}" + response_matcher: + - report_response: true + - type: WordMatch + words: + - '"success"' + - '"errors"' + match_all_words: false + - type: WordMatch + negative: true + words: + - '"Invalid or inactive API key"'