updated confluent rule with a checksum. Added zuplo rule with a checksum

This commit is contained in:
Mick Grove 2025-11-09 08:42:16 -08:00
commit c856373fb5
8 changed files with 104 additions and 51 deletions

View file

@ -21,7 +21,7 @@ rules:
(?xi)
\b
(
[a-z0-9]{75,76}AZDO[a-z0-9]{4,5}
[a-z0-9]{76}AZDO[a-z0-9]{4,5}
)
\b
pattern_requirements:

View file

@ -277,32 +277,3 @@ rules:
- |
GITHUB_CLIENT_ID=ac58d6da7d7a84c039b7
GITHUB_SECRET=37d02377a3e9d849e18704c3ec883f9c5787d857
- name: GitHub Personal Access Token (fine-grained permissions)
id: kingfisher.github.9
pattern: |
(?xi)
(
github_pat_[0-9A-Z_]{82}
)
examples:
- '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'
validation:
type: Http
content:
request:
method: POST
url: https://api.github.com/graphql
headers:
Authorization: token {{ TOKEN }}
Accept: application/vnd.github+json
Content-Type: application/json
body: |
{
"query": "{ viewer { login } }"
}
response_matcher:
- report_response: true
- match_all_words: true
type: WordMatch
words:
- '"login"'

View file

@ -20,3 +20,17 @@ rules:
- zpka_b3f94d8d3d4d4a6ea5c5b20d0a5bb407_18eb262b
references:
- https://zuplo.com/blog/api-key-authentication
validation:
type: Http
content:
request:
headers:
authorization: "Bearer {{ TOKEN }}"
x-api-key: "{{ TOKEN }}"
method: GET
response_matcher:
- report_response: true
- status:
- 200
type: StatusMatch
url: https://dev.zuplo.com/v1/who-am-i