Merge pull request #207 from bored-engineer/patch-19

fix(age): reduce allowed characters to bech32 alphabet
This commit is contained in:
Mick Grove 2026-01-30 23:01:00 -08:00 committed by GitHub
commit e1306ea55f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -2,14 +2,13 @@ rules:
- name: Age Recipient (X25519 public key)
id: kingfisher.age.1
pattern: |
(?xi)
(?x)
(
age1[0-9a-z]{58}
age1[qpzry9x8gf2tvdw0s3jn54khce6mua7l]{58}
)
\b
pattern_requirements:
min_digits: 2
min_uppercase: 1
min_lowercase: 1
min_entropy: 3.3
confidence: medium
@ -23,9 +22,9 @@ rules:
- name: Age Identity (X22519 secret key)
id: kingfisher.age.2
pattern: |
(?xi)
(?x)
(
AGE-SECRET-KEY-1[0-9A-Z]{58}
AGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}
)
min_entropy: 3.3
confidence: medium
@ -40,4 +39,4 @@ rules:
- https://htmlpreview.github.io/?https://github.com/FiloSottile/age/blob/main/doc/age.1.html
- https://github.com/C2SP/C2SP/blob/8b6a842e0360d35111c46be2a8019b2276295914/age.md#the-x25519-recipient-type
categories:
- secret
- secret