rules:
  - name: Delighted API Key
    id: kingfisher.delighted.1
    pattern: |
      (?xi)
      \b(?:delighted)
      (?:.|[\n\r]){0,64}?
      (?:api[_-]?key|secret|key|token)
      (?:.|[\n\r]){0,32}?
      \b
      (
        [a-zA-Z0-9]{20,40}
      )
      \b
    pattern_requirements:
      min_digits: 2
    min_entropy: 3.3
    confidence: medium
    examples:
      - 'DELIGHTED_API_KEY=dELi1a2B3c4D5e6F7g8H9i0JkLm1N2o3P'
      - 'delighted_api_key: Rq4s5T6u7V8w9X0yZ1a2B3c4D5e6F7'
    references:
      - https://app.delighted.com/docs/api
    validation:
      type: Http
      content:
        request:
          method: GET
          url: "https://api.delighted.com/v1/metrics.json"
          headers:
            Authorization: "Basic {{ TOKEN | append: ':' | b64enc }}"
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status: [200]