rules:
  - name: Dependency-Track API Key
    id: kingfisher.dtrack.1
    pattern: |
      (?x)
      \b
      (
        odt_[A-Za-z0-9]{32,255}
      )
      \b
    pattern_requirements:
      min_digits: 2
    min_entropy: 3.3
    confidence: medium
    examples:
      - 'odt_KTJlDq2AGGGlqG4riKdT7p980AW8RlU5'
      - 'odt_ABCDDq2AGxGlrF4ribBT7p98AOM9TlU8'
      - 'odt_FHxhQGh77JAHHIYpZ818UQ0aYjXIdMIxxgeR'
    references:
      - https://docs.dependencytrack.org/integrations/rest-api/#authentication
    # validation:
    #   type: Http
    #   content:
    #     request:
    #       headers:
    #         Authorization: "Bearer {{ TOKEN }}"
    #       method: GET
    #       response_matcher:
    #         - report_response: true
    #         - status:
    #             - 200
    #           type: StatusMatch
    #       url: https://dependencytrack.example.com/api/v1/token/verify