rules:
  - name: Salesloft API Key
    id: kingfisher.salesloft.1
    pattern: |
      (?xi)
      \b
      salesloft
      (?:.|[\n\r]){0,32}?
      (?:SECRET|PRIVATE|API|KEY|TOKEN)
      (?:.|[\n\r]){0,16}?
      \b
      (
        ak_[a-fA-F0-9]{64}
      )
      \b
    pattern_requirements:
      min_digits: 2
    min_entropy: 3.2
    confidence: medium
    examples:
      - SALESLOFT_API_KEY=ak_de656ec86bcab24878c24ff4d86758f8963d8ea6bcd4e90f8fae846ba8f9ac62
      - salesloft_key = "ak_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"
    references:
      - https://developer.salesloft.com/docs/platform/api-basics/api-key-authentication
      - https://developers.salesloft.com/docs/api/me
    validation:
      type: Http
      content:
        request:
          method: GET
          url: https://api.salesloft.com/v2/me
          headers:
            Authorization: "Bearer {{ TOKEN }}"
            Accept: application/json
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status: [200]
            - type: JsonValid