kingfisher/crates/kingfisher-rules/data/rules/codacy.yml
Mick Grove e518fb30f2 v1.81.0
2026-02-10 19:24:19 -08:00

38 lines
No EOL
916 B
YAML

rules:
- name: Codacy API Key
id: kingfisher.codacy.1
pattern: |
(?xi)
\b
codacy
(?:.|[\n\r]){0,32}?
(?:SECRET|PRIVATE|ACCESS|KEY|TOKEN)
(?:.|[\n\r]){0,32}?
\b
(
[0-9A-Z]{20,24}
)
\b
pattern_requirements:
min_digits: 2
min_entropy: 3.5
confidence: medium
examples:
- codacySECRET=a1b2c3d4e5f6g7h8i9j0
- codacyACCESS_KEY k1l2m3n4o5p6q7r8s9t0
validation:
type: Http
content:
request:
headers:
Accept: application/json
api-token: '{{ TOKEN }}'
method: GET
response_matcher:
- report_response: true
- status:
- 200
type: StatusMatch
url: https://app.codacy.com/api/v3/user/organizations
references:
- https://docs.codacy.com/codacy-api/using-the-codacy-api