kingfisher/crates/kingfisher-rules/data/rules/weightsandbiases.yml

rules:
  - name: Weights and Biases API Key
    id: kingfisher.wandb.1
    pattern: |
      (?xi)
      (?:wandb|weightsandbiases)
      (?:.|[\n\r]){0,16}?
      \b
      (
        [a-f0-9]{40}
      )
      \b
    pattern_requirements:
      min_digits: 2
    confidence: medium
    min_entropy: 3.5
    examples:
      - "export WANDB_API_KEY=872ab943740b34157041da2529fb160d89632710"
      - "wandb_api_key: 1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b"
      - "WeightsandBiases token => 7f9d2e34c1a0b5d6e7f81234abcd5678ef901234"
    validation:
      type: Http
      content:
        request:
          method: POST
          url: "https://api.wandb.ai/graphql"
          headers:
            Authorization: "Basic {{ 'api:' | append: TOKEN | b64enc }}"
            Content-Type: "application/json"
          body: |
            {"query":"query { viewer { email username } }"}
          response_matcher:
            - report_response: true
            - type: JsonValid
            - type: WordMatch
              words:
                - '"username"'
    references:
      - https://docs.wandb.ai/ref/cli/wandb-login
      - https://docs.wandb.ai/support/rotate_revoke_access

  - name: Weights and Biases API Key (v1)
    id: kingfisher.wandb.2
    pattern: |
      (?x)
      \b
      (
        wandb_v1_[A-Za-z0-9_]{77}
      )
      \b
    pattern_requirements:
      min_digits: 2
    confidence: medium
    min_entropy: 3.5
    examples:
      - "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"
      - "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"
    validation:
      type: Http
      content:
        request:
          method: POST
          url: "https://api.wandb.ai/graphql"
          headers:
            Authorization: "Basic {{ 'api:' | append: TOKEN | b64enc }}"
            Content-Type: "application/json"
          body: |
            {"query":"query { viewer { email username } }"}
          response_matcher:
            - report_response: true
            - type: JsonValid
            - type: WordMatch
              words:
                - '"username"'
    references:
      - https://docs.wandb.ai/ref/cli/wandb-login
      - https://docs.wandb.ai/support/rotate_revoke_access