kingfisher/crates/kingfisher-rules/data/rules/cloudant.yml
2026-04-14 12:52:27 -07:00

31 lines
1.2 KiB
YAML

rules:
- name: IBM Cloudant Legacy Credentials
id: kingfisher.cloudant.1
pattern: |
(?xi)
https?://
(
[A-Fa-f0-9]{8}-
[A-Fa-f0-9]{4}-
[A-Fa-f0-9]{4}-
[A-Fa-f0-9]{4}-
[A-Fa-f0-9]{12}
-bluemix
)
:
([A-Fa-f0-9]{64})
@
[a-z0-9\-]+
\.cloudantnosqldb\.appdomain\.cloud
pattern_requirements:
min_digits: 8
min_entropy: 3.5
confidence: medium
examples:
- "new PouchDB(\"https://4f621480-c3c9-41c6-bb2e-38fd4cce291f-bluemix:9a1b75eae487515172acc27e1203bd19d094f359bebb0f20ff69bb173cee3d4a@4f621480-c3c9-41c6-bb2e-38fd4cce291f-bluemix.cloudantnosqldb.appdomain.cloud/mydb\")"
- "CLOUDANT_URL=https://a1b2c3d4-e5f6-7890-abcd-ef1234567890-bluemix:abc123def456789012345678901234567890123456789012345678901234abcd@a1b2c3d4-e5f6-7890-abcd-ef1234567890-bluemix.cloudantnosqldb.appdomain.cloud"
references:
- https://cloud.ibm.com/apidocs/cloudant
- https://cloud.ibm.com/docs/Cloudant?topic=Cloudant-connecting-to-ibm-cloudant
# No standalone validation: credentials are embedded in the service URL.
# The host is instance-specific (UUID-bluemix.cloudantnosqldb.appdomain.cloud).