kingfisher/crates/kingfisher-rules/data/rules/delighted.yml
2026-03-03 16:47:59 -08:00

35 lines
911 B
YAML

rules:
- name: Delighted API Key
id: kingfisher.delighted.1
pattern: |
(?xi)
\b(?:delighted)
(?:.|[\n\r]){0,64}?
(?:api[_-]?key|secret|key|token)
(?:.|[\n\r]){0,32}?
\b
(
[a-zA-Z0-9]{20,40}
)
\b
pattern_requirements:
min_digits: 2
min_entropy: 3.3
confidence: medium
examples:
- 'DELIGHTED_API_KEY=dELi1a2B3c4D5e6F7g8H9i0JkLm1N2o3P'
- 'delighted_api_key: Rq4s5T6u7V8w9X0yZ1a2B3c4D5e6F7'
references:
- https://app.delighted.com/docs/api
validation:
type: Http
content:
request:
method: GET
url: "https://api.delighted.com/v1/metrics.json"
headers:
Authorization: "Basic {{ TOKEN | append: ':' | b64enc }}"
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]