kingfisher/crates/kingfisher-rules/data/rules/netrc.yml

33 lines
No EOL
827 B
YAML

rules:
- name: netrc Credentials
id: kingfisher.netrc.1
pattern: |
(?xi)
( machine \s+ [^\s]+ | default )
\s+
login \s+ ([^\s]+)
\s+
password \s+ ([^\s]+)
min_entropy: 3.3
confidence: medium
pattern_requirements:
ignore_if_contains:
- '${'
- '$('
examples:
- 'machine api.github.com login ziggy^stardust password 012345abcdef'
- |
```
machine raw.github.com
login visionmedia
password pass123
```
- |
"""
machine api.wandb.ai
login user
password 7cc938e45e63e9014f88f811be240ba0395c02dd
"""
references:
- https://everything.curl.dev/usingcurl/netrc
- https://devcenter.heroku.com/articles/authentication#api-token-storage