kingfisher/crates/kingfisher-rules/data/rules/buttercms.yml
2026-04-16 16:57:31 -07:00

35 lines
886 B
YAML

rules:
- name: ButterCMS API Key
id: kingfisher.buttercms.1
pattern: |
(?xi)
\b(?:butter(?:cms|_cms))
(?:.|[\n\r]){0,32}?
(?:API[_-]?(?:KEY|TOKEN)|SECRET|TOKEN|KEY)
(?:.|[\n\r]){0,16}?
\b
(
[a-z0-9]{40}
)
\b
pattern_requirements:
min_digits: 3
min_entropy: 3.5
confidence: medium
examples:
- 'BUTTERCMS_API_TOKEN=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0'
references:
- https://buttercms.com/docs/api/
validation:
type: Http
content:
request:
method: GET
url: "https://api.buttercms.com/v2/authors/?auth_token={{ TOKEN }}"
headers:
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: JsonValid