kingfisher/crates/kingfisher-rules/data/rules/stream.yml
2026-04-03 23:43:49 -07:00

52 lines
1.2 KiB
YAML

rules:
- name: Stream.io API Key
id: kingfisher.stream.1
pattern: |
(?xi)
\b
(?:stream|getstream)
(?:.|[\n\r]){0,32}?
\b(?:api[_-]?key|key|connect)\b
(?:.|[\n\r]){0,16}?
[=:"'(\s]
\b
(
[a-z0-9]{8,14}
)
\b
pattern_requirements:
min_digits: 2
min_entropy: 2.5
confidence: low
visible: false
examples:
- "stream.connect('sb0ylw7hjx5', apiSecret, '71748')"
- "STREAM_API_KEY=og8lrq3kyc14"
references:
- https://getstream.io/docs_rest/
- name: Stream.io API Secret
id: kingfisher.stream.2
pattern: |
(?xi)
\b
(?:stream|getstream)
(?:.|[\n\r]){0,96}?
\b(?:api[_-]?secret|secret)\b
(?:.|[\n\r]){0,16}?
[=:"'(\s,]
\b
(
[a-z0-9]{64}
)
\b
pattern_requirements:
min_digits: 8
min_entropy: 3.5
confidence: medium
examples:
- "const client = stream.connect('og8lrq3kyc14', secret='bgv804hi3feioqendjza50sq54t9iez8vzned3rvn3sqsei6vciey4lt3wwadyif', '71748')"
- "stream.api_secret=7k2m4nqpxyz89abc3def5ghijklmnopqrstuvwx0123456789012345678901abc "
references:
- https://getstream.io/docs_rest/
- https://getstream.io/dashboard