forked from mirrors/kingfisher
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
rules:
|
|
- name: Proof API Key
|
|
id: kingfisher.proof.1
|
|
pattern: |
|
|
(?x)
|
|
\b
|
|
(
|
|
prf_(?:(?:cli_)?test_)?[a-zA-Z0-9_-]{20,80}
|
|
)
|
|
\b
|
|
pattern_requirements:
|
|
min_digits: 2
|
|
min_entropy: 3.5
|
|
confidence: high
|
|
categories: [api, key]
|
|
examples:
|
|
- 'PROOF_API_KEY=prf_AbCdEfGhIjKlMnOpQrStUvWxYz123456'
|
|
- 'proof_key: prf_test_AbCdEfGhIjKlMnOpQrStUvWxYz123456'
|
|
- 'proof_key: prf_cli_AbCdEfGhIjKlMnOpQrStUvWxYz123456'
|
|
- 'proof_key: prf_cli_test_AbCdEfGhIjKlMnOpQrStUvWxYz123456'
|
|
validation:
|
|
type: Http
|
|
content:
|
|
request:
|
|
method: POST
|
|
url: >
|
|
{%- if TOKEN contains "_test_" -%}
|
|
https://api.fairfax.proof.com/v1/transactions
|
|
{%- else -%}
|
|
https://api.proof.com/v1/transactions
|
|
{%- endif -%}
|
|
headers:
|
|
ApiKey: "{{ TOKEN }}"
|
|
Content-Type: application/json
|
|
Accept: application/json
|
|
body: '{}'
|
|
response_matcher:
|
|
- report_response: true
|
|
- type: StatusMatch
|
|
status: [422]
|
|
- type: WordMatch
|
|
words:
|
|
- signer
|
|
# Revocation not added: the public Proof docs describe dashboard key
|
|
# management and secret-scanning guidance, but not a self-revoke API.
|
|
references:
|
|
- https://dev.proof.com/docs/api-keys
|
|
- https://dev.proof.com/docs/environments
|
|
- https://dev.proof.com/reference/createtransaction
|