kingfisher/crates/kingfisher-rules/data/rules/appcenter.yml
2026-03-03 16:47:59 -08:00

37 lines
1,022 B
YAML

rules:
- name: Visual Studio App Center API Token
id: kingfisher.appcenter.1
pattern: |
(?xi)
(?:appcenter|app[_-]?center)
(?:.|[\n\r]){0,32}?
(?:API|TOKEN|KEY|SECRET)
(?:.|[\n\r]){0,16}?
\b
(
[a-f0-9]{40}
)
\b
pattern_requirements:
min_digits: 3
min_entropy: 3.0
confidence: medium
examples:
- "APPCENTER_API_TOKEN=a3b8f29e4d1c6a0578e23d9f41b6c8e201234567"
- 'app_center_token: "9f4b2d7e1a3c8056d2e7f1b94a6c3d8001234567"'
- "export APP_CENTER_KEY=d4e8f2a7b1c39605d2e7f1b94a6c3d8001234567"
references:
- https://openapi.appcenter.ms/
validation:
type: Http
content:
request:
method: GET
url: "https://api.appcenter.ms/v0.1/apps"
headers:
X-Api-Token: "{{ TOKEN }}"
Content-Type: "application/json"
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]