kingfisher/crates/kingfisher-rules/data/rules/pendo.yml
2026-03-03 16:47:59 -08:00

38 lines
994 B
YAML

rules:
- name: Pendo Integration Key
id: kingfisher.pendo.1
pattern: |
(?xi)
\b
pendo
(?:.|[\n\r]){0,32}?
(?:KEY|TOKEN|SECRET|INTEGRATION)
(?:.|[\n\r]){0,16}?
\b
(
[A-Za-z0-9]{32,64}
)
\b
pattern_requirements:
min_digits: 3
min_entropy: 3.5
confidence: medium
examples:
- "PENDO_INTEGRATION_KEY=a3B8f29E4d1C6a0578e23D9f41b6C8e2"
- 'pendo_key: "E7d2A1f849c3B05d6e81F2a794c3D5b09f4B2d7E"'
- "export PENDO_API_KEY=9f4B2d7E1a3c8056d2E7f1b94A6c3d80"
references:
- https://engageapi.pendo.io/
validation:
type: Http
content:
request:
method: GET
url: "https://app.pendo.io/api/v1/feature"
headers:
x-pendo-integration-key: "{{ TOKEN }}"
Content-Type: "application/json"
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]