kingfisher/data/rules/messagebird.yml
Mick Grove 122885199d - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch.
- Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform
2025-10-20 18:23:12 -07:00

33 lines
No EOL
850 B
YAML

rules:
- name: MessageBird API Token
id: kingfisher.messagebird.1
pattern: |
(?xi)
\b
message[_-]?bird
(?:.|[\n\r]){0,32}?
(
[a-z0-9]{25}
)
\b
min_entropy: 3.4
confidence: medium
examples:
- MESSAGEBIRD_API_KEY=abcdefghijklmnopqrstuvwxy
- "messagebird_token: 'abcde12345fghij67890klmno'"
references:
- https://developers.messagebird.com/api/#authentication
validation:
type: Http
content:
request:
method: GET
url: https://rest.messagebird.com/balance
headers:
Authorization: 'AccessKey {{ TOKEN }}'
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: JsonValid