kingfisher/data/rules/sentry.yml

rules:
  - name: Sentry Access Token
    id: kingfisher.sentry.1
    pattern: |
      (?xi)
      \b
      sentry
      (?:.|[\n\r]){0,32}?
      \b
      (
        [a-f0-9]{64}
      )
      \b
    min_entropy: 3.5
    confidence: medium
    examples:
      - SENTRY_TOKEN=abcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcd
      - '"sentry": "1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"'
    references:
      - https://docs.sentry.io/api/auth/
    validation:
      type: Http
      content:
        request:
          method: GET
          url: https://sentry.io/api/0/projects/
          headers:
            Authorization: 'Bearer {{ TOKEN }}'
            Accept: application/json
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status:
                - 200

  - name: Sentry Organization Token
    id: kingfisher.sentry.2
    pattern: |
      (?xi)
      \b
      (
        sntrys_eyJpYXQiO[a-zA-Z0-9+/]{10,200}(?:LCJyZWdpb25fdXJs|InJlZ2lvbl91cmwi|cmVnaW9uX3VybCI6)[a-zA-Z0-9+/]{10,200}={0,2}_[a-zA-Z0-9+/]{43}
      )
    min_entropy: 4.2
    confidence: medium
    examples:
      - sntrys_eyJpYXQiOjE2OTA4ODAwMDAsInJlZ2lvbl91cmwiOiJodHRwczovL3NlbnRyeS5pby9vcmdzL215LW9yZy8ifQ==_abcdefghijklmnopqrstuvwx1234567890abcdefabc
      - sntrys_eyJpYXQiOiIxNjkwODgwMDAwIiwicmVnaW9uX3VybCI6Imh0dHBzOi8vc2VudHJ5LmlvLyJ9_abcdABCD1234567890abcdABCD1234567890abcdABCD
    references:
      - https://docs.sentry.io/api/auth/
    validation:
      type: Http
      content:
        request:
          method: GET
          url: https://sentry.io/api/0/projects/
          headers:
            Authorization: 'Bearer {{ TOKEN }}'
            Accept: application/json
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status:
                - 200

  - name: Sentry User Token
    id: kingfisher.sentry.3
    pattern: |
      (?xi)
      \b
      (
        sntryu_[a-f0-9]{64}
      )
      \b
    min_entropy: 3.5
    confidence: medium
    examples:
      - sntryu_abcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcd
      - SNTRY_USER="sntryu_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"
    references:
      - https://docs.sentry.io/api/auth/
    validation:
      type: Http
      content:
        request:
          method: GET
          url: https://sentry.io/api/0/projects/
          headers:
            Authorization: 'Bearer {{ TOKEN }}'
            Accept: application/json
          response_matcher:
            - report_response: true
            - type: StatusMatch
              status:
                - 200