kingfisher/data/rules/prefect.yml
Mick Grove 1b181a368a - Added provider-specific kingfisher scan subcommands (for example kingfisher scan github …) that translate into the legacy flags under the hood. The new layout keeps backwards compatibility while removing the wall of provider options from kingfisher scan --help.
- Updated the README so every provider example (GitHub, GitLab, Bitbucket, Azure Repos, Gitea, Hugging Face, Slack, Jira, Confluence, S3, GCS, Docker) uses the new subcommand style.
- Restored the direct kingfisher scan /path/to/dir flow for local filesystem scans while adding a --list-only switch to each provider subcommand so repository enumeration no longer requires the standalone github repos, gitlab repos, etc. commands.
- Removed the legacy top-level provider commands (kingfisher github, kingfisher gitlab, kingfisher gitea, kingfisher bitbucket, kingfisher azure, kingfisher huggingface) now that enumeration lives under kingfisher scan <provider> --list-only.
- Fixed kingfisher scan github … (and other provider-specific subcommands) so they no longer demand placeholder path arguments before the CLI accepts the request.
- Removed the --bitbucket-username, --bitbucket-token, and --bitbucket-oauth-token flags in favour of KF_BITBUCKET_* environment variables when authenticating to Bitbucket.
2025-10-22 16:24:09 -07:00

31 lines
808 B
YAML

rules:
- name: Prefect API Token
id: kingfisher.prefect.1
pattern: |
(?xi)
\b
(
pnu_[a-z0-9]{36}
)
\b
min_entropy: 3.0
confidence: medium
examples:
- PREFECT_API_TOKEN=pnu_1234567890abcdef1234567890abcdef1234
- '"prefectToken": "pnu_abcdefabcdefabcdefabcdefabcdefabcdef"'
references:
- https://docs.prefect.io/latest/concepts/api_keys/
validation:
type: Http
content:
request:
method: GET
url: https://api.prefect.cloud/api/me/workspaces
headers:
Authorization: 'Bearer {{ TOKEN }}'
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status:
- 200