kingfisher/data/rules/gitter.yml
Mick Grove 212bda4100 - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch.
- Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform
2025-10-20 18:23:12 -07:00

34 lines
833 B
YAML

rules:
- name: Gitter Access Token
id: kingfisher.gitter.1
pattern: |
(?xi)
\b
gitter
(?:.|[\n\r]){0,24}?
\b
(
[a-z0-9_-]{40}
)
\b
min_entropy: 3.2
confidence: medium
examples:
- GITTER_TOKEN=abcd1234efgh5678ijkl9012mnop3456qrst7890
- '"gitterToken": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0"'
references:
- https://developer.gitter.im/docs/authentication
validation:
type: Http
content:
request:
method: GET
url: https://api.gitter.im/v1/user
headers:
Authorization: 'Bearer {{ TOKEN }}'
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status:
- 200