kingfisher/data/rules/lob.yml
Mick Grove 212bda4100 - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch.
- Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform
2025-10-20 18:23:12 -07:00

65 lines
1.7 KiB
YAML

rules:
- name: Lob API Key
id: kingfisher.lob.1
pattern: |
(?xi)
lob
(?:.|[\n\r]){0,24}?
\b
(
(?:live|test)_[a-f0-9]{35}
)
\b
min_entropy: 3.5
confidence: medium
examples:
- export LOB_API_KEY=live_9f8e7d6c5b4a3210fedcba09876543210ab
- LOB_KEY="test_abcdefabcdefabcdefabcdefabcdefabcde"
references:
- https://docs.lob.com/#section/Authentication
validation:
type: Http
content:
request:
method: GET
url: https://api.lob.com/v1/addresses?limit=1
headers:
Authorization: "Basic {{ TOKEN | append: ':' | b64enc }}"
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status:
- 200
- name: Lob Publishable API Key
id: kingfisher.lob.2
pattern: |
(?xi)
lob
(?:.|[\n\r]){0,24}?
\b
(
(?:test|live)_pub_[a-f0-9]{31}
)
\b
min_entropy: 3.0
confidence: medium
examples:
- const LOB_PUB_KEY = "test_pub_abcdefabcdefabcdefabcdefabcdefa";
- LOB_PUBLISHABLE="live_pub_1234567890abcdef1234567890abcde"
references:
- https://docs.lob.com/#section/Authentication
validation:
type: Http
content:
request:
method: GET
url: https://api.lob.com/v1/addresses?limit=1
headers:
Authorization: "Basic {{ TOKEN | append: ':' | b64enc }}"
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status:
- 200