kingfisher/data/rules/maxmind.yml
Mick Grove 212bda4100 - Fixed kingfisher scan so that providing --branch without --since-commit now diffs the branch against the empty tree and scans every commit reachable from that branch.
- Added rules for meraki, duffel, finnhub, frameio, freshbooks, gitter, infracost, launchdarkly, lob, maxmind, messagebird, nytimes, prefect, salingo, sendinblue, sentry, shippo, twitch, typeform
2025-10-20 18:23:12 -07:00

30 lines
789 B
YAML

rules:
- name: MaxMind License Key
id: kingfisher.maxmind.1
pattern: |
(?xi)
\b
(
[a-z0-9]{6}_[a-z0-9]{29}_mmk
)
\b
min_entropy: 3.8
confidence: medium
examples:
- MAXMIND_LICENSE=AB12CD_1234567890abcdef1234567890abc_mmk
- license_key="ZXCVBN_0987654321abcdef1234567890abc_mmk"
references:
- https://dev.maxmind.com/geoip/docs/web-services
validation:
type: Http
content:
request:
method: GET
url: https://geoip.maxmind.com/geoip/v2.1/city/me?license_key={{ TOKEN }}
headers:
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status:
- 200