Merge pull request #267 from EdOverflow/twilio

Create plugin to detect Twilio API keys.

README.md

@@ -160,7 +160,7 @@ The current heuristic searches we implement out of the box include:
 
 * **KeywordDetector**: checks to see if certain keywords are being used e.g. `password` or `secret`
 
-* **RegexBasedDetector**: checks for any keys matching certain regular expressions (Artifactory, AWS, Slack, Stripe, Mailchimp).
+* **RegexBasedDetector**: checks for any keys matching certain regular expressions (Artifactory, AWS, Slack, Stripe, Mailchimp, Twilio).
 
 * **JwtTokenDetector**: checks for formally correct JWTs.
 

detect_secrets/plugins/twilio.py

@@ -0,0 +1,21 @@
+"""
+This plugin searches for Twilio API keys
+"""
+from __future__ import absolute_import
+
+import re
+
+from .base import RegexBasedDetector
+
+
+class TwilioKeyDetector(RegexBasedDetector):
+    """Scans for Twilio API keys."""
+    secret_type = 'Twilio API Key'
+
+    denylist = [
+        # Account SID (ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
+        re.compile(r'AC[a-z0-9]{32}'),
+
+        # Auth token (SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
+        re.compile(r'SK[a-z0-9]{32}'),
+    ]

tests/plugins/twilio_test.py

@@ -0,0 +1,26 @@
+from __future__ import absolute_import
+
+import pytest
+
+from detect_secrets.plugins.twilio import TwilioKeyDetector
+
+
+class TestTwilioKeyDetector(object):
+
+    @pytest.mark.parametrize(
+        'payload, should_flag',
+        [
+            (
+                'SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+                True,
+            ),
+            (
+                'ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+                True,
+            ),
+        ],
+    )
+    def test_analyze(self, payload, should_flag):
+        logic = TwilioKeyDetector()
+        output = logic.analyze_line(payload, 1, 'mock_filename')
+        assert output