Merge pull request #359 from DariuszPorowski/master

Azure Storage Key Detector plugin
Yelp · Nov 12, 2020 · edc5726 · edc5726
2 parents 9b4ec6d + fa4eb9c
commit edc5726
Show file tree

Hide file tree

Showing 2 changed files with 35 additions and 0 deletions.
diff --git a/detect_secrets/plugins/azure_storage_key.py b/detect_secrets/plugins/azure_storage_key.py
@@ -0,0 +1,16 @@
+"""
+This plugin searches for Azure Storage Account access keys.
+"""
+import re
+
+from detect_secrets.plugins.base import RegexBasedDetector
+
+
+class AzureStorageKeyDetector(RegexBasedDetector):
+    """Scans for Azure Storage Account access keys."""
+    secret_type = 'Azure Storage Account access key'
+
+    denylist = [
+        # Account Key (AccountKey=xxxxxxxxx)
+        re.compile(r'AccountKey=[a-zA-Z0-9+\/=]{88}'),
+    ]
diff --git a/tests/plugins/azure_storage_key_test.py b/tests/plugins/azure_storage_key_test.py
@@ -0,0 +1,19 @@
+import pytest
+
+from detect_secrets.plugins.azure_storage_key import AzureStorageKeyDetector
+
+
+class TestAzureStorageKeyDetector:
+
+    @pytest.mark.parametrize(
+        'payload, should_flag',
+        [
+            (
+                'AccountKey=lJzRc1YdHaAA2KCNJJ1tkYwF/+mKK6Ygw0NGe170Xu592euJv2wYUtBlV8z+qnlcNQSnIYVTkLWntUO1F8j8rQ==',  # noqa: E501
+                True,
+            ),
+        ],
+    )
+    def test_analyze(self, payload, should_flag):
+        logic = AzureStorageKeyDetector()
+        assert logic.analyze_line(filename='mock_filename', line=payload)