Update authress.go to include alternate form account dash (-) (#1224)

gitleaks · Aug 24, 2023 · 3cbcda2 · 3cbcda2
1 parent 46c6272
commit 3cbcda2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/cmd/generate/config/rules/authress.go b/cmd/generate/config/rules/authress.go
@@ -8,12 +8,13 @@ import (
 )
 
 func Authress() *config.Rule {
-	// define rule
+	// Rule Definition
+	// (Note: When changes are made to this, rerun `cd cmd/generate/config && go run main.go` and commit the config/gitleaks.toml file
 	r := config.Rule{
 		Description: "Authress Service Client Access Key",
 		RuleID:      "authress-service-client-access-key",
 		SecretGroup: 1,
-		Regex:       generateUniqueTokenRegex(`(?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc_[a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120}`),
+		Regex:       generateUniqueTokenRegex(`(?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120}`),
 		Keywords:    []string{"sc_", "ext_", "scauth_", "authress_"},
 	}
 

diff --git a/config/gitleaks.toml b/config/gitleaks.toml
@@ -122,7 +122,7 @@ keywords = [
 [[rules]]
 id = "authress-service-client-access-key"
 description = "Authress Service Client Access Key"
-regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc_[a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
+regex = '''(?i)\b((?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
 secretGroup = 1
 keywords = [
     "sc_","ext_","scauth_","authress_",