adding access to generic rule keywords and identifiers

gitleaks · Jul 5, 2022 · 1fc27ee · 1fc27ee
1 parent f4ddeda
commit 1fc27ee
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/cmd/generate/config/rules/generic.go b/cmd/generate/config/rules/generic.go
@@ -18,6 +18,7 @@ func GenericCredential() *config.Rule {
 			"passwd",
 			"password",
 			"auth",
+			"access",
 		}, `[0-9a-z\-_.=]{10,150}`),
 		SecretGroup: 1,
 		Keywords: []string{
@@ -29,6 +30,7 @@ func GenericCredential() *config.Rule {
 			"passwd",
 			"password",
 			"auth",
+			"access",
 		},
 		Entropy: 3.5,
 		Allowlist: config.Allowlist{

diff --git a/config/gitleaks.toml b/config/gitleaks.toml
@@ -1139,11 +1139,11 @@ keywords = [
 [[rules]]
 description = "Generic API Key"
 id = "generic-api-key"
-regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)'''
+regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)'''
 secretGroup = 1
 entropy = 3.5
 keywords = [
-    "key","api","token","secret","client","passwd","password","auth",
+    "key","api","token","secret","client","passwd","password","auth","access",
 ]
 [rules.allowlist]
 stopwords= [