Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feat] Detector implementation for Azure API Management Direct Management Key #3938

Open
wants to merge 11 commits into
base: main
Choose a base branch
from
+392 −6
Open

[Feat] Detector implementation for Azure API Management Direct Management Key #3938

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
d46cec4
azuredirectmanagementapikey detector implementation and tests
abmussani Feb 24, 2025
3efd81c
add reference url
abmussani Feb 25, 2025
4378691
use sanehttpclient
abmussani Feb 25, 2025
f68b002
better regex
abmussani Feb 25, 2025
c70ca94
add prefix regex for key pattern
abmussani Feb 26, 2025
159a593
some refactoring
abmussani Feb 26, 2025
13b3967
cleanup some unnecessary logic for expiry formatting.
abmussani Feb 26, 2025
a76aa3d
improvise the regex to increase confidence level.
abmussani Feb 28, 2025
70511c8
remove \b from regex
abmussani Mar 3, 2025
82b61f7
implemented CustomFalsePositiveChecker interface.
abmussani Mar 6, 2025
c8b79b8
Merge branch 'main' into azuredirectmanagementapikey-detector-impl
abmussani Mar 6, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
remove \b from regex
  • Loading branch information
@abmussani
abmussani committed Mar 3, 2025
commit 70511c8cbd50a88aced506ff1f87fe2c7738874b
4 changes: 2 additions & 2 deletions pkg/detectors/azuredirectmanagementkey/azuredirectmanagementkey.go
View file
Original file line number Diff line number Diff line change
@@ -29,8 +29,8 @@ var _ detectors.Detector = (*Scanner)(nil)

var (
defaultClient = common.SaneHttpClient()
urlPat = regexp.MustCompile(`https://([a-z0-9][a-z0-9-]{0,48}[a-z0-9])\.management\.azure-api\.net`) // https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.APIM.Name/
keyPat = regexp.MustCompile(detectors.PrefixRegex([]string{"azure", ".management.azure-api.net"}) + `\b([a-zA-Z0-9+\/]{83,85}[a-zA-Z0-9]==)`) // pattern for both Primary and secondary key
urlPat = regexp.MustCompile(`https://([a-z0-9][a-z0-9-]{0,48}[a-z0-9])\.management\.azure-api\.net`) // https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.APIM.Name/
keyPat = regexp.MustCompile(detectors.PrefixRegex([]string{"azure", ".management.azure-api.net"}) + `([a-zA-Z0-9+\/]{83,85}[a-zA-Z0-9]==)`) // pattern for both Primary and secondary key
)

// Keywords are used for efficiently pre-filtering chunks.
Loading
Oops, something went wrong.