Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feat] Detector implementation for Azure Configuration Connection String Key #3939

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
+386 −7
Open

[Feat] Detector implementation for Azure Configuration Connection String Key #3939

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a0c9b65
azure app configuration connection string detector implementation and…
abmussani Feb 25, 2025
07058ca
some refactoring
abmussani Feb 26, 2025
ea5e0a8
code cleanup.
abmussani Feb 26, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
some refactoring
  • Loading branch information
@abmussani
abmussani committed Feb 26, 2025
commit 07058cac745c908a729349f122301d73752f4632
11 changes: 8 additions & 3 deletions pkg/detectors/azureappconfigconnectionstring/azureappconfigconnectionstring.go
View file
Original file line number Diff line number Diff line change
@@ -12,6 +12,7 @@ import (

regexp "github.com/wasilibs/go-re2"

"github.com/trufflesecurity/trufflehog/v3/pkg/common"
"github.com/trufflesecurity/trufflehog/v3/pkg/detectors"
"github.com/trufflesecurity/trufflehog/v3/pkg/pb/detectorspb"
)
@@ -23,10 +24,9 @@ type Scanner struct {

// Ensure the Scanner satisfies the interface at compile time.
var _ detectors.Detector = (*Scanner)(nil)
var _ detectors.CustomFalsePositiveChecker = (*Scanner)(nil)

var (
defaultClient = detectors.DetectorHttpClientWithNoLocalAddresses
defaultClient = common.SaneHttpClient()
keyPat = regexp.MustCompile(`Endpoint=(https:\/\/[a-zA-Z0-9-]+\.azconfig\.io);Id=([a-zA-Z0-9+\/=]+);Secret=([a-zA-Z0-9+\/=]+)`)
)

@@ -42,7 +42,12 @@ func (s Scanner) FromData(ctx context.Context, verify bool, data []byte) (result

keyMatches := keyPat.FindAllStringSubmatch(dataStr, -1)

keyMatchesUnique := make(map[string][]string)
for _, keyMatch := range keyMatches {
keyMatchesUnique[keyMatch[0]] = keyMatch
}

for _, keyMatch := range keyMatchesUnique {
resMatch := strings.TrimSpace(keyMatch[0])
endpoint := keyMatch[1]
id := keyMatch[2]
@@ -83,7 +88,7 @@ func (s Scanner) Type() detectorspb.DetectorType {
}

func (s Scanner) Description() string {
return "The Azure Management API is a RESTful interface for managing Azure resources programmatically through Azure Resource Manager (ARM), supporting automation with tools like Azure CLI and PowerShell. An Azure Management Direct Access API Key enables secure, non-interactive authentication, allowing direct access to manage resources via Azure Active Directory (AAD)."
return "Azure App Configuration is a managed service that centralizes application settings and feature flags, enabling dynamic updates without redeploying applications. Its connection string, which includes the endpoint URL and an access key, securely connects applications to the configuration store."
}

// GenerateHMACSignature creates the HMAC-SHA256 signature