Skip to content

Enabled and Enhanced Artifactory Detector #4207

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 13 commits into from
Jun 25, 2025

Conversation

kashifkhan0771
Copy link
Contributor

@kashifkhan0771 kashifkhan0771 commented Jun 5, 2025

Description:

This PR enables Artifactory detector and enhances it

oss-236

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@kashifkhan0771 kashifkhan0771 requested review from a team as code owners June 5, 2025 06:58
Copy link
Contributor

@nabeelalam nabeelalam left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome! Thanks for the updates

@kashifkhan0771 kashifkhan0771 merged commit 9d5669e into trufflesecurity:main Jun 25, 2025
14 of 15 checks passed
@kashifkhan0771 kashifkhan0771 deleted the update/csm-1160 branch June 25, 2025 11:34
@shahzadhaider1 shahzadhaider1 linked an issue Jun 30, 2025 that may be closed by this pull request
@@ -26,14 +29,20 @@ var (
defaultClient = detectors.DetectorHttpClientWithNoLocalAddresses

// Make sure that your group is surrounded in boundary characters such as below to reduce false positives.
keyPat = regexp.MustCompile(`\b([a-zA-Z0-9]{73}|\b[a-zA-Z0-9]{64})`)
URLPat = regexp.MustCompile(`\b([A-Za-z0-9](?:[A-Za-z0-9\-]{0,61}[A-Za-z0-9])\.jfrog\.io)`)
keyPat = regexp.MustCompile(`\b([a-zA-Z0-9]{64,73})\b`)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @kashifkhan0771,

Do correct me on this, old regex would have either matched 73 or 64 chars and the new one matches every thing in between.

have you confirmed that they keys size is now random and lies within this range? if not will it not lead to false positives?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Detect Jfrog Artifactory tokens
4 participants