Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Added ZohoCRM detector #3516

Merged
merged 14 commits into from
Nov 18, 2024

Conversation

nabeelalam
Copy link
Contributor

@nabeelalam nabeelalam commented Oct 28, 2024

Description:

This PR introduces a new detector for Zoho CRM API access tokens.

For the integration test, the active ZOHOCRM access token only has a 60 minute validity before becoming inactive, so an active token would have to be generated and added to the Secrets Manager for these tests to pass.

Access tokens can be generated by following the following steps in the Zoho documentation:
https://www.zoho.com/accounts/protocol/oauth/self-client/authorization-code-flow.html

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@nabeelalam nabeelalam requested a review from abmussani October 28, 2024 11:50
@nabeelalam nabeelalam marked this pull request as ready for review October 31, 2024 10:21
@nabeelalam nabeelalam requested review from a team as code owners October 31, 2024 10:21
Copy link
Contributor

@abmussani abmussani left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@nabeelalam Thank you for new addition in Detectors. Along with some comments, You need to also add new detector in Defaults.go otherwise engine won't load it.

Comment on lines 23 to 25
Details map[string]interface{} `json:"details"`
Message string `json:"message"`
Status string `json:"status"`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we remove them as these 3 fields are not being used anywhere ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah I had mapped the output, in order to add extra data in the response but it felt unnecessary. I've removed this fields.

pkg/detectors/zohocrm/zohocrm.go Outdated Show resolved Hide resolved
Copy link
Contributor

@kashifkhan0771 kashifkhan0771 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall LGTM! Rebasing is required.

pkg/detectors/zohocrm/zohocrm.go Show resolved Hide resolved
}

func (s Scanner) Description() string {
return "Zohocrm is a blockchain development platform that provides a suite of tools and services for building and scaling decentralized applications. Zohocrm API keys can be used to access these services."
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this is correct?

https://www.zoho.com/crm/

@nabeelalam nabeelalam merged commit 342ff2d into trufflesecurity:main Nov 18, 2024
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

4 participants