Skip to content

Conversation

ladybug0125
Copy link
Contributor

No description provided.

ahrav
ahrav approved these changes Apr 20, 2022
client = common.SaneHttpClient()

//Make sure that your group is surrounded in boundry characters such as below to reduce false positives
keyPat = regexp.MustCompile(detectors.PrefixRegex([]string{"lunchmoney"}) + `\b([a-zA-Z0-9]{50})\b`)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion: tighten this regex and use \b([a-f0-9]{50})\b

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed the regex and pushed it. Thanks!

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some extra context here Mildred, this is a hex-encoded credential which only uses a-f rather than a-z

Copy link
Collaborator

@ahrav ahrav left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small tweak to the regex since lunchmoney only uses a-f

@dustin-decker dustin-decker merged commit 0b122b8 into trufflesecurity:main Apr 21, 2022
bill-rich pushed a commit that referenced this pull request May 2, 2022
* added lunchmoney scanner

* changed the regex
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants