Skip to content

Conversation

kashifkhan0771
Copy link
Contributor

@kashifkhan0771 kashifkhan0771 commented Jun 2, 2025

Description:

JIRA V2 tokens start with a unique five-letter prefix (ATATT), yet we're still applying prefixRegex to them. The same applies to associated email addresses pattern. Typically, we don’t apply any prefixRegex when using a standard email pattern, but in this case, we are. This is the main reason the token wasn’t detected in one case for a user.
This pull request remove the use of prefixRegex for JIRA V2 tokens. Given that the pattern is already distinctive and we require three components to generate a valid result, the likelihood of false positives is quite low.

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@kashifkhan0771 kashifkhan0771 requested a review from a team as a code owner June 2, 2025 06:22
@kashifkhan0771 kashifkhan0771 merged commit 5fca163 into trufflesecurity:main Jun 2, 2025
13 checks passed
@kashifkhan0771 kashifkhan0771 deleted the update/csm-1140 branch June 2, 2025 06:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants