Skip to content

Commit cc44c8f

Browse files
fix: Fix Clojar rule not being correctly caught
1 parent c1df497 commit cc44c8f

File tree

2 files changed

+27
-1
lines changed

2 files changed

+27
-1
lines changed

engine/rules/clojars.go

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
package rules
2+
3+
import (
4+
"fmt"
5+
"regexp"
6+
7+
"github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
8+
"github.com/zricethezav/gitleaks/v8/config"
9+
)
10+
11+
func Clojars() *config.Rule {
12+
// define rule
13+
r := config.Rule{
14+
Description: "Uncovered a possible Clojars API token, risking unauthorized access to Clojure libraries and potential code manipulation.",
15+
RuleID: "clojars-api-token",
16+
Regex: regexp.MustCompile(`(?i)(CLOJARS_)([a-z0-9]{60})`),
17+
Keywords: []string{"clojars"},
18+
}
19+
20+
// validate
21+
tps := []string{
22+
generateSampleSecret("clojars", "CLOJARS_"+secrets.NewSecret(alphaNumeric("60"))),
23+
}
24+
fmt.Println("Sample:", tps[0])
25+
return validate(r, tps, nil)
26+
}

engine/rules/rules.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@ func getDefaultRules() *[]Rule {
9292
{Rule: *rules.Beamer(), Tags: []string{TagApiToken}, ScoreParameters: ScoreParameters{Category: CategoryNewsAndMedia, RuleType: 4}},
9393
{Rule: *rules.CodecovAccessToken(), Tags: []string{TagAccessToken}, ScoreParameters: ScoreParameters{Category: CategorySecurity, RuleType: 4}},
9494
{Rule: *rules.CoinbaseAccessToken(), Tags: []string{TagAccessToken}, ScoreParameters: ScoreParameters{Category: CategoryCryptocurrencyExchange, RuleType: 4}},
95-
{Rule: *rules.Clojars(), Tags: []string{TagApiToken}, ScoreParameters: ScoreParameters{Category: CategoryPackageManagement, RuleType: 4}},
95+
{Rule: *Clojars(), Tags: []string{TagApiToken}, ScoreParameters: ScoreParameters{Category: CategoryPackageManagement, RuleType: 4}},
9696
{Rule: *rules.ConfluentAccessToken(), Tags: []string{TagAccessToken}, ScoreParameters: ScoreParameters{Category: CategorySocialMedia, RuleType: 4}},
9797
{Rule: *rules.ConfluentSecretKey(), Tags: []string{TagSecretKey}, ScoreParameters: ScoreParameters{Category: CategorySocialMedia, RuleType: 4}},
9898
{Rule: *rules.Contentful(), Tags: []string{TagApiToken}, ScoreParameters: ScoreParameters{Category: CategoryContentManagementSystem, RuleType: 4}},

0 commit comments

Comments
 (0)