[Feat] PrivateKey Analyzer (#3854)

* private key analyzer initial impl  - basic structure

* Impl analyzePermission method for PrivateKey analyzer.
export few private functions for reusability in analyzers

* add permissions.yaml and generate permissions

* permissions fix

* AnalyzeAndPrintPermissions impl

* analyzer test pushed

* Impl analyzer func called from detector.
added and regenerated permissions.

* filter empty strings in result and generate expected_output for test

* some refactoring

* comment added for better readability.

* fixed code breaking changes in detectors due to exporting private functions.

* log insufficient information message on no certificate results

Author: abmussani

pkg/analyzer/analyzers/analyzers.go

@@ -80,6 +80,7 @@ const (
 	AnalyzerTypeSquare
 	AnalyzerTypeStripe
 	AnalyzerTypeTwilio
+	AnalyzerTypePrivateKey
 	// Add new items here with AnalyzerType prefix
 )
 
@@ -106,6 +107,7 @@ var analyzerTypeStrings = map[AnalyzerType]string{
 	AnalyzerTypeSquare:      "Square",
 	AnalyzerTypeStripe:      "Stripe",
 	AnalyzerTypeTwilio:      "Twilio",
+	AnalyzerTypePrivateKey:  "PrivateKey",
 	// Add new mappings here
 }
 

pkg/analyzer/analyzers/privatekey/expected_output.json

@@ -0,0 +1 @@
+{"AnalyzerType":21,"Bindings":[],"UnboundedResources":[{"Name":"*.gruponu3.com","FullyQualifiedName":"/*.gruponu3.com","Type":"certificate","Metadata":null,"Parent":null},{"Name":"techautm.in","FullyQualifiedName":"/techautm.in","Type":"certificate","Metadata":null,"Parent":null}],"Metadata":null}

pkg/analyzer/analyzers/privatekey/permissions.go

@@ -0,0 +1,23 @@
+permissions:
+# TLS: 
+# KeyUsuage: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3
+# ExtendedKeyUsage: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12
+- DigitalSignature
+- NonRepudiation
+- KeyEncipherment
+- DataEncipherment
+- KeyAgreement
+- CertificateSigning
+- CRLSigning
+- EncipherOnly
+- DecipherOnly
+- ServerAuth
+- ClientAuth
+- CodeSigning
+- EmailProtection
+- TimeStamping
+- OCSPSigning
+
+# Github/Gitlab
+- Clone
+- Push