Skip to content

Conversation

kashifkhan0771
Copy link
Contributor

@kashifkhan0771 kashifkhan0771 commented Aug 7, 2025

Description:

This PR refactors the Caflou token detector.
The existing regex pattern was too broad and for somehow had a-b only for small letters 😅, so this update narrows it to reduce false positives. I also observed that all Caflou tokens share a fixed prefix, which has now been incorporated into the pattern for improved accuracy.

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@kashifkhan0771 kashifkhan0771 requested a review from a team as a code owner August 7, 2025 11:07
@amanfcp
Copy link
Contributor

amanfcp commented Aug 7, 2025

@kashifkhan0771 this is already under review in #4315

Please do give your review as per your findings there

@kashifkhan0771
Copy link
Contributor Author

@kashifkhan0771 this is already under review in #4315
Please do give your review as per your findings there

I reviewed that PR. It updates the verification logic.
This PR, on the other hand, focuses specifically on updating the regex pattern.

@kashifkhan0771 kashifkhan0771 merged commit d287246 into trufflesecurity:main Aug 8, 2025
13 checks passed
@kashifkhan0771 kashifkhan0771 deleted the update/oss-56-caflou branch August 8, 2025 07:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants