fix: add support for artifactory identity tokens

dpittner · dpittner · commit a285a86a928a · 2023-01-05T09:19:50.000+01:00
Signed-off-by: Daniel Pittner &lt;dpittner@de.ibm.com&gt;
diff --git a/detect_secrets/plugins/artifactory.py b/detect_secrets/plugins/artifactory.py
@@ -15,6 +15,8 @@ class ArtifactoryDetector(RegexBasedDetector):
         re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))AKC[a-zA-Z0-9]{10,}'),    # api token
         # artifactory encrypted passwords begin with AP[A-Z]
         re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))AP[\dABCDEF][a-zA-Z0-9]{8,}'),    # password
+        # artifactory identity tokens are different (base64 encoded reftkn:) and 64 chars
+	    re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))cmVmdGtuOg{54,54}'),  #identity token
     ]
 
     artifactory_url = 'na.artifactory.swg-devops.com/artifactory'

Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,8 @@ class ArtifactoryDetector(RegexBasedDetector):`
`15`	`15`	`re.compile(r'(?:(?<==\|:\|")\|(?<=\s)\|(?<=^))AKC[a-zA-Z0-9]{10,}'), # api token`
`16`	`16`	`# artifactory encrypted passwords begin with AP[A-Z]`
`17`	`17`	`re.compile(r'(?:(?<==\|:\|")\|(?<=\s)\|(?<=^))AP[\dABCDEF][a-zA-Z0-9]{8,}'), # password`
	`18`	`+ # artifactory identity tokens are different (base64 encoded reftkn:) and 64 chars`
	`19`	`+ re.compile(r'(?:(?<==\|:\|")\|(?<=\s)\|(?<=^))cmVmdGtuOg{54,54}'), #identity token`
`18`	`20`	`]`
`19`	`21`
`20`	`22`	`artifactory_url = 'na.artifactory.swg-devops.com/artifactory'`