@@ -757,7 +757,7 @@ patterns:
757757 test :
758758 data : |
759759 AWS_ACCESS_KEY_ID=AKIAIOSFODNN7AAAAAAA
760- start_offset : 22
760+ start_offset : 18
761761 comments :
762762 - " This rule detects AWS Key IDs without any attempt to pair them with a secret key."
763763 - " This adds to the risk of false positives, so we exclude any Key IDs that end with 'EXAMPLE' which are often used in documentation and sample code."
@@ -773,6 +773,9 @@ patterns:
773773 \A|[^A-Za-z0-9/+]
774774 end : |
775775 \z|[^A-Za-z0-9/+=]
776+ test :
777+ data : |
778+ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQQJ99AAAC0123456789AAA012345678
776779 comments :
777780 - " This is an imprecise detection for Azure keys that does not identify which Azure service the key is for."
778781 - " Prefer using built-in more-specific rules for Azure services where possible."
@@ -785,7 +788,7 @@ patterns:
785788 pattern : |
786789 [a-f0-9]{32}
787790 start : |
788- (?i)(Ocp-Apim-Subscription-Key: |Ocp-Apim-Subscription-Key=|OcpApimSubscriptionKey=|Subscription-Key=)
791+ (?i)(?: Ocp-Apim-Subscription-Key: |Ocp-Apim-Subscription-Key=|OcpApimSubscriptionKey=|Subscription-Key=)
789792 end : |
790793 \z|[^A-Za-z0-9/+=]
791794 test :
@@ -801,7 +804,7 @@ patterns:
801804 description : AWS Bedrock API Key - automatic username
802805 regex :
803806 pattern : |
804- ABSKQmVkcm9ja0FQSUtleS[A-Za-z0-9+/]{2}([A-Za-z0-9+/]{4})+([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?
807+ ABSKQmVkcm9ja0FQSUtleS[A-Za-z0-9+/]{2}(?: [A-Za-z0-9+/]{4})+(?: [A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?
805808 start : |
806809 \A|[^A-Za-z0-9/+]
807810 end : |
@@ -819,7 +822,7 @@ patterns:
819822 description : AWS Bedrock API Key - manual username
820823 regex :
821824 pattern : |
822- ABSK([A-Za-z0-9+/]{4}){26,}([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?
825+ ABSK(?: [A-Za-z0-9+/]{4}){26,}(?: [A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?
823826 start : |
824827 \A|[^A-Za-z0-9/+]
825828 end : |
0 commit comments