Mirrors/trufflehog
2
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2024-11-10 23:24:33 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update github_old.go (#916)

Browse source
This commit is contained in:
Ankush Goel 2022-11-16 00:10:55 +05:30 committed by GitHub
parent 741130fb8d
commit 64cfe4d85e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pkg/detectors/github_old/github_old.go
View file

@ -20,7 +20,7 @@ var _ detectors.Detector = (*Scanner)(nil)
var (
// Oauth token
// https://developer.github.com/v3/#oauth2-token-sent-in-a-header
keyPat = regexp.MustCompile(`(?i)(?:github)[^\.].{0,40}[ =:'"]+([a-f0-9]{40})\b`)
keyPat = regexp.MustCompile(`(?i)(?:github|gh|pat)[^\.].{0,40}[ =:'"]+([a-f0-9]{40})\b`)
// TODO: Oauth2 client_id and client_secret
// https://developer.github.com/v3/#oauth2-keysecret
@ -38,7 +38,7 @@ type userRes struct {
// Keywords are used for efficiently pre-filtering chunks.
// Use identifiers in the secret preferably, or the provider name.
func (s Scanner) Keywords() []string {
return []string{"github"}
return []string{"github","gh","pat"}
}
// FromData will find and optionally verify GitHub secrets in a given set of bytes.