[skip actions] [dockeyword] 2023-09-21T22:31:53+03:00

Samsung · Sep 21, 2023 · c690477 · c690477
1 parent 3178a1f
commit c690477
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/credsweeper/rules/config.yaml b/credsweeper/rules/config.yaml
@@ -88,7 +88,7 @@
   severity: critical
   type: pattern
   values:
-    - (?P<variable>[\w.-]*(?i:(?P<id>\bid\b)|id\b|user|name|계정|아이디)[\w.-]*(?(id)[ :(/]|[:(/])(?i:pa[as]swords?|pass(wd)?|pwd?|pin|비밀번호|비번|패스워드|암호))\)?(\s*->\s*|[ =:)(/]+|\s+is\s+|\s+are\s+|\s*는\s*|\s*은\s*|\s*설정은\s*)\(?(?P<id_value>[\w.-]{3,31})[ :\(/\"',]+(?P<value>[^\s}\])\"']{4,31})
+    - (?P<variable>[\w.-]*(?i:(?P<id>\bid\b)|id\b|user|name|계정|아이디)[\w.-]*(?(id)[ :(/]+|[:(/]+)(?i:pa[as]swords?|pass(wd)?|pwd?|pin|비밀번호|비번|패스워드|암호))\)?(\s*->\s*|[ =:)(/]+|\s+is\s+|\s+are\s+|\s*는\s*|\s*은\s*|\s*설정은\s*)\(?(?P<id_value>[\w.-]{2,31})[ :\(/\"',]+(?P<value>[^\s}\])\"']{4,31})
   filter_type:
     - ValueAllowlistCheck
     - ValueDictionaryKeywordCheck

diff --git a/tests/samples/doc_id_passwd_pair b/tests/samples/doc_id_passwd_pair
@@ -12,6 +12,7 @@ ID PW master IhqSb1Gg
 id/pass master/IhqSb1Gg
 ANYID PW master IhqSb1Gg                # many FP
 
+ ID / PW : db / db23#2
 ID/PWD-master/IhqSb1Gg
 아이디/PW:master/IhqSb1Gg
 계정/PW:master/IhqSb1Gg