From c6904770c49cd84ae2f5b07796218ebd5243ea54 Mon Sep 17 00:00:00 2001 From: Roman Babenko Date: Thu, 21 Sep 2023 22:31:53 +0300 Subject: [PATCH] [skip actions] [dockeyword] 2023-09-21T22:31:53+03:00 --- credsweeper/rules/config.yaml | 2 +- tests/samples/doc_id_passwd_pair | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/credsweeper/rules/config.yaml b/credsweeper/rules/config.yaml index 9d695dad2..f2cbf3789 100644 --- a/credsweeper/rules/config.yaml +++ b/credsweeper/rules/config.yaml @@ -88,7 +88,7 @@ severity: critical type: pattern values: - - (?P[\w.-]*(?i:(?P\bid\b)|id\b|user|name|계정|아이디)[\w.-]*(?(id)[ :(/]|[:(/])(?i:pa[as]swords?|pass(wd)?|pwd?|pin|비밀번호|비번|패스워드|암호))\)?(\s*->\s*|[ =:)(/]+|\s+is\s+|\s+are\s+|\s*는\s*|\s*은\s*|\s*설정은\s*)\(?(?P[\w.-]{3,31})[ :\(/\"',]+(?P[^\s}\])\"']{4,31}) + - (?P[\w.-]*(?i:(?P\bid\b)|id\b|user|name|계정|아이디)[\w.-]*(?(id)[ :(/]+|[:(/]+)(?i:pa[as]swords?|pass(wd)?|pwd?|pin|비밀번호|비번|패스워드|암호))\)?(\s*->\s*|[ =:)(/]+|\s+is\s+|\s+are\s+|\s*는\s*|\s*은\s*|\s*설정은\s*)\(?(?P[\w.-]{2,31})[ :\(/\"',]+(?P[^\s}\])\"']{4,31}) filter_type: - ValueAllowlistCheck - ValueDictionaryKeywordCheck diff --git a/tests/samples/doc_id_passwd_pair b/tests/samples/doc_id_passwd_pair index 68984ea64..c48f2ec4d 100644 --- a/tests/samples/doc_id_passwd_pair +++ b/tests/samples/doc_id_passwd_pair @@ -12,6 +12,7 @@ ID PW master IhqSb1Gg id/pass master/IhqSb1Gg ANYID PW master IhqSb1Gg # many FP + ID / PW : db / db23#2 ID/PWD-master/IhqSb1Gg 아이디/PW:master/IhqSb1Gg 계정/PW:master/IhqSb1Gg