@sonarsource/analyzer-commons-configurations 2.30.0-5193 → 2.31.0-5284
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -0
- package/package.json +5 -3
- package/secret-exclusion-corpus.json +305 -0
package/README.md
ADDED
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
# @sonarsource/analyzer-commons-configurations
|
|
2
|
+
|
|
3
|
+
Shared analyzer configuration data (secret-exclusion regexes) generated from the sonar-analyzer-commons
|
|
4
|
+
SecretClassifier, for use by non-JVM SonarSource analyzers.
|
|
5
|
+
|
|
6
|
+
The payload is `secret-patterns.json`.
|
|
7
|
+
|
|
8
|
+
`secret-exclusion-corpus.json` is the matching validation corpus. Every `knownNonSecrets` value must be suppressed by
|
|
9
|
+
`secret-patterns.json` in your regex engine - either matched by a `patternGroups` regex or equal to an
|
|
10
|
+
`exactMatchGroups` value, following the `match` semantics declared in that file - and no `secretCandidates` value may
|
|
11
|
+
be. Assert both in your own test suite, so a pattern that fails to compile or behaves differently outside the JVM is
|
|
12
|
+
caught here rather than becoming a missed or a noisy secret finding. A sample's `category` is informational and should
|
|
13
|
+
not be asserted on.
|
|
14
|
+
|
|
15
|
+
See [SonarSource/sonar-analyzer-commons](https://github.com/SonarSource/sonar-analyzer-commons) for details.
|
package/package.json
CHANGED
|
@@ -1,10 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sonarsource/analyzer-commons-configurations",
|
|
3
|
-
"version": "2.
|
|
4
|
-
"description": "Shared analyzer configuration data (secret-exclusion regexes) generated from the sonar-analyzer-commons SecretClassifier, for use by non-JVM SonarSource analyzers.",
|
|
3
|
+
"version": "2.31.0-5284",
|
|
4
|
+
"description": "Shared analyzer configuration data (secret-exclusion regexes) generated from the sonar-analyzer-commons SecretClassifier, for use by non-JVM SonarSource analyzers. The payload is secret-patterns.json, with the sample values those patterns must reproduce in secret-exclusion-corpus.json.",
|
|
5
5
|
"license": "LGPL-3.0-only",
|
|
6
6
|
"files": [
|
|
7
|
-
"
|
|
7
|
+
"README.md",
|
|
8
|
+
"secret-patterns.json",
|
|
9
|
+
"secret-exclusion-corpus.json"
|
|
8
10
|
],
|
|
9
11
|
"repository": {
|
|
10
12
|
"type": "git",
|
|
@@ -0,0 +1,305 @@
|
|
|
1
|
+
{
|
|
2
|
+
"description": "Validation corpus for secret-patterns.json, generated from SecretClassifier in sonar-analyzer-commons. Do not edit by hand. Every \"knownNonSecrets\" value must be suppressed by secret-patterns.json - either matched by a \"patternGroups\" regex or equal to an \"exactMatchGroups\" value, following the \"match\" semantics declared there - and no \"secretCandidates\" value may be. A known non-secret's \"category\" records which pattern group suppresses it in the JVM implementation, which is first-match-wins; it is informational and not part of the contract.",
|
|
3
|
+
"knownNonSecrets": [
|
|
4
|
+
{
|
|
5
|
+
"value": "",
|
|
6
|
+
"category": "FAKE_VALUE"
|
|
7
|
+
},
|
|
8
|
+
{
|
|
9
|
+
"value": "abc",
|
|
10
|
+
"category": "FAKE_VALUE"
|
|
11
|
+
},
|
|
12
|
+
{
|
|
13
|
+
"value": "samplepassword",
|
|
14
|
+
"category": "FAKE_VALUE"
|
|
15
|
+
},
|
|
16
|
+
{
|
|
17
|
+
"value": "EXAMPLE_SECRET",
|
|
18
|
+
"category": "FAKE_VALUE"
|
|
19
|
+
},
|
|
20
|
+
{
|
|
21
|
+
"value": "deadbeef",
|
|
22
|
+
"category": "FAKE_VALUE"
|
|
23
|
+
},
|
|
24
|
+
{
|
|
25
|
+
"value": "qwerty",
|
|
26
|
+
"category": "FAKE_VALUE"
|
|
27
|
+
},
|
|
28
|
+
{
|
|
29
|
+
"value": "${secret}",
|
|
30
|
+
"category": "FAKE_VALUE"
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
"value": "#{{secret}}",
|
|
34
|
+
"category": "FAKE_VALUE"
|
|
35
|
+
},
|
|
36
|
+
{
|
|
37
|
+
"value": "$foo_bar",
|
|
38
|
+
"category": "FAKE_VALUE"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"value": "password1234",
|
|
42
|
+
"category": "FAKE_VALUE"
|
|
43
|
+
},
|
|
44
|
+
{
|
|
45
|
+
"value": "passwd",
|
|
46
|
+
"category": "FAKE_VALUE"
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"value": "p@ssword",
|
|
50
|
+
"category": "FAKE_VALUE"
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
"value": "p@ssw0rd",
|
|
54
|
+
"category": "FAKE_VALUE"
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"value": "undefined",
|
|
58
|
+
"category": "FAKE_VALUE"
|
|
59
|
+
},
|
|
60
|
+
{
|
|
61
|
+
"value": "true",
|
|
62
|
+
"category": "FAKE_VALUE"
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
"value": "null",
|
|
66
|
+
"category": "FAKE_VALUE"
|
|
67
|
+
},
|
|
68
|
+
{
|
|
69
|
+
"value": "yourpassword",
|
|
70
|
+
"category": "FAKE_VALUE"
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
"value": "abbbbc",
|
|
74
|
+
"category": "FAKE_VALUE"
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
"value": "111111",
|
|
78
|
+
"category": "FAKE_VALUE"
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
"value": "1fj28...askn3i",
|
|
82
|
+
"category": "FAKE_VALUE"
|
|
83
|
+
},
|
|
84
|
+
{
|
|
85
|
+
"value": "admin123",
|
|
86
|
+
"category": "FAKE_VALUE"
|
|
87
|
+
},
|
|
88
|
+
{
|
|
89
|
+
"value": "vncpass",
|
|
90
|
+
"category": "FAKE_VALUE"
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
"value": "super-secret-p4ssw0rd",
|
|
94
|
+
"category": "FAKE_VALUE"
|
|
95
|
+
},
|
|
96
|
+
{
|
|
97
|
+
"value": "arn:aws:secretsmanager:us-east-1:123456789012:secret:db-pass",
|
|
98
|
+
"category": "FAKE_VALUE"
|
|
99
|
+
},
|
|
100
|
+
{
|
|
101
|
+
"value": "hunter2",
|
|
102
|
+
"category": "SECRET"
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"value": "letmein",
|
|
106
|
+
"category": "SECRET"
|
|
107
|
+
},
|
|
108
|
+
{
|
|
109
|
+
"value": "abc123",
|
|
110
|
+
"category": "SECRET"
|
|
111
|
+
},
|
|
112
|
+
{
|
|
113
|
+
"value": "changeme",
|
|
114
|
+
"category": "SECRET"
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
"value": "changeit",
|
|
118
|
+
"category": "SECRET"
|
|
119
|
+
},
|
|
120
|
+
{
|
|
121
|
+
"value": "unknown",
|
|
122
|
+
"category": "SECRET"
|
|
123
|
+
},
|
|
124
|
+
{
|
|
125
|
+
"value": "optional",
|
|
126
|
+
"category": "SECRET"
|
|
127
|
+
},
|
|
128
|
+
{
|
|
129
|
+
"value": "enabled",
|
|
130
|
+
"category": "SECRET"
|
|
131
|
+
},
|
|
132
|
+
{
|
|
133
|
+
"value": "disabled",
|
|
134
|
+
"category": "SECRET"
|
|
135
|
+
},
|
|
136
|
+
{
|
|
137
|
+
"value": "string",
|
|
138
|
+
"category": "SECRET"
|
|
139
|
+
},
|
|
140
|
+
{
|
|
141
|
+
"value": "random",
|
|
142
|
+
"category": "SECRET"
|
|
143
|
+
},
|
|
144
|
+
{
|
|
145
|
+
"value": "token",
|
|
146
|
+
"category": "SECRET"
|
|
147
|
+
},
|
|
148
|
+
{
|
|
149
|
+
"value": "__api_key__",
|
|
150
|
+
"category": "PLACEHOLDER"
|
|
151
|
+
},
|
|
152
|
+
{
|
|
153
|
+
"value": "TODO: fill in",
|
|
154
|
+
"category": "PLACEHOLDER"
|
|
155
|
+
},
|
|
156
|
+
{
|
|
157
|
+
"value": "FIXME: fill in",
|
|
158
|
+
"category": "PLACEHOLDER"
|
|
159
|
+
},
|
|
160
|
+
{
|
|
161
|
+
"value": "${env_var}",
|
|
162
|
+
"category": "PLACEHOLDER"
|
|
163
|
+
},
|
|
164
|
+
{
|
|
165
|
+
"value": "value-${env_var}",
|
|
166
|
+
"category": "PLACEHOLDER"
|
|
167
|
+
},
|
|
168
|
+
{
|
|
169
|
+
"value": "#{{db_host}}",
|
|
170
|
+
"category": "PLACEHOLDER"
|
|
171
|
+
},
|
|
172
|
+
{
|
|
173
|
+
"value": "((vault_ref))",
|
|
174
|
+
"category": "PLACEHOLDER"
|
|
175
|
+
},
|
|
176
|
+
{
|
|
177
|
+
"value": "$(get_key)",
|
|
178
|
+
"category": "PLACEHOLDER"
|
|
179
|
+
},
|
|
180
|
+
{
|
|
181
|
+
"value": "`get_key`",
|
|
182
|
+
"category": "PLACEHOLDER"
|
|
183
|
+
},
|
|
184
|
+
{
|
|
185
|
+
"value": "$MY_VAR",
|
|
186
|
+
"category": "PLACEHOLDER"
|
|
187
|
+
},
|
|
188
|
+
{
|
|
189
|
+
"value": "{db_host}",
|
|
190
|
+
"category": "PLACEHOLDER"
|
|
191
|
+
},
|
|
192
|
+
{
|
|
193
|
+
"value": "%{db_host}",
|
|
194
|
+
"category": "PLACEHOLDER"
|
|
195
|
+
},
|
|
196
|
+
{
|
|
197
|
+
"value": "{{db_host}}",
|
|
198
|
+
"category": "PLACEHOLDER"
|
|
199
|
+
},
|
|
200
|
+
{
|
|
201
|
+
"value": "System.getenv(\"DB_HOST\")",
|
|
202
|
+
"category": "PLACEHOLDER"
|
|
203
|
+
},
|
|
204
|
+
{
|
|
205
|
+
"value": "process.env.HOST",
|
|
206
|
+
"category": "PLACEHOLDER"
|
|
207
|
+
},
|
|
208
|
+
{
|
|
209
|
+
"value": "%GITHUB_TOKEN%",
|
|
210
|
+
"category": "PLACEHOLDER"
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
"value": "config['db_url']",
|
|
214
|
+
"category": "PLACEHOLDER"
|
|
215
|
+
},
|
|
216
|
+
{
|
|
217
|
+
"value": "Read-Host",
|
|
218
|
+
"category": "PLACEHOLDER"
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
"value": "<db-host>",
|
|
222
|
+
"category": "PLACEHOLDER"
|
|
223
|
+
},
|
|
224
|
+
{
|
|
225
|
+
"value": "<api_endpoint>",
|
|
226
|
+
"category": "PLACEHOLDER"
|
|
227
|
+
},
|
|
228
|
+
{
|
|
229
|
+
"value": "(config_ref)",
|
|
230
|
+
"category": "PLACEHOLDER"
|
|
231
|
+
},
|
|
232
|
+
{
|
|
233
|
+
"value": "[db_url]",
|
|
234
|
+
"category": "PLACEHOLDER"
|
|
235
|
+
},
|
|
236
|
+
{
|
|
237
|
+
"value": "%(db_url)s",
|
|
238
|
+
"category": "PLACEHOLDER"
|
|
239
|
+
},
|
|
240
|
+
{
|
|
241
|
+
"value": "@variables('host')",
|
|
242
|
+
"category": "PLACEHOLDER"
|
|
243
|
+
},
|
|
244
|
+
{
|
|
245
|
+
"value": "encrypted:YWJjZGVm",
|
|
246
|
+
"category": "ENCRYPTED"
|
|
247
|
+
},
|
|
248
|
+
{
|
|
249
|
+
"value": "{cipher}1e3faa2cdab2deae117dca102e52922a",
|
|
250
|
+
"category": "ENCRYPTED"
|
|
251
|
+
},
|
|
252
|
+
{
|
|
253
|
+
"value": "enc[QUJDRA==]",
|
|
254
|
+
"category": "ENCRYPTED"
|
|
255
|
+
},
|
|
256
|
+
{
|
|
257
|
+
"value": "ENC{QUJDRA==}",
|
|
258
|
+
"category": "ENCRYPTED"
|
|
259
|
+
},
|
|
260
|
+
{
|
|
261
|
+
"value": "%enc{QUJDRA==}",
|
|
262
|
+
"category": "ENCRYPTED"
|
|
263
|
+
},
|
|
264
|
+
{
|
|
265
|
+
"value": "ENC(QUJDRA==)",
|
|
266
|
+
"category": "ENCRYPTED"
|
|
267
|
+
},
|
|
268
|
+
{
|
|
269
|
+
"value": "op://vault/item/key",
|
|
270
|
+
"category": "REFERENCE"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"value": "VAULT[path/to/key access_token]",
|
|
274
|
+
"category": "REFERENCE"
|
|
275
|
+
},
|
|
276
|
+
{
|
|
277
|
+
"value": "/var/keys/gsa-key.json",
|
|
278
|
+
"category": "STRUCTURED_FORMAT"
|
|
279
|
+
},
|
|
280
|
+
{
|
|
281
|
+
"value": "v1.2.3",
|
|
282
|
+
"category": "STRUCTURED_FORMAT"
|
|
283
|
+
},
|
|
284
|
+
{
|
|
285
|
+
"value": ">=1.0.0",
|
|
286
|
+
"category": "STRUCTURED_FORMAT"
|
|
287
|
+
},
|
|
288
|
+
{
|
|
289
|
+
"value": "~1.4.5-alpha",
|
|
290
|
+
"category": "STRUCTURED_FORMAT"
|
|
291
|
+
},
|
|
292
|
+
{
|
|
293
|
+
"value": "4.0.9(@types/node@22.13.4)",
|
|
294
|
+
"category": "STRUCTURED_FORMAT"
|
|
295
|
+
}
|
|
296
|
+
],
|
|
297
|
+
"secretCandidates": [
|
|
298
|
+
"Xk9Lm2Qp7Rs4Tv1Wz0",
|
|
299
|
+
"9f8e7d6c5b4a392817",
|
|
300
|
+
"Tr0ub4dor&3xpl0!t",
|
|
301
|
+
"__not_closed",
|
|
302
|
+
"mytoken123",
|
|
303
|
+
"this_should_remain_unknown"
|
|
304
|
+
]
|
|
305
|
+
}
|