credsweeper 1.12.0__tar.gz → 1.12.1__tar.gz

{credsweeper-1.12.0 → credsweeper-1.12.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: credsweeper
-Version: 1.12.0
+Version: 1.12.1
 Summary: Credential Sweeper
 Project-URL: Homepage, https://github.com/Samsung/CredSweeper
 Project-URL: Bug Tracker, https://github.com/Samsung/CredSweeper/issues

{credsweeper-1.12.0 → credsweeper-1.12.1}/credsweeper/__init__.py

@@ -24,4 +24,4 @@ __all__ = [
     "__version__"
 ]
 
-__version__ = "1.12.0"
+__version__ = "1.12.1"

{credsweeper-1.12.0 → credsweeper-1.12.1}/credsweeper/rules/config.yaml

@@ -389,6 +389,20 @@
     - code
     - doc
 
+- name: Google OAuth Refresh Token
+  severity: medium
+  confidence: weak
+  type: pattern
+  values:
+    - (?:^|[^0-9A-Za-z_+-]|\\[0abfnrtv]|(?:%|\\x)[0-9A-Fa-f]{2}|\\[0-7]{3}|\\[Uu][0-9A-Fa-f]{4}|\x1B\[[0-9;]{0,80}m)(?P<value>1//0[0-9A-Za-z_-]{80,8000})
+  filter_type: GeneralPattern
+  required_substrings:
+    - 1//0
+  min_line_len: 84
+  target:
+    - code
+    - doc
+
 - name: Heroku Credentials
   severity: high
   confidence: strong
@@ -1246,7 +1260,7 @@
     - (?P<value>[0-9A-Za-z_-]{14}\.atlasv1\.[0-9A-Za-z_-]{67})(?![0-9A-Za-z_-])
   filter_type:
     - ValuePatternCheck
-    - ValueEntropyBase64Check
+    - ValueCoupleKeywordCheck(3)
   min_line_len: 90
   required_substrings:
     - .atlasv1.
@@ -1280,18 +1294,19 @@
     - code
     - doc
 
-- name: Jira 2FA
+- name: OTP / 2FA Secret
   severity: info
   confidence: weak
   type: pattern
   values:
-    - (?:^|[^0-9A-Za-z_+-]|\\[0abfnrtv]|(?:%|\\x)[0-9A-Fa-f]{2}|\\[0-7]{3}|\\[Uu][0-9A-Fa-f]{4}|\x1B\[[0-9;]{0,80}m)(?P<value>[A-Z2-7]{16})(?![=0-9A-Za-z_+-])
+    - (?:^|[^0-9A-Za-z_+-]|\\[0abfnrtv]|(?:%|\\x)[0-9A-Fa-f]{2}|\\[0-7]{3}|\\[Uu][0-9A-Fa-f]{4}|\x1B\[[0-9;]{0,80}m)(?P<value>([A-Z2-7]{16}){1,2})(?![=0-9A-Za-z_+-])
   filter_type:
     - ValueCoupleKeywordCheck
     - ValuePatternCheck
     - ValueEntropyBase32Check
     - ValueBase32DataCheck
     - ValueTokenBase32Check
+    - ValueBase64PartCheck
   min_line_len: 16
   required_regex: "[0-9A-Za-z_/+-]{15}"
   target:
@@ -1303,11 +1318,11 @@
   confidence: strong
   type: pattern
   values:
-    - (?P<value>sk-[0-9A-Za-z_-]{16,32}(T3BlbkFJ|9wZW5BS|PcGVuQU)[0-9A-Za-z_-]{16,32})
+    - (?P<value>sk-[0-9A-Za-z_-]{16,160}(T3BlbkFJ|9wZW5BS|PcGVuQU)[0-9A-Za-z_-]{16,160})
   min_line_len: 51
   filter_type:
     - ValuePatternCheck
-    - ValueEntropyBase64Check
+    - ValueCoupleKeywordCheck
   required_substrings:
     - T3BlbkFJ
     - 9wZW5BS
@@ -1325,7 +1340,7 @@
   min_line_len: 36
   filter_type:
     - ValuePatternCheck
-    - ValueEntropyBase64Check
+    - ValueCoupleKeywordCheck
   required_substrings:
     - dckr_pat_
     - dckr_oat_
@@ -1341,6 +1356,7 @@
     - (?P<value>SWMTKN-1-[0-9a-z]{50}-[0-9a-z]{25})
   min_line_len: 85
   filter_type:
+    - ValuePatternCheck
     - ValueCoupleKeywordCheck
   required_substrings:
     - SWMTKN-1-
@@ -1348,6 +1364,22 @@
     - code
     - doc
 
+- name: Docker Swarm Key
+  severity: high
+  confidence: strong
+  type: pattern
+  values:
+    - (?P<value>SWMKEY-1-[0-9A-Za-z]{43})
+  min_line_len: 52
+  filter_type:
+    - ValuePatternCheck
+    - ValueCoupleKeywordCheck(3)
+  required_substrings:
+    - SWMKEY-1-
+  target:
+    - code
+    - doc
+
 - name: Groq API Key
   severity: high
   confidence: strong
@@ -1355,11 +1387,29 @@
   values:
     - (?:^|[^0-9A-Za-z_+-]|\\[0abfnrtv]|(?:%|\\x)[0-9A-Fa-f]{2}|\\[0-7]{3}|\\[Uu][0-9A-Fa-f]{4}|\x1B\[[0-9;]{0,80}m)(?P<value>gsk_[0-9A-Za-z_-]{52})(?![0-9A-Za-z_-])
   min_line_len: 56
+  filter_type:
+    - ValuePatternCheck
+    - ValueCoupleKeywordCheck
+  required_substrings:
+    - WGdyb3FY
+    - hncm9xW
+    - YZ3JvcV
+  target:
+    - code
+    - doc
+
+- name: X AI API Key
+  severity: high
+  confidence: moderate
+  type: pattern
+  values:
+    - (?:^|[^0-9A-Za-z_+-]|\\[0abfnrtv]|(?:%|\\x)[0-9A-Fa-f]{2}|\\[0-7]{3}|\\[Uu][0-9A-Fa-f]{4}|\x1B\[[0-9;]{0,80}m)(?P<value>xai-[0-9A-Za-z_-]{80})(?![0-9A-Za-z_-])
+  min_line_len: 84
   filter_type:
     - ValuePatternCheck
     - ValueEntropyBase64Check
   required_substrings:
-    - gsk_
+    - xai-
   target:
     - code
     - doc
@@ -1389,7 +1439,6 @@
   min_line_len: 37
   filter_type:
     - ValuePatternCheck
-    - ValueEntropyBase64Check
   required_substrings:
     - tvly-
   target: