diff --git a/cmd/generate/config/rules/generic.go b/cmd/generate/config/rules/generic.go index 33a4e9607..9cf8e7ad7 100644 --- a/cmd/generate/config/rules/generic.go +++ b/cmd/generate/config/rules/generic.go @@ -18,6 +18,7 @@ func GenericCredential() *config.Rule { "passwd", "password", "auth", + "access", }, `[0-9a-z\-_.=]{10,150}`), SecretGroup: 1, Keywords: []string{ @@ -29,6 +30,7 @@ func GenericCredential() *config.Rule { "passwd", "password", "auth", + "access", }, Entropy: 3.5, Allowlist: config.Allowlist{ diff --git a/config/gitleaks.toml b/config/gitleaks.toml index efe542ecd..cf263d027 100644 --- a/config/gitleaks.toml +++ b/config/gitleaks.toml @@ -1139,11 +1139,11 @@ keywords = [ [[rules]] description = "Generic API Key" id = "generic-api-key" -regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)''' +regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60]|$)''' secretGroup = 1 entropy = 3.5 keywords = [ - "key","api","token","secret","client","passwd","password","auth", + "key","api","token","secret","client","passwd","password","auth","access", ] [rules.allowlist] stopwords= [