Remove negative lookahead from gitleaks generic API secret regex (#3424…

…) (#3428) * Remove negative lookahead from gitleaks generic API secret regex * add @ as possible character in a secret Co-authored-by: Pieter De Cremer (Semgrep) <[email protected]>
semgrep · Jul 12, 2024 · dc88c20 · dc88c20
1 parent e16d7b3
commit dc88c20
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 4 deletions.
diff --git a/generic/secrets/gitleaks/generic-api-key.txt b/generic/secrets/gitleaks/generic-api-key.txt
@@ -209,4 +209,20 @@ clientToken: "pub4306832bdc5f2b8b980c492ec2c11ef3",
 // ok: generic-api-key
 keys: 'privkey1.json',
 // ok: generic-api-key
-"Keywords": "asdsadsadsaUSAdusadusadsa",
+"Keywords": "asdsadsadsaUSAdusadusadsa",
+
+
+# ruleid: generic-api-key
+jenkins.api.token=MbBdK@Rz-NppWpBGAYPDUks7zoc
+
+# ruleid: generic-api-key
+jenkins.api.token=MbBdKRz_NppWpBGAYPDUks7zoc
+
+# ruleid: generic-api-key
+jenkins.api.token=MbBdKRzNppWpBGAYPDUks7zoc
+
+# ruleid: generic-api-key
+jenkins.api.token=MbBdKRz-NppWpBGAYPDUks7zoc
+
+# ruleid: generic-api-key
+jenkins.api.token=MbBdK@RzNppWpBGAYPDUks7zoc