fix(secret): use .eyJ keyword for JWT secret (#7410)

aquasecurity · Aug 30, 2024 · bf64003 · bf64003
1 parent 3a5d091
commit bf64003
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
@@ -604,7 +604,7 @@ var builtinRules = []Rule{
 		Title:    "JWT token",
 		Severity: "MEDIUM",
 		Regex:    MustCompile(`ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?`),
-		Keywords: []string{"jwt"},
+		Keywords: []string{".eyJ"},
 	},
 	{
 		ID:       "linear-api-token",