diff --git a/pkg/scanner/secrets.go b/pkg/scanner/secrets.go index b307e67..b005d74 100644 --- a/pkg/scanner/secrets.go +++ b/pkg/scanner/secrets.go @@ -57,7 +57,7 @@ func GetSecretRegexes() []Secret { { "AWS Access Key", "AWS Access Key", - "(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}", + "(A3T[A-Z0-9]|AKIA|ACCA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA|ASCA|APKA)[A-Z0-9]{16}", []string{}, "?", }, @@ -71,7 +71,7 @@ func GetSecretRegexes() []Secret { { "AWS MWS Key", "AWS MWS Key", - `amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`, + `amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`, []string{}, "?", }, @@ -99,7 +99,7 @@ func GetSecretRegexes() []Secret { { "Cloudinary Basic Auth", "Cloudinary Basic Auth", - `cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+`, + `cloudinary://[0-9]{15}:[0-9A-Za-z\-_]+@[0-9A-Za-z\-_]+`, []string{}, "?", }, @@ -127,28 +127,28 @@ func GetSecretRegexes() []Secret { { "Github Personal Access Token", "Github Personal Access Token", - `ghp_[0-9a-zA-Z]{36}`, + `ghp_.{36}`, []string{}, "?", }, { "Github OAuth Access Token", "Github OAuth Access Token", - `gho_[0-9a-zA-Z]{36}`, + `gho_.{36}`, []string{}, "?", }, { "Github App Token", "Github App Token", - `(ghu|ghs)_[0-9a-zA-Z]{36}`, + `(ghu|ghs)_.{36}`, []string{}, "?", }, { "Github Refresh Token", "Github Refresh Token", - `ghr_[0-9a-zA-Z]{76}`, + `ghr_.{76}`, []string{}, "?", }, @@ -183,7 +183,7 @@ func GetSecretRegexes() []Secret { { "Google API key", "Google API key", - `AIza[0-9A-Za-z\\-_]{35}`, + `AIza[0-9A-Za-z\-_]{35}`, []string{}, "?", }, @@ -232,14 +232,14 @@ func GetSecretRegexes() []Secret { { "SendGrid API Key", "SendGrid API Key", - `SG\.[\w_]{16,32}\.[\w_]{16,64}`, + `SG\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{43}`, []string{}, "?", }, { "Slack Webhook", "Slack Webhook", - `https\:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}`, + `https://hooks.slack.com/services/T[0-9A-Za-z\-_]{8}/B[0-9A-Za-z\-_]{8}/[0-9A-Za-z\-_]{24}`, []string{}, "?", }, @@ -253,14 +253,14 @@ func GetSecretRegexes() []Secret { { "Square access token", "Square access token", - `sq0atp\-[0-9A-Za-z\-_]{22}`, + `sq0atp\-[0-9A-Za-z\-_]{22}|EAAAE[a-zA-Z0-9\-_]{59}`, []string{}, "?", }, { "Square OAuth secret", "Square OAuth secret", - `sq0csp\-[0-9A-Za-z\\-_]{43}`, + `sq0csp\-[0-9A-Za-z\-_]{43}`, []string{}, "?", },