add support of GitHub fine-grained tokens

Issue: aquasecurity#5650
sourav977 · Dec 6, 2023 · 273271b · 273271b
1 parent a5342da
commit 273271b
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
@@ -142,6 +142,14 @@ var builtinRules = []Rule{
 		Regex:    MustCompile(`ghr_[0-9a-zA-Z]{76}`),
 		Keywords: []string{"ghr_"},
 	},
+	{
+		ID:       "github_pat",
+		Category: CategoryGitHub,
+		Title:    "GitHub Fine-grained personal access tokens",
+		Severity: "CRITICAL",
+		Regex:    MustCompile(`^github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}$`),
+		Keywords: []string{"github_pat_"},
+	},
 	{
 		ID:       "gitlab-pat",
 		Category: CategoryGitLab,