trufflesecurity/trufflehog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Fix] Added Prefix In Dockerhub Detector Regex (#4084)
Lint / golangci-lint (push) Waiting to run
Lint / semgrep (push) Waiting to run
Release / Release (push) Waiting to run
Scan for secrets / test (push) Waiting to run
Test / test (push) Waiting to run
Test / test-community (push) Waiting to run

Browse Source 
* added prefix in dockerhub regex

* updated prefix in dockerhub regex

* removed prefix from access token pattern

* removed prefixed from v2 detector
This commit is contained in:
Nabeel Alam
2025-05-05 11:04:54 -05:00
committed by GitHub
parent 87a80345c4
commit e42153d44a
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/detectors/dockerhub/v1/dockerhub.go
+2 -2
View File
@@ -29,8 +29,8 @@ var _ detectors.Versioner = (*Scanner)(nil)
var ( var (
// Can use email or username for login. // Can use email or username for login.
usernamePat = regexp.MustCompile(`(?im)(?:user|usr|-u|id)\S{0,40}?[:=\s]{1,3}[ '"=]?([a-zA-Z0-9]{4,40})\b`) usernamePat = regexp.MustCompile(detectors.PrefixRegex([]string{"docker"}) + `(?im)(?:user|usr|-u|id)\S{0,40}?[:=\s]{1,3}[ '"=]?([a-zA-Z0-9]{4,40})\b`)
emailPat = regexp.MustCompile(common.EmailPattern) emailPat = regexp.MustCompile(detectors.PrefixRegex([]string{"docker"}) + common.EmailPattern)
// Can use password or personal access token (PAT) for login, but this scanner will only check for PATs. // Can use password or personal access token (PAT) for login, but this scanner will only check for PATs.
accessTokenPat = regexp.MustCompile(detectors.PrefixRegex([]string{"docker"}) + `\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b`) accessTokenPat = regexp.MustCompile(detectors.PrefixRegex([]string{"docker"}) + `\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b`)
pkg/detectors/dockerhub/v2/dockerhub.go
+1 -1
View File
@@ -39,7 +39,7 @@ var (
// Keywords are used for efficiently pre-filtering chunks. // Keywords are used for efficiently pre-filtering chunks.
// Use identifiers in the secret preferably, or the provider name. // Use identifiers in the secret preferably, or the provider name.
func (s Scanner) Keywords() []string { func (s Scanner) Keywords() []string {
return []string{"dckr_pat_", "dckr_oat_"} return []string{"docker", "dckr_pat_", "dckr_oat_"}
} }
// FromData will find and optionally verify Dockerhub secrets in a given set of bytes. // FromData will find and optionally verify Dockerhub secrets in a given set of bytes.