* [INT-942] Add HumioAPIToken detector
Add a TruffleHog detector for Humio/CrowdStrike Falcon LogScale API
tokens. These are personal and repository-scoped tokens in a
tilde-delimited base62 format ({24 or 32}~{44}) that grant read/write
access to LogScale repositories via the REST and GraphQL APIs.
Verification uses the read-only GET /api/v1/health-json endpoint.
Known SaaS regions (US and EU) are tried automatically; self-hosted or
CrowdStrike regional instances are supported via explicit endpoint
configuration. ExtraData surfaces token type (Personal API Token vs
Repository API Token) based on prefix length.
Feature-flag gated behind HumioAPITokenDetectorEnabled.
Co-authored-by: Cursor <[email protected]>
* Use realistic test inputs for pattern matching
Replace synthetic one-liner inputs with multi-line snippets that
mirror real-world contexts: Python client config, .env file, Docker
Compose environment block. Adopt require.NoError from testify to
match the convention in solarwindsobservability_test.go.
Co-authored-by: Cursor <[email protected]>
* Use url.JoinPath for verification endpoint URLs
Replace string concatenation with url.JoinPath to safely construct
verification URLs from base endpoints.
Co-authored-by: Cursor <[email protected]>
---------
Co-authored-by: Cursor <[email protected]>
