test 2025-03-16T13:33:32+02:00

Author: babenek

credsweeper/common/keyword_pattern.py

@@ -8,12 +8,12 @@ class KeywordPattern:
                r"(?P<keyword>"
     # there will be inserted a keyword
     key_right = r")" \
-                r"[^%:='\"`<>{?!&]*" \
+                r"[^%:='\"`<>{?!&,;]*" \
                 r")" \
                 r"(&(quot|apos);|%[0-9a-f]{2}|[`'\"])*" \
                 r")"  # <variable>
     separator = r"(\s|\\{1,8}[tnr])*\]?(\s|\\{1,8}[tnr])*" \
-                r"(?P<separator>:(\s[a-z]{3,9}[?]?\s)?=|:|=(>|&gt;|\\u0026gt;)|!==|!=|===|==|=|%3d)" \
+                r"(?P<separator>:(\s[a-z]{3,9}[?]?\s)?=|:(?!:)|=(>|&gt;|\\u0026gt;)|!==|!=|===|==|=|%3d)" \
                 r"(\s|\\{1,8}[tnr])*"
     # might be curly, square or parenthesis with words before
     wrap = r"(?P<wrap>(" \

tests/common/test_keyword_pattern.py

@@ -144,7 +144,8 @@ def test_separator_p(self, config: Config, file_path: pytest.fixture, line: str)
             ["password=${array[@]:7:2}", "${array[@]:7:2}"],
             ["password=${1#*=}", "${1#*=}"],
             ["A2 ID:master,PW:dipPr10Gg!","dipPr10Gg!"],
-            ["pass=get->pass(arg1='seCreT', arg2='secRet2'...","seCreT"]
+            ["pass=get->pass(arg1='seCreT', arg2='secRet2'...","seCreT"],
+            ["The login name is test@ror-e.com with a password => skvu810","skvu810"]
         ])
     def test_keyword_pattern_p(self, config: Config, file_path: pytest.fixture, line: str, value: str) -> None:
 

tests/data/ml_threshold.json

@@ -6067,31 +6067,6 @@
             }
         ]
     },
-    {
-        "rule": "Password",
-        "severity": "critical",
-        "confidence": "moderate",
-        "ml_probability": 1.0,
-        "line_data_list": [
-            {
-                "line": "ANY_password,default:IhqSb1Gg",
-                "line_num": 31,
-                "path": "./tests/samples/doc_various",
-                "info": "",
-                "value": "IhqSb1Gg",
-                "value_start": 21,
-                "value_end": 29,
-                "variable": "ANY_password,default",
-                "variable_start": 0,
-                "variable_end": 20,
-                "entropy_validation": {
-                    "iterator": "BASE64STDPAD_CHARS",
-                    "entropy": 3.0,
-                    "valid": false
-                }
-            }
-        ]
-    },
     {
         "rule": "Key",
         "severity": "critical",

tests/test_main.py

@@ -873,6 +873,7 @@ def test_param_n(self) -> None:
     def test_param_p(self) -> None:
         # internal parametrized tests for quick debug
         items = [  #
+            ("pw.md", b"The login password => skWu850", "password", "skWu850"), #
             ("log.txt", b'Authorization: SSWS 00QEi8-WW0HmCjAl4MlVjFx-vbGPXMD8sWXsua', "Authorization",
              "00QEi8-WW0HmCjAl4MlVjFx-vbGPXMD8sWXsua"),
             ('test.yaml', b'password: "Fd[q#pX+@4*r`1]Io"', 'password', 'Fd[q#pX+@4*r`1]Io'),