Skip to content

Feature (secrets) : Added Clojars Deploy Token detector#1778

Open
saurabhb-dev wants to merge 2 commits intogoogle:mainfrom
saurabhb-dev:saurabhb-dev-clojars-token
Open

Feature (secrets) : Added Clojars Deploy Token detector#1778
saurabhb-dev wants to merge 2 commits intogoogle:mainfrom
saurabhb-dev:saurabhb-dev-clojars-token

Conversation

@saurabhb-dev
Copy link
Contributor

###Description:
This PR introduces a new secret detector for Clojars Deploy Tokens.

###Fixes: #1749

###Changes:

  • Added ClojarsDeployToken struct and regex to veles/secrets/clojarsdeploytoken.
  • Registered the detector in extractor/filesystem/list/list.go.
  • Updated scan_result.proto with the new clojars_deploy_token field (ID 76).
  • Updated binary/proto/secret.go to handle the new token type.
  • Ran make protos to regenerate Go protobuf files.

###Verification:
I have verified this locally using the CLI on Windows.

  • Created a test file secret_test.txt with a valid Clojars token.
  • Ran ./scalibr --plugins=secrets --result=scan-result.textproto ...
  • Confirmed the output contains the detected token:
secrets:  {
  secret:  {
    clojars_deploy_token:  {
      token:  "CLOJARS_64995a98a217600eee9335039621324a5bdabd47faa4cf5d6d8827d10c5f"
    }
  }
}
image image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PRP: Secret extractor for Clojars Deploy Token

1 participant