Skip to content

Add Hashicorp Vault service and batch token rules

Dennis Dety requested to merge merenon/secrets:master into master

What does this MR do?

This MR addresses gitlab-org/gitlab#345453 (comment 745466942) and adds secret detection rules of "Hashicorp Vault service tokens" and "Hashicorp Vault batch tokens".

The tokens are described in the related vendor documentation: https://www.vaultproject.io/docs/concepts/tokens#token-types

Valid example service tokens

s.UrH7eGTdC7QIimGlbU6rVc9l
s.HQM1hH2rVRKDqdZy5fOjG8Rg
s.2Ftm0IkG2jTn8UV0o5Jk9QGI
s.RoHUAArTEMj91qBFVr4tpQAi
s.OckrSBzZPhNz6EhZMXZODL1c
s.Alh1jtrq6gsNyNWvGViHYpiu
s.9ReVbYRfaCLf3d4Gdi5w5pH3
s.d9yoq0ewURVXGTBR5osDYAOo
s.LXFAN4bGskLxU0xTMyiOzxD9
s.1mc8844MtL0xW2ptGCLFpbuO

Valid example batch tokens

b.AAAAAQKHnX4dGgPH9qZET46oNtlwTvIwXxHGqGICBaBRw743XG_5m_QHssZCoh13sj4uKisGCSOEWIgeyemg5o0LPMKbi5c13GJ0CEKsm7Ds6vxqguAN_5ir-DRC3uACdavCoHRCSr9p-Sv8cf2hMQpArsDfpj4azA
b.AAAAAQLrDmOqr6Kt1sMbhaq_gakOLpq9eWTDz27jkN_hkQZ8MLO25khHReEusRCFZx2qGWVV6WRlt_HxgtmJmy7bySepAkFVUkSBsCUEp2pm55ERVGFAThdUWyzUSvd9bKDlt3bSVr86jsoxSUJm-yUMKaiiM8k_jQ
b.AAAAAQIAXrQlTNRGDZdqd94ZWRcri9xQQ57zIzAUUzKNWvS-oHYlOEnyrT5YlIX52lc6zC0_rsu02IF34tp7Khw2FAYQSozLRMdb8aN3bO_jf2F-fbR_OUGJEjoqPtbpzjY0bnFg3hJTWqkh6uihr54eaMsKW9lIWg
b.AAAAAQILUqCP_m6kQzyGAap2EvO6HH1y-FRYlY2SlPxCZGKCv3W_7N4gBueD0YofVFJnWofwZ0R8AaihYkZK-EMDGYFs8dm9IYGq6Ko34xt8GCQ2JFsnjLiWGPxwEl758AjF2X_UwSdWZRtmfKb01FYA_8hsYh-APQ
b.AAAAAQJOauz76R9zclNsakBpjeug9noy2taibzAGLlUeolEIu3f2MxCuOknAWlntuMNkqHDkN66Gg0VL6o8Zm2aVPweVwrPMXKcXqeZEdEFFIts2mcTtgt6b96wJdaytQUQet99oiZsrmRZ1jsN9KtZaeULCa4irvA
b.AAAAAQIbOhD4qRzneTH83-6P2fZNmbn8M2q53CtSWQ_UoarRpwDIKU84WkAJhpP2EFPor3AuyC69AudCwvDIzFgnllLosbg1m1UiWlj_T9dJlqD5yJNZPIt6qCzForkZEoz-5jrYR0Wj4ybah1Yb40ONEPun9X8fZA
b.AAAAAQLMwCAPwqbJivVXVmOv2KgbaWCflUkUiRvQOxIkhspGSLTuW-jUNSB581HwN3Xxt0qWOZ746Ztq52neBji_xpF34U2PYD6yS9tLObxnWDh159XDWNdHIzrvfGOhxDyBAlyjofy38AShA0tdzlZ5PDWQ2PViuQ
b.AAAAAQLwqK4HW8OJJE0LOZv6sGF19T_OsoiX0-bv4hpzKqfJ3qfLXKb7mvX3v4tWAaV0hTCHXFU0cwajm-ZMPv_C7xaQzYC6tboLUmwnBz5CenN-2pP1Qho5d4MMNR_JSOTD6OS2T3nDSt3aNh7bLuSR68hXdCXckg
b.AAAAAQIn57kYKgsFySd4XztCPRqtQl2QnO43bLPwmpeWXLYMbcScWC64ib3To5GZFz_bREdb3URzlWjjrpb1AWFGTRkZajJwjFJXXlKl0RMm-pSpL1FR90T85Ep8ulSjUV_p0gO2vij5jmBU8KOk4w4tLMac0hzzVA
b.AAAAAQIJL9DyV2TAX3zqdt5YvTqvwPQ24Rz7POhiUdwUaxbDiqTuzDbRPyQmn36ctIpVdqXaB5xJ7A6pPMkENYGq5qNhw97vzC_ueA5y5nWEpqLLW_FeCm1-sAg2yg5yxaUxmguzlb05esN6wnJrQ_nDu42DcWqc5Q

What are the relevant issue numbers?

Does this MR meet the acceptance criteria?

Edited by Zach Rice

Merge request reports