semgrep-aws-key-comparison.yaml

gistfile1.txt

rules:
- id: detected-aws-secret-access-key-new
  pattern-regex: |-
    (("|'|`)?((?i)aws)_?\w*((?i)secret)_?\w*("|'|`)?\s{0,50}(:|=>|=)\s{0,50}("|'|`)?[A-Za-z0-9/+=]{40}("|'|`)?)
  languages: [regex]
  message: AWS Secret Access Key detected
  severity: ERROR
  metadata:
    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
- id: detected-aws-secret-access-key-old
  pattern-regex: |-
    (("|'|`)?((?i)aws)_?((?i)secret)_?((?i)access)?_?((?i)key)?_?((?i)id)?("|'|`)?\s{0,50}(:|=>|=)\s{0,50}("|'|`)?[A-Za-z0-9/+=]{40}("|'|`)?)
  languages: [regex]
  message: AWS Secret Access Key detected
  severity: ERROR
  metadata:
    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go