From 196e952dc76d06c95162919b1a369611bc42004c Mon Sep 17 00:00:00 2001 From: Suchakra Sharma Date: Fri, 24 Nov 2023 01:15:06 -0800 Subject: [PATCH 1/2] add android collection rules (#356) --- rules/collections/android/any.yaml | 43 ++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 rules/collections/android/any.yaml diff --git a/rules/collections/android/any.yaml b/rules/collections/android/any.yaml new file mode 100644 index 00000000..6af90187 --- /dev/null +++ b/rules/collections/android/any.yaml @@ -0,0 +1,43 @@ +collections: + - id: Collections.Android.Form.Email + name: Android app email input + patterns: + - "(?i)email.*" + tags: + + - id: Collections.Android.Form.User + name: Android app username input + patterns: + - "(?i)user.*" + tags: + + - id: Collections.Android.Form.Address + name: Address text input Android + patterns: + - "(?i)address.*" + tags: + + - id: Collections.Android.Form.PhoneNumber + name: Phone number input Android + patterns: + - "(?i)phone.*" + tags: + + - id: Collections.Android.Form.ZipCode + name: Zip code input Android + patterns: + - "(?i)zip.*" + tags: + + - id: Collections.Android.Form.Password + name: Password input Android + patterns: + - "(?i)password.*" + tags: + + - id: Collections.Android.Form.Sensitve + name: Miscellaneous sensitive text input Android + patterns: + - ".*(?i)(bio|message|detail|comment).*" + tags: + From b2fffbf46e7c5feb42c33303e806c06e427b0fdc Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Mon, 27 Nov 2023 11:59:15 +0530 Subject: [PATCH 2/2] added go third party rules (#358) --- rules/sinks/storages/elasticsearch/go.yaml | 4 ++-- rules/sinks/third_parties/sdk/confluent/go.yaml | 12 ++++++++++++ rules/sinks/third_parties/sdk/datadog/go.yaml | 2 +- rules/sinks/third_parties/sdk/opentelemetry/go.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/temporal/go.yaml | 2 +- 5 files changed, 29 insertions(+), 4 deletions(-) create mode 100644 rules/sinks/third_parties/sdk/confluent/go.yaml create mode 100644 rules/sinks/third_parties/sdk/opentelemetry/go.yaml diff --git a/rules/sinks/storages/elasticsearch/go.yaml b/rules/sinks/storages/elasticsearch/go.yaml index a0a92422..fff2dfcb 100644 --- a/rules/sinks/storages/elasticsearch/go.yaml +++ b/rules/sinks/storages/elasticsearch/go.yaml @@ -5,7 +5,7 @@ sinks: domains: - elastic.co patterns: - - "(?i)(github.com/olivere/elastic).*(Search)" + - "(?i)(github.com|gopkg.in)(/)(olivere)(/)(elastic).*(Search)" tags: - id: Storages.Elasticsearch.Write @@ -13,5 +13,5 @@ sinks: domains: - elastic.co patterns: - - "(?i)(github.com/olivere/elastic).*(CreateIndex|Delete|Update)" + - "(?i)(github.com|gopkg.in)(/)(olivere)(/)(elastic).*(CreateIndex|Delete|Update)" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/confluent/go.yaml b/rules/sinks/third_parties/sdk/confluent/go.yaml new file mode 100644 index 00000000..3ad33853 --- /dev/null +++ b/rules/sinks/third_parties/sdk/confluent/go.yaml @@ -0,0 +1,12 @@ +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Confluent.Kafka + name: Confluent Kafka + domains: + - "confluent.io" + patterns: + - "(?i)(github.com)(/)(confluentinc)(/)(confluent-kafka-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/datadog/go.yaml b/rules/sinks/third_parties/sdk/datadog/go.yaml index 22d22908..3c78c81e 100644 --- a/rules/sinks/third_parties/sdk/datadog/go.yaml +++ b/rules/sinks/third_parties/sdk/datadog/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "datadoghq.com" patterns: - - "(?i)(github.com)(/)(DataDog)(/)(datadog-go).*" + - "(?i)(github.com|gopkg.in)(/)(DataDog)(/)(datadog-go|dd-trace-go).*" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/opentelemetry/go.yaml b/rules/sinks/third_parties/sdk/opentelemetry/go.yaml new file mode 100644 index 00000000..360d214d --- /dev/null +++ b/rules/sinks/third_parties/sdk/opentelemetry/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Opentelemetry + name: Opentelemetry + domains: + - "opentelemetry.io" + patterns: + - "(?i)(go.opentelemetry.io)(/)(contrib|otel).*" + tags: diff --git a/rules/sinks/third_parties/sdk/temporal/go.yaml b/rules/sinks/third_parties/sdk/temporal/go.yaml index 3870d519..6b27be6e 100644 --- a/rules/sinks/third_parties/sdk/temporal/go.yaml +++ b/rules/sinks/third_parties/sdk/temporal/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "temporal.io" patterns: - - "(?i)(github.com)(/)(spiral|cretz)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" + - "(?i)(github.com|go.temporal.io)(/)(spiral|cretz|sdk)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" tags: