From fa2c5550521073ac5497a1b148f889bdc29bb747 Mon Sep 17 00:00:00 2001
From: KhemrajSingh Rathore <khemraj.rathore@privado.ai>
Date: Mon, 28 Aug 2023 11:41:44 +0530
Subject: [PATCH] Ruby august release (#294)

* change - wechat rule

* fix - tencent cloud

* add - thirdParty api

* add - new rules in ruby

* add more rules
---
 config/systemConfig/ruby.yaml                       |  4 ++--
 rules/sinks/storages/redis/ruby.yaml                |  8 ++++++++
 rules/sinks/third_parties/api/ruby.yaml             |  8 ++++++++
 .../sinks/third_parties/sdk/calendarific/ruby.yaml  | 13 +++++++++++++
 rules/sinks/third_parties/sdk/codat/ruby.yaml       | 13 +++++++++++++
 rules/sinks/third_parties/sdk/datadoghq/ruby.yaml   | 13 +++++++++++++
 rules/sinks/third_parties/sdk/docusign/ruby.yaml    | 13 +++++++++++++
 rules/sinks/third_parties/sdk/google/ruby.yaml      |  2 +-
 rules/sinks/third_parties/sdk/hellosign/ruby.yaml   | 13 +++++++++++++
 rules/sinks/third_parties/sdk/hubspot/ruby.yaml     | 13 +++++++++++++
 .../sinks/third_parties/sdk/launchdarkly/ruby.yaml  | 13 +++++++++++++
 rules/sinks/third_parties/sdk/money/ruby.yaml       | 13 +++++++++++++
 rules/sinks/third_parties/sdk/netsuite/ruby.yaml    | 13 +++++++++++++
 rules/sinks/third_parties/sdk/okta/ruby.yaml        | 13 +++++++++++++
 rules/sinks/third_parties/sdk/osocloud/ruby.yaml    | 13 +++++++++++++
 rules/sinks/third_parties/sdk/plaid/ruby.yaml       | 13 +++++++++++++
 rules/sinks/third_parties/sdk/sentry/ruby.yaml      |  2 +-
 rules/sinks/third_parties/sdk/tencent/ruby.yaml     |  2 +-
 rules/sinks/third_parties/sdk/wechat/ruby.yaml      |  2 +-
 19 files changed, 178 insertions(+), 6 deletions(-)
 create mode 100644 rules/sinks/storages/redis/ruby.yaml
 create mode 100644 rules/sinks/third_parties/api/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/calendarific/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/codat/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/datadoghq/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/docusign/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/hellosign/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/hubspot/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/money/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/netsuite/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/okta/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/osocloud/ruby.yaml
 create mode 100644 rules/sinks/third_parties/sdk/plaid/ruby.yaml

diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml
index 8259aa9f..b1a498c8 100644
--- a/config/systemConfig/ruby.yaml
+++ b/config/systemConfig/ruby.yaml
@@ -1,12 +1,12 @@
 systemConfig:
   - key: apiHttpLibraries
-    value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).*
+    value: (?i)(multipart|faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).*
 
   - key: ignoredSinks
     value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).*
   
   - key: apiSinks
-    value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit)
+    value: (?i)(?:new|url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit)
   
   - key: apiIdentifier
     value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).*
\ No newline at end of file
diff --git a/rules/sinks/storages/redis/ruby.yaml b/rules/sinks/storages/redis/ruby.yaml
new file mode 100644
index 00000000..4c0aa8f6
--- /dev/null
+++ b/rules/sinks/storages/redis/ruby.yaml
@@ -0,0 +1,8 @@
+sinks:
+  - id: Storages.Redis.ReadAndWrite
+    name: Redis DB
+    domains:
+      - redis.io
+    patterns:
+      - (?i).*(redis).*
+    tags:
\ No newline at end of file
diff --git a/rules/sinks/third_parties/api/ruby.yaml b/rules/sinks/third_parties/api/ruby.yaml
new file mode 100644
index 00000000..fbfd0570
--- /dev/null
+++ b/rules/sinks/third_parties/api/ruby.yaml
@@ -0,0 +1,8 @@
+sinks:
+  
+  - id: Sinks.ThirdParties.API
+    name: Third Party API
+    patterns:   
+      - "(?i)((?:http|https):\\/\\/[a-zA-Z0-9_-][^)\\/(#|,!>\\s]{1,50}\\.(?:com|net|org|de|in|uk|us|io|gov|cn|ml|ai|ly|dev|cloud|me|icu|ru|info|top|tk|tr|cn|ga|cf|nl)).*(?<!png|jpeg|jpg|txt|blob|css|html|js|svg)"
+      - "(?i).*((hook|base|auth|prov|endp|install|request|service|gateway|route|resource)(.){0,12}url|(slack|web)(.){0,4}hook|(rest|api|request|service)(.){0,4}(endpoint|gateway|route)).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/calendarific/ruby.yaml b/rules/sinks/third_parties/sdk/calendarific/ruby.yaml
new file mode 100644
index 00000000..296d863d
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/calendarific/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Calendarific
+    name: Calendarific
+    domains:
+      - "calendarific.com"
+    patterns:
+      - "(?i)(ruby-calendarific).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/codat/ruby.yaml b/rules/sinks/third_parties/sdk/codat/ruby.yaml
new file mode 100644
index 00000000..b94edb85
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/codat/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Codat
+    name: Codat
+    domains:
+      - "codat.io"
+    patterns:
+      - "(?i)(codat).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml b/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml
new file mode 100644
index 00000000..f9834895
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Datadoghq
+    name: Datadoghq
+    domains:
+      - "datadoghq.com"
+    patterns:
+      - "(?i)(ddtrace|dogstatsd-ruby|datadog_api_client).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/docusign/ruby.yaml b/rules/sinks/third_parties/sdk/docusign/ruby.yaml
new file mode 100644
index 00000000..2b2a515d
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/docusign/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Docusign
+    name: Docusign
+    domains:
+      - "docusign.com"
+    patterns:
+      - "(?i)(docusign_esign).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/google/ruby.yaml b/rules/sinks/third_parties/sdk/google/ruby.yaml
index cdadb154..a61320b2 100644
--- a/rules/sinks/third_parties/sdk/google/ruby.yaml
+++ b/rules/sinks/third_parties/sdk/google/ruby.yaml
@@ -9,7 +9,7 @@ sinks:
     domains:
       - "google.com"
     patterns:
-      - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher).*"
+      - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher|omniauth-google-oauth2).*"
     tags:
 
   - id: ThirdParties.SDK.Google.Cloud
diff --git a/rules/sinks/third_parties/sdk/hellosign/ruby.yaml b/rules/sinks/third_parties/sdk/hellosign/ruby.yaml
new file mode 100644
index 00000000..7b6980de
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/hellosign/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Hellosign
+    name: Hellosign
+    domains:
+      - "hellosign.com"
+    patterns:
+      - "(?i)(hellosign-api).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/hubspot/ruby.yaml b/rules/sinks/third_parties/sdk/hubspot/ruby.yaml
new file mode 100644
index 00000000..78696048
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/hubspot/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Hubspot
+    name: Hubspot
+    domains:
+      - "hubspot.com"
+    patterns:
+      - "(?i)(hubspot).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml b/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml
new file mode 100644
index 00000000..4c757dc1
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Launchdarkly
+    name: Launchdarkly
+    domains:
+      - "launchdarkly.com"
+    patterns:
+      - "(?i)(launchdarkly-server-sdk).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/money/ruby.yaml b/rules/sinks/third_parties/sdk/money/ruby.yaml
new file mode 100644
index 00000000..ff7cb429
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/money/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Money
+    name: Money
+    domains:
+      - "moneycorp.com"
+    patterns:
+      - "money.*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/netsuite/ruby.yaml b/rules/sinks/third_parties/sdk/netsuite/ruby.yaml
new file mode 100644
index 00000000..cc639817
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/netsuite/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.NetSuite
+    name: NetSuite
+    domains:
+      - "netsuite.com"
+    patterns:
+      - "(?i)(netsuite).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/okta/ruby.yaml b/rules/sinks/third_parties/sdk/okta/ruby.yaml
new file mode 100644
index 00000000..55067f39
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/okta/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Okta
+    name: Okta
+    domains:
+      - "okta.com"
+    patterns:
+      - "(?i)(omniauth-okta).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/osocloud/ruby.yaml b/rules/sinks/third_parties/sdk/osocloud/ruby.yaml
new file mode 100644
index 00000000..05a4d536
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/osocloud/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Oso
+    name: Oso
+    domains:
+      - "osohq.io"
+    patterns:
+      - "(?i)(oso-cloud).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/plaid/ruby.yaml b/rules/sinks/third_parties/sdk/plaid/ruby.yaml
new file mode 100644
index 00000000..42ce8d35
--- /dev/null
+++ b/rules/sinks/third_parties/sdk/plaid/ruby.yaml
@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Plaid
+    name: Plaid
+    domains:
+      - "plaid.com"
+    patterns:
+      - "(?i)(plaid).*"
+    tags:
diff --git a/rules/sinks/third_parties/sdk/sentry/ruby.yaml b/rules/sinks/third_parties/sdk/sentry/ruby.yaml
index ef2b7d30..0d4aa775 100644
--- a/rules/sinks/third_parties/sdk/sentry/ruby.yaml
+++ b/rules/sinks/third_parties/sdk/sentry/ruby.yaml
@@ -9,5 +9,5 @@ sinks:
     domains:
       - "sentry.io"
     patterns:
-      - "(?i)(fluent-plugin-sentry-ruby).*"
+      - "(?i)(fluent-plugin-sentry-ruby|sentry-ruby|sentry-rails|sentry-sidekiq).*"
     tags:
diff --git a/rules/sinks/third_parties/sdk/tencent/ruby.yaml b/rules/sinks/third_parties/sdk/tencent/ruby.yaml
index 2dc4b85d..3f032fa9 100644
--- a/rules/sinks/third_parties/sdk/tencent/ruby.yaml
+++ b/rules/sinks/third_parties/sdk/tencent/ruby.yaml
@@ -9,5 +9,5 @@ sinks:
     domains:
       - "cloud.tencent.com"
     patterns:
-      - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|cos|qcloud_ruby).*"
+      - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|qcloud_ruby).*"
     tags:
diff --git a/rules/sinks/third_parties/sdk/wechat/ruby.yaml b/rules/sinks/third_parties/sdk/wechat/ruby.yaml
index 1405e756..373c6a00 100644
--- a/rules/sinks/third_parties/sdk/wechat/ruby.yaml
+++ b/rules/sinks/third_parties/sdk/wechat/ruby.yaml
@@ -9,5 +9,5 @@ sinks:
     domains:
       - "wechat.com"
     patterns:
-      - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|hubs|omniauth-wx|wmp_sdk|app_status_notification).*"
+      - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|omniauth-wx|wmp_sdk|app_status_notification).*"
     tags: