Skip to content

Commit

Permalink
feat: Add detection rules for SSH RSA keys
Browse files Browse the repository at this point in the history
Signed-off-by: HAHWUL <[email protected]>
  • Loading branch information
hahwul committed Nov 14, 2024
1 parent de0bf9f commit 175b1e4
Showing 1 changed file with 18 additions and 0 deletions.
18 changes: 18 additions & 0 deletions secrets/ssh-rsa-key.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
id: ssh-rsa-key
info:
name: Detect SSH_RSA_KEY
author: [hahwul]
severity: critical
description: Detects the presence of SSH RSA keys in the code
reference: ['']
matchers-condition: or
matchers:
- type: word
patterns: ['ssh-rsa']
condition: or
- type: regex
patterns:
- 'ssh-rsa\s+[A-Za-z0-9+/=]{100,}'
condition: or
category: secret
techs: ['*']

0 comments on commit 175b1e4

Please sign in to comment.