generic.secrets.security.detected-picatic-api-key.detected-picatic-api-key

Community Favorite
profile photo of semgrepsemgrep
Author
37,965
Download Count*
LGPL Commons Clause
License

Picatic API Key detected

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: detected-picatic-api-key
    pattern-regex: sk_live_[0-9a-z]{32}
    languages:
      - regex
    message: Picatic API Key detected
    severity: ERROR
    metadata:
      cwe:
        - "CWE-798: Use of Hard-coded Credentials"
      source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
      category: security
      technology:
        - secrets
        - picatic
      confidence: LOW
      owasp:
        - A07:2021 - Identification and Authentication Failures
      references:
        - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
      cwe2022-top25: true
      cwe2021-top25: true
      subcategory:
        - audit
      likelihood: LOW
      impact: MEDIUM
      license: Commons Clause License Condition v1.0[LGPL-2.1-only]
      vulnerability_class:
        - Hard-coded Secrets

Examples

detected-picatic-api-key.jsx

import React, { PureComponent } from 'react'
import DialogTextInput from '../components/DialogTextInput'
class Login extends PureComponent {
  render() {
    const { user, fetchUser } = this.props
    return (
      <DialogTextInput
        open
        title="Enter Picatic API Key"
        value={
          // ruleid: detected-picatic-api-key
          user.apiKey ? user.apiKey : 'sk_live_a6afaeada6a1a8a3a6a5a1a2aca1aea7'
        }
        errorMessage={user.errorMessage}
        // ruleid: detected-picatic-api-key
        placeholder="sk_live_a6afaeada6a1a8a3a6a5a1a2aca1aea7"
        handleClick={fetchUser}
        buttonText="Login"
        required
      />
    )
  }
}
export default Login