generic.secrets.security.detected-sauce-token.detected-sauce-token

Community Favorite
profile photo of semgrepsemgrep
Author
37,965
Download Count*

Sauce Token detected

Run Locally

Run in CI

Defintion

rules:
  - id: detected-sauce-token
    pattern-regex: (?i)sauce.{0,50}(\\\"|'|`)?[0-9a-f-]{36}(\\\"|'|`)?
    languages:
      - regex
    message: Sauce Token detected
    severity: ERROR
    metadata:
      cwe:
        - "CWE-798: Use of Hard-coded Credentials"
      source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
      category: security
      technology:
        - secrets
        - sauce
      confidence: LOW
      owasp:
        - A07:2021 - Identification and Authentication Failures
      references:
        - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
      cwe2022-top25: true
      cwe2021-top25: true
      subcategory:
        - audit
      likelihood: LOW
      impact: MEDIUM
      license: Commons Clause License Condition v1.0[LGPL-2.1-only]
      vulnerability_class:
        - Hard-coded Secrets

Examples

detected-sauce-token.txt

# ruleid: detected-sauce-token
SAUCE_ACCESS_KEY=034e1d2a-681a-4a52-bfa3-256b72c356c0

# ruleid: detected-sauce-token
sauce_access_key:034E1D2A-681A-4A52-BFA3-256B72C356C0