generic.secrets.security.detected-twitter-access-token.detected-twitter-access-token
Community Favorite

Author
37,965
Download Count*
License
Twitter Access Token detected
Run Locally
Run in CI
Defintion
rules:
- id: detected-twitter-access-token
pattern-regex: "[tT][wW][iI][tT][tT][eE][rR].*[1-9][0-9]+-[0-9a-zA-Z]{40}"
languages:
- regex
message: Twitter Access Token detected
severity: ERROR
metadata:
cwe:
- "CWE-798: Use of Hard-coded Credentials"
source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
category: security
technology:
- secrets
- twitter
confidence: LOW
owasp:
- A07:2021 - Identification and Authentication Failures
references:
- https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
cwe2022-top25: true
cwe2021-top25: true
subcategory:
- audit
likelihood: LOW
impact: MEDIUM
license: Commons Clause License Condition v1.0[LGPL-2.1-only]
Examples
detected-twitter-access-token.txt
# ruleid: detected-twitter-access-token
TWITTER_ACCESS_TOKEN=14541334523-l2zGWkszwtccc5wWtyJFkCN3wtc5wWtyJFkCN3Yz
# ruleid: detected-twitter-access-token
TWITTER_ACCESS_TOKEN="14541334523-l2zGWkszwtccc5wWtyJFkCN3wtc5wWtyJFkCN3Yz"
# ok: detected-twitter-access-token
TWITTER_ACCESS_TOKEN=YOURTOKENHERE
Short Link: https://sg.run/7oR4