generic.secrets.security.detected-twitter-access-token.detected-twitter-access-token

Community Favorite
profile photo of returntocorpreturntocorp
Author
37,965
Download Count*
LGPL Commons Clause
License

Twitter Access Token detected

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: detected-twitter-access-token
    pattern-regex: "[tT][wW][iI][tT][tT][eE][rR].*[1-9][0-9]+-[0-9a-zA-Z]{40}"
    languages:
      - regex
    message: Twitter Access Token detected
    severity: ERROR
    metadata:
      cwe:
        - "CWE-798: Use of Hard-coded Credentials"
      source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
      category: security
      technology:
        - secrets
        - twitter
      confidence: LOW
      owasp:
        - A07:2021 - Identification and Authentication Failures
      references:
        - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
      cwe2022-top25: true
      cwe2021-top25: true
      subcategory:
        - audit
      likelihood: LOW
      impact: MEDIUM
      license: Commons Clause License Condition v1.0[LGPL-2.1-only]

Examples

detected-twitter-access-token.txt

# ruleid: detected-twitter-access-token
TWITTER_ACCESS_TOKEN=14541334523-l2zGWkszwtccc5wWtyJFkCN3wtc5wWtyJFkCN3Yz

# ruleid: detected-twitter-access-token
TWITTER_ACCESS_TOKEN="14541334523-l2zGWkszwtccc5wWtyJFkCN3wtc5wWtyJFkCN3Yz"

# ok: detected-twitter-access-token
TWITTER_ACCESS_TOKEN=YOURTOKENHERE