diff --git a/configs/patterns.yml b/configs/patterns.yml index fd06640..36edb16 100644 --- a/configs/patterns.yml +++ b/configs/patterns.yml @@ -100,7 +100,7 @@ patterns: - ^(?:keyPassphrase|password|key|[ \t]+|\$\{[^}]+}|(?:str|string|int|bool)( +#.*)?),?$ - ^(?:.* = )?(?:None|[Tt]rue|[Ff]alse|[Nn]ull|Default(?:Type)?|Event|[A-Z]+_KEY|VERSION|NAME|update|destroy|(?:dis|en)ableEventListeners|\.\.\.),?$ - ^(?:(?:this|self|obj)\.)(?:[A-Za-z_]+\,|[A-Za-z_].*)$ - - ^(?:(?:[a-zA-Z_]+(?:\(\))?\.)*[a-zA-Z_]+\(\)|\|\s*)$|\{\{[^}]+\}\}|\$\{\{ + - ^(?:(?:[a-zA-Z_]+(?:\(\))?\.)*[a-zA-Z_]+\(\)|\|\s*)$|\{\{[^}]+\}\}|\$\{\{ |^!Ref - ^\s*(?:typing\.)?(?:[Tt]uple|[Ll]ist|[Dd]ict|Callable|Iterable|Sequence|Optional|Union)\[.*$ comments: - "The hardcoded password is any length" @@ -163,6 +163,8 @@ patterns: (?:\n|\A)[ \t]*(?i)[a-z_-]*(?:secret|service_pass(wd|word|code|phrase)|pass(?:wd|word|code|phrase)?|key|token)[ \t]*:[ \t]*' end: | '([ \t]*[\r\n]|\z) + additional_not_match: + - \{\{[^{}]+\}\} comments: - "The hardcoded password is any length" - "Some false positives in code might appear" @@ -187,6 +189,8 @@ patterns: (?:\n|\A)[ \t]*(?i)[a-z_-]*(?:secret|service_pass(wd|word|code|phrase)|pass(?:wd|word|code|phrase)?|key|token)[ \t]*:[ \t]*" end: | "([ \t]*[\r\n]|\z) + additional_not_match: + - \{\{[^{}]+\}\} comments: - "The hardcoded password is any length" - "Some false positives in code might appear"