Skip to content

Detection of Blackduck API tokens as secret #3012

Description

@arjunharidasp

Description

Can you add the secret detection criteria for Blackduck tool
https://www.synopsys.com/software-integrity/software-composition-analysis-tools/black-duck-sca.html
https://github.com/blackducksoftware

Blackduck Patterns
bash <(curl -s
https://detect.synopsys.com/detect9.sh)
--blackduck.url="
https://blackduck-server.com/"
--blackduck.api.token="XXXXXXXXXXXXXXXXXXXX"
Examples
text: |
bash <(curl -s
https://detect.synopsys.com/detect9.sh)
--blackduck.url="
https://blackduck-server.com/"
--blackduck.api.token="MWI5YTAwNDItMmI1NC00NjgxLTlmM2YtNzM4ZDdjYjY5NjVhOjgzZWIxYWQ4LWM4OGUtNDJjMy1hYWFiLWE1MDc0MzU1NjBhMw=="

Preferred Solution

Blackduck tokens are detected as secrets

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementpkg/detectorsPRs and Issues related to the `detectors` package

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions