Skip to content

Commit 092af14

Browse files
committed
update azure files with tokens
1 parent 7cd9e6f commit 092af14

File tree

1 file changed

+44
-1
lines changed

1 file changed

+44
-1
lines changed

build_lists/sensitive_files.yaml

Lines changed: 44 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1271,6 +1271,8 @@ search:
12711271
value:
12721272
config:
12731273
auto_check: True
1274+
exec:
1275+
- '(pwsh -Command "Save-AzContext -Path /tmp/az-context3489ht.json" && cat /tmp/az-context3489ht.json && rm /tmp/az-context3489ht.json) || echo_not_found "pwsh"'
12741276

12751277
files:
12761278
#- name: "credentials"
@@ -1379,13 +1381,54 @@ search:
13791381
- common
13801382

13811383
- name: "AzureRMContext.json"
1384+
value:
1385+
bad_regex: "Id.*|Credential.*"
1386+
type: f
1387+
search_in:
1388+
- common
1389+
1390+
- name: "clouds.config"
1391+
value:
1392+
type: f
1393+
search_in:
1394+
- common
1395+
1396+
- name: "service_principal_entries.json"
13821397
value:
13831398
bad_regex: ".*"
13841399
type: f
13851400
search_in:
13861401
- common
13871402

1388-
- name: "ErrorRecords" #Azure logs can contain creentials
1403+
- name: "msal_token_cache.json"
1404+
value:
1405+
bad_regex: ".*"
1406+
type: f
1407+
search_in:
1408+
- common
1409+
1410+
- name: "msal_http_cache.bin"
1411+
value:
1412+
just_list_file: True
1413+
type: f
1414+
search_in:
1415+
- common
1416+
1417+
- name: "service_principal_entries.bin"
1418+
value:
1419+
just_list_file: True
1420+
type: f
1421+
search_in:
1422+
- common
1423+
1424+
- name: "msal_token_cache.bin"
1425+
value:
1426+
just_list_file: True
1427+
type: f
1428+
search_in:
1429+
- common
1430+
1431+
- name: "ErrorRecords" #Azure logs can contain crentials
13891432
value:
13901433
type: d
13911434
search_in:

0 commit comments

Comments
 (0)