Skip to content

Conversation

nabeelalam
Copy link
Contributor

Description:

The ID and secret patterns are the same. This update adds a check to avoid verification of identical credential pairs.
Also removes duplicate credentials and adds indeterminate verification errors in results.

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

@nabeelalam nabeelalam self-assigned this Jul 3, 2025
@nabeelalam nabeelalam requested a review from a team as a code owner July 3, 2025 17:20

s1 := detectors.Result{
DetectorType: detectorspb.DetectorType_Dovico,
Raw: []byte(resMatch),
Raw: []byte(key),
Copy link
Contributor

@abmussani abmussani Jul 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't RAW contain both key + userkey ? or may be set RawV2 for both keys? Otherwise, it will be difficult to find which combination worked.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could changing the Raw value have an impact on existing usage of this detector? Same question about adding a RawV2 value?
I can make those updates if this is a safe option.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

umm.... Considering only OSS, I could not think of any impact. @trufflesteeeve what are your thoughts.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@abmussani I added a RawV2 value

Copy link
Contributor

@kashifkhan0771 kashifkhan0771 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Apart from @abmussani comment - It looks good to me

@nabeelalam nabeelalam merged commit a05cf08 into trufflesecurity:main Jul 23, 2025
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants