Set 'weak' confidence for DOC_CREDENTIALS rule (#662)

* Update config.yaml [no ci] * Update candidate.py [no ci] * Update requirements.txt * test data update
Samsung · Jan 21, 2025 · 75df2ab · 75df2ab
1 parent 06c54e7
commit 75df2ab
Show file tree

Hide file tree

Showing 5 changed files with 215 additions and 214 deletions.
diff --git a/credsweeper/credentials/candidate.py b/credsweeper/credentials/candidate.py
@@ -20,7 +20,7 @@ class Candidate:
         severity: critical/high/medium/low
         confidence: strong/moderate/weak
         config: user configs
-        use_ml: Whether the candidate should be validated with ML. If not - ml_probability is set to -1
+        use_ml: Whether the candidate should be validated with ML. If not - ml_probability is set None
     """
 
     def __init__(self,

diff --git a/credsweeper/rules/config.yaml b/credsweeper/rules/config.yaml
@@ -1,6 +1,6 @@
 - name: DOC_CREDENTIALS
   severity: medium
-  confidence: moderate
+  confidence: weak
   type: pattern
   values:
     - (?P<wrap>[`'\"(])?\s*(?P<variable>(\w*(?i:passw?o?r?d?s?|pwd?\b|\bp/w\b|token|secret|key)\w*|비밀번호|비번|패스워드|암호|키|암호|암호화|토큰))[`'\"]*(\s+(?i:is|are|was|were)(\s*[:-])?\s+|\s*(설정은|[=:]{1,3})\s*)(?P<quote>[`'\"]{1,6})?(?P<value>(?(quote)(?(wrap)[^`'\")]{4,80}|[^`'\"]{4,80})|(?(wrap)[^`'\")]{4,80}|\S{4,80})))
@@ -9,6 +9,7 @@
     - LineGitBinaryCheck
     - LineUUEPartCheck
     - ValueFilePathCheck
+    - ValuePatternCheck(5)
     - ValueDictionaryValueLengthCheck(4,80)
   min_line_len: 8
   required_substrings:

diff --git a/requirements.txt b/requirements.txt
@@ -14,7 +14,7 @@ base58==2.1.1
 beautifulsoup4==4.12.3
 colorama==0.4.6
 cryptography==44.0.0
-GitPython==3.1.43
+GitPython==3.1.44
 humanfriendly==10.0
 lxml==5.3.0
 numpy==1.24.4; python_version < '3.10'