fix: add support for artifactory identity tokens

Signed-off-by: Daniel Pittner <[email protected]>
IBM · Jan 5, 2023 · a285a86 · a285a86
1 parent 63375ed
commit a285a86
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/detect_secrets/plugins/artifactory.py b/detect_secrets/plugins/artifactory.py
@@ -15,6 +15,8 @@ class ArtifactoryDetector(RegexBasedDetector):
         re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))AKC[a-zA-Z0-9]{10,}'),    # api token
         # artifactory encrypted passwords begin with AP[A-Z]
         re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))AP[\dABCDEF][a-zA-Z0-9]{8,}'),    # password
+        # artifactory identity tokens are different (base64 encoded reftkn:) and 64 chars
+	    re.compile(r'(?:(?<==|:|")|(?<=\s)|(?<=^))cmVmdGtuOg{54,54}'),  #identity token
     ]
 
     artifactory_url = 'na.artifactory.swg-devops.com/artifactory'