Adding Grafana tokens rule

tests/fixtures/grafanatokens.yml

@@ -0,0 +1,9 @@
+
+compliant:
+
+
+noncompliant:
+  grafana_api_key: eyJrIjoiR0ZXZmt1UFc0OEpIOGN5RWdUalBJTllUTk83VlhtVGwiLCJuIjoiYXBpa2V5Y3VybCIsIhardcoded==
+  grafana_service_account_token: glsa_Q0tTx59W5f7LXgxiM4MjJs7hardcoded_e5c6b96d
+  grafana_cloud_api_key: eyJrIjoiZjJlZThiNDMwZGQ0ZDhjNjJhYmQwZWY3NDgxYzhjNjRiNzZkNjYyMiIsIm4iOiJ0ZXN0LWtleSIsImlkIjhardcoded=
+  grafana_cloud_api_token: glc_eyJrIjoiZjI0YzZkNGEwZDBmZmZjMmUzNTU2ODcxMmY0ZWZlNTQ1NTljMDFjOCIsIm4iOiJteXRva2VuIiwhardcoded

tests/unit/test_secrets.py

@@ -93,6 +93,7 @@ def test_detection_by_key(src, expected):
         ("webhooks.yml", 3),
         ("creditcards.yml", 3),
         ("gitkeys.yml", 5),
+        ("grafanatokens.yml", 4),
     ],
 )
 def test_detection_by_value(src, count):

whispers/rules/grafana.yml

@@ -0,0 +1,23 @@
+grafana-cloud-api:
+  description: Values formatted like Grafana Cloud API Token
+  message: Grafana Cloud API Token
+  severity: BLOCKER
+  value:
+    regex: ^glc_[A-Za-z0-9+/]{32,}$
+    ignorecase: False
+
+grafana-api:
+  description: Values formatted like Grafana API Key
+  message: Grafana API Key
+  severity: BLOCKER
+  value:
+    regex: ^eyJrIjoi[A-Za-z0-9]{70,}={0,2}$
+    ignorecase: False
+
+grafana-cloud-api:
+  description: Values formatted like Grafana Service Account Token
+  message: Grafana Service Account Token
+  severity: BLOCKER
+  value:
+    regex: ^glsa_[A-Za-z0-9]{32}_[A-Fa-f0-9]{8}$
+    ignorecase: False