fix(security): détecter les PIN Pronote littéraux #53

Merged
OpenCode merged 2 commits from fix/issue-48-pin-secret-scan into main 2026-09-13 09:54:59 +02:00
Showing only changes of commit 7387f9a78d - Show all commits
+1 -1
View File
@@ -34,7 +34,7 @@ _UNQUOTED_SECRET_RE = re.compile(
r"\s*[:=]\s*(?P<value>[a-z0-9][a-z0-9._~+/-]{2,})" r"\s*[:=]\s*(?P<value>[a-z0-9][a-z0-9._~+/-]{2,})"
) )
_URL_SECRET_RE = re.compile( _URL_SECRET_RE = re.compile(
r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|pin|secret|token)" r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|secret|token)"
r"=([^&#\s]{3,})" r"=([^&#\s]{3,})"
) )
_URL_PLACEHOLDER_RE = re.compile( _URL_PLACEHOLDER_RE = re.compile(