Merge pull request #3818 from pdelteil/patch-92

Update and rename golang-metrics.yaml to prometheus-metrics.yaml

exposures/configs/golang-metrics.yaml

@@ -1,24 +0,0 @@
-id: exposed-metrics
-
-info:
-  name: Exposed metrics
-  author: dhiyaneshDK
-  severity: low
-  reference: https://hackerone.com/reports/1026196
-  tags: config,exposure
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/metrics"
-
-    matchers-condition: and
-    matchers:
-      - type: word
-        words:
-          - 'cpu_seconds_total'
-        condition: and
-
-      - type: status
-        status:
-          - 200

exposures/configs/prometheus-metrics.yaml

@@ -0,0 +1,29 @@
+id: prometheus-metrics
+
+info:
+  name: Exposed Prometheus metrics
+  author: dhiyaneshDK, philippedelteil
+  severity: low
+  reference:
+    - https://github.com/prometheus/prometheus
+    - https://hackerone.com/reports/1026196
+  tags: config,exposure,prometheus
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/metrics"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'cpu_seconds_total'
+          - 'http_request_duration_seconds'
+          - 'process_virtual_memory_bytes'
+          - 'process_start_time_seconds'
+        condition: or
+
+      - type: status
+        status:
+          - 200