id: duffel-api-token info: name: Duffel API Token author: DhiyaneshDK severity: info reference: - https://github.com/returntocorp/semgrep-rules/blob/develop/generic/secrets/gitleaks/duffel-api-token.yaml - https://github.com/returntocorp/semgrep-rules/blob/develop/generic/secrets/gitleaks/duffel-api-token.go metadata: verified: true tags: keys,file,duffel,token file: - extensions: - all extractors: - type: regex part: body regex: - duffel_(test|live)_(?i)[a-z0-9_\-=]{43} # digest: 4a0a0047304502202421c143203a023a8285876328e3581df769889a541d51b3bdcf72ab8fc117ff022100cb6b572f959e94b842ee120dd67fb14cafc499e3b4b6d4665dd07eb3e53b60f3:922c64590222798bb761d5b6d8e72950