id: gocardless-token info: name: Gocardless API Token author: DhiyaneshDK severity: info reference: - https://github.com/returntocorp/semgrep-rules/blob/develop/generic/secrets/gitleaks/gocardless-api-token.yaml - https://github.com/returntocorp/semgrep-rules/blob/develop/generic/secrets/gitleaks/gocardless-api-token.go metadata: verified: true max-request: 1 tags: gocardless,exposure,tokens http: - method: GET path: - "{{BaseURL}}" extractors: - type: regex part: body regex: - (?i)(?:gocardless)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}(live_(?i)[a-z0-9\-_=]{40})(?:['|\"|\n|\r|\s|\x60|;]|$) # digest: 490a0046304402205652a637533128bfa70bcf083d2cf33b21be10d9ad39f894ec166c7ef03276d102203d98d21d9f46036528fa0e0db5f4e38f4002cc08e25a8ebef563929ff55c7be5:922c64590222798bb761d5b6d8e72950