@secretlint/secretlint-rule-secp256k1-privatekey/module/index.js

A secretlint rule that checks for secp256k1 private keys.

import secp256k1 from "secp256k1";
import BN from "bn.js";
export const messages = {
    secp256k1Priv: {
        en: (props) => `found secp256k1 private key: ${props.KEY}`,
        ja: (props) => `秘密鍵(secp256k1) ${props.KEY} が見つかりました`,
    },
};
export const creator = {
    messages,
    meta: {
        id: "@secretlint/secretlint-rule-secp256k1-privatekey",
        recommended: false,
        type: "scanner",
        supportedContentTypes: ["text"],
        docs: {
            url: "https://github.com/secretlint/secretlint/blob/master/packages/%40secretlint/secretlint-rule-secp256k1-privatekey/README.md",
        },
    },
    create(context) {
        const t = context.createTranslator(messages);
        return {
            file(source) {
                const pattern = /[0-9a-f]{64}/gi;
                const matches = source.content.matchAll(pattern);
                for (const match of matches) {
                    const index = match.index || 0;
                    const matchString = match[0] || "";
                    const range = [index, index + matchString.length];
                    try {
                        if (!secp256k1.privateKeyVerify(new BN(matchString, 16).toBuffer())) {
                            return;
                        }
                        context.report({
                            message: t("secp256k1Priv", {
                                KEY: matchString,
                            }),
                            range,
                        });
                    }
                    catch (error) {
                        // No-op. Not a private key.
                    }
                }
            },
        };
    },
};
//# sourceMappingURL=index.js.map