mcp-server-semgrep/semgrep-rules/generic/secrets/security/detected-artifactory-token.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
- id: detected-artifactory-token
  patterns:
  - pattern-regex: |
      \bAKC[a-zA-Z0-9]{10,}
  - pattern-not-regex: |
      sha(128|256|512).*
  - pattern-not-regex: (?s)---BEGIN.*---\Z
  languages: [regex]
  paths:
    exclude:
      - "*.svg"
      - "*go.sum"
      - "*package.json"
      - "*package-lock.json"
      - "*bundle.js"
      - "*pnpm-lock*"
      - "*Podfile.lock"
      - "*/openssl/*.h"
      - "*.xcscmblueprint"
      - "*cargo.lock"
  message: Artifactory token detected
  severity: ERROR
  metadata:
    cwe:
    - 'CWE-798: Use of Hard-coded Credentials'
    source-rule-url: https://github.com/Yelp/detect-secrets/blob/master/detect_secrets/plugins/artifactory.py
    category: security
    technology:
    - secrets
    - artifactory
    confidence: LOW
    owasp:
    - A07:2021 - Identification and Authentication Failures
    references:
    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
    cwe2022-top25: true
    cwe2021-top25: true
    subcategory:
    - audit
    likelihood: LOW
    impact: HIGH