mcp-server-semgrep/semgrep-rules/generic/secrets/security/detected-square-oauth-secret.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
- id: detected-square-oauth-secret
  pattern-regex: |-
    sq0csp-[0-9A-Za-z\\\-_]{43}
  languages: [regex]
  message: Square OAuth Secret detected
  severity: ERROR
  metadata:
    cwe:
    - 'CWE-798: Use of Hard-coded Credentials'
    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
    references:
    - https://github.com/Yelp/detect-secrets/blob/master/tests/plugins/square_oauth_test.py
    category: security
    technology:
    - secrets
    - square
    confidence: LOW
    owasp:
    - A07:2021 - Identification and Authentication Failures
    cwe2022-top25: true
    cwe2021-top25: true
    subcategory:
    - audit
    likelihood: LOW
    impact: MEDIUM