id: codeclimate-token

info:
  name: CodeClimate Token
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/codeclimate.yml
    - https://github.com/codeclimate/ruby-test-reporter/issues/34
    - https://docs.codeclimate.com/docs/finding-your-test-coverage-token#should-i-keep-my-test-reporter-id-secret
  metadata:
    verified: true
    max-request: 1
  tags: codeclimate,token,exposure

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - '(?i)codeclima.{0,50}\b([a-f0-9]{64})\b'
# digest: 4a0a00473045022075a22007a1dc20952924e2256c003e1f69237be3ba968ff1b69085d6931a7feb022100838528c2a573071c58044073fdd973405b3cc57f9329eb629d9ba1a6dd0963bb:922c64590222798bb761d5b6d8e72950