From f6437df7522e513a56a5095ad74218edd19fb72a Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Wed, 29 Mar 2023 18:28:05 +0530 Subject: [PATCH 01/74] Python GA support --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0b1b42af..65ba2ee1 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ Privado is an open-source static code analysis tool to discover data flows in th # Supported languages -We support Java in GA and Python in alpha. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon! +We support Java and Python in GA. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon! # Quick Start From 02d4be6e9755d4389d7afa57a4e88b71c2f029d2 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Sat, 15 Apr 2023 14:52:44 +0530 Subject: [PATCH 02/74] updated mac address rule (#225) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * updated mac address rule * removed workforce dir --------- Co-authored-by: “Hitesh --- rules/sources/online_identifiers.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sources/online_identifiers.yaml b/rules/sources/online_identifiers.yaml index 1f282d66..c7f4acdc 100644 --- a/rules/sources/online_identifiers.yaml +++ b/rules/sources/online_identifiers.yaml @@ -35,7 +35,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i)mac[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac" + - "(?i)(mac|ieee)[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac" tags: law: GDPR From d1df68f434e7688d08690fe0b72389d07c81d4b5 Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Thu, 15 Jun 2023 09:58:45 +0530 Subject: [PATCH 03/74] Added rules for third party sdks in the db (#266) --- .../sinks/third_parties/sdk/amazon/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/amplitude/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/appnexus/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/atlassian/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdk/bing/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/chatwork/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/coinbase/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/databricks/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/dropbox/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/dwolla/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/facebook/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/flurry/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/freshdesk/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/google/ruby.yaml | 21 +++++++++++++++++++ rules/sinks/third_parties/sdk/ibm/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/intercom/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdk/line/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/linkedin/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/mailchimp/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/mailgun/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/medium/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/microsoft/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/netflix/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/notion/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/onesignal/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/paypal/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/payture/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdk/payu/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/razorpay/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/risepay/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/salesforce/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/sendgrid/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/sentry/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdk/slack/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/spotify/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/stripe/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/telegram/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/tencent/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/trello/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/twitter/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/upwork/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/vercel/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/vmware/ruby.yaml | 13 ++++++++++++ .../third_parties/sdk/wavefront/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/wechat/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdk/youtube/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdk/zoom/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkamazon/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkamplitude/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkappnexus/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkatlassian/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkbing/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkchatwork/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkcoinbase/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkdatabricks/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkdropbox/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkdwolla/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkfacebook/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkflurry/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkfreshdesk/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkgoogle/ruby.yaml | 21 +++++++++++++++++++ rules/sinks/third_parties/sdkibm/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkintercom/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkline/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdklinkedin/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkmailchimp/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkmailgun/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkmedium/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkmicrosoft/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdknetflix/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdknotion/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkonesignal/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkpaypal/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkpayture/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkpayu/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkrazorpay/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkrisepay/ruby.yaml | 13 ++++++++++++ .../third_parties/sdksalesforce/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdksendgrid/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdksentry/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkslack/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkspotify/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkstripe/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdktelegram/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdktencent/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdktrello/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdktwitter/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkupwork/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkvercel/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkvmware/ruby.yaml | 13 ++++++++++++ .../third_parties/sdkwavefront/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkwechat/ruby.yaml | 13 ++++++++++++ .../sinks/third_parties/sdkyoutube/ruby.yaml | 13 ++++++++++++ rules/sinks/third_parties/sdkzoom/ruby.yaml | 13 ++++++++++++ 94 files changed, 1238 insertions(+) create mode 100644 rules/sinks/third_parties/sdk/amazon/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/amplitude/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/appnexus/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/atlassian/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/bing/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/chatwork/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/coinbase/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/databricks/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/dropbox/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/dwolla/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/facebook/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/flurry/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/freshdesk/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/google/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/ibm/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/intercom/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/line/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/linkedin/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/mailchimp/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/mailgun/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/medium/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/microsoft/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/netflix/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/notion/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/onesignal/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/paypal/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/payture/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/payu/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/razorpay/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/risepay/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/salesforce/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/sendgrid/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/sentry/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/slack/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/spotify/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/stripe/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/telegram/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/tencent/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/trello/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/twitter/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/upwork/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/vercel/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/vmware/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/wavefront/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/wechat/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/youtube/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/zoom/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkamazon/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkamplitude/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkappnexus/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkatlassian/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkbing/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkchatwork/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkcoinbase/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkdatabricks/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkdropbox/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkdwolla/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkfacebook/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkflurry/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkfreshdesk/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkgoogle/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkibm/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkintercom/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkline/ruby.yaml create mode 100644 rules/sinks/third_parties/sdklinkedin/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkmailchimp/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkmailgun/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkmedium/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkmicrosoft/ruby.yaml create mode 100644 rules/sinks/third_parties/sdknetflix/ruby.yaml create mode 100644 rules/sinks/third_parties/sdknotion/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkonesignal/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkpaypal/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkpayture/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkpayu/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkrazorpay/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkrisepay/ruby.yaml create mode 100644 rules/sinks/third_parties/sdksalesforce/ruby.yaml create mode 100644 rules/sinks/third_parties/sdksendgrid/ruby.yaml create mode 100644 rules/sinks/third_parties/sdksentry/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkslack/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkspotify/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkstripe/ruby.yaml create mode 100644 rules/sinks/third_parties/sdktelegram/ruby.yaml create mode 100644 rules/sinks/third_parties/sdktencent/ruby.yaml create mode 100644 rules/sinks/third_parties/sdktrello/ruby.yaml create mode 100644 rules/sinks/third_parties/sdktwitter/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkupwork/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkvercel/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkvmware/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkwavefront/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkwechat/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkyoutube/ruby.yaml create mode 100644 rules/sinks/third_parties/sdkzoom/ruby.yaml diff --git a/rules/sinks/third_parties/sdk/amazon/ruby.yaml b/rules/sinks/third_parties/sdk/amazon/ruby.yaml new file mode 100644 index 00000000..74627b03 --- /dev/null +++ b/rules/sinks/third_parties/sdk/amazon/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amazon.Aws + name: Amazon Aws + domains: + - "aws.amazon.com" + patterns: + - "(?i)(aws-partitions|aws-sigv4|amazon-chime-sdk-rails|amazon_pay_sdk_ruby|aws-sdk-s3|aws-sdk-sqs|aws-sdk-ec2|aws-sdk-ssm|aws-sdk-sns|aws-sdk-rds|aws-sdk-ses|aws-sdk-ecr|aws-sdk-ecs|aws-sdk-redshift|aws-sdk-athena|aws-sdk-elasticache|aws-sdk-pinpoint|aws-sdk-rekognition|aws-sdk-emr|aws-sdk-lightsail|aws-sdk-workspaces|aws-sdk-cloudsearch|aws-sdk-gamelift|aws-sdk-appstream|aws-sdk-polly|aws-sdk-swf|aws-sdk-snowball|aws-sdk-dax|aws-sdk-inspector|aws-sdk-glacier|aws-sdk-mturk|aws-sdk-clouddirectory|aws-sdk-simpledb|aws-sdk-workdocs|aws-sdk-guardduty|aws-sdk-comprehend|aws-sdk-translate|aws-sdk-workmail|aws-sdk-connect|aws-sdk-eks|aws-sdk-neptune|aws-sdk-dlm|aws-sdk-macie|aws-sdk-chime|aws-sdk-quicksight|aws-sdk-fsx|aws-sdk-docdb|aws-sdk-textract|aws-sdk-personalize|aws-sdk-eventbridge|aws-sdk-cloudwatchlogs|aws-sdk-detective|aws-sdk-ebs|aws-sdk-apigateway|aws-sdk-elasticsearchservice|aws-sdk-cloudwatchevents|aws-sdk-cognitoidentity|aws-sdk-elastictranscoder|aws-sdk-machinelearning|aws-sdk-dynamodbstreams|aws-sdk-cognitosync|aws-sdk-cloudsearchdomain|aws-sdk-sagemakerruntime|aws-sdk-transcribeservice|aws-sdk-ivs|aws-sdk-appflow|aws-sdk-personalizeruntime|aws-sdk-personalizeevents|aws-sdk-forecastservice|aws-sdk-sesv2|aws-sdk-connectparticipant|aws-sdk-frauddetector|aws-sdk-codeguruprofiler|aws-sdk-elasticinference|aws-sdk-cognitoidentityprovider|aws-sdk-route53domains|aws-sdk-lex|aws-sdk-macie2|aws-sdk-chimesdkmessaging|aws-sdk-transcribestreamingservice|aws-sdk-chimesdkidentity|aws-sdk-s3outposts|aws-sdk-devopsguru|aws-sdk-ecrpublic|aws-sdk-lookoutforvision|aws-sdk-emrcontainers|aws-sdk-locationservice|aws-sdk-forecastqueryservice|aws-sdk-appintegrationsservice|aws-sdk-prometheusservice|aws-sdk-workmailmessageflow|aws-sdk-memorydb|aws-sdk-augmentedairuntime|aws-sdk-lexmodelbuildingservice|aws-sdk-chimesdkmeetings|aws-sdk-sagemakeredgemanager|aws-sdk-connectcontactlens|aws-sdk-kinesisvideosignalingchannels|aws-sdk-opensearchservice|pay_with_amazon|aws-sdk-voiceid|aws-sdk-managedgrafana|aws-sdk-sagemakerfeaturestoreruntime|aws-sdk-cloudwatchevidently|aws-sdk-recyclebin|aws-sdk-workspacesweb|aws-sdk-connectwisdomservice|nazrin|paperclip-aws|aws-sdk-dynamodb|aws-sdk-kinesis|aws-sdk-cloudwatch|aws-sdk-cloudfront|aws-sdk-cloudhsm|aws-sdk-firehose|aws-sdk-worklink|aws-sdk-sagemaker|aws-sdk-route53|aws-sdk-qldb|aws-sdk-appconfig|aws-sdk-efs|aws-sdk-kinesisanalytics|aws-sdk-managedblockchain|aws-sdk-route53resolver|aws-sdk-honeycode|aws-sdk-codegurureviewer|aws-sdk-kinesisvideo|aws-sdk-healthlake|aws-sdk-qldbsession|aws-sdk-pinpointemail|aws-sdk-kinesisanalyticsv2|aws-sdk-applicationinsights|aws-sdk-kinesisvideomedia|aws-sdk-timestreamwrite|aws-sdk-timestreamquery|aws-sdk-lookoutmetrics|aws-sdk-lookoutequipment|aws-sdk-configservice|aws-sdk-pinpointsmsvoice|aws-sdk-customerprofiles|aws-sdk-kinesisvideoarchivedmedia|aws-sdk-lexruntimev2|aws-sdk-lexmodelsv2|s3_streamer|breadbox|mturk|clouddrive|misfo-aws-sdk-cloudwatch|embulk-output-s3v2|ruby-aws|aws-sdk|aws-sdk-core|aws-sdk-kms|aws-sdk-resources|aws-sdk-cloudformation|aws-sdk-iam|aws-sdk-secretsmanager|aws-sdk-lambda|aws-sdk-elasticloadbalancing|aws-sdk-autoscaling|aws-sdk-elasticloadbalancingv2|aws-sdk-codecommit|aws-sdk-v1|aws-sdk-glue|aws-sdk-organizations|aws-sdk-acm|aws-sdk-cloudtrail|aws-sdk-codebuild|aws-sdk-codedeploy|aws-sdk-databasemigrationservice|aws-sdk-codepipeline|aws-sdk-cloudhsmv2|aws-sdk-applicationautoscaling|aws-sdk-elasticbeanstalk|aws-sdk-iot|aws-sdk-xray|aws-sdk-opsworks|aws-sdk-states|aws-sdk-batch|aws-sdk-storagegateway|aws-sdk-servicecatalog|aws-sdk-budgets|aws-sdk-sms|aws-sdk-costandusagereportservice|aws-sdk-devicefarm|aws-sdk-directoryservice|aws-sdk-opsworkscm|aws-sdk-directconnect|aws-sdk-health|aws-sdk-greengrass|aws-sdk-applicationdiscoveryservice|aws-sdk-waf|aws-sdk-resourcegroupstaggingapi|aws-sdk-migrationhub|aws-sdk-marketplacemetering|aws-sdk-shield|aws-sdk-wafregional|aws-sdk-marketplacecommerceanalytics|aws-sdk-support|aws-sdk-iotdataplane|aws-sdk-costexplorer|aws-sdk-medialive|aws-sdk-mediaconvert|aws-sdk-datapipeline|aws-sdk-marketplaceentitlementservice|aws-sdk-lambdapreview|aws-sdk-importexport|aws-sdk-codestar|aws-sdk-mobile|aws-sdk-alexaforbusiness|aws-sdk-appsync|aws-sdk-mq|aws-sdk-mediapackage|aws-sdk-mediastore|aws-sdk-serverlessapplicationrepository|aws-sdk-resourcegroups|aws-sdk-servicediscovery|aws-sdk-cloud9|aws-sdk-pricing|aws-sdk-mediastoredata|aws-sdk-iotjobsdataplane|aws-sdk-autoscalingplans|aws-sdk-acmpca|aws-sdk-fms|aws-sdk-iotanalytics|aws-sdk-mediatailor|aws-sdk-pi|aws-sdk-iot1clickdevicesservice|aws-sdk-iot1clickprojects|aws-sdk-signer|aws-sdk-cloudcontrolapi|awssh|aws-sigv4|aws-partitions|aws-eventstream|aws-sigv2|aws|aws-s3|aws-sdk-securityhub|aws-ses|aws-sdk-kafka|aws-sdk-ram|aws-sdk-s3control|aws-sdk-transfer|aws-sdk-rdsdataservice|aws-sdk-datasync|aws-sdk-amplify|aws-sdk-apigatewayv2|aws-sdk-licensemanager|aws-sdk-robomaker|aws-sdk-globalaccelerator|aws-sdk-comprehendmedical|aws-sdk-appmesh|aws-sdk-mediaconnect|aws-sdk-apigatewaymanagementapi|aws-sdk-backup|aws-sdk-mediapackagevod|aws-sdk-iotevents|aws-sdk-groundstation|aws-sdk-ioteventsdata|aws-record|aws-sdk-iotthingsgraph|aws-sdk-servicequotas|aws-sdk-ec2instanceconnect|aws-sdk-lakeformation|aws-sdk-savingsplans|aws-sdk-codestarnotifications|aws-sdk-imagebuilder|aws-sdk-kendra|aws-sdk-wafv2|aws-sdk-accessanalyzer|aws-sdk-computeoptimizer|aws-sdk-dataexchange|aws-sdk-networkmanager|aws-sdk-outposts|aws-sdk-migrationhubconfig|aws-sdk-iotsecuretunneling|aws-sdk-marketplacecatalog|aws-sdk-schemas|aws-sdk-codestarconnections|aws-sdk-ssooidc|aws-sdk-iotsitewise|aws-sdk-synthetics|aws-sdk-codeartifact|aws-sdk-braket|aws-sdk-identitystore|aws-sdk-redshiftdataapiservice|aws-sdk-ssoadmin|aws-sdk-rails|aws_cf_signer|aws-sdk-sso|aws-sdk-gluedatabrew|aws-sdk-appregistry|aws-sdk-networkfirewall|aws-sdk-iotwireless|aws-sdk-auditmanager|aws-sdk-mwaa|aws-sdk-greengrassv2|aws-sdk-amplifybackend|aws-sdk-wellarchitected|aws-sdk-iotdeviceadvisor|aws-sdk-iotfleethub|aws-kclrb|aws-sdk-fis|aws-sdk-mgn|aws-sdk-nimblestudio|aws-sdk-finspacedata|aws-sdk-finspace|aws-sdk-ssmcontacts|aws-sdk-ssmincidents|aws-sdk-applicationcostprofiler|aws-sdk-apprunner|aws-flow|aws-healthcheck|aws-sdk-proton|aws_ro|aws-sdk-route53recoverycontrolconfig|aws-sdk-route53recoveryreadiness|aws-sdk-route53recoverycluster|aws_data|aws-sdk-snowdevicemanagement|aws-xray-sdk|aws-sdk-kafkaconnect|aws-sdk-account|aws-sessionstore-dynamodb|aws-sdk-panorama|aws-sdk-resiliencehub|aws-sdk-migrationhubstrategyrecommendations|aws-sdk-appconfigdata|aws-sdk-drs|aws-sdk-sts|aws-sdk-migrationhubrefactorspaces|aws-sdk-cloudwatchrum|aws-sdk-inspector2|aws-es-transport|aws-sdk-backupgateway|aws-sdk-iottwinmaker|aws-sdk-amplifyuibuilder|aws-ssm-env|aws_agcod|aws-logs|aws-flow-core|aws-sdb|aws-mfa|aws_recon|right_aws|aws-pricing|aws-mfa-secure|aws_info|aws-ec2|carrierwave-aws|aws-cleaner|aws-eni|aws_pocketknife|aws_memfix|aws-rds|aws-swf|aws_helper|aws-rikanjo|aws_client|aws_assume_role|aws_runas|aws-must|aws_lambda_ric|aws_pipes|aws-ip|aws_ssh|aws_deploy|aws_csshx|aws-ami|aws_cloud_search|train-aws|aws-spec-generator|aws-ext|aws-controller|aws-lambda-runner|aws-instmd|aws-pws|aws-crt|aws-liam|aws_sdk|aws_auditor|aws-session-credentials|aws-auth|aws-url|aws-inventory|awsecrets|aws-ie|aws_sns_subscription|aws_tools|aws-ssh|aws-edges|aws_su|aws-data|aws-s3-instructure|aws-cfn-yats|aws-tools|aws_cron|aws-google|miasma-aws|aws-creds|em_aws|aws-asg-fleet|aws-sdk-code-generator|aws_sms|aws-lex-conversation|aws_status|aws-s3crets|aws_cred_vault|aws_dump|aws-dynamodb-query|aws-reporting|aws-rotate|aws-must-templates|aws_public_ips|aws-keys|aws_sns_kit|aws-s3-deploy|aws-elasticsearch|aws_sdb_bare|aws-watcher|aws_sqs_moniter|aws_keychain|aws-mason|aws-vpccreate|aws_as_code|aws-base|eventq_aws|aws_iot_device|aws_log_cleaner|aws-ec2-instance_types|aws_role_creds|aws-ses-rails31|aws-ssm-console|aws_cloud_map|aws-ses-v4|aws_account_number|aws-s3-cse|aws_secrets_loader|aws_s3_export|aws-insight|aws_keys|aws-tasks|aws_upload|aws-clean|aws_sam_yarn_builder|aws-rds-instance_types|aws_ec2_dns_name|aws-role|simple_aws|aws-architect|faraday_middleware-aws-sigv4|aws-signature-v4|aws-cft-tools|aws_provisioner|aws-sesocio-secrets|aws_instance_list|aws_session_token|aws_interactive_cli|awscosts|aws-whitepaper-downloader|aws-sdk-enhanced|aws-cli|aws-s3-akhtaboot|aws_student_accounts|aws-metadata-export|aws-rails-provisioner|aws-sts|aws-embedded-metrics-customink|aws_site_monitor|aws_cli_wrapper|aws-sdk-euca|aws-sdk-elb-tagging|aws-rsync|appoxy-aws|aws_xregion_sync|aws-rotate-keys|aws-cognito-srp|awsraw|hiera-aws|serverkit-aws|aws_agcod_2|aws-s3-multi-region|aws_beanstalk_tunkki|aws-ses-mailer|chef-provisioning-aws|aws-record-generator|awskeyring|hackerdude-aws|fluent-plugin-aws-elasticsearch-service|aboisvert_aws|aws_elb_health_check|aws-ec2-dns-name|aws_ses_newsletters|aws_cloudformation_helper|faraday_middleware-aws-signers-v4|awsm|awsec|aws-study-guide|middleman-aws|easy_aws|aws_access_key_scan|aws-iam-authenticator-rb|aws_ssh_key|cmeiklejohn-aws|aws-codedeploy-session-helper|bosh_cli_plugin_aws|aws_blue_green_deploy|aws-transcoder-rails|aws_stack_builder|jellyfish-aws|thor-aws|aws3upload|barnyard_aws|awslanes|awsquery|crossing).*" + tags: diff --git a/rules/sinks/third_parties/sdk/amplitude/ruby.yaml b/rules/sinks/third_parties/sdk/amplitude/ruby.yaml new file mode 100644 index 00000000..16967124 --- /dev/null +++ b/rules/sinks/third_parties/sdk/amplitude/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amplitude + name: Amplitude + domains: + - "amplitude.com" + patterns: + - "(?i)(amplitude-api|amplitude-rb|fluent-plugin-amplitude).*" + tags: diff --git a/rules/sinks/third_parties/sdk/appnexus/ruby.yaml b/rules/sinks/third_parties/sdk/appnexus/ruby.yaml new file mode 100644 index 00000000..ce9bf66d --- /dev/null +++ b/rules/sinks/third_parties/sdk/appnexus/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Appnexus + name: Appnexus + domains: + - "appnexus.com" + patterns: + - "(?i)(appnexusapi).*" + tags: diff --git a/rules/sinks/third_parties/sdk/atlassian/ruby.yaml b/rules/sinks/third_parties/sdk/atlassian/ruby.yaml new file mode 100644 index 00000000..5747f1a9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/atlassian/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Atlassian + name: Atlassian + domains: + - "atlassian.com" + patterns: + - "(?i)(stash_api|atlassian-jwt|omniauth-atlassian-oauth2|atlassian_upm|atlassian_ui|atlassian_plugin_installer|atlassian_app_versions|atlassian-stash-avisi|atlassian-jwt-authentication|omniauth_crowd|jira-ruby|stash-client|authlogic_crowd|bamboo-client|crowd|confluence4r|bamboo-cli|crowd_rest|crowd-auth|jira-ruby-dmg|simplecov-clover|stash_pull_request_commenter|atl_config|usvn-crowd-sync|bpescatore-stash|face_control|fisheye-crucible|gojira|bamboo_api|faction|bamboo-console|simplecov-bamboo|nippocf|simple_crowd|crowd_rails|omnibucket|rubocop-junit-formatter|stash_notifier|sclemmer-jira-ruby|jira-ruby-added-transitions|zk-jira-ruby|jira_cli|ticketmaster-jira|knife-stash|aui_flash|kraut|jira_scan|taskmapper-jira|lita-stash-commit|danger-jira|jira|omniauth-jira|jira-cli|lita-jira|jira_report|jira_client|jira_tracker|jira-wsdl|jira-api|cb_jira_validator|jira_issues|jira_command|jira_api|jira-rest|jira-issues|jira_export|jira-script|jira_cmd|jira-remotelinker|capistrano-jira|jira_release|jira_cache|jira-worklog|jira_exception_collector|jira_cards|better_jira|danger-jira_sync|embulk-input-jira|git-jira|mongo-jira|brpm_module_jira|jira_dependency_visualizer|ruboty-jira|cafe-jira|fastlane-plugin-jira_versions|speedflow-plugin-jira|lita-jira-issues|jira4r|fastlane-plugin-jira_transition|cucumber-jira|errbit_jira_plugin|devise-jira-authenticable|active_jira|fastlane-plugin-jira_release_notes|ruby-jira-cli|jiralicious|fastlane-plugin-jira_issue_link|omniauth-jira-oauth2|fastlane-plugin-jira_issue_details|lita-onewheel-jira|fastlane-plugin-jira_transitions|jiragit|fastlane-plugin-jira_set_fix_version|jiraa|fastlane-plugin-jira_link|jiraby|jira4r-straightjacket|jirarest2|fastlane-plugin-set_jira_fix_version|fastlane-plugin-jira_ticket|jirawatch|xfel-timew-jira|jira4r-19|jirack|fastlane-plugin-jira_build_number|jirasync).*" + tags: diff --git a/rules/sinks/third_parties/sdk/bing/ruby.yaml b/rules/sinks/third_parties/sdk/bing/ruby.yaml new file mode 100644 index 00000000..9f5b59fc --- /dev/null +++ b/rules/sinks/third_parties/sdk/bing/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Bing + name: Bing + domains: + - "bing.com" + patterns: + - "(?i)(RuBing|bing_translator|bing|bing-search|bing_translate_yaml|bing-ads|bing-helper|bing_images|soapy_bing|bing-location|bing-ads-reporting|bing-content-api|bing-ads-api|simple_bing|bing_ads_ruby_sdk|bing_ads_api|bing_translator_fix|bing_search_client|bing_ads_api_v9|binger|binged|voice_recognition_bing|bingImageSearch|bingo|cognitivebing|badabing|periplus|microsoft_ngram|rbing|gnib-ads-api|autotolk|gnib|middleman-sitemap-ping|mikedemers-rbing|keyword_ranking|searchbing|search_cli|rankstar|newsbing|plagiarism2|linkto|ffi-hiredis_vip-core|multi-analytics-turbolinks|search_terms|sitemap_notifier|bingodisk|bingoint|bingo_game).*" + tags: diff --git a/rules/sinks/third_parties/sdk/chatwork/ruby.yaml b/rules/sinks/third_parties/sdk/chatwork/ruby.yaml new file mode 100644 index 00000000..24471d06 --- /dev/null +++ b/rules/sinks/third_parties/sdk/chatwork/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Chatwork + name: Chatwork + domains: + - "chatwork.com" + patterns: + - "(?i)(chatwork|chatwork_to|omniauth-chatwork|goodbye_chatwork|capistrano-chatwork|chatwork_bridge|activeresource-chatwork|ruboty-chatwork|lita-chatwork|fluent-plugin-chatwork|capistrano-around_chatwork|chatwork_webhook_verify|danger-chatwork|ruboty-chatwork_webhook|sensu-plugins-chatwork|rundock-plugin-hook-chatwork|cwbot|cha|bo_gitcw|shutwork|chatworkify|chatwork_to_slack).*" + tags: diff --git a/rules/sinks/third_parties/sdk/coinbase/ruby.yaml b/rules/sinks/third_parties/sdk/coinbase/ruby.yaml new file mode 100644 index 00000000..c304bf91 --- /dev/null +++ b/rules/sinks/third_parties/sdk/coinbase/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Coinbase + name: Coinbase + domains: + - "coinbase.com" + patterns: + - "(?i)(coinbase|coinbase-exchange|omniauth-coinbase|coinbase_commerce|coinbase_exchange|coinbase-pro|better-coinbase|spree_coinbase|mxvp-coinbase|coinbase-ruby|spree_coinbase_bitcoin_payment|coinbasepro-api|cbx|orderbook|rtcbx|rcbp|gdax).*" + tags: diff --git a/rules/sinks/third_parties/sdk/databricks/ruby.yaml b/rules/sinks/third_parties/sdk/databricks/ruby.yaml new file mode 100644 index 00000000..a3f2c2d9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/databricks/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Databricks + name: Databricks + domains: + - "databricks.com" + patterns: + - "(?i)(databricks).*" + tags: diff --git a/rules/sinks/third_parties/sdk/dropbox/ruby.yaml b/rules/sinks/third_parties/sdk/dropbox/ruby.yaml new file mode 100644 index 00000000..82b1d60d --- /dev/null +++ b/rules/sinks/third_parties/sdk/dropbox/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Dropbox + name: Dropbox + domains: + - "dropbox.com" + patterns: + - "(?i)(dropbox|dropbox_api|dropbox-sdk|dropbox-api|paperclip-dropbox|dropbox-sdk-v2|dropbox-deployment|omniauth-dropbox|fastlane-plugin-dropbox|carrierwave-dropbox|dropbox-dotfiles|git-dropbox|omniauth-dropbox-oauth2|dropbox-archive|dropbox-explorer|dropbox-aliix|dragonfly-dropbox_data_store|dropbox-sync|dropbox-folder-sync|activestorage-dropbox|sf-dropbox-ext|dropbox_api_v2|dropbox-invite|dropbox-api-petems|gmail-to-dropbox|dropbox_server_backup|dropbox-api-kilgore5|dropbox-api-alt|dropbox-sdk-sv|dropbox_content_hasher|omniauth-dropbox-oauth2-sv|fastlane-plugin-dropbox_upload|fastlane-plugin-publish_dropbox|omniauth-dropbox-business-api2|dropbox-sdk-forked_v2|get_dropbox_access_token).*" + tags: diff --git a/rules/sinks/third_parties/sdk/dwolla/ruby.yaml b/rules/sinks/third_parties/sdk/dwolla/ruby.yaml new file mode 100644 index 00000000..b101eda6 --- /dev/null +++ b/rules/sinks/third_parties/sdk/dwolla/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Dwolla + name: Dwolla + domains: + - "dwolla.com" + patterns: + - "(?i)(dwolla_v2|dwolla|dwolla-ruby|dwolla_swagger|spree_dwolla|omniauth-dwolla|fake_dwolla|money_mover).*" + tags: diff --git a/rules/sinks/third_parties/sdk/facebook/ruby.yaml b/rules/sinks/third_parties/sdk/facebook/ruby.yaml new file mode 100644 index 00000000..8defd253 --- /dev/null +++ b/rules/sinks/third_parties/sdk/facebook/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Facebook + name: Facebook + domains: + - "facebook.com" + patterns: + - "(?i)(facebookbusiness|facebook_ads|facebookads|adparlor-facebook|jquery-facebook|facebook_sig_validator|facebook_js|koala|fb-channel-file|devise_facebook_open_graph|open_graph|joelind-koala|cotweet_koala|palidanx-koala|tyler_koala|ongair_ruby|whatsapp|whatsapp_bot|whatzapper|gupshup_whatsapp|xip-twilio|WhatsappBot|whathor|apiwha|omnichannel).*" + tags: diff --git a/rules/sinks/third_parties/sdk/flurry/ruby.yaml b/rules/sinks/third_parties/sdk/flurry/ruby.yaml new file mode 100644 index 00000000..04acb74b --- /dev/null +++ b/rules/sinks/third_parties/sdk/flurry/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Flurry + name: Flurry + domains: + - "flurry.com" + patterns: + - "(?i)(flurry).*" + tags: diff --git a/rules/sinks/third_parties/sdk/freshdesk/ruby.yaml b/rules/sinks/third_parties/sdk/freshdesk/ruby.yaml new file mode 100644 index 00000000..707f7f77 --- /dev/null +++ b/rules/sinks/third_parties/sdk/freshdesk/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Freshdesk + name: Freshdesk + domains: + - "freshdesk.com" + patterns: + - "(?i)(freshdesk|freshdesk-rest|freshdesk-ruby|freshdesk_api|freshdesk_apiclient|freshdesk-rails|galetahub-freshdesk|freshdesk-api-client|freshdesk-api-v2-rails|rottendesk|rubydesk|fci|freshly).*" + tags: diff --git a/rules/sinks/third_parties/sdk/google/ruby.yaml b/rules/sinks/third_parties/sdk/google/ruby.yaml new file mode 100644 index 00000000..cdadb154 --- /dev/null +++ b/rules/sinks/third_parties/sdk/google/ruby.yaml @@ -0,0 +1,21 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Google + name: Google + domains: + - "google.com" + patterns: + - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher).*" + tags: + + - id: ThirdParties.SDK.Google.Cloud + name: Google Cloud + domains: + - "cloud.google.com" + patterns: + - "(?i)(cloudtasker|google-cloud-tasks).*" + tags: diff --git a/rules/sinks/third_parties/sdk/ibm/ruby.yaml b/rules/sinks/third_parties/sdk/ibm/ruby.yaml new file mode 100644 index 00000000..d6b612c8 --- /dev/null +++ b/rules/sinks/third_parties/sdk/ibm/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Ibm + name: Ibm + domains: + - "ibm.com" + patterns: + - "(?i)(ibm-cloud-sdk|ibm_cloud_sdk_core|ibm_cloud_power|ibm_cloud_iam|ibm_cloud_databases|ibm_cloud_resource_controller|ibm_cloud_global_tagging|ibm_cloud_activity_tracker|manageiq-providers-ibm_cloud|ibm_vpc|knife-softlayer|gp-ruby-client|aspera-cli|watson-api-client).*" + tags: diff --git a/rules/sinks/third_parties/sdk/intercom/ruby.yaml b/rules/sinks/third_parties/sdk/intercom/ruby.yaml new file mode 100644 index 00000000..108a17a6 --- /dev/null +++ b/rules/sinks/third_parties/sdk/intercom/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Intercom + name: Intercom + domains: + - "intercom.io" + patterns: + - "(?i)(intercom|intercom-rails|omniauth-intercom|intercom-app|intercom_summary|lucid_intercom|intercom_export|cogniteev-intercom|ahoy-intercom|intercom_event_wrapper|hertz-courier-intercom|PSA|user_trackers|helply).*" + tags: diff --git a/rules/sinks/third_parties/sdk/line/ruby.yaml b/rules/sinks/third_parties/sdk/line/ruby.yaml new file mode 100644 index 00000000..cdf6f982 --- /dev/null +++ b/rules/sinks/third_parties/sdk/line/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Line + name: Line + domains: + - "line.me" + patterns: + - "(?i)(line-bot-api|line-bot|lotify|clova-speech|lbd_sdk|pihole|line_liff).*" + tags: diff --git a/rules/sinks/third_parties/sdk/linkedin/ruby.yaml b/rules/sinks/third_parties/sdk/linkedin/ruby.yaml new file mode 100644 index 00000000..943c4bbd --- /dev/null +++ b/rules/sinks/third_parties/sdk/linkedin/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Linkedin + name: Linkedin + domains: + - "linkedin.com" + patterns: + - "(?i)(linkedin|linkedin-oauth2|omniauth-linkedin|linkedin-v2|omniauth-linkedin-oauth2|linkedin-drspin|linkedin-idkmybffjill|linkedin_orbit|linkedin-bdigital|linkedin_v2|linkedin-saimonmoore|linkedin_industries|linkedin-rb|linkedin-client|holetse-linkedin|linkedin-ruby|sinatra-linkedin|linkedin_sign_in|brienw-linkedin|cl_linkedin|ruby-linkedin|linkedin-build|linkedin-api2|omniauth-linkedin-jsapi|linkedin-saddle-client|linkedin2|linkedincrawler|omniauth-linkedin-oauth2-cwd|easy_auth-linked_in|linsc|crankin|linkout|leakedin|ezlinkedin|linked_in_archive_to_resume|completeness|linkedin2cv|scouter|fastlane-plugin-xbluepill|acts_as_cleo|link_to_profile|resumr|linked_in|sharrando).*" + tags: diff --git a/rules/sinks/third_parties/sdk/mailchimp/ruby.yaml b/rules/sinks/third_parties/sdk/mailchimp/ruby.yaml new file mode 100644 index 00000000..33171fea --- /dev/null +++ b/rules/sinks/third_parties/sdk/mailchimp/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mailchimp + name: Mailchimp + domains: + - "mailchimp.com" + patterns: + - "(?i)(monkey_party|mailchimp|omniauth-mailchimp|mailchimp_api|mailchimp_ses|mailchimp_api_v3|mailchimp_template|ruby-mailchimp|webhookr-mailchimp|mailchimp_subscriber|mailchimp_exporter|devise_mailchimp|easy_mailchimp|mailchimp_transactional|refinerycms-mailchimp|embulk-output-mailchimp|catarse_mailchimp|camaleon_mailchimp|chimpster|mojura-mailchimp|solidus_mailchimp_sync|trado_mailchimp_module|marnen-catarse_mailchimp|mailchimp3|gibbon|hominid|MailchimpMarketing|mailchimpv3|MailchimpTransactional|chimpster-rails|mc_markdown|hominid-wout|monkeywrench|monkey_wrench|chimpmunk|workarea-mail_chimp|bgetting-hominid|panthoot|mc|mcmailer|chimp_contact|banana_peels|chimp_mailer|chimp_light|babney-hominid|chimp_sync|Empact-hominid|mandrill_queue|malechimp|purple-monkey|netguru-hominid|mcparty|mailfox|catarse_monkeymail|chimpy|banana_bits|devise_campaignable|slack-ruby-bot-server-mailchimp).*" + tags: diff --git a/rules/sinks/third_parties/sdk/mailgun/ruby.yaml b/rules/sinks/third_parties/sdk/mailgun/ruby.yaml new file mode 100644 index 00000000..a8bc539a --- /dev/null +++ b/rules/sinks/third_parties/sdk/mailgun/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mailgun + name: Mailgun + domains: + - "mailgun.com" + patterns: + - "(?i)(mailgun-ruby|mailgun|mailgun_rails|griddler-mailgun|mailgun-rails|mailgun-tracking|mailgun_webhooks|mailgun_api|mailgun_catcher|capistrano-mailgun|mailgun-mailbox|rails-mailgun|mailgun-sendmail|mailgun_email_validator|mailgun-api-rails|lita-mailgun|mailgun-ruby-plus|rails-mailgun-plus|omw_mailgun|mailgunner|sensu-plugins-mailgun|factor-connector-mailgun|wj-mailgun-ruby|huginn_mailgun_agent|mailgat|pew_pew|mailqun|snipe).*" + tags: diff --git a/rules/sinks/third_parties/sdk/medium/ruby.yaml b/rules/sinks/third_parties/sdk/medium/ruby.yaml new file mode 100644 index 00000000..089c6a1d --- /dev/null +++ b/rules/sinks/third_parties/sdk/medium/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Medium + name: Medium + domains: + - "medium.com" + patterns: + - "(?i)(omniauth-medium|medium_api|medium-scrapper|medium|medium-sdk-ruby|medium_sdk|mediumite).*" + tags: diff --git a/rules/sinks/third_parties/sdk/microsoft/ruby.yaml b/rules/sinks/third_parties/sdk/microsoft/ruby.yaml new file mode 100644 index 00000000..8d74ee77 --- /dev/null +++ b/rules/sinks/third_parties/sdk/microsoft/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Microsoft + name: Microsoft + domains: + - "microsoft.com" + patterns: + - "(?i)(azure|azure-core|azure-storage|azure-storage-common|azure-storage-blob|azure_mgmt_resources|azure_mgmt_storage|azure-armrest|azure_mgmt_compute|azure_mgmt_network|azure_graph_rbac|azure_mgmt_sql|azure_mgmt_dns|azure-signature|azure_sdk|azure_mgmt_security|azure_mgmt_key_vault|ms_rest_azure|omniauth-azure-oauth2|azure_mgmt_traffic_manager|miasma-azure|azure-storage-file|azure_mgmt_monitor|azure_info|azure-contrib|paperclip-azure|azure-storage-queue|azure_mgmt_authorization|azure_mgmt_subscriptions|azure_key_vault|azure-storage-table|azure_search|azure_auth|azure_mgmt_msi|azure_mgmt_cdn|azure_mgmt_graph|azure-push|azure_mgmt_web|azure_mgmt_locks|azure_mgmt_redis|azure_mgmt_features|azure_mgmt_policy|azure_mgmt_search|azure_mgmt_commerce|azure_mgmt_scheduler|azure_mgmt_logic|azure_mgmt_batch|gitlab-fog-azure-rm|azure_client|knife-azure|omniauth-azure-activedirectory-v2|azure-acs|azure_mgmt_kusto|azure-loganalytics-datacollector-api|vagrant-azure|azure_mgmt_consumption|azure_mgmt_netapp|azure_mgmt_billing|azure_mgmt_relay|azure_mgmt_links|azure_mgmt_automation|azure_cognitiveservices_computervision|azure_mgmt_hdinsight|azure_event_grid|azure_mgmt_signalr|azure-sas|azure_cognitiveservices_face|azure_cognitiveservices_imagesearch|azure_cognitiveservices_textanalytics|azure_cognitiveservices_contentmoderator|azure_mgmt_media_services|carrierwave-azure|azure_cognitiveservices_entitysearch|azure_cognitiveservices_customsearch|azure_cognitiveservices_videosearch|azure_cognitiveservices_spellcheck|azure_cognitiveservices_newssearch|azure_media_service|azure_mgmt_notification_hubs|azure_mgmt_cognitive_services|azure-auth|azure_mgmt_container_service|azure_cognitiveservices_luisauthoring|azure-multistorage|azure_mgmt_privatedns|azure_mgmt_datalake_store|azure_mgmt_event_grid|azure_mgmt_iot_hub|azure-plus|azure_mgmt_recovery_services|azure_mgmt_service_bus|azure_mgmt_mariadb|azure_mgmt_machine_learning|azure_mgmt_sqlvirtualmachine|azure_mgmt_powerbi_embedded|azure_mgmt_datalake_analytics|azure_mgmt_event_hub|azure_mgmt_storagesync|azure_mgmt_container_instance|azure_service_fabric|azure_cognitiveservices_luisruntime|azure_cognitiveservices_qnamaker|azure_mgmt_container_registry|azure_mgmt_operational_insights|azure_mgmt_analysis_services|azure_mgmt_hanaonazure|azure_sas|azure_stt|azure_mgmt_advisor|azure_mgmt_mixedreality|azure_cognitiveservices_customvisionprediction|azure_cognitiveservices_visualsearch|azure_mgmt_api_management|azure_mgmt_edgegateway|azure_mgmt_stream_analytics|cloudstrap-azure|azure_mgmt_server_management|azure_mgmt_resourcegraph|azure_mgmt_azurestack|azure_cognitiveservices_customimagesearch|azure_cognitiveservices_autosuggest|azure_mgmt_marketplace_ordering|azure_jwt_auth|azure_cognitiveservices_localsearch|azure_mgmt_mobile_engagement|azure_mgmt_labservices|azure_mgmt_service_fabric|azure_mgmt_customer_insights|azure_mgmt_managed_applications|azure_mgmt_iot_central|azure_mgmt_policy_insights|azure_mgmt_resources_management|azure_mgmt_insights|foreman_azure|azure-fix|azure_cognitiveservices_anomalydetector|carrierwave-azure_rm|azure-tts|azure-key-vault|azure_mgmt_dev_spaces|azure_mgmt_recovery_services_backup|azure_mgmt_data_migration|jellyfish-azure|azure_mgmt_stor_simple8000_series|foreman_azure_rm|azure_direct_upload|fluent-plugin-azure-loganalytics|c-azure|kuby-azure|log4r-azure|azure_mgmt_recovery_services_site_recovery|azure_mgmt_machine_learning_services|jdbc-mssql-azure|refile-azure|kontena-plugin-azure|delayed_job_azure|ms_rest|logstash-output-azure|omniauth-azure-adv2|logstash-output-azure_loganalytics|xcpretty-azure-formatter|azure-auth-token_provider|azure_mgmt_azurestack_hci|fluent-plugin-azure-storage-append-blob|kubes_azure|carrierwave-azure-blob|stuartpreston-azure-sdk-for-ruby|omniauth-azure-ad|carrierwave-ms-azure|fluent-plugin-azure-queue|embulk-input-azure_blob_storage|microsoft-logstash-output-azure-loganalytics|embulk-output-azure_blob_storage|cocoapods-azure-universal-packages|logstash-input-azure_blob_storage|manageiq-providers-azure|sensu-plugins-azure|omniauth-azure_active_directory_b2c|dragonfly-azure_data_store|logstash-output-azure_event_hubs|paperclip-azure-storage|be_azure_cognitiveservices_face|terraspace_plugin_azure|logstash-input-azureblob|fluent-plugin-azure-table|hammer_cli_foreman_azure_rm|blobfish-azure-keyvault-ruby|xcpretty-azure-pipelines-formatter|manageiq-providers-azure_stack|embulk-filter-azure_text_analytics|omniauth-azure-oauth2-v2|fluent-plugin-azurestorage-gen2|azurex|juliusl-azure-sdk-for-ruby|embulk-filter-azure_computer_vision_api|logstash-output-kusto|embulk-filter-azure_translator_api|fluent-plugin-azure-storage-table|fluent-plugin-azure-storage-tables|fluent-plugin-azure-storage-append-blob-lts|async-fluent-azure-eventhubs-plugin|logstash-input-azurewadtable|fluent-plugin-azuremonitorlog|waz-storage|omniauth-bn-office365|fluent-plugin-application-insights|sensu-plugins-azurerm|fluent-plugin-azurestorage|fluent-plugin-documentdb|fluent-plugin-azureeventhubs-batched|fluent-plugin-azureeventhubs|fluent-plugin-azuresearch|waz-sync|sk-fluent-plugin-azureeventhubs|fluent-plugin-azurefunctions|custom_fluent-plugin-azure-storage-append-blob|fluent-plugin-azuremonitormetrics|logstash-input-azuretopicthreadable|fluent-plugin-azure-storage-append-blob-lts-azurestack|chef-provisioning-azurerm|jdbc-mssql|embulk-output-documentdb|embulk-output-azuresearch|generik-logstash-input-azureblob|dm-waztables-adapter|logstash-input-azureblob-json-head-tail|logstash-input-azureblob-saars|logstash-input-azureblob-xiaomi7732|omniauth-activedirectory).*" + tags: diff --git a/rules/sinks/third_parties/sdk/netflix/ruby.yaml b/rules/sinks/third_parties/sdk/netflix/ruby.yaml new file mode 100644 index 00000000..0a23f029 --- /dev/null +++ b/rules/sinks/third_parties/sdk/netflix/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Netflix + name: Netflix + domains: + - "netflix.com" + patterns: + - "(?i)(netflix|netflix_roulette|omniauth-netflix|rares-netflix|whats-on-netflix|netflix4r|kubrick|jekflix|ruby_robot).*" + tags: diff --git a/rules/sinks/third_parties/sdk/notion/ruby.yaml b/rules/sinks/third_parties/sdk/notion/ruby.yaml new file mode 100644 index 00000000..ecc0338b --- /dev/null +++ b/rules/sinks/third_parties/sdk/notion/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Notion + name: Notion + domains: + - "notion.com" + patterns: + - "(?i)(notion|notion_orbit|notion_rb|notion-ruby-client|omniauth-notion|notion-sdk-ruby|notion_ruby|notion_client|notion_api|jekyll-notion).*" + tags: diff --git a/rules/sinks/third_parties/sdk/onesignal/ruby.yaml b/rules/sinks/third_parties/sdk/onesignal/ruby.yaml new file mode 100644 index 00000000..e064a2c7 --- /dev/null +++ b/rules/sinks/third_parties/sdk/onesignal/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Onesignal + name: Onesignal + domains: + - "onesignal.com" + patterns: + - "(?i)(onesignal|onesignal-ruby|devise-onesignal|onesignal-ruby-rails6|notification-pusher-onesignal|one_signal|onsignal).*" + tags: diff --git a/rules/sinks/third_parties/sdk/paypal/ruby.yaml b/rules/sinks/third_parties/sdk/paypal/ruby.yaml new file mode 100644 index 00000000..c3160f33 --- /dev/null +++ b/rules/sinks/third_parties/sdk/paypal/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paypal + name: Paypal + domains: + - "paypal.com" + patterns: + - "(?i)(swisspay|active_paypal_adaptive_payment|paypal-payment|spree_paypal_adaptive_payment|georgedrummond-active_paypal_adaptive_payment|paypal_adaptive|yukon|shoppe-paypal|paypal-express|pp-adaptive|lolita-paypal|adaptive_pay|ianfleeton-paypal-express|paypal-adaptive-gateway|sinatra-paypal|elucid-adaptive_pay|adapt|spree_paypal_website_standard|ruby-paypal|creative-paypal-express|spree_paypal_rest|spree_paypal_express|trado_paypal_module|creative-pp-adaptive|spree_paypal_express_mutalis|killbill-paypal-express|nimbleshop_paypalwp|astrails-paypal_adaptive|tonyla-paypal_adaptive|workarea-paypal|active_paypal_adaptive_accounts|koduc_express_paypal|adaptive_payments|spree_billing_sisow|lottay-paypal_adaptive|heartcheck-paypal|paypal-masspay|JekyllEWP|paypal-sdk-rest|paypal-sdk-core|paypal-sdk-merchant|paypal-checkout-sdk|paypal-sdk-adaptivepayments|paypal-sdk-permissions|paypal-sdk-adaptiveaccounts|paypal-sdk-invoice|paypal-sdk-subscriptions|paypal-payouts-sdk|paypal-sdk-buttonmanager|paypal-sdk-http-adapters|paypal-sdk-merchant-jk|paypal-sdk-rest-pmrb|paypal-sdk-buttonmanager-rails|paypal_merchant|cabernet|paypkg).*" + tags: diff --git a/rules/sinks/third_parties/sdk/payture/ruby.yaml b/rules/sinks/third_parties/sdk/payture/ruby.yaml new file mode 100644 index 00000000..7dea1d4b --- /dev/null +++ b/rules/sinks/third_parties/sdk/payture/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Payture + name: Payture + domains: + - "payture.com" + patterns: + - "(?i)(payture-cheques).*" + tags: diff --git a/rules/sinks/third_parties/sdk/payu/ruby.yaml b/rules/sinks/third_parties/sdk/payu/ruby.yaml new file mode 100644 index 00000000..2f0d868a --- /dev/null +++ b/rules/sinks/third_parties/sdk/payu/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Payu + name: Payu + domains: + - "payu.in" + patterns: + - "(?i)(solidus_payu_latam|easy_pay_u_latam|opay|killbill-payu-latam|upay|payu-latam|payu_latam|payuindia|payu-latam-rails|wj-payuindia).*" + tags: diff --git a/rules/sinks/third_parties/sdk/razorpay/ruby.yaml b/rules/sinks/third_parties/sdk/razorpay/ruby.yaml new file mode 100644 index 00000000..906c87fc --- /dev/null +++ b/rules/sinks/third_parties/sdk/razorpay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Razorpay + name: Razorpay + domains: + - "razorpay.com" + patterns: + - "(?i)(razorpay|spree_razorpay|razorpay_pa|solidus_razorpay|ifsc).*" + tags: diff --git a/rules/sinks/third_parties/sdk/risepay/ruby.yaml b/rules/sinks/third_parties/sdk/risepay/ruby.yaml new file mode 100644 index 00000000..1c08f581 --- /dev/null +++ b/rules/sinks/third_parties/sdk/risepay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Risepay + name: Risepay + domains: + - "risepay.com" + patterns: + - "(?i)(risepay).*" + tags: diff --git a/rules/sinks/third_parties/sdk/salesforce/ruby.yaml b/rules/sinks/third_parties/sdk/salesforce/ruby.yaml new file mode 100644 index 00000000..26d44c20 --- /dev/null +++ b/rules/sinks/third_parties/sdk/salesforce/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Salesforce + name: Salesforce + domains: + - "salesforce.com" + patterns: + - "(?i)(omniauth-salesforce|salesforce_bulk_query|salesforce_bulk_api|salesforce_bulk|salesforce_flo|salesforce-orm|salesforce_id_formatter|salesforce-deploy-tool|salesforce_chunker|salesforce_bulk2|salesforce_ar_sync|salesforce_fsdb|openstax_salesforce|salesforce_cache|salesforce_adapter|dm-salesforce|salesforce_record|salesforce-rails|salesforce_connect|embulk-output-salesforce|hoopla_salesforce|salesforce-chatter|salesforce_bulk_quickfix|salesforce_http_client|salesforce-lead|gd_salesforce|salesforce_exporter|fn-salesforce|warden-salesforce|salesforce_client|salesforce_bulk_client|salesforce-einstein|rd-salesforce|dm-salesforce-adapter|active_salesforce|salesforce_bulk_oauth2|salesforce-bulkapi-notifier|rails-salesforce-connect|mct-rd-salesforce|tla-sbuilder-salesforce|embulk-input-salesforce_bulk|restforce|salesforcebulk|salesforce_bulk_query-edge|salesforce_bulk_api_serial_or_parallel|salesforceintegration|martinemde-dm-salesforce-adapter|rforce|salesforceapi-rest|executrix|restforce-db|asf-rest-adapter|metaforce|activeforce|soapforce|sf_migrate|draisine|seiun|mdata|sfdc|metamind|restforce-bulk|asf_scaffold_generator|leadcreatorgem|bulkforce|force|leadsf|sfd2|data-com-api|salesforklift|yasd|exact-target-client|sfkb|marketingcloud-mailer|tooling|massaji|metaforce-delivery_method|databasedotcom_console|active_force|metaforce-beta|rd_challenge_vivianec|levene|lead_create|lightning-ui|railsforce|marketingcloudsdk|openstax_active_force|refocus|sfmc-fuelsdk-ruby|importlead|sfdc_proxy|smartring|fuelsdk_json_bump|sf-username-password-authentication-and-rest-api|dragostsesdk|MyPreciousRuby1).*" + tags: diff --git a/rules/sinks/third_parties/sdk/sendgrid/ruby.yaml b/rules/sinks/third_parties/sdk/sendgrid/ruby.yaml new file mode 100644 index 00000000..4b8adbf0 --- /dev/null +++ b/rules/sinks/third_parties/sdk/sendgrid/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sendgrid + name: Sendgrid + domains: + - "sendgrid.com" + patterns: + - "(?i)(http_mailer|sendgrid|sendgrid-ruby|sendgrid-rails|sendgrid-actionmailer|griddler-sendgrid|sendgrid_webapi|sendgrid-api|sendgrid_smtpapi|sendgrid_ruby|sendgrid-web|sendgrid-mailer|sendgrid_notification|sendgrid_api|pokey-sendgrid|sendgrid-enphase|sendgrid-rails23|sendgrid_cli_mailer|sendgrid_actionmailer_adapter|sendgrid-newsletter|sendgrid_web|sendgrid_cli|rmm5t-sendgrid|pushpop-sendgrid|am-sendgrid|sendgrid_template_engine|mail_safe-sendgrid|sendgrid_template|sendgrid_contact_persist|sendgrid4r|smtpapi|embulk-input-sendgrid|omnihooks-sendgrid-parse|fluent-plugin-sendgrid-event|parity-sendgrid-api|gridhook|sensu-plugins-sendgrid|griddler|gatling_gun|newslettre|wlvalidate|send_grid_mailer|mail-x_smtpapi|fakegrid|griddler-acd|sg|office_boy|html-griddler|sg_mailer|gridSender|developerreply|email_events|kani_laser).*" + tags: diff --git a/rules/sinks/third_parties/sdk/sentry/ruby.yaml b/rules/sinks/third_parties/sdk/sentry/ruby.yaml new file mode 100644 index 00000000..ef2b7d30 --- /dev/null +++ b/rules/sinks/third_parties/sdk/sentry/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sentry + name: Sentry + domains: + - "sentry.io" + patterns: + - "(?i)(fluent-plugin-sentry-ruby).*" + tags: diff --git a/rules/sinks/third_parties/sdk/slack/ruby.yaml b/rules/sinks/third_parties/sdk/slack/ruby.yaml new file mode 100644 index 00000000..d0454088 --- /dev/null +++ b/rules/sinks/third_parties/sdk/slack/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Slack + name: Slack + domains: + - "slack.com" + patterns: + - "(?i)(slack-notifier|slack-messenger|slack-ruby-client|slack-api|slack-notify|slack-poster|lita-slack|slack-incoming-webhooks|omniauth-slack|slack-post|slack_hook|slack-ruby-bot|slack_mrkdwn|slack-ruby|slack_bot|slack_notifier|slack_msgr|chef-handler-slack|slack_chatter|slack_500|capistrano-slack|slack_webhooks|clearbit-slack|slack_messaging|fluent-plugin-slack|danger-slack|slack-smart-bot|resque-slack|slack_markdown|slack.rb|slack-bot-server|slack_resources|slack_widgets|slack-notification|slack_inviter|slack_message|slack-reporter|sensu-plugins-slack|slack_game|slack-stash|slack-rtmapi|slack-logger|slack_log_device|slack-cap|slack_mailer|slack-cli|slack_export|slack-mail|slack-ruby-block-kit|slack_oauth|slack_invitation|slack_scratcher|slack_api|capistrano-slack-notify|slack-peoplepuller|slack-emogen|ginjo-omniauth-slack|slack_ci|slack_transformer|slack-keep-presence|slack-ruby3|quandl-slack|slack_messenger|simple_slack|mina-slack|ruboty-slack|ellen-slack|capistrano-slack_notification|slack-ruby-bot-server|slack_neuralyzer|slack_alphabetter|slack-cli-webhook|slack-client|lolcommits-slack|slack-api-wrapper|jackal-slack|slack_tsuribari|slack_ruby|slack_logger|slack-webhook|fastlane-plugin-slack_upload|slack_cli|pushpop-slack|slack-progress|slack_notifier_wrapper|slack-rtmapi2|lita-slack-karma-sync|slackiq|ruboty-slack_rtm|async-slack|slack-bot-manager|eye-slack|slack-ruby-danger|slack-rtm-receiver|slackistrano|prpr-slack|pepito-slack|lita-slack-standup|slack_itc_autoingestion|mina_slack|gemsurance_slack|slack_pomodoro_timer|slack-wrapper|slack-rtmapi-fork|foreman_slack|slack-rtm-api|blinkman-slack|sinatra-slack|cap-slack-notify|slack-rtm-bot-helper|fde-slack-notification|mail_slack_bot|factor-connector-slack|mina_slack_promulgator|slackcat|exceptions_to_slack|jira-to-slack|boot_slack_bot|slackdown|slack-ruby-client-bhe|itunes_information_slack|simple-slack-bot|slack-big-emoji|slack_webhook_logger|operationcode-slack|slack_sign_in|slack-web-api|fastlane-plugin-slack_bot|slack_log_viewer|slack_notify_simple|mina_slack_notify|capistrano-slack-mp|detailed_slack_notifier|octobot-slack_agent|gorg_slack_chat|slack-ruby-bot-server-events|alerty-plugin-slack|slack_progress_bar|slack-block-kit|harvest_slack_report|slackbotsy|jackal-kitchen-slack|slack-ruby-bot-boilerplate|github_to_slack|omniauth-slack_signin|slackr|slack-ruby-bot-bhe|slack-incoming-webhooks-ruby|slack-emoji-download.rb|janky-slack-custom|hey-you-slack|slack_ruby_bot_authorization|yieldbot-detailed-slack|slacken|slacks|capistrano-slack-notifier|lex-slack|newrelic-slack-ruby-bot|slacky|spinach-slack-reportable|rack-error_to_slack|delayed_job_slack_notification|slack-ruby-bot-server-rtm|raise_to_slack|ruboty-slack_take_turns|correios_slack_bot|devise_slack_notifiable|ruboty-slack_reaction_added|slackit|slackoff|lita-slack-status|rundock-plugin-hook-slack|embulk-input-slack-history|resque_slack_notifier|repp-heartful_slack|rack-slack_request_verification|slackup|slackdo|nonono_reciever-slack|lita-slack_lingr_gateway_handler|slack-ruby-bot-server-stripe|rack-auth-slack|slackdraft|slack-ruby-bot-server-events-app-mentions|slackpost|slackbot_frd|remote-coffee-slack|slacking|embulk-input-slack_message|fluent-plugin-slack-stakater|embulk-output-slack_file_upload|slackvite|slappy|nine_one_one|capistrano-slackbot|sidekiq-scheduler-notification|xmpp4r-hipchat|ruboty-slack_rtm-emoji_changed|slackpipe|slackert|slackhook|slacked|arisaid|slackgetter|komonjo|slackbot-rails|breacan|capistrano-slackify|slackwebhook|embulk-input-slack_channel_messages|exception_notification-slacky).*" + tags: diff --git a/rules/sinks/third_parties/sdk/spotify/ruby.yaml b/rules/sinks/third_parties/sdk/spotify/ruby.yaml new file mode 100644 index 00000000..359a61a2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/spotify/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Spotify + name: Spotify + domains: + - "spotify.com" + patterns: + - "(?i)(deezify|hibot|partygoer-player|anyplayer|sonice|homophone|spotify|omniauth-spotify|spotify-client|meta-spotify|spotify-dbus|spotify-to-mp3|spotify-api|spotify-ruby|spotify_rec|cinch-spotify|spotify-search|spotify_cli|spotify-charts|spotify_osx_controller|spotify-metadata|spotify_web|lita-spotify|jekyll-spotify|spotify-ruby-api|spotify_http_remote|jberkel-spotify-api|spotify-ruby-kev|omniauth-spotify-oauth2|rspotify|spof|simplespotify|spot|spotif-aye|spty|Musix|sparkey|spotilocal|spot_tracks|hallon-fifo|tweefy|spotty|music-query|ejaydj|spty_api|postrocktues|spotifiery|jektify|soundly|music_explorer|xspf2spotify|hallon-queue-output).*" + tags: diff --git a/rules/sinks/third_parties/sdk/stripe/ruby.yaml b/rules/sinks/third_parties/sdk/stripe/ruby.yaml new file mode 100644 index 00000000..e99bb56b --- /dev/null +++ b/rules/sinks/third_parties/sdk/stripe/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Stripe + name: Stripe + domains: + - "stripe.com" + patterns: + - "(?i)(spree_account_recurring|stripe_saas|phcdevworks_accounts_stripe|stripe|workarea-stripe|stripe_invoice|cash_out|trado_stripe_module|stripe_clerk|koduc_stripe|pay|killbill-stripe|piggybak_stripe|solidus_stripe|catarse_stripe).*" + tags: diff --git a/rules/sinks/third_parties/sdk/telegram/ruby.yaml b/rules/sinks/third_parties/sdk/telegram/ruby.yaml new file mode 100644 index 00000000..0d4d5367 --- /dev/null +++ b/rules/sinks/third_parties/sdk/telegram/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Telegram + name: Telegram + domains: + - "telegram.org" + patterns: + - "(?i)(telegram-bot|telegram-bot-ruby|telegram|telegram_bot|telegram-ruby|fastlane-plugin-telegram|omniauth-telegram|xasin-telegram|telegram_workflow|telegram-bot-types|telegram_meetup_bot|telegram-rails|telegram-rb|telegram-webhooks|lita-telegram-plus|xnm-telegram|lita-telegram|capistrano-telegram|jaconda_telegram|sensu-plugins-telegram|telegram_notifications|telegram_chatbot|telegram_bot_ruby|telegram-auth|telegram_bot_middleware|telegram_notification|ya_telegram_bot|botkit-telegram|stealth-telegram|telegram-rabbit|ruboty-telegram|telegram-loggerbot-ruby|telegram_bot_mgo|exception_notification_telegram|capistrano-telegram_notification|telegram_bot_api|telegram_web_proxy|telegram_imdb_bot|chatbot_helper-telegram|telegram_bot_builder|telegram-bot_manager|telegram-bot-response_builder).*" + tags: diff --git a/rules/sinks/third_parties/sdk/tencent/ruby.yaml b/rules/sinks/third_parties/sdk/tencent/ruby.yaml new file mode 100644 index 00000000..2dc4b85d --- /dev/null +++ b/rules/sinks/third_parties/sdk/tencent/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Tencent.Cloud + name: Tencent Cloud + domains: + - "cloud.tencent.com" + patterns: + - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|cos|qcloud_ruby).*" + tags: diff --git a/rules/sinks/third_parties/sdk/trello/ruby.yaml b/rules/sinks/third_parties/sdk/trello/ruby.yaml new file mode 100644 index 00000000..047d529b --- /dev/null +++ b/rules/sinks/third_parties/sdk/trello/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Trello + name: Trello + domains: + - "trello.com" + patterns: + - "(?i)(slack_trello|ruby-trello|omniauth-trello|trello_flow|trello_cli|trello-client|trello_github|trello-changelog|trello_client|trello-pipes|trello_webhook|trello_lead_time|ki_trello|github-trello|omnifocus-trello|trello_branch|ruboty-trello|trello_freestyler|trello_effort_tracker|trello-factory|trello_slurper|trello_dxy|lita-trello|startling_trello|trello-list2card|github-trello-cl|trello_client_lite|taskmapper-trello).*" + tags: diff --git a/rules/sinks/third_parties/sdk/twitter/ruby.yaml b/rules/sinks/third_parties/sdk/twitter/ruby.yaml new file mode 100644 index 00000000..74e1ff27 --- /dev/null +++ b/rules/sinks/third_parties/sdk/twitter/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Twitter + name: Twitter + domains: + - "twitter.com" + patterns: + - "(?i)(twitter|omniauth-twitter|twitter-text|twitter-stream|twitter_oauth|twitter-bootstrap-rails|em-twitter|twitter-typeahead-rails|twitter-ads|jnunemaker-twitter|cinch-twitter|twitter-auth|compass_twitter_bootstrap|twitter-login|neo4apis-twitter|ex_twitter|twitter-photos|twitter_bootstrap|twitter-vine|lita-twitter|stratify-twitter|twitter-bootswatch-rails|oauth_twitter|hellhound-twitter|twitter-cache|dschn-twitter|twitter_api|twitter-stats|twitter_connect|devise-twitter|ruboty-twitter|twitter_friendly|twitter_images|twitter_meme|twitter_username_extractor|twitter_cards|joelind-twitter|twitter_kotoba|bkocik-twitter|twitter_anonymous_client|twitter_server|twitter-jruby|twitter-multi|ddollar-twitter|twitter_hashtag|erwaller-twitter|twitter-userstream|twitter_rss|twitter_cldr_js|twitter-bootstrap-rails-confirm|twitter-bootstrap3-rails|billymeltdown-twitter|atok-twitter|knife-twitter|twitter-bootstrap-helpers|twitter_retry|deadprogrammer-twitter|fluent-plugin-twitter|markov_twitter|dustin-twitter|twitter_ads|twitter_bot|twitter-lists|moomerman-twitter_oauth|secobarbital-twitter|twitter_alert|mbleigh-twitter-auth|oii_twitter_goodies|typho-twitter|pjdavis-twitter|rpbertp13-twitter|twitter_feed|ellen-twitter|deedubs-twitter|cicloid-twitter|twitter_lti|gilesbowkett-twitter|twitter_client|capistrano-twitter|handcrafted-twitter|szimek-twitter|nobert-twitter|siuying-twitter|neufelry-twitter-sms|twitter_to_csv|twitter-bootstrap|bcms_twitter|jlind-twitter|teejayvanslyke-twitter|radiant-twitter-extension|sml-twitter|twitter_friends|dancroak-twitter-search|rorra-twitter|twitter-console|twitter_bootstrap_builder|twitter_atm|ifttt-twitter|sass-twitter-bootstrap|twitter-bootstrapped|twitter_bot_generator|twitter_backup|anthonycrumley-twitter|twitter-friends|arthurgeek-twitter|twitter-bootswatch-rails-helpers|twitter-knife|baron-twitter|fetcher-microdata-twitter|dacort-twitter|codetocustomer-twitter|twitter-config|drnic-twitter|twitter-vanity-suite|twitter_oauth2|egze-twitter|easy_auth-twitter|twitter_bootstrap_combo|twitter_bootstrap_sass|twitter_search_photos|twitter_bootstrap_helper|ubermajestix-twitter|neufelry-twitter|slack_twitter_egosa|michaeltaras-twitter|ssoroka-twitter|netshade-twitter|ministrycentered-twitter|pushpop-twitter|lazyatom-twitter|paulsingh-twitter|rcarver-twitter|jugyo-twitter_oauth|twitter-bot|twitter_bootstrap_wizard_rails|twitter_bootstrap_markup|ruboty-twitter_search|twitter-bootstrap-components-rails|sinatra-twitter-oauth|scrivito_twitter_widget|twitter_bootstrap_form_for|jarodluebbert-twitter_oauth|nakajima-twitter_oauth|lukemelia-twitter-stream|lti_twitter_engine|twitter_image_tag|edgar-twitter-search|sensu-plugins-twitter|look-twitter-search|twitter-text-simpleidn|twitter_with_auto_pagination|twitter-bootstrap-markup-rails|twitter-text-relative|twitter_topic_bot|twitter-bootstrap-scaffold|farm_twitter_bootstrap|twitter_labs_api|twitter-bootstrap-rails-cdn|cicloid-twitter_oauth|oauth-cli-twitter|heart_twitter|rack-twitter-auth|my_timeline-twitter|gleuch-twitter_oauth|bot_twitter_ebooks|twitter_web_intents|twitter-bootswatch-rails-fontawesome|twitter-lists-cli|ruboty-twitter_track|szimek-twitter_rails|twitter_bootstrap_helpers|twitter_bootstrap-helpers|twitter_snowflake|twitter-bootstrap-ruby|twitter-flight-rails|simple_twitter|chmeee-twitter-fusefs|bcms_twitter_module|twitter-request-headers|dschn-twitter_oauth|twitter_ratchet_rails|twitter-bootstrap-turbo|pk-twitter_oauth).*" + tags: diff --git a/rules/sinks/third_parties/sdk/upwork/ruby.yaml b/rules/sinks/third_parties/sdk/upwork/ruby.yaml new file mode 100644 index 00000000..7da617b7 --- /dev/null +++ b/rules/sinks/third_parties/sdk/upwork/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Upwork + name: Upwork + domains: + - "upwork.com" + patterns: + - "(?i)(upwork-api|omniauth-upwork|ruby-upwork-oauth2|omniauth-upwork-oauth).*" + tags: diff --git a/rules/sinks/third_parties/sdk/vercel/ruby.yaml b/rules/sinks/third_parties/sdk/vercel/ruby.yaml new file mode 100644 index 00000000..d740dd90 --- /dev/null +++ b/rules/sinks/third_parties/sdk/vercel/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Vercel + name: Vercel + domains: + - "vercel.com" + patterns: + - "(?i)(vercellus).*" + tags: diff --git a/rules/sinks/third_parties/sdk/vmware/ruby.yaml b/rules/sinks/third_parties/sdk/vmware/ruby.yaml new file mode 100644 index 00000000..0d307521 --- /dev/null +++ b/rules/sinks/third_parties/sdk/vmware/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Vmware + name: Vmware + domains: + - "vmware.com" + patterns: + - "(?i)(vmware_web_service).*" + tags: diff --git a/rules/sinks/third_parties/sdk/wavefront/ruby.yaml b/rules/sinks/third_parties/sdk/wavefront/ruby.yaml new file mode 100644 index 00000000..40da4de4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/wavefront/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wavefront + name: Wavefront + domains: + - "wavefront.com" + patterns: + - "(?i)(wavefront-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/wechat/ruby.yaml b/rules/sinks/third_parties/sdk/wechat/ruby.yaml new file mode 100644 index 00000000..1405e756 --- /dev/null +++ b/rules/sinks/third_parties/sdk/wechat/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wechat + name: Wechat + domains: + - "wechat.com" + patterns: + - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|hubs|omniauth-wx|wmp_sdk|app_status_notification).*" + tags: diff --git a/rules/sinks/third_parties/sdk/youtube/ruby.yaml b/rules/sinks/third_parties/sdk/youtube/ruby.yaml new file mode 100644 index 00000000..cb8abce1 --- /dev/null +++ b/rules/sinks/third_parties/sdk/youtube/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Youtube + name: Youtube + domains: + - "youtube.com" + patterns: + - "(?i)(youtube_search|youtube_it|youtube|youtube_id|youtube_addy|youtube-g|youtube_rails|youtube-dl.rb|youtube_dlhelper|youtube_url|youtube_query|youtube_embed|jekyll-youtube|youtube_pop|youtube-embed|simple_youtube|omniauth-youtube|youtube-downloader|ruboty-youtube|punndit_youtube|youtube_dl|youtube_images|youtube_video|youtube_feed|youtube_sync|lita-youtube|youtube-ripper|youtube_analytics|youtube_audio|youtube_transcript2020|youtube_identifier|youtube-searcher|youtube_api|easy_youtube|active_youtube|paperclip-youtube|youtube_data_api|html-pipeline-youtube|bulk_youtube|ecm_youtube|youtube_search_thumbnail|basic_youtube|spree_youtube|youtube_dl_ruby|msp-youtube-g|youtube_video_id|workarea-youtube_playlists|youtube_audio_downloader|gaqzi-youtube-downloader|podcast-to-youtube|agiley-youtube-g|lita-youtube-me|natedaiger-youtube-g|vibedeck-youtube_it|ruby-youtube-dl|tmm1-youtube-g|youtube_video_info|youtube-g-es|jekyll-html5-youtube|google-apis-youtube_v3|lita-onewheel-youtube|slainer68_youtube_it|youtube_to_rss|sensu-plugins-youtube|cinch-youtube-search|ecm_youtube_backend|audio_to_youtube|trak3r-youtube_sso|asciidoctor-youtube|mintdigital-youtube-g|nddrylliog_youtube_it|beef-youtube-g|ceritium-youtube-g2|FiXato-youtube-g|pius-youtube-g|youtubeDL|videojs-ng-youtube|fetch_youtube_transcript|ceritium-youtube-g-extra|youtube_video_search_at_web_page|google-apis-youtube_analytics_v2|video_info).*" + tags: diff --git a/rules/sinks/third_parties/sdk/zoom/ruby.yaml b/rules/sinks/third_parties/sdk/zoom/ruby.yaml new file mode 100644 index 00000000..5d4ab943 --- /dev/null +++ b/rules/sinks/third_parties/sdk/zoom/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Zoom + name: Zoom + domains: + - "zoom.us" + patterns: + - "(?i)(zoom_slack|zoom|zoom_rb|omniauth-zoom|zoom_launcher|zoom_markazuna|workarea-hover_zoom|jquery-zoom-rails|zoom_us|zoom_api).*" + tags: diff --git a/rules/sinks/third_parties/sdkamazon/ruby.yaml b/rules/sinks/third_parties/sdkamazon/ruby.yaml new file mode 100644 index 00000000..74627b03 --- /dev/null +++ b/rules/sinks/third_parties/sdkamazon/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amazon.Aws + name: Amazon Aws + domains: + - "aws.amazon.com" + patterns: + - "(?i)(aws-partitions|aws-sigv4|amazon-chime-sdk-rails|amazon_pay_sdk_ruby|aws-sdk-s3|aws-sdk-sqs|aws-sdk-ec2|aws-sdk-ssm|aws-sdk-sns|aws-sdk-rds|aws-sdk-ses|aws-sdk-ecr|aws-sdk-ecs|aws-sdk-redshift|aws-sdk-athena|aws-sdk-elasticache|aws-sdk-pinpoint|aws-sdk-rekognition|aws-sdk-emr|aws-sdk-lightsail|aws-sdk-workspaces|aws-sdk-cloudsearch|aws-sdk-gamelift|aws-sdk-appstream|aws-sdk-polly|aws-sdk-swf|aws-sdk-snowball|aws-sdk-dax|aws-sdk-inspector|aws-sdk-glacier|aws-sdk-mturk|aws-sdk-clouddirectory|aws-sdk-simpledb|aws-sdk-workdocs|aws-sdk-guardduty|aws-sdk-comprehend|aws-sdk-translate|aws-sdk-workmail|aws-sdk-connect|aws-sdk-eks|aws-sdk-neptune|aws-sdk-dlm|aws-sdk-macie|aws-sdk-chime|aws-sdk-quicksight|aws-sdk-fsx|aws-sdk-docdb|aws-sdk-textract|aws-sdk-personalize|aws-sdk-eventbridge|aws-sdk-cloudwatchlogs|aws-sdk-detective|aws-sdk-ebs|aws-sdk-apigateway|aws-sdk-elasticsearchservice|aws-sdk-cloudwatchevents|aws-sdk-cognitoidentity|aws-sdk-elastictranscoder|aws-sdk-machinelearning|aws-sdk-dynamodbstreams|aws-sdk-cognitosync|aws-sdk-cloudsearchdomain|aws-sdk-sagemakerruntime|aws-sdk-transcribeservice|aws-sdk-ivs|aws-sdk-appflow|aws-sdk-personalizeruntime|aws-sdk-personalizeevents|aws-sdk-forecastservice|aws-sdk-sesv2|aws-sdk-connectparticipant|aws-sdk-frauddetector|aws-sdk-codeguruprofiler|aws-sdk-elasticinference|aws-sdk-cognitoidentityprovider|aws-sdk-route53domains|aws-sdk-lex|aws-sdk-macie2|aws-sdk-chimesdkmessaging|aws-sdk-transcribestreamingservice|aws-sdk-chimesdkidentity|aws-sdk-s3outposts|aws-sdk-devopsguru|aws-sdk-ecrpublic|aws-sdk-lookoutforvision|aws-sdk-emrcontainers|aws-sdk-locationservice|aws-sdk-forecastqueryservice|aws-sdk-appintegrationsservice|aws-sdk-prometheusservice|aws-sdk-workmailmessageflow|aws-sdk-memorydb|aws-sdk-augmentedairuntime|aws-sdk-lexmodelbuildingservice|aws-sdk-chimesdkmeetings|aws-sdk-sagemakeredgemanager|aws-sdk-connectcontactlens|aws-sdk-kinesisvideosignalingchannels|aws-sdk-opensearchservice|pay_with_amazon|aws-sdk-voiceid|aws-sdk-managedgrafana|aws-sdk-sagemakerfeaturestoreruntime|aws-sdk-cloudwatchevidently|aws-sdk-recyclebin|aws-sdk-workspacesweb|aws-sdk-connectwisdomservice|nazrin|paperclip-aws|aws-sdk-dynamodb|aws-sdk-kinesis|aws-sdk-cloudwatch|aws-sdk-cloudfront|aws-sdk-cloudhsm|aws-sdk-firehose|aws-sdk-worklink|aws-sdk-sagemaker|aws-sdk-route53|aws-sdk-qldb|aws-sdk-appconfig|aws-sdk-efs|aws-sdk-kinesisanalytics|aws-sdk-managedblockchain|aws-sdk-route53resolver|aws-sdk-honeycode|aws-sdk-codegurureviewer|aws-sdk-kinesisvideo|aws-sdk-healthlake|aws-sdk-qldbsession|aws-sdk-pinpointemail|aws-sdk-kinesisanalyticsv2|aws-sdk-applicationinsights|aws-sdk-kinesisvideomedia|aws-sdk-timestreamwrite|aws-sdk-timestreamquery|aws-sdk-lookoutmetrics|aws-sdk-lookoutequipment|aws-sdk-configservice|aws-sdk-pinpointsmsvoice|aws-sdk-customerprofiles|aws-sdk-kinesisvideoarchivedmedia|aws-sdk-lexruntimev2|aws-sdk-lexmodelsv2|s3_streamer|breadbox|mturk|clouddrive|misfo-aws-sdk-cloudwatch|embulk-output-s3v2|ruby-aws|aws-sdk|aws-sdk-core|aws-sdk-kms|aws-sdk-resources|aws-sdk-cloudformation|aws-sdk-iam|aws-sdk-secretsmanager|aws-sdk-lambda|aws-sdk-elasticloadbalancing|aws-sdk-autoscaling|aws-sdk-elasticloadbalancingv2|aws-sdk-codecommit|aws-sdk-v1|aws-sdk-glue|aws-sdk-organizations|aws-sdk-acm|aws-sdk-cloudtrail|aws-sdk-codebuild|aws-sdk-codedeploy|aws-sdk-databasemigrationservice|aws-sdk-codepipeline|aws-sdk-cloudhsmv2|aws-sdk-applicationautoscaling|aws-sdk-elasticbeanstalk|aws-sdk-iot|aws-sdk-xray|aws-sdk-opsworks|aws-sdk-states|aws-sdk-batch|aws-sdk-storagegateway|aws-sdk-servicecatalog|aws-sdk-budgets|aws-sdk-sms|aws-sdk-costandusagereportservice|aws-sdk-devicefarm|aws-sdk-directoryservice|aws-sdk-opsworkscm|aws-sdk-directconnect|aws-sdk-health|aws-sdk-greengrass|aws-sdk-applicationdiscoveryservice|aws-sdk-waf|aws-sdk-resourcegroupstaggingapi|aws-sdk-migrationhub|aws-sdk-marketplacemetering|aws-sdk-shield|aws-sdk-wafregional|aws-sdk-marketplacecommerceanalytics|aws-sdk-support|aws-sdk-iotdataplane|aws-sdk-costexplorer|aws-sdk-medialive|aws-sdk-mediaconvert|aws-sdk-datapipeline|aws-sdk-marketplaceentitlementservice|aws-sdk-lambdapreview|aws-sdk-importexport|aws-sdk-codestar|aws-sdk-mobile|aws-sdk-alexaforbusiness|aws-sdk-appsync|aws-sdk-mq|aws-sdk-mediapackage|aws-sdk-mediastore|aws-sdk-serverlessapplicationrepository|aws-sdk-resourcegroups|aws-sdk-servicediscovery|aws-sdk-cloud9|aws-sdk-pricing|aws-sdk-mediastoredata|aws-sdk-iotjobsdataplane|aws-sdk-autoscalingplans|aws-sdk-acmpca|aws-sdk-fms|aws-sdk-iotanalytics|aws-sdk-mediatailor|aws-sdk-pi|aws-sdk-iot1clickdevicesservice|aws-sdk-iot1clickprojects|aws-sdk-signer|aws-sdk-cloudcontrolapi|awssh|aws-sigv4|aws-partitions|aws-eventstream|aws-sigv2|aws|aws-s3|aws-sdk-securityhub|aws-ses|aws-sdk-kafka|aws-sdk-ram|aws-sdk-s3control|aws-sdk-transfer|aws-sdk-rdsdataservice|aws-sdk-datasync|aws-sdk-amplify|aws-sdk-apigatewayv2|aws-sdk-licensemanager|aws-sdk-robomaker|aws-sdk-globalaccelerator|aws-sdk-comprehendmedical|aws-sdk-appmesh|aws-sdk-mediaconnect|aws-sdk-apigatewaymanagementapi|aws-sdk-backup|aws-sdk-mediapackagevod|aws-sdk-iotevents|aws-sdk-groundstation|aws-sdk-ioteventsdata|aws-record|aws-sdk-iotthingsgraph|aws-sdk-servicequotas|aws-sdk-ec2instanceconnect|aws-sdk-lakeformation|aws-sdk-savingsplans|aws-sdk-codestarnotifications|aws-sdk-imagebuilder|aws-sdk-kendra|aws-sdk-wafv2|aws-sdk-accessanalyzer|aws-sdk-computeoptimizer|aws-sdk-dataexchange|aws-sdk-networkmanager|aws-sdk-outposts|aws-sdk-migrationhubconfig|aws-sdk-iotsecuretunneling|aws-sdk-marketplacecatalog|aws-sdk-schemas|aws-sdk-codestarconnections|aws-sdk-ssooidc|aws-sdk-iotsitewise|aws-sdk-synthetics|aws-sdk-codeartifact|aws-sdk-braket|aws-sdk-identitystore|aws-sdk-redshiftdataapiservice|aws-sdk-ssoadmin|aws-sdk-rails|aws_cf_signer|aws-sdk-sso|aws-sdk-gluedatabrew|aws-sdk-appregistry|aws-sdk-networkfirewall|aws-sdk-iotwireless|aws-sdk-auditmanager|aws-sdk-mwaa|aws-sdk-greengrassv2|aws-sdk-amplifybackend|aws-sdk-wellarchitected|aws-sdk-iotdeviceadvisor|aws-sdk-iotfleethub|aws-kclrb|aws-sdk-fis|aws-sdk-mgn|aws-sdk-nimblestudio|aws-sdk-finspacedata|aws-sdk-finspace|aws-sdk-ssmcontacts|aws-sdk-ssmincidents|aws-sdk-applicationcostprofiler|aws-sdk-apprunner|aws-flow|aws-healthcheck|aws-sdk-proton|aws_ro|aws-sdk-route53recoverycontrolconfig|aws-sdk-route53recoveryreadiness|aws-sdk-route53recoverycluster|aws_data|aws-sdk-snowdevicemanagement|aws-xray-sdk|aws-sdk-kafkaconnect|aws-sdk-account|aws-sessionstore-dynamodb|aws-sdk-panorama|aws-sdk-resiliencehub|aws-sdk-migrationhubstrategyrecommendations|aws-sdk-appconfigdata|aws-sdk-drs|aws-sdk-sts|aws-sdk-migrationhubrefactorspaces|aws-sdk-cloudwatchrum|aws-sdk-inspector2|aws-es-transport|aws-sdk-backupgateway|aws-sdk-iottwinmaker|aws-sdk-amplifyuibuilder|aws-ssm-env|aws_agcod|aws-logs|aws-flow-core|aws-sdb|aws-mfa|aws_recon|right_aws|aws-pricing|aws-mfa-secure|aws_info|aws-ec2|carrierwave-aws|aws-cleaner|aws-eni|aws_pocketknife|aws_memfix|aws-rds|aws-swf|aws_helper|aws-rikanjo|aws_client|aws_assume_role|aws_runas|aws-must|aws_lambda_ric|aws_pipes|aws-ip|aws_ssh|aws_deploy|aws_csshx|aws-ami|aws_cloud_search|train-aws|aws-spec-generator|aws-ext|aws-controller|aws-lambda-runner|aws-instmd|aws-pws|aws-crt|aws-liam|aws_sdk|aws_auditor|aws-session-credentials|aws-auth|aws-url|aws-inventory|awsecrets|aws-ie|aws_sns_subscription|aws_tools|aws-ssh|aws-edges|aws_su|aws-data|aws-s3-instructure|aws-cfn-yats|aws-tools|aws_cron|aws-google|miasma-aws|aws-creds|em_aws|aws-asg-fleet|aws-sdk-code-generator|aws_sms|aws-lex-conversation|aws_status|aws-s3crets|aws_cred_vault|aws_dump|aws-dynamodb-query|aws-reporting|aws-rotate|aws-must-templates|aws_public_ips|aws-keys|aws_sns_kit|aws-s3-deploy|aws-elasticsearch|aws_sdb_bare|aws-watcher|aws_sqs_moniter|aws_keychain|aws-mason|aws-vpccreate|aws_as_code|aws-base|eventq_aws|aws_iot_device|aws_log_cleaner|aws-ec2-instance_types|aws_role_creds|aws-ses-rails31|aws-ssm-console|aws_cloud_map|aws-ses-v4|aws_account_number|aws-s3-cse|aws_secrets_loader|aws_s3_export|aws-insight|aws_keys|aws-tasks|aws_upload|aws-clean|aws_sam_yarn_builder|aws-rds-instance_types|aws_ec2_dns_name|aws-role|simple_aws|aws-architect|faraday_middleware-aws-sigv4|aws-signature-v4|aws-cft-tools|aws_provisioner|aws-sesocio-secrets|aws_instance_list|aws_session_token|aws_interactive_cli|awscosts|aws-whitepaper-downloader|aws-sdk-enhanced|aws-cli|aws-s3-akhtaboot|aws_student_accounts|aws-metadata-export|aws-rails-provisioner|aws-sts|aws-embedded-metrics-customink|aws_site_monitor|aws_cli_wrapper|aws-sdk-euca|aws-sdk-elb-tagging|aws-rsync|appoxy-aws|aws_xregion_sync|aws-rotate-keys|aws-cognito-srp|awsraw|hiera-aws|serverkit-aws|aws_agcod_2|aws-s3-multi-region|aws_beanstalk_tunkki|aws-ses-mailer|chef-provisioning-aws|aws-record-generator|awskeyring|hackerdude-aws|fluent-plugin-aws-elasticsearch-service|aboisvert_aws|aws_elb_health_check|aws-ec2-dns-name|aws_ses_newsletters|aws_cloudformation_helper|faraday_middleware-aws-signers-v4|awsm|awsec|aws-study-guide|middleman-aws|easy_aws|aws_access_key_scan|aws-iam-authenticator-rb|aws_ssh_key|cmeiklejohn-aws|aws-codedeploy-session-helper|bosh_cli_plugin_aws|aws_blue_green_deploy|aws-transcoder-rails|aws_stack_builder|jellyfish-aws|thor-aws|aws3upload|barnyard_aws|awslanes|awsquery|crossing).*" + tags: diff --git a/rules/sinks/third_parties/sdkamplitude/ruby.yaml b/rules/sinks/third_parties/sdkamplitude/ruby.yaml new file mode 100644 index 00000000..16967124 --- /dev/null +++ b/rules/sinks/third_parties/sdkamplitude/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amplitude + name: Amplitude + domains: + - "amplitude.com" + patterns: + - "(?i)(amplitude-api|amplitude-rb|fluent-plugin-amplitude).*" + tags: diff --git a/rules/sinks/third_parties/sdkappnexus/ruby.yaml b/rules/sinks/third_parties/sdkappnexus/ruby.yaml new file mode 100644 index 00000000..ce9bf66d --- /dev/null +++ b/rules/sinks/third_parties/sdkappnexus/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Appnexus + name: Appnexus + domains: + - "appnexus.com" + patterns: + - "(?i)(appnexusapi).*" + tags: diff --git a/rules/sinks/third_parties/sdkatlassian/ruby.yaml b/rules/sinks/third_parties/sdkatlassian/ruby.yaml new file mode 100644 index 00000000..5747f1a9 --- /dev/null +++ b/rules/sinks/third_parties/sdkatlassian/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Atlassian + name: Atlassian + domains: + - "atlassian.com" + patterns: + - "(?i)(stash_api|atlassian-jwt|omniauth-atlassian-oauth2|atlassian_upm|atlassian_ui|atlassian_plugin_installer|atlassian_app_versions|atlassian-stash-avisi|atlassian-jwt-authentication|omniauth_crowd|jira-ruby|stash-client|authlogic_crowd|bamboo-client|crowd|confluence4r|bamboo-cli|crowd_rest|crowd-auth|jira-ruby-dmg|simplecov-clover|stash_pull_request_commenter|atl_config|usvn-crowd-sync|bpescatore-stash|face_control|fisheye-crucible|gojira|bamboo_api|faction|bamboo-console|simplecov-bamboo|nippocf|simple_crowd|crowd_rails|omnibucket|rubocop-junit-formatter|stash_notifier|sclemmer-jira-ruby|jira-ruby-added-transitions|zk-jira-ruby|jira_cli|ticketmaster-jira|knife-stash|aui_flash|kraut|jira_scan|taskmapper-jira|lita-stash-commit|danger-jira|jira|omniauth-jira|jira-cli|lita-jira|jira_report|jira_client|jira_tracker|jira-wsdl|jira-api|cb_jira_validator|jira_issues|jira_command|jira_api|jira-rest|jira-issues|jira_export|jira-script|jira_cmd|jira-remotelinker|capistrano-jira|jira_release|jira_cache|jira-worklog|jira_exception_collector|jira_cards|better_jira|danger-jira_sync|embulk-input-jira|git-jira|mongo-jira|brpm_module_jira|jira_dependency_visualizer|ruboty-jira|cafe-jira|fastlane-plugin-jira_versions|speedflow-plugin-jira|lita-jira-issues|jira4r|fastlane-plugin-jira_transition|cucumber-jira|errbit_jira_plugin|devise-jira-authenticable|active_jira|fastlane-plugin-jira_release_notes|ruby-jira-cli|jiralicious|fastlane-plugin-jira_issue_link|omniauth-jira-oauth2|fastlane-plugin-jira_issue_details|lita-onewheel-jira|fastlane-plugin-jira_transitions|jiragit|fastlane-plugin-jira_set_fix_version|jiraa|fastlane-plugin-jira_link|jiraby|jira4r-straightjacket|jirarest2|fastlane-plugin-set_jira_fix_version|fastlane-plugin-jira_ticket|jirawatch|xfel-timew-jira|jira4r-19|jirack|fastlane-plugin-jira_build_number|jirasync).*" + tags: diff --git a/rules/sinks/third_parties/sdkbing/ruby.yaml b/rules/sinks/third_parties/sdkbing/ruby.yaml new file mode 100644 index 00000000..9f5b59fc --- /dev/null +++ b/rules/sinks/third_parties/sdkbing/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Bing + name: Bing + domains: + - "bing.com" + patterns: + - "(?i)(RuBing|bing_translator|bing|bing-search|bing_translate_yaml|bing-ads|bing-helper|bing_images|soapy_bing|bing-location|bing-ads-reporting|bing-content-api|bing-ads-api|simple_bing|bing_ads_ruby_sdk|bing_ads_api|bing_translator_fix|bing_search_client|bing_ads_api_v9|binger|binged|voice_recognition_bing|bingImageSearch|bingo|cognitivebing|badabing|periplus|microsoft_ngram|rbing|gnib-ads-api|autotolk|gnib|middleman-sitemap-ping|mikedemers-rbing|keyword_ranking|searchbing|search_cli|rankstar|newsbing|plagiarism2|linkto|ffi-hiredis_vip-core|multi-analytics-turbolinks|search_terms|sitemap_notifier|bingodisk|bingoint|bingo_game).*" + tags: diff --git a/rules/sinks/third_parties/sdkchatwork/ruby.yaml b/rules/sinks/third_parties/sdkchatwork/ruby.yaml new file mode 100644 index 00000000..24471d06 --- /dev/null +++ b/rules/sinks/third_parties/sdkchatwork/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Chatwork + name: Chatwork + domains: + - "chatwork.com" + patterns: + - "(?i)(chatwork|chatwork_to|omniauth-chatwork|goodbye_chatwork|capistrano-chatwork|chatwork_bridge|activeresource-chatwork|ruboty-chatwork|lita-chatwork|fluent-plugin-chatwork|capistrano-around_chatwork|chatwork_webhook_verify|danger-chatwork|ruboty-chatwork_webhook|sensu-plugins-chatwork|rundock-plugin-hook-chatwork|cwbot|cha|bo_gitcw|shutwork|chatworkify|chatwork_to_slack).*" + tags: diff --git a/rules/sinks/third_parties/sdkcoinbase/ruby.yaml b/rules/sinks/third_parties/sdkcoinbase/ruby.yaml new file mode 100644 index 00000000..c304bf91 --- /dev/null +++ b/rules/sinks/third_parties/sdkcoinbase/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Coinbase + name: Coinbase + domains: + - "coinbase.com" + patterns: + - "(?i)(coinbase|coinbase-exchange|omniauth-coinbase|coinbase_commerce|coinbase_exchange|coinbase-pro|better-coinbase|spree_coinbase|mxvp-coinbase|coinbase-ruby|spree_coinbase_bitcoin_payment|coinbasepro-api|cbx|orderbook|rtcbx|rcbp|gdax).*" + tags: diff --git a/rules/sinks/third_parties/sdkdatabricks/ruby.yaml b/rules/sinks/third_parties/sdkdatabricks/ruby.yaml new file mode 100644 index 00000000..a3f2c2d9 --- /dev/null +++ b/rules/sinks/third_parties/sdkdatabricks/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Databricks + name: Databricks + domains: + - "databricks.com" + patterns: + - "(?i)(databricks).*" + tags: diff --git a/rules/sinks/third_parties/sdkdropbox/ruby.yaml b/rules/sinks/third_parties/sdkdropbox/ruby.yaml new file mode 100644 index 00000000..82b1d60d --- /dev/null +++ b/rules/sinks/third_parties/sdkdropbox/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Dropbox + name: Dropbox + domains: + - "dropbox.com" + patterns: + - "(?i)(dropbox|dropbox_api|dropbox-sdk|dropbox-api|paperclip-dropbox|dropbox-sdk-v2|dropbox-deployment|omniauth-dropbox|fastlane-plugin-dropbox|carrierwave-dropbox|dropbox-dotfiles|git-dropbox|omniauth-dropbox-oauth2|dropbox-archive|dropbox-explorer|dropbox-aliix|dragonfly-dropbox_data_store|dropbox-sync|dropbox-folder-sync|activestorage-dropbox|sf-dropbox-ext|dropbox_api_v2|dropbox-invite|dropbox-api-petems|gmail-to-dropbox|dropbox_server_backup|dropbox-api-kilgore5|dropbox-api-alt|dropbox-sdk-sv|dropbox_content_hasher|omniauth-dropbox-oauth2-sv|fastlane-plugin-dropbox_upload|fastlane-plugin-publish_dropbox|omniauth-dropbox-business-api2|dropbox-sdk-forked_v2|get_dropbox_access_token).*" + tags: diff --git a/rules/sinks/third_parties/sdkdwolla/ruby.yaml b/rules/sinks/third_parties/sdkdwolla/ruby.yaml new file mode 100644 index 00000000..b101eda6 --- /dev/null +++ b/rules/sinks/third_parties/sdkdwolla/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Dwolla + name: Dwolla + domains: + - "dwolla.com" + patterns: + - "(?i)(dwolla_v2|dwolla|dwolla-ruby|dwolla_swagger|spree_dwolla|omniauth-dwolla|fake_dwolla|money_mover).*" + tags: diff --git a/rules/sinks/third_parties/sdkfacebook/ruby.yaml b/rules/sinks/third_parties/sdkfacebook/ruby.yaml new file mode 100644 index 00000000..8defd253 --- /dev/null +++ b/rules/sinks/third_parties/sdkfacebook/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Facebook + name: Facebook + domains: + - "facebook.com" + patterns: + - "(?i)(facebookbusiness|facebook_ads|facebookads|adparlor-facebook|jquery-facebook|facebook_sig_validator|facebook_js|koala|fb-channel-file|devise_facebook_open_graph|open_graph|joelind-koala|cotweet_koala|palidanx-koala|tyler_koala|ongair_ruby|whatsapp|whatsapp_bot|whatzapper|gupshup_whatsapp|xip-twilio|WhatsappBot|whathor|apiwha|omnichannel).*" + tags: diff --git a/rules/sinks/third_parties/sdkflurry/ruby.yaml b/rules/sinks/third_parties/sdkflurry/ruby.yaml new file mode 100644 index 00000000..04acb74b --- /dev/null +++ b/rules/sinks/third_parties/sdkflurry/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Flurry + name: Flurry + domains: + - "flurry.com" + patterns: + - "(?i)(flurry).*" + tags: diff --git a/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml b/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml new file mode 100644 index 00000000..707f7f77 --- /dev/null +++ b/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Freshdesk + name: Freshdesk + domains: + - "freshdesk.com" + patterns: + - "(?i)(freshdesk|freshdesk-rest|freshdesk-ruby|freshdesk_api|freshdesk_apiclient|freshdesk-rails|galetahub-freshdesk|freshdesk-api-client|freshdesk-api-v2-rails|rottendesk|rubydesk|fci|freshly).*" + tags: diff --git a/rules/sinks/third_parties/sdkgoogle/ruby.yaml b/rules/sinks/third_parties/sdkgoogle/ruby.yaml new file mode 100644 index 00000000..cdadb154 --- /dev/null +++ b/rules/sinks/third_parties/sdkgoogle/ruby.yaml @@ -0,0 +1,21 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Google + name: Google + domains: + - "google.com" + patterns: + - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher).*" + tags: + + - id: ThirdParties.SDK.Google.Cloud + name: Google Cloud + domains: + - "cloud.google.com" + patterns: + - "(?i)(cloudtasker|google-cloud-tasks).*" + tags: diff --git a/rules/sinks/third_parties/sdkibm/ruby.yaml b/rules/sinks/third_parties/sdkibm/ruby.yaml new file mode 100644 index 00000000..d6b612c8 --- /dev/null +++ b/rules/sinks/third_parties/sdkibm/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Ibm + name: Ibm + domains: + - "ibm.com" + patterns: + - "(?i)(ibm-cloud-sdk|ibm_cloud_sdk_core|ibm_cloud_power|ibm_cloud_iam|ibm_cloud_databases|ibm_cloud_resource_controller|ibm_cloud_global_tagging|ibm_cloud_activity_tracker|manageiq-providers-ibm_cloud|ibm_vpc|knife-softlayer|gp-ruby-client|aspera-cli|watson-api-client).*" + tags: diff --git a/rules/sinks/third_parties/sdkintercom/ruby.yaml b/rules/sinks/third_parties/sdkintercom/ruby.yaml new file mode 100644 index 00000000..108a17a6 --- /dev/null +++ b/rules/sinks/third_parties/sdkintercom/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Intercom + name: Intercom + domains: + - "intercom.io" + patterns: + - "(?i)(intercom|intercom-rails|omniauth-intercom|intercom-app|intercom_summary|lucid_intercom|intercom_export|cogniteev-intercom|ahoy-intercom|intercom_event_wrapper|hertz-courier-intercom|PSA|user_trackers|helply).*" + tags: diff --git a/rules/sinks/third_parties/sdkline/ruby.yaml b/rules/sinks/third_parties/sdkline/ruby.yaml new file mode 100644 index 00000000..cdf6f982 --- /dev/null +++ b/rules/sinks/third_parties/sdkline/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Line + name: Line + domains: + - "line.me" + patterns: + - "(?i)(line-bot-api|line-bot|lotify|clova-speech|lbd_sdk|pihole|line_liff).*" + tags: diff --git a/rules/sinks/third_parties/sdklinkedin/ruby.yaml b/rules/sinks/third_parties/sdklinkedin/ruby.yaml new file mode 100644 index 00000000..943c4bbd --- /dev/null +++ b/rules/sinks/third_parties/sdklinkedin/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Linkedin + name: Linkedin + domains: + - "linkedin.com" + patterns: + - "(?i)(linkedin|linkedin-oauth2|omniauth-linkedin|linkedin-v2|omniauth-linkedin-oauth2|linkedin-drspin|linkedin-idkmybffjill|linkedin_orbit|linkedin-bdigital|linkedin_v2|linkedin-saimonmoore|linkedin_industries|linkedin-rb|linkedin-client|holetse-linkedin|linkedin-ruby|sinatra-linkedin|linkedin_sign_in|brienw-linkedin|cl_linkedin|ruby-linkedin|linkedin-build|linkedin-api2|omniauth-linkedin-jsapi|linkedin-saddle-client|linkedin2|linkedincrawler|omniauth-linkedin-oauth2-cwd|easy_auth-linked_in|linsc|crankin|linkout|leakedin|ezlinkedin|linked_in_archive_to_resume|completeness|linkedin2cv|scouter|fastlane-plugin-xbluepill|acts_as_cleo|link_to_profile|resumr|linked_in|sharrando).*" + tags: diff --git a/rules/sinks/third_parties/sdkmailchimp/ruby.yaml b/rules/sinks/third_parties/sdkmailchimp/ruby.yaml new file mode 100644 index 00000000..33171fea --- /dev/null +++ b/rules/sinks/third_parties/sdkmailchimp/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mailchimp + name: Mailchimp + domains: + - "mailchimp.com" + patterns: + - "(?i)(monkey_party|mailchimp|omniauth-mailchimp|mailchimp_api|mailchimp_ses|mailchimp_api_v3|mailchimp_template|ruby-mailchimp|webhookr-mailchimp|mailchimp_subscriber|mailchimp_exporter|devise_mailchimp|easy_mailchimp|mailchimp_transactional|refinerycms-mailchimp|embulk-output-mailchimp|catarse_mailchimp|camaleon_mailchimp|chimpster|mojura-mailchimp|solidus_mailchimp_sync|trado_mailchimp_module|marnen-catarse_mailchimp|mailchimp3|gibbon|hominid|MailchimpMarketing|mailchimpv3|MailchimpTransactional|chimpster-rails|mc_markdown|hominid-wout|monkeywrench|monkey_wrench|chimpmunk|workarea-mail_chimp|bgetting-hominid|panthoot|mc|mcmailer|chimp_contact|banana_peels|chimp_mailer|chimp_light|babney-hominid|chimp_sync|Empact-hominid|mandrill_queue|malechimp|purple-monkey|netguru-hominid|mcparty|mailfox|catarse_monkeymail|chimpy|banana_bits|devise_campaignable|slack-ruby-bot-server-mailchimp).*" + tags: diff --git a/rules/sinks/third_parties/sdkmailgun/ruby.yaml b/rules/sinks/third_parties/sdkmailgun/ruby.yaml new file mode 100644 index 00000000..a8bc539a --- /dev/null +++ b/rules/sinks/third_parties/sdkmailgun/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mailgun + name: Mailgun + domains: + - "mailgun.com" + patterns: + - "(?i)(mailgun-ruby|mailgun|mailgun_rails|griddler-mailgun|mailgun-rails|mailgun-tracking|mailgun_webhooks|mailgun_api|mailgun_catcher|capistrano-mailgun|mailgun-mailbox|rails-mailgun|mailgun-sendmail|mailgun_email_validator|mailgun-api-rails|lita-mailgun|mailgun-ruby-plus|rails-mailgun-plus|omw_mailgun|mailgunner|sensu-plugins-mailgun|factor-connector-mailgun|wj-mailgun-ruby|huginn_mailgun_agent|mailgat|pew_pew|mailqun|snipe).*" + tags: diff --git a/rules/sinks/third_parties/sdkmedium/ruby.yaml b/rules/sinks/third_parties/sdkmedium/ruby.yaml new file mode 100644 index 00000000..089c6a1d --- /dev/null +++ b/rules/sinks/third_parties/sdkmedium/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Medium + name: Medium + domains: + - "medium.com" + patterns: + - "(?i)(omniauth-medium|medium_api|medium-scrapper|medium|medium-sdk-ruby|medium_sdk|mediumite).*" + tags: diff --git a/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml b/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml new file mode 100644 index 00000000..8d74ee77 --- /dev/null +++ b/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Microsoft + name: Microsoft + domains: + - "microsoft.com" + patterns: + - "(?i)(azure|azure-core|azure-storage|azure-storage-common|azure-storage-blob|azure_mgmt_resources|azure_mgmt_storage|azure-armrest|azure_mgmt_compute|azure_mgmt_network|azure_graph_rbac|azure_mgmt_sql|azure_mgmt_dns|azure-signature|azure_sdk|azure_mgmt_security|azure_mgmt_key_vault|ms_rest_azure|omniauth-azure-oauth2|azure_mgmt_traffic_manager|miasma-azure|azure-storage-file|azure_mgmt_monitor|azure_info|azure-contrib|paperclip-azure|azure-storage-queue|azure_mgmt_authorization|azure_mgmt_subscriptions|azure_key_vault|azure-storage-table|azure_search|azure_auth|azure_mgmt_msi|azure_mgmt_cdn|azure_mgmt_graph|azure-push|azure_mgmt_web|azure_mgmt_locks|azure_mgmt_redis|azure_mgmt_features|azure_mgmt_policy|azure_mgmt_search|azure_mgmt_commerce|azure_mgmt_scheduler|azure_mgmt_logic|azure_mgmt_batch|gitlab-fog-azure-rm|azure_client|knife-azure|omniauth-azure-activedirectory-v2|azure-acs|azure_mgmt_kusto|azure-loganalytics-datacollector-api|vagrant-azure|azure_mgmt_consumption|azure_mgmt_netapp|azure_mgmt_billing|azure_mgmt_relay|azure_mgmt_links|azure_mgmt_automation|azure_cognitiveservices_computervision|azure_mgmt_hdinsight|azure_event_grid|azure_mgmt_signalr|azure-sas|azure_cognitiveservices_face|azure_cognitiveservices_imagesearch|azure_cognitiveservices_textanalytics|azure_cognitiveservices_contentmoderator|azure_mgmt_media_services|carrierwave-azure|azure_cognitiveservices_entitysearch|azure_cognitiveservices_customsearch|azure_cognitiveservices_videosearch|azure_cognitiveservices_spellcheck|azure_cognitiveservices_newssearch|azure_media_service|azure_mgmt_notification_hubs|azure_mgmt_cognitive_services|azure-auth|azure_mgmt_container_service|azure_cognitiveservices_luisauthoring|azure-multistorage|azure_mgmt_privatedns|azure_mgmt_datalake_store|azure_mgmt_event_grid|azure_mgmt_iot_hub|azure-plus|azure_mgmt_recovery_services|azure_mgmt_service_bus|azure_mgmt_mariadb|azure_mgmt_machine_learning|azure_mgmt_sqlvirtualmachine|azure_mgmt_powerbi_embedded|azure_mgmt_datalake_analytics|azure_mgmt_event_hub|azure_mgmt_storagesync|azure_mgmt_container_instance|azure_service_fabric|azure_cognitiveservices_luisruntime|azure_cognitiveservices_qnamaker|azure_mgmt_container_registry|azure_mgmt_operational_insights|azure_mgmt_analysis_services|azure_mgmt_hanaonazure|azure_sas|azure_stt|azure_mgmt_advisor|azure_mgmt_mixedreality|azure_cognitiveservices_customvisionprediction|azure_cognitiveservices_visualsearch|azure_mgmt_api_management|azure_mgmt_edgegateway|azure_mgmt_stream_analytics|cloudstrap-azure|azure_mgmt_server_management|azure_mgmt_resourcegraph|azure_mgmt_azurestack|azure_cognitiveservices_customimagesearch|azure_cognitiveservices_autosuggest|azure_mgmt_marketplace_ordering|azure_jwt_auth|azure_cognitiveservices_localsearch|azure_mgmt_mobile_engagement|azure_mgmt_labservices|azure_mgmt_service_fabric|azure_mgmt_customer_insights|azure_mgmt_managed_applications|azure_mgmt_iot_central|azure_mgmt_policy_insights|azure_mgmt_resources_management|azure_mgmt_insights|foreman_azure|azure-fix|azure_cognitiveservices_anomalydetector|carrierwave-azure_rm|azure-tts|azure-key-vault|azure_mgmt_dev_spaces|azure_mgmt_recovery_services_backup|azure_mgmt_data_migration|jellyfish-azure|azure_mgmt_stor_simple8000_series|foreman_azure_rm|azure_direct_upload|fluent-plugin-azure-loganalytics|c-azure|kuby-azure|log4r-azure|azure_mgmt_recovery_services_site_recovery|azure_mgmt_machine_learning_services|jdbc-mssql-azure|refile-azure|kontena-plugin-azure|delayed_job_azure|ms_rest|logstash-output-azure|omniauth-azure-adv2|logstash-output-azure_loganalytics|xcpretty-azure-formatter|azure-auth-token_provider|azure_mgmt_azurestack_hci|fluent-plugin-azure-storage-append-blob|kubes_azure|carrierwave-azure-blob|stuartpreston-azure-sdk-for-ruby|omniauth-azure-ad|carrierwave-ms-azure|fluent-plugin-azure-queue|embulk-input-azure_blob_storage|microsoft-logstash-output-azure-loganalytics|embulk-output-azure_blob_storage|cocoapods-azure-universal-packages|logstash-input-azure_blob_storage|manageiq-providers-azure|sensu-plugins-azure|omniauth-azure_active_directory_b2c|dragonfly-azure_data_store|logstash-output-azure_event_hubs|paperclip-azure-storage|be_azure_cognitiveservices_face|terraspace_plugin_azure|logstash-input-azureblob|fluent-plugin-azure-table|hammer_cli_foreman_azure_rm|blobfish-azure-keyvault-ruby|xcpretty-azure-pipelines-formatter|manageiq-providers-azure_stack|embulk-filter-azure_text_analytics|omniauth-azure-oauth2-v2|fluent-plugin-azurestorage-gen2|azurex|juliusl-azure-sdk-for-ruby|embulk-filter-azure_computer_vision_api|logstash-output-kusto|embulk-filter-azure_translator_api|fluent-plugin-azure-storage-table|fluent-plugin-azure-storage-tables|fluent-plugin-azure-storage-append-blob-lts|async-fluent-azure-eventhubs-plugin|logstash-input-azurewadtable|fluent-plugin-azuremonitorlog|waz-storage|omniauth-bn-office365|fluent-plugin-application-insights|sensu-plugins-azurerm|fluent-plugin-azurestorage|fluent-plugin-documentdb|fluent-plugin-azureeventhubs-batched|fluent-plugin-azureeventhubs|fluent-plugin-azuresearch|waz-sync|sk-fluent-plugin-azureeventhubs|fluent-plugin-azurefunctions|custom_fluent-plugin-azure-storage-append-blob|fluent-plugin-azuremonitormetrics|logstash-input-azuretopicthreadable|fluent-plugin-azure-storage-append-blob-lts-azurestack|chef-provisioning-azurerm|jdbc-mssql|embulk-output-documentdb|embulk-output-azuresearch|generik-logstash-input-azureblob|dm-waztables-adapter|logstash-input-azureblob-json-head-tail|logstash-input-azureblob-saars|logstash-input-azureblob-xiaomi7732|omniauth-activedirectory).*" + tags: diff --git a/rules/sinks/third_parties/sdknetflix/ruby.yaml b/rules/sinks/third_parties/sdknetflix/ruby.yaml new file mode 100644 index 00000000..0a23f029 --- /dev/null +++ b/rules/sinks/third_parties/sdknetflix/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Netflix + name: Netflix + domains: + - "netflix.com" + patterns: + - "(?i)(netflix|netflix_roulette|omniauth-netflix|rares-netflix|whats-on-netflix|netflix4r|kubrick|jekflix|ruby_robot).*" + tags: diff --git a/rules/sinks/third_parties/sdknotion/ruby.yaml b/rules/sinks/third_parties/sdknotion/ruby.yaml new file mode 100644 index 00000000..ecc0338b --- /dev/null +++ b/rules/sinks/third_parties/sdknotion/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Notion + name: Notion + domains: + - "notion.com" + patterns: + - "(?i)(notion|notion_orbit|notion_rb|notion-ruby-client|omniauth-notion|notion-sdk-ruby|notion_ruby|notion_client|notion_api|jekyll-notion).*" + tags: diff --git a/rules/sinks/third_parties/sdkonesignal/ruby.yaml b/rules/sinks/third_parties/sdkonesignal/ruby.yaml new file mode 100644 index 00000000..e064a2c7 --- /dev/null +++ b/rules/sinks/third_parties/sdkonesignal/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Onesignal + name: Onesignal + domains: + - "onesignal.com" + patterns: + - "(?i)(onesignal|onesignal-ruby|devise-onesignal|onesignal-ruby-rails6|notification-pusher-onesignal|one_signal|onsignal).*" + tags: diff --git a/rules/sinks/third_parties/sdkpaypal/ruby.yaml b/rules/sinks/third_parties/sdkpaypal/ruby.yaml new file mode 100644 index 00000000..c3160f33 --- /dev/null +++ b/rules/sinks/third_parties/sdkpaypal/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paypal + name: Paypal + domains: + - "paypal.com" + patterns: + - "(?i)(swisspay|active_paypal_adaptive_payment|paypal-payment|spree_paypal_adaptive_payment|georgedrummond-active_paypal_adaptive_payment|paypal_adaptive|yukon|shoppe-paypal|paypal-express|pp-adaptive|lolita-paypal|adaptive_pay|ianfleeton-paypal-express|paypal-adaptive-gateway|sinatra-paypal|elucid-adaptive_pay|adapt|spree_paypal_website_standard|ruby-paypal|creative-paypal-express|spree_paypal_rest|spree_paypal_express|trado_paypal_module|creative-pp-adaptive|spree_paypal_express_mutalis|killbill-paypal-express|nimbleshop_paypalwp|astrails-paypal_adaptive|tonyla-paypal_adaptive|workarea-paypal|active_paypal_adaptive_accounts|koduc_express_paypal|adaptive_payments|spree_billing_sisow|lottay-paypal_adaptive|heartcheck-paypal|paypal-masspay|JekyllEWP|paypal-sdk-rest|paypal-sdk-core|paypal-sdk-merchant|paypal-checkout-sdk|paypal-sdk-adaptivepayments|paypal-sdk-permissions|paypal-sdk-adaptiveaccounts|paypal-sdk-invoice|paypal-sdk-subscriptions|paypal-payouts-sdk|paypal-sdk-buttonmanager|paypal-sdk-http-adapters|paypal-sdk-merchant-jk|paypal-sdk-rest-pmrb|paypal-sdk-buttonmanager-rails|paypal_merchant|cabernet|paypkg).*" + tags: diff --git a/rules/sinks/third_parties/sdkpayture/ruby.yaml b/rules/sinks/third_parties/sdkpayture/ruby.yaml new file mode 100644 index 00000000..7dea1d4b --- /dev/null +++ b/rules/sinks/third_parties/sdkpayture/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Payture + name: Payture + domains: + - "payture.com" + patterns: + - "(?i)(payture-cheques).*" + tags: diff --git a/rules/sinks/third_parties/sdkpayu/ruby.yaml b/rules/sinks/third_parties/sdkpayu/ruby.yaml new file mode 100644 index 00000000..2f0d868a --- /dev/null +++ b/rules/sinks/third_parties/sdkpayu/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Payu + name: Payu + domains: + - "payu.in" + patterns: + - "(?i)(solidus_payu_latam|easy_pay_u_latam|opay|killbill-payu-latam|upay|payu-latam|payu_latam|payuindia|payu-latam-rails|wj-payuindia).*" + tags: diff --git a/rules/sinks/third_parties/sdkrazorpay/ruby.yaml b/rules/sinks/third_parties/sdkrazorpay/ruby.yaml new file mode 100644 index 00000000..906c87fc --- /dev/null +++ b/rules/sinks/third_parties/sdkrazorpay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Razorpay + name: Razorpay + domains: + - "razorpay.com" + patterns: + - "(?i)(razorpay|spree_razorpay|razorpay_pa|solidus_razorpay|ifsc).*" + tags: diff --git a/rules/sinks/third_parties/sdkrisepay/ruby.yaml b/rules/sinks/third_parties/sdkrisepay/ruby.yaml new file mode 100644 index 00000000..1c08f581 --- /dev/null +++ b/rules/sinks/third_parties/sdkrisepay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Risepay + name: Risepay + domains: + - "risepay.com" + patterns: + - "(?i)(risepay).*" + tags: diff --git a/rules/sinks/third_parties/sdksalesforce/ruby.yaml b/rules/sinks/third_parties/sdksalesforce/ruby.yaml new file mode 100644 index 00000000..26d44c20 --- /dev/null +++ b/rules/sinks/third_parties/sdksalesforce/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Salesforce + name: Salesforce + domains: + - "salesforce.com" + patterns: + - "(?i)(omniauth-salesforce|salesforce_bulk_query|salesforce_bulk_api|salesforce_bulk|salesforce_flo|salesforce-orm|salesforce_id_formatter|salesforce-deploy-tool|salesforce_chunker|salesforce_bulk2|salesforce_ar_sync|salesforce_fsdb|openstax_salesforce|salesforce_cache|salesforce_adapter|dm-salesforce|salesforce_record|salesforce-rails|salesforce_connect|embulk-output-salesforce|hoopla_salesforce|salesforce-chatter|salesforce_bulk_quickfix|salesforce_http_client|salesforce-lead|gd_salesforce|salesforce_exporter|fn-salesforce|warden-salesforce|salesforce_client|salesforce_bulk_client|salesforce-einstein|rd-salesforce|dm-salesforce-adapter|active_salesforce|salesforce_bulk_oauth2|salesforce-bulkapi-notifier|rails-salesforce-connect|mct-rd-salesforce|tla-sbuilder-salesforce|embulk-input-salesforce_bulk|restforce|salesforcebulk|salesforce_bulk_query-edge|salesforce_bulk_api_serial_or_parallel|salesforceintegration|martinemde-dm-salesforce-adapter|rforce|salesforceapi-rest|executrix|restforce-db|asf-rest-adapter|metaforce|activeforce|soapforce|sf_migrate|draisine|seiun|mdata|sfdc|metamind|restforce-bulk|asf_scaffold_generator|leadcreatorgem|bulkforce|force|leadsf|sfd2|data-com-api|salesforklift|yasd|exact-target-client|sfkb|marketingcloud-mailer|tooling|massaji|metaforce-delivery_method|databasedotcom_console|active_force|metaforce-beta|rd_challenge_vivianec|levene|lead_create|lightning-ui|railsforce|marketingcloudsdk|openstax_active_force|refocus|sfmc-fuelsdk-ruby|importlead|sfdc_proxy|smartring|fuelsdk_json_bump|sf-username-password-authentication-and-rest-api|dragostsesdk|MyPreciousRuby1).*" + tags: diff --git a/rules/sinks/third_parties/sdksendgrid/ruby.yaml b/rules/sinks/third_parties/sdksendgrid/ruby.yaml new file mode 100644 index 00000000..4b8adbf0 --- /dev/null +++ b/rules/sinks/third_parties/sdksendgrid/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sendgrid + name: Sendgrid + domains: + - "sendgrid.com" + patterns: + - "(?i)(http_mailer|sendgrid|sendgrid-ruby|sendgrid-rails|sendgrid-actionmailer|griddler-sendgrid|sendgrid_webapi|sendgrid-api|sendgrid_smtpapi|sendgrid_ruby|sendgrid-web|sendgrid-mailer|sendgrid_notification|sendgrid_api|pokey-sendgrid|sendgrid-enphase|sendgrid-rails23|sendgrid_cli_mailer|sendgrid_actionmailer_adapter|sendgrid-newsletter|sendgrid_web|sendgrid_cli|rmm5t-sendgrid|pushpop-sendgrid|am-sendgrid|sendgrid_template_engine|mail_safe-sendgrid|sendgrid_template|sendgrid_contact_persist|sendgrid4r|smtpapi|embulk-input-sendgrid|omnihooks-sendgrid-parse|fluent-plugin-sendgrid-event|parity-sendgrid-api|gridhook|sensu-plugins-sendgrid|griddler|gatling_gun|newslettre|wlvalidate|send_grid_mailer|mail-x_smtpapi|fakegrid|griddler-acd|sg|office_boy|html-griddler|sg_mailer|gridSender|developerreply|email_events|kani_laser).*" + tags: diff --git a/rules/sinks/third_parties/sdksentry/ruby.yaml b/rules/sinks/third_parties/sdksentry/ruby.yaml new file mode 100644 index 00000000..ef2b7d30 --- /dev/null +++ b/rules/sinks/third_parties/sdksentry/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sentry + name: Sentry + domains: + - "sentry.io" + patterns: + - "(?i)(fluent-plugin-sentry-ruby).*" + tags: diff --git a/rules/sinks/third_parties/sdkslack/ruby.yaml b/rules/sinks/third_parties/sdkslack/ruby.yaml new file mode 100644 index 00000000..d0454088 --- /dev/null +++ b/rules/sinks/third_parties/sdkslack/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Slack + name: Slack + domains: + - "slack.com" + patterns: + - "(?i)(slack-notifier|slack-messenger|slack-ruby-client|slack-api|slack-notify|slack-poster|lita-slack|slack-incoming-webhooks|omniauth-slack|slack-post|slack_hook|slack-ruby-bot|slack_mrkdwn|slack-ruby|slack_bot|slack_notifier|slack_msgr|chef-handler-slack|slack_chatter|slack_500|capistrano-slack|slack_webhooks|clearbit-slack|slack_messaging|fluent-plugin-slack|danger-slack|slack-smart-bot|resque-slack|slack_markdown|slack.rb|slack-bot-server|slack_resources|slack_widgets|slack-notification|slack_inviter|slack_message|slack-reporter|sensu-plugins-slack|slack_game|slack-stash|slack-rtmapi|slack-logger|slack_log_device|slack-cap|slack_mailer|slack-cli|slack_export|slack-mail|slack-ruby-block-kit|slack_oauth|slack_invitation|slack_scratcher|slack_api|capistrano-slack-notify|slack-peoplepuller|slack-emogen|ginjo-omniauth-slack|slack_ci|slack_transformer|slack-keep-presence|slack-ruby3|quandl-slack|slack_messenger|simple_slack|mina-slack|ruboty-slack|ellen-slack|capistrano-slack_notification|slack-ruby-bot-server|slack_neuralyzer|slack_alphabetter|slack-cli-webhook|slack-client|lolcommits-slack|slack-api-wrapper|jackal-slack|slack_tsuribari|slack_ruby|slack_logger|slack-webhook|fastlane-plugin-slack_upload|slack_cli|pushpop-slack|slack-progress|slack_notifier_wrapper|slack-rtmapi2|lita-slack-karma-sync|slackiq|ruboty-slack_rtm|async-slack|slack-bot-manager|eye-slack|slack-ruby-danger|slack-rtm-receiver|slackistrano|prpr-slack|pepito-slack|lita-slack-standup|slack_itc_autoingestion|mina_slack|gemsurance_slack|slack_pomodoro_timer|slack-wrapper|slack-rtmapi-fork|foreman_slack|slack-rtm-api|blinkman-slack|sinatra-slack|cap-slack-notify|slack-rtm-bot-helper|fde-slack-notification|mail_slack_bot|factor-connector-slack|mina_slack_promulgator|slackcat|exceptions_to_slack|jira-to-slack|boot_slack_bot|slackdown|slack-ruby-client-bhe|itunes_information_slack|simple-slack-bot|slack-big-emoji|slack_webhook_logger|operationcode-slack|slack_sign_in|slack-web-api|fastlane-plugin-slack_bot|slack_log_viewer|slack_notify_simple|mina_slack_notify|capistrano-slack-mp|detailed_slack_notifier|octobot-slack_agent|gorg_slack_chat|slack-ruby-bot-server-events|alerty-plugin-slack|slack_progress_bar|slack-block-kit|harvest_slack_report|slackbotsy|jackal-kitchen-slack|slack-ruby-bot-boilerplate|github_to_slack|omniauth-slack_signin|slackr|slack-ruby-bot-bhe|slack-incoming-webhooks-ruby|slack-emoji-download.rb|janky-slack-custom|hey-you-slack|slack_ruby_bot_authorization|yieldbot-detailed-slack|slacken|slacks|capistrano-slack-notifier|lex-slack|newrelic-slack-ruby-bot|slacky|spinach-slack-reportable|rack-error_to_slack|delayed_job_slack_notification|slack-ruby-bot-server-rtm|raise_to_slack|ruboty-slack_take_turns|correios_slack_bot|devise_slack_notifiable|ruboty-slack_reaction_added|slackit|slackoff|lita-slack-status|rundock-plugin-hook-slack|embulk-input-slack-history|resque_slack_notifier|repp-heartful_slack|rack-slack_request_verification|slackup|slackdo|nonono_reciever-slack|lita-slack_lingr_gateway_handler|slack-ruby-bot-server-stripe|rack-auth-slack|slackdraft|slack-ruby-bot-server-events-app-mentions|slackpost|slackbot_frd|remote-coffee-slack|slacking|embulk-input-slack_message|fluent-plugin-slack-stakater|embulk-output-slack_file_upload|slackvite|slappy|nine_one_one|capistrano-slackbot|sidekiq-scheduler-notification|xmpp4r-hipchat|ruboty-slack_rtm-emoji_changed|slackpipe|slackert|slackhook|slacked|arisaid|slackgetter|komonjo|slackbot-rails|breacan|capistrano-slackify|slackwebhook|embulk-input-slack_channel_messages|exception_notification-slacky).*" + tags: diff --git a/rules/sinks/third_parties/sdkspotify/ruby.yaml b/rules/sinks/third_parties/sdkspotify/ruby.yaml new file mode 100644 index 00000000..359a61a2 --- /dev/null +++ b/rules/sinks/third_parties/sdkspotify/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Spotify + name: Spotify + domains: + - "spotify.com" + patterns: + - "(?i)(deezify|hibot|partygoer-player|anyplayer|sonice|homophone|spotify|omniauth-spotify|spotify-client|meta-spotify|spotify-dbus|spotify-to-mp3|spotify-api|spotify-ruby|spotify_rec|cinch-spotify|spotify-search|spotify_cli|spotify-charts|spotify_osx_controller|spotify-metadata|spotify_web|lita-spotify|jekyll-spotify|spotify-ruby-api|spotify_http_remote|jberkel-spotify-api|spotify-ruby-kev|omniauth-spotify-oauth2|rspotify|spof|simplespotify|spot|spotif-aye|spty|Musix|sparkey|spotilocal|spot_tracks|hallon-fifo|tweefy|spotty|music-query|ejaydj|spty_api|postrocktues|spotifiery|jektify|soundly|music_explorer|xspf2spotify|hallon-queue-output).*" + tags: diff --git a/rules/sinks/third_parties/sdkstripe/ruby.yaml b/rules/sinks/third_parties/sdkstripe/ruby.yaml new file mode 100644 index 00000000..e99bb56b --- /dev/null +++ b/rules/sinks/third_parties/sdkstripe/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Stripe + name: Stripe + domains: + - "stripe.com" + patterns: + - "(?i)(spree_account_recurring|stripe_saas|phcdevworks_accounts_stripe|stripe|workarea-stripe|stripe_invoice|cash_out|trado_stripe_module|stripe_clerk|koduc_stripe|pay|killbill-stripe|piggybak_stripe|solidus_stripe|catarse_stripe).*" + tags: diff --git a/rules/sinks/third_parties/sdktelegram/ruby.yaml b/rules/sinks/third_parties/sdktelegram/ruby.yaml new file mode 100644 index 00000000..0d4d5367 --- /dev/null +++ b/rules/sinks/third_parties/sdktelegram/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Telegram + name: Telegram + domains: + - "telegram.org" + patterns: + - "(?i)(telegram-bot|telegram-bot-ruby|telegram|telegram_bot|telegram-ruby|fastlane-plugin-telegram|omniauth-telegram|xasin-telegram|telegram_workflow|telegram-bot-types|telegram_meetup_bot|telegram-rails|telegram-rb|telegram-webhooks|lita-telegram-plus|xnm-telegram|lita-telegram|capistrano-telegram|jaconda_telegram|sensu-plugins-telegram|telegram_notifications|telegram_chatbot|telegram_bot_ruby|telegram-auth|telegram_bot_middleware|telegram_notification|ya_telegram_bot|botkit-telegram|stealth-telegram|telegram-rabbit|ruboty-telegram|telegram-loggerbot-ruby|telegram_bot_mgo|exception_notification_telegram|capistrano-telegram_notification|telegram_bot_api|telegram_web_proxy|telegram_imdb_bot|chatbot_helper-telegram|telegram_bot_builder|telegram-bot_manager|telegram-bot-response_builder).*" + tags: diff --git a/rules/sinks/third_parties/sdktencent/ruby.yaml b/rules/sinks/third_parties/sdktencent/ruby.yaml new file mode 100644 index 00000000..2dc4b85d --- /dev/null +++ b/rules/sinks/third_parties/sdktencent/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Tencent.Cloud + name: Tencent Cloud + domains: + - "cloud.tencent.com" + patterns: + - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|cos|qcloud_ruby).*" + tags: diff --git a/rules/sinks/third_parties/sdktrello/ruby.yaml b/rules/sinks/third_parties/sdktrello/ruby.yaml new file mode 100644 index 00000000..047d529b --- /dev/null +++ b/rules/sinks/third_parties/sdktrello/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Trello + name: Trello + domains: + - "trello.com" + patterns: + - "(?i)(slack_trello|ruby-trello|omniauth-trello|trello_flow|trello_cli|trello-client|trello_github|trello-changelog|trello_client|trello-pipes|trello_webhook|trello_lead_time|ki_trello|github-trello|omnifocus-trello|trello_branch|ruboty-trello|trello_freestyler|trello_effort_tracker|trello-factory|trello_slurper|trello_dxy|lita-trello|startling_trello|trello-list2card|github-trello-cl|trello_client_lite|taskmapper-trello).*" + tags: diff --git a/rules/sinks/third_parties/sdktwitter/ruby.yaml b/rules/sinks/third_parties/sdktwitter/ruby.yaml new file mode 100644 index 00000000..74e1ff27 --- /dev/null +++ b/rules/sinks/third_parties/sdktwitter/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Twitter + name: Twitter + domains: + - "twitter.com" + patterns: + - "(?i)(twitter|omniauth-twitter|twitter-text|twitter-stream|twitter_oauth|twitter-bootstrap-rails|em-twitter|twitter-typeahead-rails|twitter-ads|jnunemaker-twitter|cinch-twitter|twitter-auth|compass_twitter_bootstrap|twitter-login|neo4apis-twitter|ex_twitter|twitter-photos|twitter_bootstrap|twitter-vine|lita-twitter|stratify-twitter|twitter-bootswatch-rails|oauth_twitter|hellhound-twitter|twitter-cache|dschn-twitter|twitter_api|twitter-stats|twitter_connect|devise-twitter|ruboty-twitter|twitter_friendly|twitter_images|twitter_meme|twitter_username_extractor|twitter_cards|joelind-twitter|twitter_kotoba|bkocik-twitter|twitter_anonymous_client|twitter_server|twitter-jruby|twitter-multi|ddollar-twitter|twitter_hashtag|erwaller-twitter|twitter-userstream|twitter_rss|twitter_cldr_js|twitter-bootstrap-rails-confirm|twitter-bootstrap3-rails|billymeltdown-twitter|atok-twitter|knife-twitter|twitter-bootstrap-helpers|twitter_retry|deadprogrammer-twitter|fluent-plugin-twitter|markov_twitter|dustin-twitter|twitter_ads|twitter_bot|twitter-lists|moomerman-twitter_oauth|secobarbital-twitter|twitter_alert|mbleigh-twitter-auth|oii_twitter_goodies|typho-twitter|pjdavis-twitter|rpbertp13-twitter|twitter_feed|ellen-twitter|deedubs-twitter|cicloid-twitter|twitter_lti|gilesbowkett-twitter|twitter_client|capistrano-twitter|handcrafted-twitter|szimek-twitter|nobert-twitter|siuying-twitter|neufelry-twitter-sms|twitter_to_csv|twitter-bootstrap|bcms_twitter|jlind-twitter|teejayvanslyke-twitter|radiant-twitter-extension|sml-twitter|twitter_friends|dancroak-twitter-search|rorra-twitter|twitter-console|twitter_bootstrap_builder|twitter_atm|ifttt-twitter|sass-twitter-bootstrap|twitter-bootstrapped|twitter_bot_generator|twitter_backup|anthonycrumley-twitter|twitter-friends|arthurgeek-twitter|twitter-bootswatch-rails-helpers|twitter-knife|baron-twitter|fetcher-microdata-twitter|dacort-twitter|codetocustomer-twitter|twitter-config|drnic-twitter|twitter-vanity-suite|twitter_oauth2|egze-twitter|easy_auth-twitter|twitter_bootstrap_combo|twitter_bootstrap_sass|twitter_search_photos|twitter_bootstrap_helper|ubermajestix-twitter|neufelry-twitter|slack_twitter_egosa|michaeltaras-twitter|ssoroka-twitter|netshade-twitter|ministrycentered-twitter|pushpop-twitter|lazyatom-twitter|paulsingh-twitter|rcarver-twitter|jugyo-twitter_oauth|twitter-bot|twitter_bootstrap_wizard_rails|twitter_bootstrap_markup|ruboty-twitter_search|twitter-bootstrap-components-rails|sinatra-twitter-oauth|scrivito_twitter_widget|twitter_bootstrap_form_for|jarodluebbert-twitter_oauth|nakajima-twitter_oauth|lukemelia-twitter-stream|lti_twitter_engine|twitter_image_tag|edgar-twitter-search|sensu-plugins-twitter|look-twitter-search|twitter-text-simpleidn|twitter_with_auto_pagination|twitter-bootstrap-markup-rails|twitter-text-relative|twitter_topic_bot|twitter-bootstrap-scaffold|farm_twitter_bootstrap|twitter_labs_api|twitter-bootstrap-rails-cdn|cicloid-twitter_oauth|oauth-cli-twitter|heart_twitter|rack-twitter-auth|my_timeline-twitter|gleuch-twitter_oauth|bot_twitter_ebooks|twitter_web_intents|twitter-bootswatch-rails-fontawesome|twitter-lists-cli|ruboty-twitter_track|szimek-twitter_rails|twitter_bootstrap_helpers|twitter_bootstrap-helpers|twitter_snowflake|twitter-bootstrap-ruby|twitter-flight-rails|simple_twitter|chmeee-twitter-fusefs|bcms_twitter_module|twitter-request-headers|dschn-twitter_oauth|twitter_ratchet_rails|twitter-bootstrap-turbo|pk-twitter_oauth).*" + tags: diff --git a/rules/sinks/third_parties/sdkupwork/ruby.yaml b/rules/sinks/third_parties/sdkupwork/ruby.yaml new file mode 100644 index 00000000..7da617b7 --- /dev/null +++ b/rules/sinks/third_parties/sdkupwork/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Upwork + name: Upwork + domains: + - "upwork.com" + patterns: + - "(?i)(upwork-api|omniauth-upwork|ruby-upwork-oauth2|omniauth-upwork-oauth).*" + tags: diff --git a/rules/sinks/third_parties/sdkvercel/ruby.yaml b/rules/sinks/third_parties/sdkvercel/ruby.yaml new file mode 100644 index 00000000..d740dd90 --- /dev/null +++ b/rules/sinks/third_parties/sdkvercel/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Vercel + name: Vercel + domains: + - "vercel.com" + patterns: + - "(?i)(vercellus).*" + tags: diff --git a/rules/sinks/third_parties/sdkvmware/ruby.yaml b/rules/sinks/third_parties/sdkvmware/ruby.yaml new file mode 100644 index 00000000..0d307521 --- /dev/null +++ b/rules/sinks/third_parties/sdkvmware/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Vmware + name: Vmware + domains: + - "vmware.com" + patterns: + - "(?i)(vmware_web_service).*" + tags: diff --git a/rules/sinks/third_parties/sdkwavefront/ruby.yaml b/rules/sinks/third_parties/sdkwavefront/ruby.yaml new file mode 100644 index 00000000..40da4de4 --- /dev/null +++ b/rules/sinks/third_parties/sdkwavefront/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wavefront + name: Wavefront + domains: + - "wavefront.com" + patterns: + - "(?i)(wavefront-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdkwechat/ruby.yaml b/rules/sinks/third_parties/sdkwechat/ruby.yaml new file mode 100644 index 00000000..1405e756 --- /dev/null +++ b/rules/sinks/third_parties/sdkwechat/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wechat + name: Wechat + domains: + - "wechat.com" + patterns: + - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|hubs|omniauth-wx|wmp_sdk|app_status_notification).*" + tags: diff --git a/rules/sinks/third_parties/sdkyoutube/ruby.yaml b/rules/sinks/third_parties/sdkyoutube/ruby.yaml new file mode 100644 index 00000000..cb8abce1 --- /dev/null +++ b/rules/sinks/third_parties/sdkyoutube/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Youtube + name: Youtube + domains: + - "youtube.com" + patterns: + - "(?i)(youtube_search|youtube_it|youtube|youtube_id|youtube_addy|youtube-g|youtube_rails|youtube-dl.rb|youtube_dlhelper|youtube_url|youtube_query|youtube_embed|jekyll-youtube|youtube_pop|youtube-embed|simple_youtube|omniauth-youtube|youtube-downloader|ruboty-youtube|punndit_youtube|youtube_dl|youtube_images|youtube_video|youtube_feed|youtube_sync|lita-youtube|youtube-ripper|youtube_analytics|youtube_audio|youtube_transcript2020|youtube_identifier|youtube-searcher|youtube_api|easy_youtube|active_youtube|paperclip-youtube|youtube_data_api|html-pipeline-youtube|bulk_youtube|ecm_youtube|youtube_search_thumbnail|basic_youtube|spree_youtube|youtube_dl_ruby|msp-youtube-g|youtube_video_id|workarea-youtube_playlists|youtube_audio_downloader|gaqzi-youtube-downloader|podcast-to-youtube|agiley-youtube-g|lita-youtube-me|natedaiger-youtube-g|vibedeck-youtube_it|ruby-youtube-dl|tmm1-youtube-g|youtube_video_info|youtube-g-es|jekyll-html5-youtube|google-apis-youtube_v3|lita-onewheel-youtube|slainer68_youtube_it|youtube_to_rss|sensu-plugins-youtube|cinch-youtube-search|ecm_youtube_backend|audio_to_youtube|trak3r-youtube_sso|asciidoctor-youtube|mintdigital-youtube-g|nddrylliog_youtube_it|beef-youtube-g|ceritium-youtube-g2|FiXato-youtube-g|pius-youtube-g|youtubeDL|videojs-ng-youtube|fetch_youtube_transcript|ceritium-youtube-g-extra|youtube_video_search_at_web_page|google-apis-youtube_analytics_v2|video_info).*" + tags: diff --git a/rules/sinks/third_parties/sdkzoom/ruby.yaml b/rules/sinks/third_parties/sdkzoom/ruby.yaml new file mode 100644 index 00000000..5d4ab943 --- /dev/null +++ b/rules/sinks/third_parties/sdkzoom/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Zoom + name: Zoom + domains: + - "zoom.us" + patterns: + - "(?i)(zoom_slack|zoom|zoom_rb|omniauth-zoom|zoom_launcher|zoom_markazuna|workarea-hover_zoom|jquery-zoom-rails|zoom_us|zoom_api).*" + tags: From 404738f91ad28f99b9a691f7ce0794e2fec5b951 Mon Sep 17 00:00:00 2001 From: Khemraj Rathore Date: Thu, 15 Jun 2023 18:43:02 +0530 Subject: [PATCH 04/74] add - cookie as sink --- rules/sinks/storages/cookie/javascript.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 rules/sinks/storages/cookie/javascript.yaml diff --git a/rules/sinks/storages/cookie/javascript.yaml b/rules/sinks/storages/cookie/javascript.yaml new file mode 100644 index 00000000..e86d9b5f --- /dev/null +++ b/rules/sinks/storages/cookie/javascript.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: Storages.Cookie.Write + name: Cookie (Write) + domains: + - "" + patterns: + - "(?i).*cookie.*set.*" + tags: \ No newline at end of file From 4e377899c013413210d8735bf17235d3d7712e2f Mon Sep 17 00:00:00 2001 From: Khemraj Rathore Date: Thu, 15 Jun 2023 19:04:12 +0530 Subject: [PATCH 05/74] add - merged cookie rules --- rules/sinks/storages/cookie/javascript.yaml | 9 --------- rules/sinks/storages/cookiemanager/javascript.yaml | 9 ++++++++- 2 files changed, 8 insertions(+), 10 deletions(-) delete mode 100644 rules/sinks/storages/cookie/javascript.yaml diff --git a/rules/sinks/storages/cookie/javascript.yaml b/rules/sinks/storages/cookie/javascript.yaml deleted file mode 100644 index e86d9b5f..00000000 --- a/rules/sinks/storages/cookie/javascript.yaml +++ /dev/null @@ -1,9 +0,0 @@ -sinks: - - - id: Storages.Cookie.Write - name: Cookie (Write) - domains: - - "" - patterns: - - "(?i).*cookie.*set.*" - tags: \ No newline at end of file diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml index 2fa917fd..b54cd9ab 100644 --- a/rules/sinks/storages/cookiemanager/javascript.yaml +++ b/rules/sinks/storages/cookiemanager/javascript.yaml @@ -1,8 +1,15 @@ sinks: + - id: Storages.Web.Cookie.Write name: Web Storage Cookie(Write) patterns: - - "(?i).*(setCookie|deleteCookie|removeCookie)" + - "(?i)(.*cookie.*set.*)|(.*setCookie)" + tags: + + - id: Storages.Web.Cookie.Delete + name: Web Storage Cookie(Delete) + patterns: + - "(?i).*(deleteCookie|removeCookie)" tags: law: GDPR From 0d0c2f78971ac9e38a789ffc1b7fc30d9f9d3677 Mon Sep 17 00:00:00 2001 From: Dattaprasad Mundada Date: Fri, 16 Jun 2023 11:40:05 +0530 Subject: [PATCH 06/74] Remove redundant ruby sdk rules --- config/systemConfig/javascript.yaml | 4 ++-- rules/sinks/third_parties/sdkamazon/ruby.yaml | 13 ------------ .../third_parties/sdkamplitude/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkappnexus/ruby.yaml | 13 ------------ .../third_parties/sdkatlassian/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkbing/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkchatwork/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkcoinbase/ruby.yaml | 13 ------------ .../third_parties/sdkdatabricks/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkdropbox/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkdwolla/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkfacebook/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkflurry/ruby.yaml | 13 ------------ .../third_parties/sdkfreshdesk/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkgoogle/ruby.yaml | 21 ------------------- rules/sinks/third_parties/sdkibm/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkintercom/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkline/ruby.yaml | 13 ------------ .../sinks/third_parties/sdklinkedin/ruby.yaml | 13 ------------ .../third_parties/sdkmailchimp/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkmailgun/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkmedium/ruby.yaml | 13 ------------ .../third_parties/sdkmicrosoft/ruby.yaml | 13 ------------ .../sinks/third_parties/sdknetflix/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdknotion/ruby.yaml | 13 ------------ .../third_parties/sdkonesignal/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkpaypal/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkpayture/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkpayu/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkrazorpay/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkrisepay/ruby.yaml | 13 ------------ .../third_parties/sdksalesforce/ruby.yaml | 13 ------------ .../sinks/third_parties/sdksendgrid/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdksentry/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkslack/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkspotify/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkstripe/ruby.yaml | 13 ------------ .../sinks/third_parties/sdktelegram/ruby.yaml | 13 ------------ .../sinks/third_parties/sdktencent/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdktrello/ruby.yaml | 13 ------------ .../sinks/third_parties/sdktwitter/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkupwork/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkvercel/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkvmware/ruby.yaml | 13 ------------ .../third_parties/sdkwavefront/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkwechat/ruby.yaml | 13 ------------ .../sinks/third_parties/sdkyoutube/ruby.yaml | 13 ------------ rules/sinks/third_parties/sdkzoom/ruby.yaml | 13 ------------ 48 files changed, 2 insertions(+), 621 deletions(-) delete mode 100644 rules/sinks/third_parties/sdkamazon/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkamplitude/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkappnexus/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkatlassian/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkbing/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkchatwork/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkcoinbase/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkdatabricks/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkdropbox/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkdwolla/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkfacebook/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkflurry/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkfreshdesk/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkgoogle/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkibm/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkintercom/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkline/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdklinkedin/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkmailchimp/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkmailgun/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkmedium/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkmicrosoft/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdknetflix/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdknotion/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkonesignal/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkpaypal/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkpayture/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkpayu/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkrazorpay/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkrisepay/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdksalesforce/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdksendgrid/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdksentry/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkslack/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkspotify/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkstripe/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdktelegram/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdktencent/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdktrello/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdktwitter/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkupwork/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkvercel/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkvmware/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkwavefront/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkwechat/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkyoutube/ruby.yaml delete mode 100644 rules/sinks/third_parties/sdkzoom/ruby.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index 8a24ffaa..e134e7e3 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -1,12 +1,12 @@ systemConfig: - key: apiHttpLibraries - value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socketio|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\\/common\\/http|.*(HttpClient)).* + value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socket(.){0,1}io|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\\/common\\/http|.*(HttpClient)).* - key: ignoredSinks value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* - key: apiSinks - value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend) + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) - key: apiIdentifier value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/third_parties/sdkamazon/ruby.yaml b/rules/sinks/third_parties/sdkamazon/ruby.yaml deleted file mode 100644 index 74627b03..00000000 --- a/rules/sinks/third_parties/sdkamazon/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Amazon.Aws - name: Amazon Aws - domains: - - "aws.amazon.com" - patterns: - - "(?i)(aws-partitions|aws-sigv4|amazon-chime-sdk-rails|amazon_pay_sdk_ruby|aws-sdk-s3|aws-sdk-sqs|aws-sdk-ec2|aws-sdk-ssm|aws-sdk-sns|aws-sdk-rds|aws-sdk-ses|aws-sdk-ecr|aws-sdk-ecs|aws-sdk-redshift|aws-sdk-athena|aws-sdk-elasticache|aws-sdk-pinpoint|aws-sdk-rekognition|aws-sdk-emr|aws-sdk-lightsail|aws-sdk-workspaces|aws-sdk-cloudsearch|aws-sdk-gamelift|aws-sdk-appstream|aws-sdk-polly|aws-sdk-swf|aws-sdk-snowball|aws-sdk-dax|aws-sdk-inspector|aws-sdk-glacier|aws-sdk-mturk|aws-sdk-clouddirectory|aws-sdk-simpledb|aws-sdk-workdocs|aws-sdk-guardduty|aws-sdk-comprehend|aws-sdk-translate|aws-sdk-workmail|aws-sdk-connect|aws-sdk-eks|aws-sdk-neptune|aws-sdk-dlm|aws-sdk-macie|aws-sdk-chime|aws-sdk-quicksight|aws-sdk-fsx|aws-sdk-docdb|aws-sdk-textract|aws-sdk-personalize|aws-sdk-eventbridge|aws-sdk-cloudwatchlogs|aws-sdk-detective|aws-sdk-ebs|aws-sdk-apigateway|aws-sdk-elasticsearchservice|aws-sdk-cloudwatchevents|aws-sdk-cognitoidentity|aws-sdk-elastictranscoder|aws-sdk-machinelearning|aws-sdk-dynamodbstreams|aws-sdk-cognitosync|aws-sdk-cloudsearchdomain|aws-sdk-sagemakerruntime|aws-sdk-transcribeservice|aws-sdk-ivs|aws-sdk-appflow|aws-sdk-personalizeruntime|aws-sdk-personalizeevents|aws-sdk-forecastservice|aws-sdk-sesv2|aws-sdk-connectparticipant|aws-sdk-frauddetector|aws-sdk-codeguruprofiler|aws-sdk-elasticinference|aws-sdk-cognitoidentityprovider|aws-sdk-route53domains|aws-sdk-lex|aws-sdk-macie2|aws-sdk-chimesdkmessaging|aws-sdk-transcribestreamingservice|aws-sdk-chimesdkidentity|aws-sdk-s3outposts|aws-sdk-devopsguru|aws-sdk-ecrpublic|aws-sdk-lookoutforvision|aws-sdk-emrcontainers|aws-sdk-locationservice|aws-sdk-forecastqueryservice|aws-sdk-appintegrationsservice|aws-sdk-prometheusservice|aws-sdk-workmailmessageflow|aws-sdk-memorydb|aws-sdk-augmentedairuntime|aws-sdk-lexmodelbuildingservice|aws-sdk-chimesdkmeetings|aws-sdk-sagemakeredgemanager|aws-sdk-connectcontactlens|aws-sdk-kinesisvideosignalingchannels|aws-sdk-opensearchservice|pay_with_amazon|aws-sdk-voiceid|aws-sdk-managedgrafana|aws-sdk-sagemakerfeaturestoreruntime|aws-sdk-cloudwatchevidently|aws-sdk-recyclebin|aws-sdk-workspacesweb|aws-sdk-connectwisdomservice|nazrin|paperclip-aws|aws-sdk-dynamodb|aws-sdk-kinesis|aws-sdk-cloudwatch|aws-sdk-cloudfront|aws-sdk-cloudhsm|aws-sdk-firehose|aws-sdk-worklink|aws-sdk-sagemaker|aws-sdk-route53|aws-sdk-qldb|aws-sdk-appconfig|aws-sdk-efs|aws-sdk-kinesisanalytics|aws-sdk-managedblockchain|aws-sdk-route53resolver|aws-sdk-honeycode|aws-sdk-codegurureviewer|aws-sdk-kinesisvideo|aws-sdk-healthlake|aws-sdk-qldbsession|aws-sdk-pinpointemail|aws-sdk-kinesisanalyticsv2|aws-sdk-applicationinsights|aws-sdk-kinesisvideomedia|aws-sdk-timestreamwrite|aws-sdk-timestreamquery|aws-sdk-lookoutmetrics|aws-sdk-lookoutequipment|aws-sdk-configservice|aws-sdk-pinpointsmsvoice|aws-sdk-customerprofiles|aws-sdk-kinesisvideoarchivedmedia|aws-sdk-lexruntimev2|aws-sdk-lexmodelsv2|s3_streamer|breadbox|mturk|clouddrive|misfo-aws-sdk-cloudwatch|embulk-output-s3v2|ruby-aws|aws-sdk|aws-sdk-core|aws-sdk-kms|aws-sdk-resources|aws-sdk-cloudformation|aws-sdk-iam|aws-sdk-secretsmanager|aws-sdk-lambda|aws-sdk-elasticloadbalancing|aws-sdk-autoscaling|aws-sdk-elasticloadbalancingv2|aws-sdk-codecommit|aws-sdk-v1|aws-sdk-glue|aws-sdk-organizations|aws-sdk-acm|aws-sdk-cloudtrail|aws-sdk-codebuild|aws-sdk-codedeploy|aws-sdk-databasemigrationservice|aws-sdk-codepipeline|aws-sdk-cloudhsmv2|aws-sdk-applicationautoscaling|aws-sdk-elasticbeanstalk|aws-sdk-iot|aws-sdk-xray|aws-sdk-opsworks|aws-sdk-states|aws-sdk-batch|aws-sdk-storagegateway|aws-sdk-servicecatalog|aws-sdk-budgets|aws-sdk-sms|aws-sdk-costandusagereportservice|aws-sdk-devicefarm|aws-sdk-directoryservice|aws-sdk-opsworkscm|aws-sdk-directconnect|aws-sdk-health|aws-sdk-greengrass|aws-sdk-applicationdiscoveryservice|aws-sdk-waf|aws-sdk-resourcegroupstaggingapi|aws-sdk-migrationhub|aws-sdk-marketplacemetering|aws-sdk-shield|aws-sdk-wafregional|aws-sdk-marketplacecommerceanalytics|aws-sdk-support|aws-sdk-iotdataplane|aws-sdk-costexplorer|aws-sdk-medialive|aws-sdk-mediaconvert|aws-sdk-datapipeline|aws-sdk-marketplaceentitlementservice|aws-sdk-lambdapreview|aws-sdk-importexport|aws-sdk-codestar|aws-sdk-mobile|aws-sdk-alexaforbusiness|aws-sdk-appsync|aws-sdk-mq|aws-sdk-mediapackage|aws-sdk-mediastore|aws-sdk-serverlessapplicationrepository|aws-sdk-resourcegroups|aws-sdk-servicediscovery|aws-sdk-cloud9|aws-sdk-pricing|aws-sdk-mediastoredata|aws-sdk-iotjobsdataplane|aws-sdk-autoscalingplans|aws-sdk-acmpca|aws-sdk-fms|aws-sdk-iotanalytics|aws-sdk-mediatailor|aws-sdk-pi|aws-sdk-iot1clickdevicesservice|aws-sdk-iot1clickprojects|aws-sdk-signer|aws-sdk-cloudcontrolapi|awssh|aws-sigv4|aws-partitions|aws-eventstream|aws-sigv2|aws|aws-s3|aws-sdk-securityhub|aws-ses|aws-sdk-kafka|aws-sdk-ram|aws-sdk-s3control|aws-sdk-transfer|aws-sdk-rdsdataservice|aws-sdk-datasync|aws-sdk-amplify|aws-sdk-apigatewayv2|aws-sdk-licensemanager|aws-sdk-robomaker|aws-sdk-globalaccelerator|aws-sdk-comprehendmedical|aws-sdk-appmesh|aws-sdk-mediaconnect|aws-sdk-apigatewaymanagementapi|aws-sdk-backup|aws-sdk-mediapackagevod|aws-sdk-iotevents|aws-sdk-groundstation|aws-sdk-ioteventsdata|aws-record|aws-sdk-iotthingsgraph|aws-sdk-servicequotas|aws-sdk-ec2instanceconnect|aws-sdk-lakeformation|aws-sdk-savingsplans|aws-sdk-codestarnotifications|aws-sdk-imagebuilder|aws-sdk-kendra|aws-sdk-wafv2|aws-sdk-accessanalyzer|aws-sdk-computeoptimizer|aws-sdk-dataexchange|aws-sdk-networkmanager|aws-sdk-outposts|aws-sdk-migrationhubconfig|aws-sdk-iotsecuretunneling|aws-sdk-marketplacecatalog|aws-sdk-schemas|aws-sdk-codestarconnections|aws-sdk-ssooidc|aws-sdk-iotsitewise|aws-sdk-synthetics|aws-sdk-codeartifact|aws-sdk-braket|aws-sdk-identitystore|aws-sdk-redshiftdataapiservice|aws-sdk-ssoadmin|aws-sdk-rails|aws_cf_signer|aws-sdk-sso|aws-sdk-gluedatabrew|aws-sdk-appregistry|aws-sdk-networkfirewall|aws-sdk-iotwireless|aws-sdk-auditmanager|aws-sdk-mwaa|aws-sdk-greengrassv2|aws-sdk-amplifybackend|aws-sdk-wellarchitected|aws-sdk-iotdeviceadvisor|aws-sdk-iotfleethub|aws-kclrb|aws-sdk-fis|aws-sdk-mgn|aws-sdk-nimblestudio|aws-sdk-finspacedata|aws-sdk-finspace|aws-sdk-ssmcontacts|aws-sdk-ssmincidents|aws-sdk-applicationcostprofiler|aws-sdk-apprunner|aws-flow|aws-healthcheck|aws-sdk-proton|aws_ro|aws-sdk-route53recoverycontrolconfig|aws-sdk-route53recoveryreadiness|aws-sdk-route53recoverycluster|aws_data|aws-sdk-snowdevicemanagement|aws-xray-sdk|aws-sdk-kafkaconnect|aws-sdk-account|aws-sessionstore-dynamodb|aws-sdk-panorama|aws-sdk-resiliencehub|aws-sdk-migrationhubstrategyrecommendations|aws-sdk-appconfigdata|aws-sdk-drs|aws-sdk-sts|aws-sdk-migrationhubrefactorspaces|aws-sdk-cloudwatchrum|aws-sdk-inspector2|aws-es-transport|aws-sdk-backupgateway|aws-sdk-iottwinmaker|aws-sdk-amplifyuibuilder|aws-ssm-env|aws_agcod|aws-logs|aws-flow-core|aws-sdb|aws-mfa|aws_recon|right_aws|aws-pricing|aws-mfa-secure|aws_info|aws-ec2|carrierwave-aws|aws-cleaner|aws-eni|aws_pocketknife|aws_memfix|aws-rds|aws-swf|aws_helper|aws-rikanjo|aws_client|aws_assume_role|aws_runas|aws-must|aws_lambda_ric|aws_pipes|aws-ip|aws_ssh|aws_deploy|aws_csshx|aws-ami|aws_cloud_search|train-aws|aws-spec-generator|aws-ext|aws-controller|aws-lambda-runner|aws-instmd|aws-pws|aws-crt|aws-liam|aws_sdk|aws_auditor|aws-session-credentials|aws-auth|aws-url|aws-inventory|awsecrets|aws-ie|aws_sns_subscription|aws_tools|aws-ssh|aws-edges|aws_su|aws-data|aws-s3-instructure|aws-cfn-yats|aws-tools|aws_cron|aws-google|miasma-aws|aws-creds|em_aws|aws-asg-fleet|aws-sdk-code-generator|aws_sms|aws-lex-conversation|aws_status|aws-s3crets|aws_cred_vault|aws_dump|aws-dynamodb-query|aws-reporting|aws-rotate|aws-must-templates|aws_public_ips|aws-keys|aws_sns_kit|aws-s3-deploy|aws-elasticsearch|aws_sdb_bare|aws-watcher|aws_sqs_moniter|aws_keychain|aws-mason|aws-vpccreate|aws_as_code|aws-base|eventq_aws|aws_iot_device|aws_log_cleaner|aws-ec2-instance_types|aws_role_creds|aws-ses-rails31|aws-ssm-console|aws_cloud_map|aws-ses-v4|aws_account_number|aws-s3-cse|aws_secrets_loader|aws_s3_export|aws-insight|aws_keys|aws-tasks|aws_upload|aws-clean|aws_sam_yarn_builder|aws-rds-instance_types|aws_ec2_dns_name|aws-role|simple_aws|aws-architect|faraday_middleware-aws-sigv4|aws-signature-v4|aws-cft-tools|aws_provisioner|aws-sesocio-secrets|aws_instance_list|aws_session_token|aws_interactive_cli|awscosts|aws-whitepaper-downloader|aws-sdk-enhanced|aws-cli|aws-s3-akhtaboot|aws_student_accounts|aws-metadata-export|aws-rails-provisioner|aws-sts|aws-embedded-metrics-customink|aws_site_monitor|aws_cli_wrapper|aws-sdk-euca|aws-sdk-elb-tagging|aws-rsync|appoxy-aws|aws_xregion_sync|aws-rotate-keys|aws-cognito-srp|awsraw|hiera-aws|serverkit-aws|aws_agcod_2|aws-s3-multi-region|aws_beanstalk_tunkki|aws-ses-mailer|chef-provisioning-aws|aws-record-generator|awskeyring|hackerdude-aws|fluent-plugin-aws-elasticsearch-service|aboisvert_aws|aws_elb_health_check|aws-ec2-dns-name|aws_ses_newsletters|aws_cloudformation_helper|faraday_middleware-aws-signers-v4|awsm|awsec|aws-study-guide|middleman-aws|easy_aws|aws_access_key_scan|aws-iam-authenticator-rb|aws_ssh_key|cmeiklejohn-aws|aws-codedeploy-session-helper|bosh_cli_plugin_aws|aws_blue_green_deploy|aws-transcoder-rails|aws_stack_builder|jellyfish-aws|thor-aws|aws3upload|barnyard_aws|awslanes|awsquery|crossing).*" - tags: diff --git a/rules/sinks/third_parties/sdkamplitude/ruby.yaml b/rules/sinks/third_parties/sdkamplitude/ruby.yaml deleted file mode 100644 index 16967124..00000000 --- a/rules/sinks/third_parties/sdkamplitude/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Amplitude - name: Amplitude - domains: - - "amplitude.com" - patterns: - - "(?i)(amplitude-api|amplitude-rb|fluent-plugin-amplitude).*" - tags: diff --git a/rules/sinks/third_parties/sdkappnexus/ruby.yaml b/rules/sinks/third_parties/sdkappnexus/ruby.yaml deleted file mode 100644 index ce9bf66d..00000000 --- a/rules/sinks/third_parties/sdkappnexus/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Appnexus - name: Appnexus - domains: - - "appnexus.com" - patterns: - - "(?i)(appnexusapi).*" - tags: diff --git a/rules/sinks/third_parties/sdkatlassian/ruby.yaml b/rules/sinks/third_parties/sdkatlassian/ruby.yaml deleted file mode 100644 index 5747f1a9..00000000 --- a/rules/sinks/third_parties/sdkatlassian/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Atlassian - name: Atlassian - domains: - - "atlassian.com" - patterns: - - "(?i)(stash_api|atlassian-jwt|omniauth-atlassian-oauth2|atlassian_upm|atlassian_ui|atlassian_plugin_installer|atlassian_app_versions|atlassian-stash-avisi|atlassian-jwt-authentication|omniauth_crowd|jira-ruby|stash-client|authlogic_crowd|bamboo-client|crowd|confluence4r|bamboo-cli|crowd_rest|crowd-auth|jira-ruby-dmg|simplecov-clover|stash_pull_request_commenter|atl_config|usvn-crowd-sync|bpescatore-stash|face_control|fisheye-crucible|gojira|bamboo_api|faction|bamboo-console|simplecov-bamboo|nippocf|simple_crowd|crowd_rails|omnibucket|rubocop-junit-formatter|stash_notifier|sclemmer-jira-ruby|jira-ruby-added-transitions|zk-jira-ruby|jira_cli|ticketmaster-jira|knife-stash|aui_flash|kraut|jira_scan|taskmapper-jira|lita-stash-commit|danger-jira|jira|omniauth-jira|jira-cli|lita-jira|jira_report|jira_client|jira_tracker|jira-wsdl|jira-api|cb_jira_validator|jira_issues|jira_command|jira_api|jira-rest|jira-issues|jira_export|jira-script|jira_cmd|jira-remotelinker|capistrano-jira|jira_release|jira_cache|jira-worklog|jira_exception_collector|jira_cards|better_jira|danger-jira_sync|embulk-input-jira|git-jira|mongo-jira|brpm_module_jira|jira_dependency_visualizer|ruboty-jira|cafe-jira|fastlane-plugin-jira_versions|speedflow-plugin-jira|lita-jira-issues|jira4r|fastlane-plugin-jira_transition|cucumber-jira|errbit_jira_plugin|devise-jira-authenticable|active_jira|fastlane-plugin-jira_release_notes|ruby-jira-cli|jiralicious|fastlane-plugin-jira_issue_link|omniauth-jira-oauth2|fastlane-plugin-jira_issue_details|lita-onewheel-jira|fastlane-plugin-jira_transitions|jiragit|fastlane-plugin-jira_set_fix_version|jiraa|fastlane-plugin-jira_link|jiraby|jira4r-straightjacket|jirarest2|fastlane-plugin-set_jira_fix_version|fastlane-plugin-jira_ticket|jirawatch|xfel-timew-jira|jira4r-19|jirack|fastlane-plugin-jira_build_number|jirasync).*" - tags: diff --git a/rules/sinks/third_parties/sdkbing/ruby.yaml b/rules/sinks/third_parties/sdkbing/ruby.yaml deleted file mode 100644 index 9f5b59fc..00000000 --- a/rules/sinks/third_parties/sdkbing/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Bing - name: Bing - domains: - - "bing.com" - patterns: - - "(?i)(RuBing|bing_translator|bing|bing-search|bing_translate_yaml|bing-ads|bing-helper|bing_images|soapy_bing|bing-location|bing-ads-reporting|bing-content-api|bing-ads-api|simple_bing|bing_ads_ruby_sdk|bing_ads_api|bing_translator_fix|bing_search_client|bing_ads_api_v9|binger|binged|voice_recognition_bing|bingImageSearch|bingo|cognitivebing|badabing|periplus|microsoft_ngram|rbing|gnib-ads-api|autotolk|gnib|middleman-sitemap-ping|mikedemers-rbing|keyword_ranking|searchbing|search_cli|rankstar|newsbing|plagiarism2|linkto|ffi-hiredis_vip-core|multi-analytics-turbolinks|search_terms|sitemap_notifier|bingodisk|bingoint|bingo_game).*" - tags: diff --git a/rules/sinks/third_parties/sdkchatwork/ruby.yaml b/rules/sinks/third_parties/sdkchatwork/ruby.yaml deleted file mode 100644 index 24471d06..00000000 --- a/rules/sinks/third_parties/sdkchatwork/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Chatwork - name: Chatwork - domains: - - "chatwork.com" - patterns: - - "(?i)(chatwork|chatwork_to|omniauth-chatwork|goodbye_chatwork|capistrano-chatwork|chatwork_bridge|activeresource-chatwork|ruboty-chatwork|lita-chatwork|fluent-plugin-chatwork|capistrano-around_chatwork|chatwork_webhook_verify|danger-chatwork|ruboty-chatwork_webhook|sensu-plugins-chatwork|rundock-plugin-hook-chatwork|cwbot|cha|bo_gitcw|shutwork|chatworkify|chatwork_to_slack).*" - tags: diff --git a/rules/sinks/third_parties/sdkcoinbase/ruby.yaml b/rules/sinks/third_parties/sdkcoinbase/ruby.yaml deleted file mode 100644 index c304bf91..00000000 --- a/rules/sinks/third_parties/sdkcoinbase/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Coinbase - name: Coinbase - domains: - - "coinbase.com" - patterns: - - "(?i)(coinbase|coinbase-exchange|omniauth-coinbase|coinbase_commerce|coinbase_exchange|coinbase-pro|better-coinbase|spree_coinbase|mxvp-coinbase|coinbase-ruby|spree_coinbase_bitcoin_payment|coinbasepro-api|cbx|orderbook|rtcbx|rcbp|gdax).*" - tags: diff --git a/rules/sinks/third_parties/sdkdatabricks/ruby.yaml b/rules/sinks/third_parties/sdkdatabricks/ruby.yaml deleted file mode 100644 index a3f2c2d9..00000000 --- a/rules/sinks/third_parties/sdkdatabricks/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Databricks - name: Databricks - domains: - - "databricks.com" - patterns: - - "(?i)(databricks).*" - tags: diff --git a/rules/sinks/third_parties/sdkdropbox/ruby.yaml b/rules/sinks/third_parties/sdkdropbox/ruby.yaml deleted file mode 100644 index 82b1d60d..00000000 --- a/rules/sinks/third_parties/sdkdropbox/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Dropbox - name: Dropbox - domains: - - "dropbox.com" - patterns: - - "(?i)(dropbox|dropbox_api|dropbox-sdk|dropbox-api|paperclip-dropbox|dropbox-sdk-v2|dropbox-deployment|omniauth-dropbox|fastlane-plugin-dropbox|carrierwave-dropbox|dropbox-dotfiles|git-dropbox|omniauth-dropbox-oauth2|dropbox-archive|dropbox-explorer|dropbox-aliix|dragonfly-dropbox_data_store|dropbox-sync|dropbox-folder-sync|activestorage-dropbox|sf-dropbox-ext|dropbox_api_v2|dropbox-invite|dropbox-api-petems|gmail-to-dropbox|dropbox_server_backup|dropbox-api-kilgore5|dropbox-api-alt|dropbox-sdk-sv|dropbox_content_hasher|omniauth-dropbox-oauth2-sv|fastlane-plugin-dropbox_upload|fastlane-plugin-publish_dropbox|omniauth-dropbox-business-api2|dropbox-sdk-forked_v2|get_dropbox_access_token).*" - tags: diff --git a/rules/sinks/third_parties/sdkdwolla/ruby.yaml b/rules/sinks/third_parties/sdkdwolla/ruby.yaml deleted file mode 100644 index b101eda6..00000000 --- a/rules/sinks/third_parties/sdkdwolla/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Dwolla - name: Dwolla - domains: - - "dwolla.com" - patterns: - - "(?i)(dwolla_v2|dwolla|dwolla-ruby|dwolla_swagger|spree_dwolla|omniauth-dwolla|fake_dwolla|money_mover).*" - tags: diff --git a/rules/sinks/third_parties/sdkfacebook/ruby.yaml b/rules/sinks/third_parties/sdkfacebook/ruby.yaml deleted file mode 100644 index 8defd253..00000000 --- a/rules/sinks/third_parties/sdkfacebook/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Facebook - name: Facebook - domains: - - "facebook.com" - patterns: - - "(?i)(facebookbusiness|facebook_ads|facebookads|adparlor-facebook|jquery-facebook|facebook_sig_validator|facebook_js|koala|fb-channel-file|devise_facebook_open_graph|open_graph|joelind-koala|cotweet_koala|palidanx-koala|tyler_koala|ongair_ruby|whatsapp|whatsapp_bot|whatzapper|gupshup_whatsapp|xip-twilio|WhatsappBot|whathor|apiwha|omnichannel).*" - tags: diff --git a/rules/sinks/third_parties/sdkflurry/ruby.yaml b/rules/sinks/third_parties/sdkflurry/ruby.yaml deleted file mode 100644 index 04acb74b..00000000 --- a/rules/sinks/third_parties/sdkflurry/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Flurry - name: Flurry - domains: - - "flurry.com" - patterns: - - "(?i)(flurry).*" - tags: diff --git a/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml b/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml deleted file mode 100644 index 707f7f77..00000000 --- a/rules/sinks/third_parties/sdkfreshdesk/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Freshdesk - name: Freshdesk - domains: - - "freshdesk.com" - patterns: - - "(?i)(freshdesk|freshdesk-rest|freshdesk-ruby|freshdesk_api|freshdesk_apiclient|freshdesk-rails|galetahub-freshdesk|freshdesk-api-client|freshdesk-api-v2-rails|rottendesk|rubydesk|fci|freshly).*" - tags: diff --git a/rules/sinks/third_parties/sdkgoogle/ruby.yaml b/rules/sinks/third_parties/sdkgoogle/ruby.yaml deleted file mode 100644 index cdadb154..00000000 --- a/rules/sinks/third_parties/sdkgoogle/ruby.yaml +++ /dev/null @@ -1,21 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Google - name: Google - domains: - - "google.com" - patterns: - - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher).*" - tags: - - - id: ThirdParties.SDK.Google.Cloud - name: Google Cloud - domains: - - "cloud.google.com" - patterns: - - "(?i)(cloudtasker|google-cloud-tasks).*" - tags: diff --git a/rules/sinks/third_parties/sdkibm/ruby.yaml b/rules/sinks/third_parties/sdkibm/ruby.yaml deleted file mode 100644 index d6b612c8..00000000 --- a/rules/sinks/third_parties/sdkibm/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Ibm - name: Ibm - domains: - - "ibm.com" - patterns: - - "(?i)(ibm-cloud-sdk|ibm_cloud_sdk_core|ibm_cloud_power|ibm_cloud_iam|ibm_cloud_databases|ibm_cloud_resource_controller|ibm_cloud_global_tagging|ibm_cloud_activity_tracker|manageiq-providers-ibm_cloud|ibm_vpc|knife-softlayer|gp-ruby-client|aspera-cli|watson-api-client).*" - tags: diff --git a/rules/sinks/third_parties/sdkintercom/ruby.yaml b/rules/sinks/third_parties/sdkintercom/ruby.yaml deleted file mode 100644 index 108a17a6..00000000 --- a/rules/sinks/third_parties/sdkintercom/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Intercom - name: Intercom - domains: - - "intercom.io" - patterns: - - "(?i)(intercom|intercom-rails|omniauth-intercom|intercom-app|intercom_summary|lucid_intercom|intercom_export|cogniteev-intercom|ahoy-intercom|intercom_event_wrapper|hertz-courier-intercom|PSA|user_trackers|helply).*" - tags: diff --git a/rules/sinks/third_parties/sdkline/ruby.yaml b/rules/sinks/third_parties/sdkline/ruby.yaml deleted file mode 100644 index cdf6f982..00000000 --- a/rules/sinks/third_parties/sdkline/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Line - name: Line - domains: - - "line.me" - patterns: - - "(?i)(line-bot-api|line-bot|lotify|clova-speech|lbd_sdk|pihole|line_liff).*" - tags: diff --git a/rules/sinks/third_parties/sdklinkedin/ruby.yaml b/rules/sinks/third_parties/sdklinkedin/ruby.yaml deleted file mode 100644 index 943c4bbd..00000000 --- a/rules/sinks/third_parties/sdklinkedin/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Linkedin - name: Linkedin - domains: - - "linkedin.com" - patterns: - - "(?i)(linkedin|linkedin-oauth2|omniauth-linkedin|linkedin-v2|omniauth-linkedin-oauth2|linkedin-drspin|linkedin-idkmybffjill|linkedin_orbit|linkedin-bdigital|linkedin_v2|linkedin-saimonmoore|linkedin_industries|linkedin-rb|linkedin-client|holetse-linkedin|linkedin-ruby|sinatra-linkedin|linkedin_sign_in|brienw-linkedin|cl_linkedin|ruby-linkedin|linkedin-build|linkedin-api2|omniauth-linkedin-jsapi|linkedin-saddle-client|linkedin2|linkedincrawler|omniauth-linkedin-oauth2-cwd|easy_auth-linked_in|linsc|crankin|linkout|leakedin|ezlinkedin|linked_in_archive_to_resume|completeness|linkedin2cv|scouter|fastlane-plugin-xbluepill|acts_as_cleo|link_to_profile|resumr|linked_in|sharrando).*" - tags: diff --git a/rules/sinks/third_parties/sdkmailchimp/ruby.yaml b/rules/sinks/third_parties/sdkmailchimp/ruby.yaml deleted file mode 100644 index 33171fea..00000000 --- a/rules/sinks/third_parties/sdkmailchimp/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Mailchimp - name: Mailchimp - domains: - - "mailchimp.com" - patterns: - - "(?i)(monkey_party|mailchimp|omniauth-mailchimp|mailchimp_api|mailchimp_ses|mailchimp_api_v3|mailchimp_template|ruby-mailchimp|webhookr-mailchimp|mailchimp_subscriber|mailchimp_exporter|devise_mailchimp|easy_mailchimp|mailchimp_transactional|refinerycms-mailchimp|embulk-output-mailchimp|catarse_mailchimp|camaleon_mailchimp|chimpster|mojura-mailchimp|solidus_mailchimp_sync|trado_mailchimp_module|marnen-catarse_mailchimp|mailchimp3|gibbon|hominid|MailchimpMarketing|mailchimpv3|MailchimpTransactional|chimpster-rails|mc_markdown|hominid-wout|monkeywrench|monkey_wrench|chimpmunk|workarea-mail_chimp|bgetting-hominid|panthoot|mc|mcmailer|chimp_contact|banana_peels|chimp_mailer|chimp_light|babney-hominid|chimp_sync|Empact-hominid|mandrill_queue|malechimp|purple-monkey|netguru-hominid|mcparty|mailfox|catarse_monkeymail|chimpy|banana_bits|devise_campaignable|slack-ruby-bot-server-mailchimp).*" - tags: diff --git a/rules/sinks/third_parties/sdkmailgun/ruby.yaml b/rules/sinks/third_parties/sdkmailgun/ruby.yaml deleted file mode 100644 index a8bc539a..00000000 --- a/rules/sinks/third_parties/sdkmailgun/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Mailgun - name: Mailgun - domains: - - "mailgun.com" - patterns: - - "(?i)(mailgun-ruby|mailgun|mailgun_rails|griddler-mailgun|mailgun-rails|mailgun-tracking|mailgun_webhooks|mailgun_api|mailgun_catcher|capistrano-mailgun|mailgun-mailbox|rails-mailgun|mailgun-sendmail|mailgun_email_validator|mailgun-api-rails|lita-mailgun|mailgun-ruby-plus|rails-mailgun-plus|omw_mailgun|mailgunner|sensu-plugins-mailgun|factor-connector-mailgun|wj-mailgun-ruby|huginn_mailgun_agent|mailgat|pew_pew|mailqun|snipe).*" - tags: diff --git a/rules/sinks/third_parties/sdkmedium/ruby.yaml b/rules/sinks/third_parties/sdkmedium/ruby.yaml deleted file mode 100644 index 089c6a1d..00000000 --- a/rules/sinks/third_parties/sdkmedium/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Medium - name: Medium - domains: - - "medium.com" - patterns: - - "(?i)(omniauth-medium|medium_api|medium-scrapper|medium|medium-sdk-ruby|medium_sdk|mediumite).*" - tags: diff --git a/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml b/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml deleted file mode 100644 index 8d74ee77..00000000 --- a/rules/sinks/third_parties/sdkmicrosoft/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Microsoft - name: Microsoft - domains: - - "microsoft.com" - patterns: - - "(?i)(azure|azure-core|azure-storage|azure-storage-common|azure-storage-blob|azure_mgmt_resources|azure_mgmt_storage|azure-armrest|azure_mgmt_compute|azure_mgmt_network|azure_graph_rbac|azure_mgmt_sql|azure_mgmt_dns|azure-signature|azure_sdk|azure_mgmt_security|azure_mgmt_key_vault|ms_rest_azure|omniauth-azure-oauth2|azure_mgmt_traffic_manager|miasma-azure|azure-storage-file|azure_mgmt_monitor|azure_info|azure-contrib|paperclip-azure|azure-storage-queue|azure_mgmt_authorization|azure_mgmt_subscriptions|azure_key_vault|azure-storage-table|azure_search|azure_auth|azure_mgmt_msi|azure_mgmt_cdn|azure_mgmt_graph|azure-push|azure_mgmt_web|azure_mgmt_locks|azure_mgmt_redis|azure_mgmt_features|azure_mgmt_policy|azure_mgmt_search|azure_mgmt_commerce|azure_mgmt_scheduler|azure_mgmt_logic|azure_mgmt_batch|gitlab-fog-azure-rm|azure_client|knife-azure|omniauth-azure-activedirectory-v2|azure-acs|azure_mgmt_kusto|azure-loganalytics-datacollector-api|vagrant-azure|azure_mgmt_consumption|azure_mgmt_netapp|azure_mgmt_billing|azure_mgmt_relay|azure_mgmt_links|azure_mgmt_automation|azure_cognitiveservices_computervision|azure_mgmt_hdinsight|azure_event_grid|azure_mgmt_signalr|azure-sas|azure_cognitiveservices_face|azure_cognitiveservices_imagesearch|azure_cognitiveservices_textanalytics|azure_cognitiveservices_contentmoderator|azure_mgmt_media_services|carrierwave-azure|azure_cognitiveservices_entitysearch|azure_cognitiveservices_customsearch|azure_cognitiveservices_videosearch|azure_cognitiveservices_spellcheck|azure_cognitiveservices_newssearch|azure_media_service|azure_mgmt_notification_hubs|azure_mgmt_cognitive_services|azure-auth|azure_mgmt_container_service|azure_cognitiveservices_luisauthoring|azure-multistorage|azure_mgmt_privatedns|azure_mgmt_datalake_store|azure_mgmt_event_grid|azure_mgmt_iot_hub|azure-plus|azure_mgmt_recovery_services|azure_mgmt_service_bus|azure_mgmt_mariadb|azure_mgmt_machine_learning|azure_mgmt_sqlvirtualmachine|azure_mgmt_powerbi_embedded|azure_mgmt_datalake_analytics|azure_mgmt_event_hub|azure_mgmt_storagesync|azure_mgmt_container_instance|azure_service_fabric|azure_cognitiveservices_luisruntime|azure_cognitiveservices_qnamaker|azure_mgmt_container_registry|azure_mgmt_operational_insights|azure_mgmt_analysis_services|azure_mgmt_hanaonazure|azure_sas|azure_stt|azure_mgmt_advisor|azure_mgmt_mixedreality|azure_cognitiveservices_customvisionprediction|azure_cognitiveservices_visualsearch|azure_mgmt_api_management|azure_mgmt_edgegateway|azure_mgmt_stream_analytics|cloudstrap-azure|azure_mgmt_server_management|azure_mgmt_resourcegraph|azure_mgmt_azurestack|azure_cognitiveservices_customimagesearch|azure_cognitiveservices_autosuggest|azure_mgmt_marketplace_ordering|azure_jwt_auth|azure_cognitiveservices_localsearch|azure_mgmt_mobile_engagement|azure_mgmt_labservices|azure_mgmt_service_fabric|azure_mgmt_customer_insights|azure_mgmt_managed_applications|azure_mgmt_iot_central|azure_mgmt_policy_insights|azure_mgmt_resources_management|azure_mgmt_insights|foreman_azure|azure-fix|azure_cognitiveservices_anomalydetector|carrierwave-azure_rm|azure-tts|azure-key-vault|azure_mgmt_dev_spaces|azure_mgmt_recovery_services_backup|azure_mgmt_data_migration|jellyfish-azure|azure_mgmt_stor_simple8000_series|foreman_azure_rm|azure_direct_upload|fluent-plugin-azure-loganalytics|c-azure|kuby-azure|log4r-azure|azure_mgmt_recovery_services_site_recovery|azure_mgmt_machine_learning_services|jdbc-mssql-azure|refile-azure|kontena-plugin-azure|delayed_job_azure|ms_rest|logstash-output-azure|omniauth-azure-adv2|logstash-output-azure_loganalytics|xcpretty-azure-formatter|azure-auth-token_provider|azure_mgmt_azurestack_hci|fluent-plugin-azure-storage-append-blob|kubes_azure|carrierwave-azure-blob|stuartpreston-azure-sdk-for-ruby|omniauth-azure-ad|carrierwave-ms-azure|fluent-plugin-azure-queue|embulk-input-azure_blob_storage|microsoft-logstash-output-azure-loganalytics|embulk-output-azure_blob_storage|cocoapods-azure-universal-packages|logstash-input-azure_blob_storage|manageiq-providers-azure|sensu-plugins-azure|omniauth-azure_active_directory_b2c|dragonfly-azure_data_store|logstash-output-azure_event_hubs|paperclip-azure-storage|be_azure_cognitiveservices_face|terraspace_plugin_azure|logstash-input-azureblob|fluent-plugin-azure-table|hammer_cli_foreman_azure_rm|blobfish-azure-keyvault-ruby|xcpretty-azure-pipelines-formatter|manageiq-providers-azure_stack|embulk-filter-azure_text_analytics|omniauth-azure-oauth2-v2|fluent-plugin-azurestorage-gen2|azurex|juliusl-azure-sdk-for-ruby|embulk-filter-azure_computer_vision_api|logstash-output-kusto|embulk-filter-azure_translator_api|fluent-plugin-azure-storage-table|fluent-plugin-azure-storage-tables|fluent-plugin-azure-storage-append-blob-lts|async-fluent-azure-eventhubs-plugin|logstash-input-azurewadtable|fluent-plugin-azuremonitorlog|waz-storage|omniauth-bn-office365|fluent-plugin-application-insights|sensu-plugins-azurerm|fluent-plugin-azurestorage|fluent-plugin-documentdb|fluent-plugin-azureeventhubs-batched|fluent-plugin-azureeventhubs|fluent-plugin-azuresearch|waz-sync|sk-fluent-plugin-azureeventhubs|fluent-plugin-azurefunctions|custom_fluent-plugin-azure-storage-append-blob|fluent-plugin-azuremonitormetrics|logstash-input-azuretopicthreadable|fluent-plugin-azure-storage-append-blob-lts-azurestack|chef-provisioning-azurerm|jdbc-mssql|embulk-output-documentdb|embulk-output-azuresearch|generik-logstash-input-azureblob|dm-waztables-adapter|logstash-input-azureblob-json-head-tail|logstash-input-azureblob-saars|logstash-input-azureblob-xiaomi7732|omniauth-activedirectory).*" - tags: diff --git a/rules/sinks/third_parties/sdknetflix/ruby.yaml b/rules/sinks/third_parties/sdknetflix/ruby.yaml deleted file mode 100644 index 0a23f029..00000000 --- a/rules/sinks/third_parties/sdknetflix/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Netflix - name: Netflix - domains: - - "netflix.com" - patterns: - - "(?i)(netflix|netflix_roulette|omniauth-netflix|rares-netflix|whats-on-netflix|netflix4r|kubrick|jekflix|ruby_robot).*" - tags: diff --git a/rules/sinks/third_parties/sdknotion/ruby.yaml b/rules/sinks/third_parties/sdknotion/ruby.yaml deleted file mode 100644 index ecc0338b..00000000 --- a/rules/sinks/third_parties/sdknotion/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Notion - name: Notion - domains: - - "notion.com" - patterns: - - "(?i)(notion|notion_orbit|notion_rb|notion-ruby-client|omniauth-notion|notion-sdk-ruby|notion_ruby|notion_client|notion_api|jekyll-notion).*" - tags: diff --git a/rules/sinks/third_parties/sdkonesignal/ruby.yaml b/rules/sinks/third_parties/sdkonesignal/ruby.yaml deleted file mode 100644 index e064a2c7..00000000 --- a/rules/sinks/third_parties/sdkonesignal/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Onesignal - name: Onesignal - domains: - - "onesignal.com" - patterns: - - "(?i)(onesignal|onesignal-ruby|devise-onesignal|onesignal-ruby-rails6|notification-pusher-onesignal|one_signal|onsignal).*" - tags: diff --git a/rules/sinks/third_parties/sdkpaypal/ruby.yaml b/rules/sinks/third_parties/sdkpaypal/ruby.yaml deleted file mode 100644 index c3160f33..00000000 --- a/rules/sinks/third_parties/sdkpaypal/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Paypal - name: Paypal - domains: - - "paypal.com" - patterns: - - "(?i)(swisspay|active_paypal_adaptive_payment|paypal-payment|spree_paypal_adaptive_payment|georgedrummond-active_paypal_adaptive_payment|paypal_adaptive|yukon|shoppe-paypal|paypal-express|pp-adaptive|lolita-paypal|adaptive_pay|ianfleeton-paypal-express|paypal-adaptive-gateway|sinatra-paypal|elucid-adaptive_pay|adapt|spree_paypal_website_standard|ruby-paypal|creative-paypal-express|spree_paypal_rest|spree_paypal_express|trado_paypal_module|creative-pp-adaptive|spree_paypal_express_mutalis|killbill-paypal-express|nimbleshop_paypalwp|astrails-paypal_adaptive|tonyla-paypal_adaptive|workarea-paypal|active_paypal_adaptive_accounts|koduc_express_paypal|adaptive_payments|spree_billing_sisow|lottay-paypal_adaptive|heartcheck-paypal|paypal-masspay|JekyllEWP|paypal-sdk-rest|paypal-sdk-core|paypal-sdk-merchant|paypal-checkout-sdk|paypal-sdk-adaptivepayments|paypal-sdk-permissions|paypal-sdk-adaptiveaccounts|paypal-sdk-invoice|paypal-sdk-subscriptions|paypal-payouts-sdk|paypal-sdk-buttonmanager|paypal-sdk-http-adapters|paypal-sdk-merchant-jk|paypal-sdk-rest-pmrb|paypal-sdk-buttonmanager-rails|paypal_merchant|cabernet|paypkg).*" - tags: diff --git a/rules/sinks/third_parties/sdkpayture/ruby.yaml b/rules/sinks/third_parties/sdkpayture/ruby.yaml deleted file mode 100644 index 7dea1d4b..00000000 --- a/rules/sinks/third_parties/sdkpayture/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Payture - name: Payture - domains: - - "payture.com" - patterns: - - "(?i)(payture-cheques).*" - tags: diff --git a/rules/sinks/third_parties/sdkpayu/ruby.yaml b/rules/sinks/third_parties/sdkpayu/ruby.yaml deleted file mode 100644 index 2f0d868a..00000000 --- a/rules/sinks/third_parties/sdkpayu/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Payu - name: Payu - domains: - - "payu.in" - patterns: - - "(?i)(solidus_payu_latam|easy_pay_u_latam|opay|killbill-payu-latam|upay|payu-latam|payu_latam|payuindia|payu-latam-rails|wj-payuindia).*" - tags: diff --git a/rules/sinks/third_parties/sdkrazorpay/ruby.yaml b/rules/sinks/third_parties/sdkrazorpay/ruby.yaml deleted file mode 100644 index 906c87fc..00000000 --- a/rules/sinks/third_parties/sdkrazorpay/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Razorpay - name: Razorpay - domains: - - "razorpay.com" - patterns: - - "(?i)(razorpay|spree_razorpay|razorpay_pa|solidus_razorpay|ifsc).*" - tags: diff --git a/rules/sinks/third_parties/sdkrisepay/ruby.yaml b/rules/sinks/third_parties/sdkrisepay/ruby.yaml deleted file mode 100644 index 1c08f581..00000000 --- a/rules/sinks/third_parties/sdkrisepay/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Risepay - name: Risepay - domains: - - "risepay.com" - patterns: - - "(?i)(risepay).*" - tags: diff --git a/rules/sinks/third_parties/sdksalesforce/ruby.yaml b/rules/sinks/third_parties/sdksalesforce/ruby.yaml deleted file mode 100644 index 26d44c20..00000000 --- a/rules/sinks/third_parties/sdksalesforce/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Salesforce - name: Salesforce - domains: - - "salesforce.com" - patterns: - - "(?i)(omniauth-salesforce|salesforce_bulk_query|salesforce_bulk_api|salesforce_bulk|salesforce_flo|salesforce-orm|salesforce_id_formatter|salesforce-deploy-tool|salesforce_chunker|salesforce_bulk2|salesforce_ar_sync|salesforce_fsdb|openstax_salesforce|salesforce_cache|salesforce_adapter|dm-salesforce|salesforce_record|salesforce-rails|salesforce_connect|embulk-output-salesforce|hoopla_salesforce|salesforce-chatter|salesforce_bulk_quickfix|salesforce_http_client|salesforce-lead|gd_salesforce|salesforce_exporter|fn-salesforce|warden-salesforce|salesforce_client|salesforce_bulk_client|salesforce-einstein|rd-salesforce|dm-salesforce-adapter|active_salesforce|salesforce_bulk_oauth2|salesforce-bulkapi-notifier|rails-salesforce-connect|mct-rd-salesforce|tla-sbuilder-salesforce|embulk-input-salesforce_bulk|restforce|salesforcebulk|salesforce_bulk_query-edge|salesforce_bulk_api_serial_or_parallel|salesforceintegration|martinemde-dm-salesforce-adapter|rforce|salesforceapi-rest|executrix|restforce-db|asf-rest-adapter|metaforce|activeforce|soapforce|sf_migrate|draisine|seiun|mdata|sfdc|metamind|restforce-bulk|asf_scaffold_generator|leadcreatorgem|bulkforce|force|leadsf|sfd2|data-com-api|salesforklift|yasd|exact-target-client|sfkb|marketingcloud-mailer|tooling|massaji|metaforce-delivery_method|databasedotcom_console|active_force|metaforce-beta|rd_challenge_vivianec|levene|lead_create|lightning-ui|railsforce|marketingcloudsdk|openstax_active_force|refocus|sfmc-fuelsdk-ruby|importlead|sfdc_proxy|smartring|fuelsdk_json_bump|sf-username-password-authentication-and-rest-api|dragostsesdk|MyPreciousRuby1).*" - tags: diff --git a/rules/sinks/third_parties/sdksendgrid/ruby.yaml b/rules/sinks/third_parties/sdksendgrid/ruby.yaml deleted file mode 100644 index 4b8adbf0..00000000 --- a/rules/sinks/third_parties/sdksendgrid/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Sendgrid - name: Sendgrid - domains: - - "sendgrid.com" - patterns: - - "(?i)(http_mailer|sendgrid|sendgrid-ruby|sendgrid-rails|sendgrid-actionmailer|griddler-sendgrid|sendgrid_webapi|sendgrid-api|sendgrid_smtpapi|sendgrid_ruby|sendgrid-web|sendgrid-mailer|sendgrid_notification|sendgrid_api|pokey-sendgrid|sendgrid-enphase|sendgrid-rails23|sendgrid_cli_mailer|sendgrid_actionmailer_adapter|sendgrid-newsletter|sendgrid_web|sendgrid_cli|rmm5t-sendgrid|pushpop-sendgrid|am-sendgrid|sendgrid_template_engine|mail_safe-sendgrid|sendgrid_template|sendgrid_contact_persist|sendgrid4r|smtpapi|embulk-input-sendgrid|omnihooks-sendgrid-parse|fluent-plugin-sendgrid-event|parity-sendgrid-api|gridhook|sensu-plugins-sendgrid|griddler|gatling_gun|newslettre|wlvalidate|send_grid_mailer|mail-x_smtpapi|fakegrid|griddler-acd|sg|office_boy|html-griddler|sg_mailer|gridSender|developerreply|email_events|kani_laser).*" - tags: diff --git a/rules/sinks/third_parties/sdksentry/ruby.yaml b/rules/sinks/third_parties/sdksentry/ruby.yaml deleted file mode 100644 index ef2b7d30..00000000 --- a/rules/sinks/third_parties/sdksentry/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Sentry - name: Sentry - domains: - - "sentry.io" - patterns: - - "(?i)(fluent-plugin-sentry-ruby).*" - tags: diff --git a/rules/sinks/third_parties/sdkslack/ruby.yaml b/rules/sinks/third_parties/sdkslack/ruby.yaml deleted file mode 100644 index d0454088..00000000 --- a/rules/sinks/third_parties/sdkslack/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Slack - name: Slack - domains: - - "slack.com" - patterns: - - "(?i)(slack-notifier|slack-messenger|slack-ruby-client|slack-api|slack-notify|slack-poster|lita-slack|slack-incoming-webhooks|omniauth-slack|slack-post|slack_hook|slack-ruby-bot|slack_mrkdwn|slack-ruby|slack_bot|slack_notifier|slack_msgr|chef-handler-slack|slack_chatter|slack_500|capistrano-slack|slack_webhooks|clearbit-slack|slack_messaging|fluent-plugin-slack|danger-slack|slack-smart-bot|resque-slack|slack_markdown|slack.rb|slack-bot-server|slack_resources|slack_widgets|slack-notification|slack_inviter|slack_message|slack-reporter|sensu-plugins-slack|slack_game|slack-stash|slack-rtmapi|slack-logger|slack_log_device|slack-cap|slack_mailer|slack-cli|slack_export|slack-mail|slack-ruby-block-kit|slack_oauth|slack_invitation|slack_scratcher|slack_api|capistrano-slack-notify|slack-peoplepuller|slack-emogen|ginjo-omniauth-slack|slack_ci|slack_transformer|slack-keep-presence|slack-ruby3|quandl-slack|slack_messenger|simple_slack|mina-slack|ruboty-slack|ellen-slack|capistrano-slack_notification|slack-ruby-bot-server|slack_neuralyzer|slack_alphabetter|slack-cli-webhook|slack-client|lolcommits-slack|slack-api-wrapper|jackal-slack|slack_tsuribari|slack_ruby|slack_logger|slack-webhook|fastlane-plugin-slack_upload|slack_cli|pushpop-slack|slack-progress|slack_notifier_wrapper|slack-rtmapi2|lita-slack-karma-sync|slackiq|ruboty-slack_rtm|async-slack|slack-bot-manager|eye-slack|slack-ruby-danger|slack-rtm-receiver|slackistrano|prpr-slack|pepito-slack|lita-slack-standup|slack_itc_autoingestion|mina_slack|gemsurance_slack|slack_pomodoro_timer|slack-wrapper|slack-rtmapi-fork|foreman_slack|slack-rtm-api|blinkman-slack|sinatra-slack|cap-slack-notify|slack-rtm-bot-helper|fde-slack-notification|mail_slack_bot|factor-connector-slack|mina_slack_promulgator|slackcat|exceptions_to_slack|jira-to-slack|boot_slack_bot|slackdown|slack-ruby-client-bhe|itunes_information_slack|simple-slack-bot|slack-big-emoji|slack_webhook_logger|operationcode-slack|slack_sign_in|slack-web-api|fastlane-plugin-slack_bot|slack_log_viewer|slack_notify_simple|mina_slack_notify|capistrano-slack-mp|detailed_slack_notifier|octobot-slack_agent|gorg_slack_chat|slack-ruby-bot-server-events|alerty-plugin-slack|slack_progress_bar|slack-block-kit|harvest_slack_report|slackbotsy|jackal-kitchen-slack|slack-ruby-bot-boilerplate|github_to_slack|omniauth-slack_signin|slackr|slack-ruby-bot-bhe|slack-incoming-webhooks-ruby|slack-emoji-download.rb|janky-slack-custom|hey-you-slack|slack_ruby_bot_authorization|yieldbot-detailed-slack|slacken|slacks|capistrano-slack-notifier|lex-slack|newrelic-slack-ruby-bot|slacky|spinach-slack-reportable|rack-error_to_slack|delayed_job_slack_notification|slack-ruby-bot-server-rtm|raise_to_slack|ruboty-slack_take_turns|correios_slack_bot|devise_slack_notifiable|ruboty-slack_reaction_added|slackit|slackoff|lita-slack-status|rundock-plugin-hook-slack|embulk-input-slack-history|resque_slack_notifier|repp-heartful_slack|rack-slack_request_verification|slackup|slackdo|nonono_reciever-slack|lita-slack_lingr_gateway_handler|slack-ruby-bot-server-stripe|rack-auth-slack|slackdraft|slack-ruby-bot-server-events-app-mentions|slackpost|slackbot_frd|remote-coffee-slack|slacking|embulk-input-slack_message|fluent-plugin-slack-stakater|embulk-output-slack_file_upload|slackvite|slappy|nine_one_one|capistrano-slackbot|sidekiq-scheduler-notification|xmpp4r-hipchat|ruboty-slack_rtm-emoji_changed|slackpipe|slackert|slackhook|slacked|arisaid|slackgetter|komonjo|slackbot-rails|breacan|capistrano-slackify|slackwebhook|embulk-input-slack_channel_messages|exception_notification-slacky).*" - tags: diff --git a/rules/sinks/third_parties/sdkspotify/ruby.yaml b/rules/sinks/third_parties/sdkspotify/ruby.yaml deleted file mode 100644 index 359a61a2..00000000 --- a/rules/sinks/third_parties/sdkspotify/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Spotify - name: Spotify - domains: - - "spotify.com" - patterns: - - "(?i)(deezify|hibot|partygoer-player|anyplayer|sonice|homophone|spotify|omniauth-spotify|spotify-client|meta-spotify|spotify-dbus|spotify-to-mp3|spotify-api|spotify-ruby|spotify_rec|cinch-spotify|spotify-search|spotify_cli|spotify-charts|spotify_osx_controller|spotify-metadata|spotify_web|lita-spotify|jekyll-spotify|spotify-ruby-api|spotify_http_remote|jberkel-spotify-api|spotify-ruby-kev|omniauth-spotify-oauth2|rspotify|spof|simplespotify|spot|spotif-aye|spty|Musix|sparkey|spotilocal|spot_tracks|hallon-fifo|tweefy|spotty|music-query|ejaydj|spty_api|postrocktues|spotifiery|jektify|soundly|music_explorer|xspf2spotify|hallon-queue-output).*" - tags: diff --git a/rules/sinks/third_parties/sdkstripe/ruby.yaml b/rules/sinks/third_parties/sdkstripe/ruby.yaml deleted file mode 100644 index e99bb56b..00000000 --- a/rules/sinks/third_parties/sdkstripe/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Stripe - name: Stripe - domains: - - "stripe.com" - patterns: - - "(?i)(spree_account_recurring|stripe_saas|phcdevworks_accounts_stripe|stripe|workarea-stripe|stripe_invoice|cash_out|trado_stripe_module|stripe_clerk|koduc_stripe|pay|killbill-stripe|piggybak_stripe|solidus_stripe|catarse_stripe).*" - tags: diff --git a/rules/sinks/third_parties/sdktelegram/ruby.yaml b/rules/sinks/third_parties/sdktelegram/ruby.yaml deleted file mode 100644 index 0d4d5367..00000000 --- a/rules/sinks/third_parties/sdktelegram/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Telegram - name: Telegram - domains: - - "telegram.org" - patterns: - - "(?i)(telegram-bot|telegram-bot-ruby|telegram|telegram_bot|telegram-ruby|fastlane-plugin-telegram|omniauth-telegram|xasin-telegram|telegram_workflow|telegram-bot-types|telegram_meetup_bot|telegram-rails|telegram-rb|telegram-webhooks|lita-telegram-plus|xnm-telegram|lita-telegram|capistrano-telegram|jaconda_telegram|sensu-plugins-telegram|telegram_notifications|telegram_chatbot|telegram_bot_ruby|telegram-auth|telegram_bot_middleware|telegram_notification|ya_telegram_bot|botkit-telegram|stealth-telegram|telegram-rabbit|ruboty-telegram|telegram-loggerbot-ruby|telegram_bot_mgo|exception_notification_telegram|capistrano-telegram_notification|telegram_bot_api|telegram_web_proxy|telegram_imdb_bot|chatbot_helper-telegram|telegram_bot_builder|telegram-bot_manager|telegram-bot-response_builder).*" - tags: diff --git a/rules/sinks/third_parties/sdktencent/ruby.yaml b/rules/sinks/third_parties/sdktencent/ruby.yaml deleted file mode 100644 index 2dc4b85d..00000000 --- a/rules/sinks/third_parties/sdktencent/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Tencent.Cloud - name: Tencent Cloud - domains: - - "cloud.tencent.com" - patterns: - - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|cos|qcloud_ruby).*" - tags: diff --git a/rules/sinks/third_parties/sdktrello/ruby.yaml b/rules/sinks/third_parties/sdktrello/ruby.yaml deleted file mode 100644 index 047d529b..00000000 --- a/rules/sinks/third_parties/sdktrello/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Trello - name: Trello - domains: - - "trello.com" - patterns: - - "(?i)(slack_trello|ruby-trello|omniauth-trello|trello_flow|trello_cli|trello-client|trello_github|trello-changelog|trello_client|trello-pipes|trello_webhook|trello_lead_time|ki_trello|github-trello|omnifocus-trello|trello_branch|ruboty-trello|trello_freestyler|trello_effort_tracker|trello-factory|trello_slurper|trello_dxy|lita-trello|startling_trello|trello-list2card|github-trello-cl|trello_client_lite|taskmapper-trello).*" - tags: diff --git a/rules/sinks/third_parties/sdktwitter/ruby.yaml b/rules/sinks/third_parties/sdktwitter/ruby.yaml deleted file mode 100644 index 74e1ff27..00000000 --- a/rules/sinks/third_parties/sdktwitter/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Twitter - name: Twitter - domains: - - "twitter.com" - patterns: - - "(?i)(twitter|omniauth-twitter|twitter-text|twitter-stream|twitter_oauth|twitter-bootstrap-rails|em-twitter|twitter-typeahead-rails|twitter-ads|jnunemaker-twitter|cinch-twitter|twitter-auth|compass_twitter_bootstrap|twitter-login|neo4apis-twitter|ex_twitter|twitter-photos|twitter_bootstrap|twitter-vine|lita-twitter|stratify-twitter|twitter-bootswatch-rails|oauth_twitter|hellhound-twitter|twitter-cache|dschn-twitter|twitter_api|twitter-stats|twitter_connect|devise-twitter|ruboty-twitter|twitter_friendly|twitter_images|twitter_meme|twitter_username_extractor|twitter_cards|joelind-twitter|twitter_kotoba|bkocik-twitter|twitter_anonymous_client|twitter_server|twitter-jruby|twitter-multi|ddollar-twitter|twitter_hashtag|erwaller-twitter|twitter-userstream|twitter_rss|twitter_cldr_js|twitter-bootstrap-rails-confirm|twitter-bootstrap3-rails|billymeltdown-twitter|atok-twitter|knife-twitter|twitter-bootstrap-helpers|twitter_retry|deadprogrammer-twitter|fluent-plugin-twitter|markov_twitter|dustin-twitter|twitter_ads|twitter_bot|twitter-lists|moomerman-twitter_oauth|secobarbital-twitter|twitter_alert|mbleigh-twitter-auth|oii_twitter_goodies|typho-twitter|pjdavis-twitter|rpbertp13-twitter|twitter_feed|ellen-twitter|deedubs-twitter|cicloid-twitter|twitter_lti|gilesbowkett-twitter|twitter_client|capistrano-twitter|handcrafted-twitter|szimek-twitter|nobert-twitter|siuying-twitter|neufelry-twitter-sms|twitter_to_csv|twitter-bootstrap|bcms_twitter|jlind-twitter|teejayvanslyke-twitter|radiant-twitter-extension|sml-twitter|twitter_friends|dancroak-twitter-search|rorra-twitter|twitter-console|twitter_bootstrap_builder|twitter_atm|ifttt-twitter|sass-twitter-bootstrap|twitter-bootstrapped|twitter_bot_generator|twitter_backup|anthonycrumley-twitter|twitter-friends|arthurgeek-twitter|twitter-bootswatch-rails-helpers|twitter-knife|baron-twitter|fetcher-microdata-twitter|dacort-twitter|codetocustomer-twitter|twitter-config|drnic-twitter|twitter-vanity-suite|twitter_oauth2|egze-twitter|easy_auth-twitter|twitter_bootstrap_combo|twitter_bootstrap_sass|twitter_search_photos|twitter_bootstrap_helper|ubermajestix-twitter|neufelry-twitter|slack_twitter_egosa|michaeltaras-twitter|ssoroka-twitter|netshade-twitter|ministrycentered-twitter|pushpop-twitter|lazyatom-twitter|paulsingh-twitter|rcarver-twitter|jugyo-twitter_oauth|twitter-bot|twitter_bootstrap_wizard_rails|twitter_bootstrap_markup|ruboty-twitter_search|twitter-bootstrap-components-rails|sinatra-twitter-oauth|scrivito_twitter_widget|twitter_bootstrap_form_for|jarodluebbert-twitter_oauth|nakajima-twitter_oauth|lukemelia-twitter-stream|lti_twitter_engine|twitter_image_tag|edgar-twitter-search|sensu-plugins-twitter|look-twitter-search|twitter-text-simpleidn|twitter_with_auto_pagination|twitter-bootstrap-markup-rails|twitter-text-relative|twitter_topic_bot|twitter-bootstrap-scaffold|farm_twitter_bootstrap|twitter_labs_api|twitter-bootstrap-rails-cdn|cicloid-twitter_oauth|oauth-cli-twitter|heart_twitter|rack-twitter-auth|my_timeline-twitter|gleuch-twitter_oauth|bot_twitter_ebooks|twitter_web_intents|twitter-bootswatch-rails-fontawesome|twitter-lists-cli|ruboty-twitter_track|szimek-twitter_rails|twitter_bootstrap_helpers|twitter_bootstrap-helpers|twitter_snowflake|twitter-bootstrap-ruby|twitter-flight-rails|simple_twitter|chmeee-twitter-fusefs|bcms_twitter_module|twitter-request-headers|dschn-twitter_oauth|twitter_ratchet_rails|twitter-bootstrap-turbo|pk-twitter_oauth).*" - tags: diff --git a/rules/sinks/third_parties/sdkupwork/ruby.yaml b/rules/sinks/third_parties/sdkupwork/ruby.yaml deleted file mode 100644 index 7da617b7..00000000 --- a/rules/sinks/third_parties/sdkupwork/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Upwork - name: Upwork - domains: - - "upwork.com" - patterns: - - "(?i)(upwork-api|omniauth-upwork|ruby-upwork-oauth2|omniauth-upwork-oauth).*" - tags: diff --git a/rules/sinks/third_parties/sdkvercel/ruby.yaml b/rules/sinks/third_parties/sdkvercel/ruby.yaml deleted file mode 100644 index d740dd90..00000000 --- a/rules/sinks/third_parties/sdkvercel/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Vercel - name: Vercel - domains: - - "vercel.com" - patterns: - - "(?i)(vercellus).*" - tags: diff --git a/rules/sinks/third_parties/sdkvmware/ruby.yaml b/rules/sinks/third_parties/sdkvmware/ruby.yaml deleted file mode 100644 index 0d307521..00000000 --- a/rules/sinks/third_parties/sdkvmware/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Vmware - name: Vmware - domains: - - "vmware.com" - patterns: - - "(?i)(vmware_web_service).*" - tags: diff --git a/rules/sinks/third_parties/sdkwavefront/ruby.yaml b/rules/sinks/third_parties/sdkwavefront/ruby.yaml deleted file mode 100644 index 40da4de4..00000000 --- a/rules/sinks/third_parties/sdkwavefront/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Wavefront - name: Wavefront - domains: - - "wavefront.com" - patterns: - - "(?i)(wavefront-sdk).*" - tags: diff --git a/rules/sinks/third_parties/sdkwechat/ruby.yaml b/rules/sinks/third_parties/sdkwechat/ruby.yaml deleted file mode 100644 index 1405e756..00000000 --- a/rules/sinks/third_parties/sdkwechat/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Wechat - name: Wechat - domains: - - "wechat.com" - patterns: - - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|hubs|omniauth-wx|wmp_sdk|app_status_notification).*" - tags: diff --git a/rules/sinks/third_parties/sdkyoutube/ruby.yaml b/rules/sinks/third_parties/sdkyoutube/ruby.yaml deleted file mode 100644 index cb8abce1..00000000 --- a/rules/sinks/third_parties/sdkyoutube/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Youtube - name: Youtube - domains: - - "youtube.com" - patterns: - - "(?i)(youtube_search|youtube_it|youtube|youtube_id|youtube_addy|youtube-g|youtube_rails|youtube-dl.rb|youtube_dlhelper|youtube_url|youtube_query|youtube_embed|jekyll-youtube|youtube_pop|youtube-embed|simple_youtube|omniauth-youtube|youtube-downloader|ruboty-youtube|punndit_youtube|youtube_dl|youtube_images|youtube_video|youtube_feed|youtube_sync|lita-youtube|youtube-ripper|youtube_analytics|youtube_audio|youtube_transcript2020|youtube_identifier|youtube-searcher|youtube_api|easy_youtube|active_youtube|paperclip-youtube|youtube_data_api|html-pipeline-youtube|bulk_youtube|ecm_youtube|youtube_search_thumbnail|basic_youtube|spree_youtube|youtube_dl_ruby|msp-youtube-g|youtube_video_id|workarea-youtube_playlists|youtube_audio_downloader|gaqzi-youtube-downloader|podcast-to-youtube|agiley-youtube-g|lita-youtube-me|natedaiger-youtube-g|vibedeck-youtube_it|ruby-youtube-dl|tmm1-youtube-g|youtube_video_info|youtube-g-es|jekyll-html5-youtube|google-apis-youtube_v3|lita-onewheel-youtube|slainer68_youtube_it|youtube_to_rss|sensu-plugins-youtube|cinch-youtube-search|ecm_youtube_backend|audio_to_youtube|trak3r-youtube_sso|asciidoctor-youtube|mintdigital-youtube-g|nddrylliog_youtube_it|beef-youtube-g|ceritium-youtube-g2|FiXato-youtube-g|pius-youtube-g|youtubeDL|videojs-ng-youtube|fetch_youtube_transcript|ceritium-youtube-g-extra|youtube_video_search_at_web_page|google-apis-youtube_analytics_v2|video_info).*" - tags: diff --git a/rules/sinks/third_parties/sdkzoom/ruby.yaml b/rules/sinks/third_parties/sdkzoom/ruby.yaml deleted file mode 100644 index 5d4ab943..00000000 --- a/rules/sinks/third_parties/sdkzoom/ruby.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Zoom - name: Zoom - domains: - - "zoom.us" - patterns: - - "(?i)(zoom_slack|zoom|zoom_rb|omniauth-zoom|zoom_launcher|zoom_markazuna|workarea-hover_zoom|jquery-zoom-rails|zoom_us|zoom_api).*" - tags: From e6876087b3b3d66f75fc5f4b5996b1dc97dcf1b0 Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Fri, 16 Jun 2023 19:20:48 +0530 Subject: [PATCH 07/74] Ruby/third party sdk secondary (#269) * Added rules for third party sdks in the db * added some more third parties * refactor rules --- config/exclusions/java.yaml | 2 +- rules/sinks/third_parties/sdk/bitly/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/braze/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/clearbit/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/customerio/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/mapbox/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/pagerduty/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/paytm/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/prerenderio/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/pusher/ruby.yaml | 13 +++++++++++++ .../third_parties/sdk/pwned_passwords/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/twilio/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/typeform/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/yahoo/ruby.yaml | 10 ++++++++++ rules/sinks/third_parties/sdk/zendesk/ruby.yaml | 8 ++++++++ 15 files changed, 139 insertions(+), 1 deletion(-) create mode 100644 rules/sinks/third_parties/sdk/bitly/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/braze/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/clearbit/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/customerio/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/mapbox/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/pagerduty/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/paytm/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/prerenderio/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/pusher/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/pwned_passwords/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/twilio/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/typeform/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/yahoo/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/zendesk/ruby.yaml diff --git a/config/exclusions/java.yaml b/config/exclusions/java.yaml index 2b426343..9ec1c149 100644 --- a/config/exclusions/java.yaml +++ b/config/exclusions/java.yaml @@ -12,4 +12,4 @@ exclusions: - id: Exclusions.Empty name: Exclude file which cannot be read patterns: - - "" + - "" \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/bitly/ruby.yaml b/rules/sinks/third_parties/sdk/bitly/ruby.yaml new file mode 100644 index 00000000..f72ad402 --- /dev/null +++ b/rules/sinks/third_parties/sdk/bitly/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Bitly + name: Bitly + domains: + - "bitly.com" + patterns: + - "(?i)bitly.*" + tags: diff --git a/rules/sinks/third_parties/sdk/braze/ruby.yaml b/rules/sinks/third_parties/sdk/braze/ruby.yaml new file mode 100644 index 00000000..82fa85da --- /dev/null +++ b/rules/sinks/third_parties/sdk/braze/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Braze + name: Braze + domains: + - "braze.com" + patterns: + - "(?i)(braze(_ruby)?).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/clearbit/ruby.yaml b/rules/sinks/third_parties/sdk/clearbit/ruby.yaml new file mode 100644 index 00000000..35ac804d --- /dev/null +++ b/rules/sinks/third_parties/sdk/clearbit/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Clearbit + name: Clearbit + domains: + - "clearbit.com" + patterns: + - "(?i)clearbit.*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/customerio/ruby.yaml b/rules/sinks/third_parties/sdk/customerio/ruby.yaml new file mode 100644 index 00000000..4d21762b --- /dev/null +++ b/rules/sinks/third_parties/sdk/customerio/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Customerio + name: Customerio + domains: + - "customer.io" + patterns: + - "(?i)customerio.*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/mapbox/ruby.yaml b/rules/sinks/third_parties/sdk/mapbox/ruby.yaml new file mode 100644 index 00000000..8749f3e6 --- /dev/null +++ b/rules/sinks/third_parties/sdk/mapbox/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mapbox + name: Mapbox + domains: + - "mapbox.com" + patterns: + - "(?i)(mapbox-(sdk|rails|gl-rails)).*" + tags: diff --git a/rules/sinks/third_parties/sdk/pagerduty/ruby.yaml b/rules/sinks/third_parties/sdk/pagerduty/ruby.yaml new file mode 100644 index 00000000..f7a67ff7 --- /dev/null +++ b/rules/sinks/third_parties/sdk/pagerduty/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Pagerduty + name: Pagerduty + domains: + - "pagerduty.com" + patterns: + - "(?i)(pagerduty).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/paytm/ruby.yaml b/rules/sinks/third_parties/sdk/paytm/ruby.yaml new file mode 100644 index 00000000..4a6bd9c5 --- /dev/null +++ b/rules/sinks/third_parties/sdk/paytm/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paytm + name: Paytm + domains: + - "paytm.com" + patterns: + - "(?i)(paytm|paytm-merchant|paytmseller|paytmspree).*" + tags: diff --git a/rules/sinks/third_parties/sdk/prerenderio/ruby.yaml b/rules/sinks/third_parties/sdk/prerenderio/ruby.yaml new file mode 100644 index 00000000..dde7760e --- /dev/null +++ b/rules/sinks/third_parties/sdk/prerenderio/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Prerender + name: Prerender.io + domains: + - "prerender.io" + patterns: + - "(?i)(prerender_rails(_embedded)?|prerendercloud|prerender_chrome).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/pusher/ruby.yaml b/rules/sinks/third_parties/sdk/pusher/ruby.yaml new file mode 100644 index 00000000..e0cd85e2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/pusher/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Pusher + name: Pusher + domains: + - "pusher.com" + patterns: + - "(?i)(pusher).*" + tags: diff --git a/rules/sinks/third_parties/sdk/pwned_passwords/ruby.yaml b/rules/sinks/third_parties/sdk/pwned_passwords/ruby.yaml new file mode 100644 index 00000000..3a743953 --- /dev/null +++ b/rules/sinks/third_parties/sdk/pwned_passwords/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.PwnedPasswords + name: Pwned Passwords + domains: + - "pwnedpasswords.com" + patterns: + - "(?i)(pwned).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/twilio/ruby.yaml b/rules/sinks/third_parties/sdk/twilio/ruby.yaml new file mode 100644 index 00000000..b90a8189 --- /dev/null +++ b/rules/sinks/third_parties/sdk/twilio/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Twilio + name: Twilio + domains: + - "twilio.com" + patterns: + - "(?i)(twilio).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/typeform/ruby.yaml b/rules/sinks/third_parties/sdk/typeform/ruby.yaml new file mode 100644 index 00000000..140a9e68 --- /dev/null +++ b/rules/sinks/third_parties/sdk/typeform/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Typeform + name: Typeform + domains: + - "typeform.com" + patterns: + - "(?i)(typeform).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/yahoo/ruby.yaml b/rules/sinks/third_parties/sdk/yahoo/ruby.yaml new file mode 100644 index 00000000..f8a696f2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/yahoo/ruby.yaml @@ -0,0 +1,10 @@ + +sinks: + + - id: ThirdParties.SDK.Yahoo + name: Yahoo + domains: + - "yahoo.com" + patterns: + - "(?i)(yahoo-finance|yahoo_weatherman).*" + tags: diff --git a/rules/sinks/third_parties/sdk/zendesk/ruby.yaml b/rules/sinks/third_parties/sdk/zendesk/ruby.yaml new file mode 100644 index 00000000..bbc66021 --- /dev/null +++ b/rules/sinks/third_parties/sdk/zendesk/ruby.yaml @@ -0,0 +1,8 @@ +sinks: + - id: ThirdParties.SDK.Zendesk + name: Zendesk + domains: + - "zendesk.com" + patterns: + - "(?i)(zendesk_api).*" + tags: From 8f812247bd56f1a55b8cefaec31e2e94a19821b5 Mon Sep 17 00:00:00 2001 From: Pandurang Patil Date: Mon, 19 Jun 2023 11:06:18 +0530 Subject: [PATCH 08/74] Handling of rule to select element split over multiple lines (#270) * Handling of rule to select element split over multiple lines If the tag is split into multiple lines then the existing regex was failing to detect the element. Like the below code sample. Handled respective use case along with the addition of corresponding unit test ``` ``` * rule fix --- rules/collections/webforms/any.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/collections/webforms/any.yaml b/rules/collections/webforms/any.yaml index 4055cb2c..47a319fb 100644 --- a/rules/collections/webforms/any.yaml +++ b/rules/collections/webforms/any.yaml @@ -2,5 +2,5 @@ collections: - id: Collections.Webforms name: Webform data collection patterns: - - "^<(?i)(?:\\w{0,}(input|upload)\\w{0,}|\\w{0,}(textarea|Text|TextBox|Select|Field|Autocomplete|Checkbox))" + - "^<(?i)(?:\\w{0,}(input|upload)\\w{0,}|\\w{0,}(textarea|Text|TextBox|Select|Field|Autocomplete|Checkbox))[^>]*.*" tags: From 694e34dbed7078ce1cfb919322a72cda29a841c1 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Thu, 22 Jun 2023 12:20:02 +0530 Subject: [PATCH 09/74] Update README.md (#272) From eacdb954af9d4f8386934d4ea9878935c7bb0e55 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Thu, 29 Jun 2023 11:14:36 +0530 Subject: [PATCH 10/74] Js sdk fixes (#274) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Python GA support * updated mac address rule (#225) * updated mac address rule * removed workforce dir --------- Co-authored-by: “Hitesh * Fix the sdk rules for javascript * Update the okta rule * Remove unwanted rules --------- Co-authored-by: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Co-authored-by: KhemrajSingh Rathore Co-authored-by: “Hitesh Co-authored-by: Pandurang Patil --- config/systemConfig/javascript.yaml | 2 +- rules/collections/default/javascript.yaml | 2 +- .../storages/cookiemanager/javascript.yaml | 12 ++-- .../sdk/apollographql/javascript.yaml | 2 +- .../sdk/augmentedjs/javascript.yaml | 13 ---- .../sdk/bugfender/javascript.yaml | 10 +-- .../third_parties/sdk/bugsnag/javascript.yaml | 2 +- .../third_parties/sdk/classyh/javascript.yaml | 13 ---- .../sdk/cloudinary/javascript.yaml | 2 +- .../third_parties/sdk/cylonjs/javascript.yaml | 2 +- .../third_parties/sdk/draftjs/javascript.yaml | 13 ---- .../sdk/{lunr => emailjs}/javascript.yaml | 8 +-- .../sdk/firebaseapp/javascript.yaml | 8 +-- .../sdk/gatsbyjs/javascript.yaml | 10 +-- .../third_parties/sdk/github/javascript.yaml | 66 +------------------ .../third_parties/sdk/google/javascript.yaml | 2 +- .../third_parties/sdk/helmet/javascript.yaml | 13 ---- .../sdk/intercom/javascript.yaml | 2 +- .../third_parties/sdk/mapbox/javascript.yaml | 2 +- .../sdk/minicartjs/javascript.yaml | 13 ---- .../third_parties/sdk/okta/javascript.yaml | 3 +- .../third_parties/sdk/orkanjs/javascript.yaml | 13 ---- .../third_parties/sdk/segment/javascript.yaml | 2 +- .../third_parties/sdk/sentry/javascript.yaml | 2 +- .../sdk/trailsjs/javascript.yaml | 13 ---- .../third_parties/sdk/wechat/javascript.yaml | 2 +- 26 files changed, 31 insertions(+), 201 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/augmentedjs/javascript.yaml delete mode 100644 rules/sinks/third_parties/sdk/classyh/javascript.yaml delete mode 100644 rules/sinks/third_parties/sdk/draftjs/javascript.yaml rename rules/sinks/third_parties/sdk/{lunr => emailjs}/javascript.yaml (66%) delete mode 100644 rules/sinks/third_parties/sdk/helmet/javascript.yaml delete mode 100644 rules/sinks/third_parties/sdk/minicartjs/javascript.yaml delete mode 100644 rules/sinks/third_parties/sdk/orkanjs/javascript.yaml delete mode 100644 rules/sinks/third_parties/sdk/trailsjs/javascript.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index e134e7e3..c64a140f 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -9,4 +9,4 @@ systemConfig: value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) - key: apiIdentifier - value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/collections/default/javascript.yaml b/rules/collections/default/javascript.yaml index 8d9aaf50..3a138b2a 100644 --- a/rules/collections/default/javascript.yaml +++ b/rules/collections/default/javascript.yaml @@ -2,5 +2,5 @@ collections: - id: Collections.Express name: Express framework restendpoint patterns: - - "express.(post|get|all|delete|put|patch|head|subscribe|unsubscribe)" + - "(?:express|fetch|@feathersjs/feathers|fastify|restify|@nestjs/cli|itty-router|koa-router|@ioc[:]Adonis|@adonisjs|@sails|sails|.*loopback|.*(?:socket[.](io|on|to).*)|(?:io[.]on.*(connection|leave-room|join-room))).*" tags: \ No newline at end of file diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml index b54cd9ab..58a60b91 100644 --- a/rules/sinks/storages/cookiemanager/javascript.yaml +++ b/rules/sinks/storages/cookiemanager/javascript.yaml @@ -25,21 +25,21 @@ sinks: - "(?i)(\\bstorage\\b|sessionstorage)(.*)(setItem|clear|removeItem)" tags: - - id: Storages.Web.Cookie.READ - name: Web Storage Cookie(READ) + - id: Storages.Web.Cookie.Read + name: Web Storage Cookie(Read) patterns: - "(?i).*(getCookie|useCookies)" tags: law: GDPR - - id: Storages.Web.LocalStorage.READ - name: Web LocalStorage(READ) + - id: Storages.Web.LocalStorage.Read + name: Web LocalStorage(Read) patterns: - "(?i)(localStorage).*(clear|getItem)" tags: - - id: Storages.Web.SessionStorage.READ - name: Web SessionStorage(READ) + - id: Storages.Web.SessionStorage.Read + name: Web SessionStorage(Read) patterns: - "(?i)(\\bstorage\\b|sessionstorage)(.*)(getItem)" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml index 78fbc7b5..69ba265d 100644 --- a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml +++ b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml @@ -10,5 +10,5 @@ sinks: - "apollographql.com" patterns: - "ApolloClient.*" - - "graphql|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing" + - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing" tags: diff --git a/rules/sinks/third_parties/sdk/augmentedjs/javascript.yaml b/rules/sinks/third_parties/sdk/augmentedjs/javascript.yaml deleted file mode 100644 index 624957f3..00000000 --- a/rules/sinks/third_parties/sdk/augmentedjs/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Augmentedjs - name: Augmentedjs - domains: - - "augmentedjs.com" - patterns: - - "@augmentedjs\\/gcp-resource-manager|presentation-maps" - tags: diff --git a/rules/sinks/third_parties/sdk/bugfender/javascript.yaml b/rules/sinks/third_parties/sdk/bugfender/javascript.yaml index 4028378a..f52ef96b 100644 --- a/rules/sinks/third_parties/sdk/bugfender/javascript.yaml +++ b/rules/sinks/third_parties/sdk/bugfender/javascript.yaml @@ -9,13 +9,5 @@ sinks: domains: - "bugfender.com" patterns: - - "@bugfender\\/rn-bugfender|cordova-plugin-bugfender" - tags: - - - id: ThirdParties.SDK.Bugfender.Js - name: Bugfender Js - domains: - - "js.bugfender.com" - patterns: - - "@bugfender\\/sdk" + - "@bugfender\\/rn-bugfender|cordova-plugin-bugfender|@bugfender\\/sdk" tags: diff --git a/rules/sinks/third_parties/sdk/bugsnag/javascript.yaml b/rules/sinks/third_parties/sdk/bugsnag/javascript.yaml index e3e96215..bbb9ec38 100644 --- a/rules/sinks/third_parties/sdk/bugsnag/javascript.yaml +++ b/rules/sinks/third_parties/sdk/bugsnag/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "bugsnag.com" patterns: - - "ah-bugsnag-plugin|graphql-middleware-bugsnag|cabin|@bugsnag\\/expo|epic-logger|vite-plugin-bugsnag|bunyan-bugsnag|bugsnag-roku|nest-bugsnag|@wizbii\\/nest-bugsnag|winston-bugsnag|@ssut\\/nest-bugsnag|bugsnag-browser-lite|@werkspot\\/decrypterror|nest-bugsnag-remade|paperplane-bugsnag|@articulate\\/paperplane-bugsnag|@keyrock\\/winston-bugsnag-transport|adonis-bugsnag|@bugsnag\\/js|@bugsnag\\/source-maps|@bugsnag\\/react-native|axe|sensitive-fields|@nkaurelien\\/nest-bugsnag|winston-3-bugsnag-transport" + - "ah-bugsnag-plugin|contactsnag|graphql-middleware-bugsnag|cabin|@bugsnag\\/expo|epic-logger|vite-plugin-bugsnag|bunyan-bugsnag|bugsnag-roku|nest-bugsnag|@wizbii\\/nest-bugsnag|winston-bugsnag|@ssut\\/nest-bugsnag|bugsnag-browser-lite|@werkspot\\/decrypterror|nest-bugsnag-remade|paperplane-bugsnag|@articulate\\/paperplane-bugsnag|@keyrock\\/winston-bugsnag-transport|adonis-bugsnag|@bugsnag\\/js|@bugsnag\\/source-maps|@bugsnag\\/react-native|axe|sensitive-fields|@nkaurelien\\/nest-bugsnag|winston-3-bugsnag-transport" tags: diff --git a/rules/sinks/third_parties/sdk/classyh/javascript.yaml b/rules/sinks/third_parties/sdk/classyh/javascript.yaml deleted file mode 100644 index 32775396..00000000 --- a/rules/sinks/third_parties/sdk/classyh/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Classyh - name: Classyh - domains: - - "classyh.at" - patterns: - - "@apollosproject\\/data-connector-cloudinary" - tags: diff --git a/rules/sinks/third_parties/sdk/cloudinary/javascript.yaml b/rules/sinks/third_parties/sdk/cloudinary/javascript.yaml index b42a46bf..f45a4f6e 100644 --- a/rules/sinks/third_parties/sdk/cloudinary/javascript.yaml +++ b/rules/sinks/third_parties/sdk/cloudinary/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "cloudinary.com" patterns: - - "next-cloudinary|nodebb-plugin-cloudstorage|cloudinary-core|netlify-cms-media-library-cloudinary|cloudinary-build-url|ghost-storage-cloudinary|simple-cloudinary|responsive-configuration-builder|gridsome-transformer-img|react-cloudinary|multer-storage-cloudinary|@igloo-be\\/netlify-cms-media-library-cloudinary|ssimulacra-bin|angular-cloudinary|ngx-picture|@zifahm\\/uppy-cloudinary|multer-cloudinary|adonis-4-cloudinary|easy-cloudinary-eager-transformation|alfredinary|@talves\\/netlify-cms-media-library-cloudinary|react-native-cloudinary-image-display|vuetify-cloudinary-upload|comot|@cld-apis\\/types|@cloudinary\\/react|@dylanvann\\/gatsby-cloudinary|@forgettingpasswords\\/netlify-cms-media-library-cloudinary|marked-cloudinary|wdio-allure-ts|cloudinary-react|cloudinary_js|cloudinary-vue|ghost-cloudinary-store|react-native-cloudinary-sizing|cloudinary|cloudinary-microurl|cloudinary-video-player|react-cloudinary-lazy-image|@dylanvann\\/gatsby-remark-cloudinary|gridsome-source-cloudinary|gs-image-node|cloudinary-tiny-js|vue-cloudinary|express-cloudinary|ngx-cloudinary-upload-widget|cloudinary-multer|react-native-cloudinary-x|hexo-cloudinary|cloudinary-upload|react-element-size-reporter|@nerevu\\/cloudinary-brunch|@cloudinary\\/url-gen|gatsby-source-cloudinary|@gilbarbara\\/cloudinary|@ekwoka\\/x-rias|@cloudinary\\/html|@cloudinary\\/angular|@cloudinary\\/svelte|vue-cloudinary-media-library-plugin|hexo-cldnry|@mayas\\/cld-api|element-size-reporter|handlebars-cloudinary|@app-masters\\/react-cloudinary-uploader|@cloudinary\\/angular-4.x|@cloudinary\\/js-streaming|cloudinary-angular|cloudinary-url|angular-tiny-cloudinary|vue-cloudinary-plugin|sanity-plugin-asset-source-cloudinary|cloudinary-promised|cloudinary-workbox-plugin|adonisjs-cloudinary|react-native-cloudinary-unsigned|gridsome-plugin-cloudinary|eleventy-plugin-cloudinary|strapi-provider-upload-cloudinary-folderoptions|@socialize\\/cloudinary|@cld-apis\\/utils|@nuxtjs\\/cloudinary|@cloudinary\\/angular-5.x|cloudinary_ng" + - "next-cloudinary|nodebb-plugin-cloudstorage|cloudinary-core|netlify-cms-media-library-cloudinary|cloudinary-build-url|ghost-storage-cloudinary|simple-cloudinary|responsive-configuration-builder|gridsome-transformer-img|react-cloudinary|@apollosproject\\/data-connector-cloudinary|multer-storage-cloudinary|@igloo-be\\/netlify-cms-media-library-cloudinary|ssimulacra-bin|angular-cloudinary|ngx-picture|@zifahm\\/uppy-cloudinary|multer-cloudinary|adonis-4-cloudinary|easy-cloudinary-eager-transformation|alfredinary|@talves\\/netlify-cms-media-library-cloudinary|react-native-cloudinary-image-display|vuetify-cloudinary-upload|comot|@cld-apis\\/types|@cloudinary\\/react|@dylanvann\\/gatsby-cloudinary|@forgettingpasswords\\/netlify-cms-media-library-cloudinary|marked-cloudinary|wdio-allure-ts|cloudinary-react|cloudinary_js|cloudinary-vue|ghost-cloudinary-store|react-native-cloudinary-sizing|cloudinary|cloudinary-microurl|cloudinary-video-player|react-cloudinary-lazy-image|@dylanvann\\/gatsby-remark-cloudinary|gridsome-source-cloudinary|gs-image-node|cloudinary-tiny-js|vue-cloudinary|express-cloudinary|ngx-cloudinary-upload-widget|cloudinary-multer|react-native-cloudinary-x|hexo-cloudinary|cloudinary-upload|react-element-size-reporter|@nerevu\\/cloudinary-brunch|@cloudinary\\/url-gen|gatsby-source-cloudinary|@gilbarbara\\/cloudinary|@ekwoka\\/x-rias|@cloudinary\\/html|@cloudinary\\/angular|@cloudinary\\/svelte|vue-cloudinary-media-library-plugin|hexo-cldnry|@mayas\\/cld-api|element-size-reporter|handlebars-cloudinary|@app-masters\\/react-cloudinary-uploader|@cloudinary\\/angular-4.x|@cloudinary\\/js-streaming|cloudinary-angular|cloudinary-url|angular-tiny-cloudinary|vue-cloudinary-plugin|sanity-plugin-asset-source-cloudinary|cloudinary-promised|cloudinary-workbox-plugin|adonisjs-cloudinary|react-native-cloudinary-unsigned|gridsome-plugin-cloudinary|eleventy-plugin-cloudinary|strapi-provider-upload-cloudinary-folderoptions|@socialize\\/cloudinary|@cld-apis\\/utils|@nuxtjs\\/cloudinary|@cloudinary\\/angular-5.x|cloudinary_ng" tags: diff --git a/rules/sinks/third_parties/sdk/cylonjs/javascript.yaml b/rules/sinks/third_parties/sdk/cylonjs/javascript.yaml index 4a8a6380..c9d8d565 100644 --- a/rules/sinks/third_parties/sdk/cylonjs/javascript.yaml +++ b/rules/sinks/third_parties/sdk/cylonjs/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "cylonjs.com" patterns: - - "cylon-force" + - "cylon" tags: diff --git a/rules/sinks/third_parties/sdk/draftjs/javascript.yaml b/rules/sinks/third_parties/sdk/draftjs/javascript.yaml deleted file mode 100644 index dfb1bf7c..00000000 --- a/rules/sinks/third_parties/sdk/draftjs/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Draftjs - name: Draftjs - domains: - - "draftjs.org" - patterns: - - "@sendgrid\\/draft-js" - tags: diff --git a/rules/sinks/third_parties/sdk/lunr/javascript.yaml b/rules/sinks/third_parties/sdk/emailjs/javascript.yaml similarity index 66% rename from rules/sinks/third_parties/sdk/lunr/javascript.yaml rename to rules/sinks/third_parties/sdk/emailjs/javascript.yaml index 59e26338..e1f1bb09 100644 --- a/rules/sinks/third_parties/sdk/lunr/javascript.yaml +++ b/rules/sinks/third_parties/sdk/emailjs/javascript.yaml @@ -4,10 +4,10 @@ sinks: - - id: ThirdParties.SDK.Lunr - name: Lunr + - id: ThirdParties.SDK.EmailJS + name: EmailJS domains: - - "lunrjs.com" + - "emailjs.com" patterns: - - "lunr" + - "emailjs-com" tags: diff --git a/rules/sinks/third_parties/sdk/firebaseapp/javascript.yaml b/rules/sinks/third_parties/sdk/firebaseapp/javascript.yaml index 6270a17b..16152ddf 100644 --- a/rules/sinks/third_parties/sdk/firebaseapp/javascript.yaml +++ b/rules/sinks/third_parties/sdk/firebaseapp/javascript.yaml @@ -4,11 +4,11 @@ sinks: - - id: ThirdParties.SDK.Firebaseapp.Ngx-auth-firebaseui - name: Firebaseapp Ngx-auth-firebaseui + - id: ThirdParties.SDK.Firebaseapp + name: Firebaseapp domains: - - "ngx-auth-firebaseui.firebaseapp.com" + - "firebaseapp.com" patterns: - "firebaseio[.]com" - - "ngx-auth-firebaseui|@asithade\\/ngx-auth-firebaseui" + - "ngx-auth-firebaseui|@asithade\\/ngx-auth-firebaseui|@fire-fly\\/jugnu" tags: diff --git a/rules/sinks/third_parties/sdk/gatsbyjs/javascript.yaml b/rules/sinks/third_parties/sdk/gatsbyjs/javascript.yaml index c6663880..a1bc1d2d 100644 --- a/rules/sinks/third_parties/sdk/gatsbyjs/javascript.yaml +++ b/rules/sinks/third_parties/sdk/gatsbyjs/javascript.yaml @@ -9,13 +9,5 @@ sinks: domains: - "gatsbyjs.com" patterns: - - "gatsby-plugin-gatsby-cloud" - tags: - - - id: ThirdParties.SDK.Gatsbyjs - name: Gatsbyjs - domains: - - "gatsbyjs.org" - patterns: - - "@ccalamos\\/gatsby-source-googlemaps-static" + - "gatsby-plugin-gatsby-cloud|@ccalamos\\/gatsby-source-googlemaps-static" tags: diff --git a/rules/sinks/third_parties/sdk/github/javascript.yaml b/rules/sinks/third_parties/sdk/github/javascript.yaml index df8df386..ef7c0876 100644 --- a/rules/sinks/third_parties/sdk/github/javascript.yaml +++ b/rules/sinks/third_parties/sdk/github/javascript.yaml @@ -22,38 +22,6 @@ sinks: - "admob-plus-cordova|gdevelop-cordova-admob-plus|@admob-plus\\/capacitor|@admob-plus\\/ionic|@admob-plus\\/react-native|cordova-admob-plus-nl" tags: - - id: ThirdParties.SDK.Github.Angulartics - name: Github Angulartics - domains: - - "angulartics.github.io" - patterns: - - "angulartics2|angulartics|angulartics-piwik" - tags: - - - id: ThirdParties.SDK.Github.Bamlab - name: Github Bamlab - domains: - - "bamlab.github.io" - patterns: - - "@bam.tech\\/react-native-batch" - tags: - - - id: ThirdParties.SDK.Github.Contactlab - name: Github Contactlab - domains: - - "contactlab.github.io" - patterns: - - "contactsnag" - tags: - - - id: ThirdParties.SDK.Firefly-jugnu - name: Firefly-jugnu - domains: - - "firefly-jugnu.github.io" - patterns: - - "@fire-fly\\/jugnu" - tags: - - id: ThirdParties.SDK.Flamelink name: Flamelink domains: @@ -100,36 +68,4 @@ sinks: - "react-native-share.github.io" patterns: - "react-native-share" - tags: - - - id: ThirdParties.SDK.Github.Recallgraph - name: Github Recallgraph - domains: - - "recallgraph.github.io" - patterns: - - "@recallgraph\\/foxx-tracer" - tags: - - - id: ThirdParties.SDK.Github.Reidjs - name: Github Reidjs - domains: - - "reidjs.github.io" - patterns: - - "react-firebase-input" - tags: - - - id: ThirdParties.SDK.Github.Relay-tools - name: Github Relay-tools - domains: - - "relay-tools.github.io" - patterns: - - "relay-hooks" - tags: - - - id: ThirdParties.SDK.Github.Ventx - name: Github Ventx - domains: - - "ventx.github.io" - patterns: - - "@ventx\\/ler53s3" - tags: + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/google/javascript.yaml b/rules/sinks/third_parties/sdk/google/javascript.yaml index 849ed7f1..4c2b88e2 100644 --- a/rules/sinks/third_parties/sdk/google/javascript.yaml +++ b/rules/sinks/third_parties/sdk/google/javascript.yaml @@ -210,7 +210,7 @@ sinks: domains: - "cloud.google.com/storage" patterns: - - "electron-publisher-gcs|gstorage-video-optimizer|skipper-gcstorage|@google-cloud\\/storage|@nx-extend\\/gcp-storage|@google-cloud\\/storage-transfer|google-cloud-storage-standalone|ghost-google-cloud-storage-serve" + - "electron-publisher-gcs|gstorage-video-optimizer|skipper-gcstorage|@google-cloud\\/storage|@nx-extend\\/gcp-storage|@google-cloud\\/storage-transfer|google-cloud-storage-standalone|ghost-google-cloud-storage-serve|@augmentedjs\\/gcp-resource-manager" tags: - id: ThirdParties.SDK.Google.Cloud.Datastore diff --git a/rules/sinks/third_parties/sdk/helmet/javascript.yaml b/rules/sinks/third_parties/sdk/helmet/javascript.yaml deleted file mode 100644 index f425ba94..00000000 --- a/rules/sinks/third_parties/sdk/helmet/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Helmet - name: Helmet - domains: - - "helmetjs.github.io" - patterns: - - "helmet" - tags: diff --git a/rules/sinks/third_parties/sdk/intercom/javascript.yaml b/rules/sinks/third_parties/sdk/intercom/javascript.yaml index 7f1c00a2..3347aabb 100644 --- a/rules/sinks/third_parties/sdk/intercom/javascript.yaml +++ b/rules/sinks/third_parties/sdk/intercom/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "intercom.io" patterns: - - "intercom-next|ember-elevio|gatsby-plugin-intercom-spa|react-intercom-widget|ember-metrics|intercom.io|cordova-plugin-intercom|tabex|react-use-intercom|ember-intercom-io|ng-intercom|@analytics\\/intercom|passport-intercom|crosstab|react-live-chat-loader|intercom-react|cwb|@segment\\/analytics.js-integration-intercom|facet-intercom|@reclaim-ai\\/react-intercom-hook|next-intercom|gatsby-plugin-intercom|intercom-service-js|react-intercom-hook|ng-intercom-angular-ten|angular-intercom|intercom-facade|simple-node-intercom-io|@paperbits\\/intercom|tab-emitter|use-intercom-hook|ng-intercom-upd|@mentorly\\/react-intercom-hook|wechaty-intercom|@musicplayce\\/intercom-ts|@mobileaction\\/ui-modules|vuepress-intercom|intercomly|@vai0s-org\\/react-use-intercom|react-custom-chat|@beyonk\\/svelte-intercom|@efstajas\\/tela|intercom-react-native|@vai0\\/react-use-intercom|@runnable\\/orion|ng2-intercom|react-facebook-message-us|@getlago\\/passport-intercom|@jackmerrill\\/next-intercom|ng-intercom-multi" + - "intercom-next|trailpack-intercom|ember-elevio|gatsby-plugin-intercom-spa|react-intercom-widget|ember-metrics|intercom.io|cordova-plugin-intercom|tabex|react-use-intercom|ember-intercom-io|ng-intercom|@analytics\\/intercom|passport-intercom|crosstab|react-live-chat-loader|intercom-react|cwb|@segment\\/analytics.js-integration-intercom|facet-intercom|@reclaim-ai\\/react-intercom-hook|next-intercom|gatsby-plugin-intercom|intercom-service-js|react-intercom-hook|ng-intercom-angular-ten|angular-intercom|intercom-facade|simple-node-intercom-io|@paperbits\\/intercom|tab-emitter|use-intercom-hook|ng-intercom-upd|@mentorly\\/react-intercom-hook|wechaty-intercom|@musicplayce\\/intercom-ts|@mobileaction\\/ui-modules|vuepress-intercom|intercomly|@vai0s-org\\/react-use-intercom|react-custom-chat|@beyonk\\/svelte-intercom|@efstajas\\/tela|intercom-react-native|@vai0\\/react-use-intercom|@runnable\\/orion|ng2-intercom|react-facebook-message-us|@getlago\\/passport-intercom|@jackmerrill\\/next-intercom|ng-intercom-multi" tags: diff --git a/rules/sinks/third_parties/sdk/mapbox/javascript.yaml b/rules/sinks/third_parties/sdk/mapbox/javascript.yaml index 217b4f44..f633d097 100644 --- a/rules/sinks/third_parties/sdk/mapbox/javascript.yaml +++ b/rules/sinks/third_parties/sdk/mapbox/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "mapbox.com" patterns: - - "@mapbox\\/mapbox-sdk|mapbox|react-map-gl" + - "@mapbox\\/mapbox-sdk|mapbox|react-map-gl|mapbox-gl" tags: diff --git a/rules/sinks/third_parties/sdk/minicartjs/javascript.yaml b/rules/sinks/third_parties/sdk/minicartjs/javascript.yaml deleted file mode 100644 index 7dc76c96..00000000 --- a/rules/sinks/third_parties/sdk/minicartjs/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Minicartjs - name: Minicartjs - domains: - - "minicartjs.com" - patterns: - - "minicart" - tags: diff --git a/rules/sinks/third_parties/sdk/okta/javascript.yaml b/rules/sinks/third_parties/sdk/okta/javascript.yaml index fefa1e6d..b33c068b 100644 --- a/rules/sinks/third_parties/sdk/okta/javascript.yaml +++ b/rules/sinks/third_parties/sdk/okta/javascript.yaml @@ -9,5 +9,6 @@ sinks: domains: - "okta.com" patterns: - - "@okta\\/okta-vue|@okta\\/okta-auth-js|@okta\\/okta-react" + - "@okta\\/okta-(vue|auth-js|react)" + - ".*OktaAuth" tags: diff --git a/rules/sinks/third_parties/sdk/orkanjs/javascript.yaml b/rules/sinks/third_parties/sdk/orkanjs/javascript.yaml deleted file mode 100644 index 27923682..00000000 --- a/rules/sinks/third_parties/sdk/orkanjs/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Orkanjs - name: Orkanjs - domains: - - "orkanjs.com" - patterns: - - "orkan" - tags: diff --git a/rules/sinks/third_parties/sdk/segment/javascript.yaml b/rules/sinks/third_parties/sdk/segment/javascript.yaml index c40026f7..26fd447c 100644 --- a/rules/sinks/third_parties/sdk/segment/javascript.yaml +++ b/rules/sinks/third_parties/sdk/segment/javascript.yaml @@ -9,7 +9,7 @@ sinks: domains: - "segment.com" patterns: - - "analytics.js-loader|analytics-node" + - "analytics.js-loader|analytics-node|@segment\\/snippet" tags: - id: ThirdParties.SDK.Segment diff --git a/rules/sinks/third_parties/sdk/sentry/javascript.yaml b/rules/sinks/third_parties/sdk/sentry/javascript.yaml index 252ce2fb..f514554b 100644 --- a/rules/sinks/third_parties/sdk/sentry/javascript.yaml +++ b/rules/sinks/third_parties/sdk/sentry/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "sentry.io" patterns: - - "@sentry\\/utils|raven-js|angular-raven|react-raven|adonis-sentry|node-sentry-error-reporter|@randy.tarampi\\/browser-logger|raven-logger|meanie-express-raven-service|uber-raven|nest-raven|vue-raven|good-sentry|bunyan-sentry-stream|raven|@randy.tarampi\\/lambda-logger|react-sentry-error-boundary|@pager\\/hapi-raven|react-native-sentry-android|winston-sentry-node|@ecg\\/vue-raven|@nglogger\\/raven|@dreipol\\/vue-log|adonis-sentry-v2|winston-transport-sentry|sails-hook-sentry|koa2-raven|@randy.tarampi\\/serverless|ravenjs-ignores|@sentry\\/tracing|@sentry\\/rrweb|sentry-monitor|@nuxtjs\\/sentry|error-receiver|crash-reporter-middleware|@sentry-internal\\/global-search|prism-sentry|@sentry\\/wizard|@sentry\\/core|@sentry\\/hub|@ntegral\\/nestjs-sentry|@sentry\\/gatsby" + - ".*sentry|@sentry\\/utils|raven-js|angular-raven|react-raven|adonis-sentry|node-sentry-error-reporter|@randy.tarampi\\/browser-logger|raven-logger|meanie-express-raven-service|uber-raven|nest-raven|vue-raven|good-sentry|bunyan-sentry-stream|raven|@randy.tarampi\\/lambda-logger|react-sentry-error-boundary|@pager\\/hapi-raven|react-native-sentry-android|winston-sentry-node|@ecg\\/vue-raven|@nglogger\\/raven|@dreipol\\/vue-log|adonis-sentry-v2|winston-transport-sentry|sails-hook-sentry|koa2-raven|@randy.tarampi\\/serverless|ravenjs-ignores|@sentry\\/tracing|@sentry\\/rrweb|sentry-monitor|@nuxtjs\\/sentry|error-receiver|crash-reporter-middleware|@sentry-internal\\/global-search|prism-sentry|@sentry\\/wizard|@sentry\\/core|@sentry\\/hub|@ntegral\\/nestjs-sentry|@sentry\\/gatsby" tags: diff --git a/rules/sinks/third_parties/sdk/trailsjs/javascript.yaml b/rules/sinks/third_parties/sdk/trailsjs/javascript.yaml deleted file mode 100644 index e8c82590..00000000 --- a/rules/sinks/third_parties/sdk/trailsjs/javascript.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Trailsjs - name: Trailsjs - domains: - - "trailsjs.io" - patterns: - - "trailpack-intercom|trails|trailpack-plv8" - tags: diff --git a/rules/sinks/third_parties/sdk/wechat/javascript.yaml b/rules/sinks/third_parties/sdk/wechat/javascript.yaml index 4afccfcc..3fd7c791 100644 --- a/rules/sinks/third_parties/sdk/wechat/javascript.yaml +++ b/rules/sinks/third_parties/sdk/wechat/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "wechat.com" patterns: - - "yochat|nodebb-plugin-sso-work-wechat|cn-pay|node-weixin|react-wechat-login|sk-smart-ui|wechat-pay|wx-payment|wechat-payment-node|egg-wechat-all|co-wxpay|co-wxsign|payxpert|@walkthechat\\/wechat-pay|wechat-pay-samicelus|hollow|@remax\\/plugin-sass|react-native-sf-wx-pay|zedmommyui|wechat-koa-samicelus|@vue-mini\\/wechat|react-native-letote-wechat|wechat-pay-v3|@lx-frontend\\/real-time-logger|libwx|minii|@walkthechat\\/wechat-toolkit|wechat-menu-editor|wechat-toolkit|passport-wechat-public|@shm-open\\/react-native-wechat|wework-chat|@easyapp\\/wechat|weixin-ts-sdk|wechat_jsapi_sign|wx-sdk-ts|@jinyexin\\/wechat|three-platformize-demo|node-wxpay3|node-red-contrib-viseo-wechat|wechat-sdk-fjtjg|wechat-enterprise-for-kfService|vue-wexin-emojis|react-native-wxwork|wechatpay|vue-weixin-emojis|mobx-wxapp|wechat_spider_mysql|@roadup\\/smi|wecomjsdk|applets-request-mode-list|wechaty-puppet-ioscat|chuck-wechat|md2wx|@kv-design\\/kui-mobile|@heshop\\/heshop.uni|hc-miniapp-monitor|wechat-request|@tuofeng\\/react-native-wechat|co-wechat-parser|miniapp-spore|tenpay-mr|ltg-wechat|mulit-article-publisher|@mirari\\/mp-common|xx-weixin-pay|rxjs-mp|compatible-storage|@antv\\/f6-alipay|wechat-wepy-plugin|wechat-weixin|@tarojsx\\/library|@woolson\\/wx-pusher|@li-yinan\\/citics|momiwpi|@gblinker\\/wechat-jssdk|wechat-enterprise-util|botbuilder-wechaty-connector|node-wechat-sign|skatch|jsl-vue-h5|@jefth\\/tinyapi|doomiwechat|@tarojsx\\/polyfill|koa3-wechat|wx-canvas|wechat-mp-hack|weixin-jsapi-xk|wx-compile-key|create-wxapp|mpauthx|@lantsang\\/nestjs-mp|koa-wechat-public|imeepos-framework|wechat-platform|typed-we-app|third-wafer-node-sdk|wechat-kit|@fourdim\\/wechat-miniapp-qrcode|wx.js|ant-tfjs-lite-wechat|ans-wechat-sdk|weapp-api|wechat-node-sdk|itchat|wx-voice|@pandolajs\\/pandora-boilerplate-wechat|hubot-wechat-better|jweixin-wechat|@zhuxian\\/fly|jweixin-js|express-wx|wechat-koa|wechat-node-sp|lin-wx-ui|vue-on-wechat|@axolo\\/egg-wechat-mp|wechat_spider|wepy-plugin-wux|momoui-miniprogram|egg-mp-v3|wepts|wy-tenpay|hubot-another-weixin|orm-weapp|@x-drive\\/x-launch|yi-frames-wx|promise-wechat-api|react-native-pure-wechat|simpleddp-wechat-miniprogram-dirver|zn-plugin-wechat|sactive-bot|wepy-plugin-iview|weixin-trap|modal-upgrade|taro-dropdown|wx-http-middleware|mp-universal-analytics|wechat-sign|wxs-sdk|node-wechat-terminal|kx-wechat|react-native-cm-wechat-pay|mpex|wechat-enterprise-sdk|miniprogram-sprite|fetch-auth-code|wechat_service_message|koahub-wechat|wepy-plugin-vant|wechat-common|swiftpass-payment|@yz1311\\/react-native-easy-chat-ui|react-native-my-we-chat|easy-wx|@dengpengks\\/react-native-wechat|passport-wechat-work|nativescript-wechat-login-knotes|wechat-inform|gitbook-plugin-encourage|wecache|miniprogram-types|wechat-handy|weide|wechat-mqtt|wechat-miniprogram-dialog|koa-wechat-body|tenpay-v2|react-native-wechat-ios|open-wechat-api-platform|weixin-mp|utils-wechat|miniprogram-picker|react-wechat-emoji|saasjs-wechat|vuebly|wxe-auth-express|koa2-weixin|wechat-es|react-native-zhifu-wechatpay|wechat-rematch|@antv\\/g6-alipay|@antv\\/g6-wx|mp-new|onebuck|egret|node-wechat-oauth|rn-wechat-mini|wechat-message|wxbizmsgcrypt|@areslabs\\/alita|mp-ci|@remax\\/plugin-less|passport-wechat-enterprise|push-all-in-one|wechaty-puppet-official-account|@ysyp\\/ui|gitbook-plugin-lock|egg-wechat-pay|@dimorder\\/cordova-plugin-wechat|betanet-mini-ui|wechaty-puppet-gitter|peer-wechat-api|react-native-wechat-ts|miniapp-color-thief|angular-miniprogram|wx-canvas-2d|@ysyp\\/utils|chaty|wechat-ble-swap-comm-kit|co-wechat-api-new|wechat-one|@cycjimmy\\/weixin-share|wechaty-puppet-walnut|egg-mp|@ysyp\\/stores|weapp-enhance|wechatpay-node-v3|react-native-multi-share|in-which-browser|woap|wechaty-puppet-lark|weapp-minipack|wxapi-issdk|wechat-pay-node-t|@chatie\\/angular|new-wechat-tools|matrix-appservice-wechaty|@zeronejs\\/wechat-login|react-native-wechat-with-miniprogram-share|@antv\\/f6-wx|yiren-wxwork-api|generator-wxnode-boilerplate|messaging-api-wechat|@shed\\/utils|wx-touch-event|node-red-contrib-bizwechat|open-wechat-api|angular4-weui|anychat-enterprise-api|@wbenxin\\/co-wechat-enterprise-api|wechat-card|wechat|wechaty|wechat-oauth|wechat-api|wechat-crypto|co-wechat|co-wechat-api|co-wechat-oauth|react-native-wechat|weixin-pay|cordova-plugin-wechat|wechat-mp|wechat-enterprise-api|wechat-jssdk|react-weui|wechat-encrypt|wxbarcode|hubot-weixin|react-native-wx|wx-connect|weixin-robot|web-wechat-login|wx|recime|mta-wechat-analysis|wechat-cash|weixin-service|weapp-next|wechat-tools|wechaty-puppet|generator-workflow|wechat-js-signature|tenpay|co-wechat-open-api|koa-wechat|wechat-parser|node-weixin-express|anychat|jweixin-module|wechat-oauth-middleware|express-jssdk|@neuroo_fe\\/wechat-reply|generate-weapp-page|weixin-api|weixin-token|wechat-pay-sdk|cordova-plugin-social|wechat-api-platform|wei|cordova-share-js|botbuilder-wechat-connector|lecheng-wechat|hubot-weixin-2|wechat-pay-api|xchat_public_platform|wx-mp-api|wechat-promise|nodebb-plugin-wechat-share|@neuroo_fe\\/wechat-user-iterator|third-wx-pay|wechat-wrap|wx-pay|co-open-wechat-api|applet-api|nodebb-plugin-sso-wechat|wechat-hack-api|co-wechat-corp|wechat-node|@neuroo_fe\\/wechat-template-mass|wechat-nodejs|passport-wechat-auth|wechat-pro|weixin-node|vilic-cordova-plugin-wechat|qqface-parser|wechaty-puppet-wechat|wechaty-puppet-service|weixin-jsapi|wechaty-puppet-padplus|co-wxbase|react-native-wechat-lib|co-wechat-payment|weapp-qrcode|wechaty-puppet-xp|mobx-miniprogram-bindings|@zhennann\\/co-wechat-api|react-native-easy-chat-ui|react-native-puti-pay|orcrist-wechat|labrador|webot|qcloud-weapp-server-sdk|wechat-jssdk-ts|wechaty-puppet-hostie|@sigodenjs\\/wechatpay|vue-canvas-poster|okam-component|wxeact|we-validator|miniapp-middleware-contracts|wx-ding-aes|@cmdotcom\\/text-sdk|mp-sdk-rojer|@wxml\\/parser|@zhennann\\/co-wxwork-api|co-wechat-body|vod-wx-sdk-v2|weixin-sdk-js|cloud-uni|egg-born-module-a-wechat|@yyyyu\\/react-native-wechat|wechat-token|wechaty-puppet-puppeteer|applets-request|wechat-js-sdk-s|open-weixin-api|wx-fetch|three-platformize|@areslabs\\/alita-core|wechat-lite|node-socialite|weapp-qrcode-canvas-2d|wechat-enterprise|@megalo\\/api|wafer-node-sdk|think-wechat|mini-entry|mp-progress|tenpay-zengxiaohui|@shed\\/gl|@tarojsx\\/history|@tarojsx\\/hooks|general-mqtt|yuntun-wechat-jssdk|wechat-square-bracket-emotions|@znode\\/sign|express-wechat-access|@axolo\\/node-wechat-mp|signature-mobile-wechat|applets-request-all|@axolo\\/node-wechat|taro-dom-align|weixin-redpack|light-wechat|koa-weixin-jssdk|sdk-wechat|co-wxapi|al-request|co-wxtoken|@ycnt\\/wechatpay|miniapp-token-based-login|@remax\\/core|co-wxqrcode|co-wxauth|rn-wechat-fix|co-wxmsg|vod-wx-sdk|@wongyouth\\/wxpay|co-wxjsapi|co-wxasset|z_wechat_pay_partner|cordova-plugin-seatune-wechat|wxapp-auth|cordova-plugin-seatune-pingpp|wechat-cryptor|co-wxkf|co-wxuser|vi-popup|wxeact-storage|parse-wechat-xml|express-weapp-auth|wepy-com-paper-drawer|skyline-wechat-enterprise-api|wxeact-immutable|wechat-mini-program-auth|wechat-signature|labrador-storage|labrador-immutable|sp-wx|wechat-enterprise-api-ghost|octoparse2|wafer-node-mongoose-sdk|webot-debug|wechaty-puppet-whatsapp|wechaty-puppet-wechat4u|wechaty-puppet-oicq|miniprogram-versions|wechat-emoji-parser|gitbook-plugin-donate|@tarojsx\\/ui|@fanx\\/wxstore|twm-weapp|ewa|wechaty-puppet-padpro|weixin-webview-jssdk|co-wxapp-open-api|wxcrypt|@skit\\/wxjssdk-promisify|@heytea\\/react-native-wechat|node-easywechat|react-native-wechat-libs|umeng-points|uni-request|@charles_yxh\\/nestjs-mp|zxnz-core-wechat|wwto|vdonate|entry-check|nodebb-plugin-sso-wechat-web|abeta-mini-ui|sk-smarty-ui|react-native-wechat-androidx|dora-wechat-oauth|@strategy\\/node-tenpay|egg-born-module-a-wxwork|generator-wechat-bot|@tybys\\/jweixin|weixin-nodejs|wechaty-puppet-simplepad|vue-wechat|yp-wx-payment|weapp-demo|dora-wechat-oauth-browser|@walkthechat\\/wechat-oauth|react-native-wechat-ck|utils94|wechaty-puppet-macpro|@react-native-hero\\/wechat|simple-wechat|wechat-auth|wxapp-open-api|@skit\\/wxmini-promisify|@iosecret\\/wechat|mpnats|common-mpvue|wechat-store|wx-gzh|mpapi" + - "wechat|weapp-|yochat|nodebb-plugin-sso-work-wechat|cn-pay|node-weixin|react-wechat-login|sk-smart-ui|wx-payment|egg-wechat-all|co-wxpay|co-wxsign|payxpert|@walkthechat\\/wechat-pay|@remax\\/plugin-sass|react-native-sf-wx-pay|zedmommyui|@vue-mini\\/wechat|react-native-letote-wechat|@lx-frontend\\/real-time-logger|@walkthechat\\/wechat-toolkit|passport-wechat-public|@shm-open\\/react-native-wechat|wework-chat|@easyapp\\/wechat|weixin-ts-sdk|wx-sdk-ts|@jinyexin\\/wechat|three-platformize-demo|node-wxpay3|node-red-contrib-viseo-wechat|vue-wexin-emojis|react-native-wxwork|vue-weixin-emojis|mobx-wxapp|@roadup\\/smi|wecomjsdk|applets-request-mode-list|chuck-wechat|@kv-design\\/kui-mobile|@heshop\\/heshop.uni|hc-miniapp-monitor|@tuofeng\\/react-native-wechat|co-wechat-parser|miniapp-spore|tenpay-mr|ltg-wechat|mulit-article-publisher|@mirari\\/mp-common|xx-weixin-pay|compatible-storage|@antv\\/f6-alipay|@tarojsx\\/library|@woolson\\/wx-pusher|@li-yinan\\/citics|momiwpi|@gblinker\\/wechat-jssdk|botbuilder-wechaty-connector|node-wechat-sign|jsl-vue-h5|@jefth\\/tinyapi|doomiwechat|@tarojsx\\/polyfill|koa3-wechat|wx-canvas|weixin-jsapi-xk|wx-compile-key|create-wxapp|mpauthx|@lantsang\\/nestjs-mp|koa-wechat-public|imeepos-framework|typed-we-app|third-wafer-node-sdk|@fourdim\\/wechat-miniapp-qrcode|ant-tfjs-lite-wechat|ans-wechat-sdk|itchat|wx-voice|@pandolajs\\/pandora-boilerplate-wechat|hubot-wechat-better|jweixin-wechat|@zhuxian\\/fly|jweixin-js|express-wx|lin-wx-ui|vue-on-wechat|@axolo\\/egg-wechat-mp|wepy-plugin-wux|momoui-miniprogram|egg-mp-v3|wepts|wy-tenpay|hubot-another-weixin|orm-weapp|@x-drive\\/x-launch|yi-frames-wx|promise-wechat-api|react-native-pure-wechat|simpleddp-wechat-miniprogram-dirver|zn-plugin-wechat|sactive-bot|wepy-plugin-iview|weixin-trap|modal-upgrade|taro-dropdown|wx-http-middleware|mp-universal-analytics|wxs-sdk|node-wechat-terminal|kx-wechat|react-native-cm-wechat-pay|miniprogram-sprite|fetch-auth-code|koahub-wechat|wepy-plugin-vant|swiftpass-payment|react-native-my-we-chat|easy-wx|@dengpengks\\/react-native-wechat|passport-wechat-work|nativescript-wechat-login-knotes|gitbook-plugin-encourage|wecache|weide|koa-wechat-body|react-native-wechat-ios|open-wechat-api-platform|weixin-mp|utils-wechat|miniprogram-picker|react-wechat-emoji|saasjs-wechat|wxe-auth-express|koa2-weixin|react-native-zhifu-wechatpay|@antv\\/g6-alipay|@antv\\/g6-wx|node-wechat-oauth|rn-wechat-mini|wxbizmsgcrypt|@areslabs\\/alita|@remax\\/plugin-less|passport-wechat-enterprise|push-all-in-one|@ysyp\\/ui|gitbook-plugin-lock|egg-wechat-pay|@dimorder\\/cordova-plugin-wechat|betanet-mini-ui|peer-wechat-api|react-native-wechat-ts|miniapp-color-thief|angular-miniprogram|wx-canvas-2d|@ysyp\\/utils|chaty|co-wechat-api-new|@cycjimmy\\/weixin-share|wxapi-issdk|@chatie\\/angular|new-wechat-tools|matrix-appservice-wechaty|@zeronejs\\/wechat-login|react-native-wechat-with-miniprogram-share|@antv\\/f6-wx|yiren-wxwork-api|generator-wxnode-boilerplate|messaging-api-wechat|@shed\\/utils|wx-touch-event|node-red-contrib-bizwechat|open-wechat-api|angular4-weui|anychat-enterprise-api|@wbenxin\\/co-wechat-enterprise-api|co-wechat|co-wechat-api|co-wechat-oauth|react-native-wechat|weixin-pay|cordova-plugin-wechat|react-weui|wxbarcode|hubot-weixin|react-native-wx|wx-connect|weixin-robot|web-wechat-login|mta-wechat-analysis|weixin-service|generator-workflow|tenpay|co-wechat-open-api|koa-wechat|node-weixin-express|anychat|jweixin-module|express-jssdk|@neuroo_fe\\/wechat-reply|generate-i|weixin-token|cordova-plugin-social|cordova-share-js|botbuilder-wechat-connector|lecheng-wechat|hubot-weixin-2|xchat_public_platform|wx-mp-api|nodebb-plugin-wechat-share|@neuroo_fe\\/wechat-user-iterator|third-wx-pay|wx-pay|co-open-wechat-api|applet-api|nodebb-plugin-sso-wechat|co-wechat-corp|@neuroo_fe\\/wechat-template-mass|passport-wechat-auth|weixin-node|vilic-cordova-plugin-wechat|qqface-parser|weixin-jsapi|react-native-wechat-lib|co-wechat-payment|mobx-miniprogram-bindings|@zhennann\\/co-wechat-api|react-native-easy-chat-ui|react-native-puti-pay|orcrist-wechat|webot|qcloud-njs\\/wechatpay|vue-canvas-poster|okam-component|wxeact|we-validator|miniapp-middleware-contracts|wx-ding-aes|@cmdotcom\\/text-sdk|mp-sdk-rojer|@wxml\\/parser|@zhennann\\/co-wxwork-api|co-wechat-body|vod-wx-sdk-v2|weixin-sdk-js|cloud-uni|egg-born-module-a-wechat|@yyyyu\\/react-native-wechat|applets-request|open-weixin-api|wx-fetch|three-platformize|@areslabs\\/alita-core|node-socialite|@megalo\\/api|wafer-node-sdk|think-wechat|mini-entry|mp-progress|tenpay-zengxiaohui|@shed\\/gl|@tarojsx\\/history|@tarojsx\\/hooks|general-mqtt|yuntun-wechat-jssdk|@znode\\/sign|express-wechat-access|@axolo\\/node-wechat-mp|signature-mobile-wechat|applets-request-all|@axolo\\/node-wechat|taro-dom-align|weixin-redpack|light-wechat|koa-weixin-jssdk|sdk-wechat|co-wxapi|al-request|co-wxtoken|@ycnt\\/wechatpay|miniapp-token-based-login|@remax\\/core|co-wxqrcode|co-wxauth|rn-wechat-fix|co-wxmsg|vod-wx-sdk|@wongyouth\\/wxpay|co-wxjsapi|co-wxasset|z_wechat_pay_partner|cordova-plugin-seatune-wechat|wxapp-auth|cordova-plugin-seatune-pingpp|co-wxkf|co-wxuser|vi-popup|wxeact-storage|parse-wechat-xml|express--paper-drawer|skyline-wechat-enterprise-api|wxeact-immutable|labrador-storage|labrador-immutable|octoparse2|wafer-node-mongoose-sdk|webot-debug|miniprogram-versions|gitbook-plugin-donate|@tarojsx\\/ui|@fanx\\/wxstore|twm-weapp|weixin-webview-jssdk|co-wxapp-open-api|wxcrypt|@skit\\/wxjssdk-promisify|@heytea\\/react-native-wechat|node-easywechat|react-native-wechat-libs|@charles_yxh\\/nestjs-mp|zxnz-core-wechat|nodebb-plugin-sso-wechat-web|react-native-wechat-androidx|dora-wechat-oauth|@strategy\\/node-tenpay|egg-born-module-a-wxwork|generator-wechat-bot|@tybys\\/jweixin|weixin-nodejs|vue-wechat|yp-wx-payment|dora-wechat-oauth-browser|@walkthechat\\/wechat-oauth|react-native-wechat-ck|@react-native-hero\\/wechat|simple-wechat|wxapp-open-api|@skit\\/wxmini-promisify|@iosecret\\/wechat|wx-gzh" tags: From bdb392b18330eba50d4d9131a95222d4503fe131 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 19 Jul 2023 12:39:45 +0530 Subject: [PATCH 11/74] Ruby http libraries (#278) * Support for Ruby HTTP client rules * Update the apiHttpLibraries rule for ruby --- config/systemConfig/ruby.yaml | 12 ++++++++++++ rules/sinks/internal_apis/api/ruby.yaml | 6 ++++++ 2 files changed, 18 insertions(+) create mode 100644 config/systemConfig/ruby.yaml create mode 100644 rules/sinks/internal_apis/api/ruby.yaml diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml new file mode 100644 index 00000000..8259aa9f --- /dev/null +++ b/config/systemConfig/ruby.yaml @@ -0,0 +1,12 @@ +systemConfig: + - key: apiHttpLibraries + value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).* + + - key: ignoredSinks + value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* + + - key: apiSinks + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit) + + - key: apiIdentifier + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/internal_apis/api/ruby.yaml b/rules/sinks/internal_apis/api/ruby.yaml new file mode 100644 index 00000000..3c5363a5 --- /dev/null +++ b/rules/sinks/internal_apis/api/ruby.yaml @@ -0,0 +1,6 @@ +sinks: + - id: Sinks.API.InternalAPI + name: Internal APIs + patterns: + - "((http|https|ftp|ssh):\\/\\/){0,1}(((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)\\.?\\b){4}|(localhost))(:[0-9]{2,4}){0,1}(\\/([a-z]){0,1}){0,1}.*" + tags: From aedbee7b60fca4563992d46859abc38a3df66304 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Sat, 22 Jul 2023 13:15:52 +0530 Subject: [PATCH 12/74] Update personal_characteristics.yaml --- rules/sources/personal_characteristics.yaml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/rules/sources/personal_characteristics.yaml b/rules/sources/personal_characteristics.yaml index 5da4b181..79eb0a58 100644 --- a/rules/sources/personal_characteristics.yaml +++ b/rules/sources/personal_characteristics.yaml @@ -1,13 +1,13 @@ sources: - - id: Data.Sensitive.PersonalCharacteristics.Height - name: Height - category: Personal Characteristics - isSensitive: False - sensitivity: low - patterns: - - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" - tags: - law: GDPR + # - id: Data.Sensitive.PersonalCharacteristics.Height + # name: Height + # category: Personal Characteristics + # isSensitive: False + # sensitivity: low + # patterns: + # - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" + # tags: + # law: GDPR - id: Data.Sensitive.PersonalCharacteristics.MaritalStatus name: Marital Status From 00ec5485326997c702f9594d9f3d60cb99af78e9 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Sat, 22 Jul 2023 13:18:30 +0530 Subject: [PATCH 13/74] Update biometric_data.yaml --- rules/sources/biometric_data.yaml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/rules/sources/biometric_data.yaml b/rules/sources/biometric_data.yaml index e029814d..98fb0a93 100644 --- a/rules/sources/biometric_data.yaml +++ b/rules/sources/biometric_data.yaml @@ -1,13 +1,13 @@ sources: - - id: Data.Sensitive.BiometricData.FingerprintScans - name: Fingerprint Scans - category: Biometric Data - isSensitive: True - sensitivity: high - patterns: - - "(?i)finger[^\\s/(;)#|,=!>]{0,5}print|finger[^\\s/(;)#|,=!>]{0,5}print[^\\s/(;)#|,=!>]{0,5}scan" - tags: - law: GDPR + # - id: Data.Sensitive.BiometricData.FingerprintScans + # name: Fingerprint Scans + # category: Biometric Data + # isSensitive: True + # sensitivity: high + # patterns: + # - "(?i)finger[^\\s/(;)#|,=!>]{0,5}print|finger[^\\s/(;)#|,=!>]{0,5}print[^\\s/(;)#|,=!>]{0,5}scan" + # tags: + # law: GDPR - id: Data.Sensitive.BiometricData.IrisRecognition name: Iris Recognition From 35ef43e777bb22c1a2febb9975a776402f873713 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Thu, 27 Jul 2023 15:49:38 +0530 Subject: [PATCH 14/74] Ruby SDK + JS Fixes (#282) * Support for Ruby HTTP client rules * Update the apiHttpLibraries rule for ruby * Additional ruby sdk + minor JS fixes * Minor corrections in rules * Fix the typo in fetchapi --- config/systemConfig/javascript.yaml | 6 +++--- rules/sinks/storages/couchdb/javascript.yaml | 2 +- rules/sinks/storages/postgres/javascript.yaml | 2 +- .../third_parties/sdk/braintreepayments/ruby.yaml | 13 +++++++++++++ .../sinks/third_parties/sdk/google/javascript.yaml | 2 +- .../third_parties/sdk/launchdarkly/javascript.yaml | 2 +- rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml | 13 +++++++++++++ 7 files changed, 33 insertions(+), 7 deletions(-) create mode 100644 rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index c64a140f..8a939956 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -1,12 +1,12 @@ systemConfig: - key: apiHttpLibraries - value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socket(.){0,1}io|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\\/common\\/http|.*(HttpClient)).* + value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socket(.){0,1}io|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\/common\/http|@(.){2,25}\/http|.*(HttpClient)).* - key: ignoredSinks value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* - key: apiSinks - value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|fetchapi|fetchlegacyxml|createfetch|postform|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) - key: apiIdentifier - value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/storages/couchdb/javascript.yaml b/rules/sinks/storages/couchdb/javascript.yaml index 24b49b78..9b0feec4 100644 --- a/rules/sinks/storages/couchdb/javascript.yaml +++ b/rules/sinks/storages/couchdb/javascript.yaml @@ -6,7 +6,7 @@ sinks: - couchdb.apache.org - apache.org patterns: - - "(?:couchdb|couchdb-.*|rxdb|sqltomango|cradle|crypto-pouch|nano|@treehouses/cli|database-cleaner|couch-db|couch-admin|couchster|fauxton|couch-box|couch-nacl-permit|superlogin|npm-registry-couchapp|putdoc|connect-couchdb|couch-slouch|nano-option|tough-rate|couchdown|connect-cloudant-store|geopouch|filter-pouch|@zargu/couchdb-designer|changemachine|translator-couch|angular-eha.couchdb-auth|moleculer-db-adapter-couchdb-nano|typed-nano|sneakerjs|node-red-contrib-cloudantplus|node-couchdb|@scienceai/create-error|@inator/pouchdb-users|delta-pouch|@hoodie/task-client|stampee-couchdb-change-events|hoodie-server-task|couch-proxy-auth|designer|spawn-pouchdb-server|roy-replicator|connect-nano|ouch-rx|@hoodie/store-server|@hoodie/store-server-api|catlog|resourceful|@stanlemon/react-couchdb-authentication|tibet|@hoodie/account-server|replicate-couchdb-cluster|noflo-couchdb|pouch-datalog|@prescrire/pouchdb-replication-stream|@stanlemon/react-pouchdb|node-couchdb-logger|sync-gateway|@hoodie/account-server-api|jwt-couchdb|couch-login|nano-doc-updater|@twilson63/palmetto-couchdb|hapi-auth-couchdb-cookie|pino-couchdb|@nicodejong/nest-couchdb|winston-couchdb|express-user-couchdb).*" + - "(?:couchdb|couchdb-.*|rxdb|sqltomango|cradle|crypto-pouch|nano(?!-md5)|@treehouses/cli|database-cleaner|couch-db|couch-admin|couchster|fauxton|couch-box|couch-nacl-permit|superlogin|npm-registry-couchapp|putdoc|connect-couchdb|couch-slouch|nano-option|tough-rate|couchdown|connect-cloudant-store|geopouch|filter-pouch|@zargu/couchdb-designer|changemachine|translator-couch|angular-eha.couchdb-auth|moleculer-db-adapter-couchdb-nano|typed-nano|sneakerjs|node-red-contrib-cloudantplus|node-couchdb|@scienceai/create-error|@inator/pouchdb-users|delta-pouch|@hoodie/task-client|stampee-couchdb-change-events|hoodie-server-task|couch-proxy-auth|designer|spawn-pouchdb-server|roy-replicator|connect-nano|ouch-rx|@hoodie/store-server|@hoodie/store-server-api|catlog|resourceful|@stanlemon/react-couchdb-authentication|tibet|@hoodie/account-server|replicate-couchdb-cluster|noflo-couchdb|pouch-datalog|@prescrire/pouchdb-replication-stream|@stanlemon/react-pouchdb|node-couchdb-logger|sync-gateway|@hoodie/account-server-api|jwt-couchdb|couch-login|nano-doc-updater|@twilson63/palmetto-couchdb|hapi-auth-couchdb-cookie|pino-couchdb|@nicodejong/nest-couchdb|winston-couchdb|express-user-couchdb).*" tags: - id: Storages.RxDB.ReadAndWrite diff --git a/rules/sinks/storages/postgres/javascript.yaml b/rules/sinks/storages/postgres/javascript.yaml index 230b5cd5..f1711a5f 100644 --- a/rules/sinks/storages/postgres/javascript.yaml +++ b/rules/sinks/storages/postgres/javascript.yaml @@ -4,5 +4,5 @@ sinks: domains: - postgresql.org patterns: - - "(?:pg|pg-pool|pg-hstore|postgres-bytea|sql-template-strings|pg-native|pg-promise|libpq|sql-bricks|pgsql-ast-parser|mongo-sql|marv-pg-driver|pg-migrator|ts-postgres|@fastify/postgres|pgpass|ah-sequelize-plugin|confabulous|pg-error|aws-xray-sdk-postgres|pg-copy-streams|pogi|pg-escape|@wmfs/pg-diff-sync|data-elevator-postgres|yesql|knex-postgis|trailpack-plv8|pg-query-stream|pg-large-object|sql-bricks-postgres|schemart|pg-x|@yugabytedb/pg-pool|dbh-pg|api-core|postgres-cleaner|persistanz|@wmfs/relationize|@getlago/pgsql-ast-parser|postgres-date|pg-query-native|@wmfs/pg-info|postgres-interval|postgres-array|@urbica/pg-migrate|lego-sql|massive|qlobber-pg|@npm/pg-db-session|node-pg-migrate|v-protocol|@wmp-sbd/aws-xray-sdk-postgres|pg-query-parser|akeke_sequelize_egg_mysql_model|pg-schemats|pg-to-ts|@wmfs/supercopy|schemats|@mgolestan/schemats|v-pool|pg-ast-utils|pg-types|posigrade|pg-x-redis|pg-connect|sequelize-gen|hapi-postgres-connection|@smoke-trees/postgres-backend|pg-patch|postgres|save|pg-cursor|sequelize-replace-enum-postgres|node-postgres-named|pg-protocol|slonik|nact-persistence-postgres|jugglingdb|@trifacta/database-js-postgres|mongo-query-to-postgres-jsonb|@grouparoo/postgres|postgresql-service|related-postgres-analyzer|@runnerty/executor-postgres|@mft/postgres-migrations|@obi-tec/manager-postgres-database|machinepack-postgresql|@gasbuddy/configured-postgres-client|postgres-node-container|sqlutils|extract-pg-schema|kanel|pg-connection-string|@meotimdihia/postgres|psqlorm|sails-postgresql|think-model-postgresql|postgres-repo).*" + - "(?:pg-pool|pg-hstore|postgres-bytea|sql-template-strings|pg-native|pg-promise|libpq|sql-bricks|pgsql-ast-parser|mongo-sql|marv-pg-driver|pg-migrator|ts-postgres|@fastify/postgres|pgpass|ah-sequelize-plugin|confabulous|pg-error|aws-xray-sdk-postgres|pg-copy-streams|pogi|pg-escape|@wmfs/pg-diff-sync|data-elevator-postgres|yesql|knex-postgis|trailpack-plv8|pg-query-stream|pg-large-object|sql-bricks-postgres|schemart|pg-x|@yugabytedb/pg-pool|dbh-pg|api-core|postgres-cleaner|persistanz|@wmfs/relationize|@getlago/pgsql-ast-parser|postgres-date|pg-query-native|@wmfs/pg-info|postgres-interval|postgres-array|@urbica/pg-migrate|lego-sql|massive|qlobber-pg|@npm/pg-db-session|node-pg-migrate|v-protocol|@wmp-sbd/aws-xray-sdk-postgres|pg-query-parser|akeke_sequelize_egg_mysql_model|pg-schemats|pg-to-ts|@wmfs/supercopy|schemats|@mgolestan/schemats|v-pool|pg-ast-utils|pg-types|posigrade|pg-x-redis|pg-connect|sequelize-gen|hapi-postgres-connection|@smoke-trees/postgres-backend|pg-patch|postgres|pg-cursor|sequelize-replace-enum-postgres|node-postgres-named|pg-protocol|slonik|nact-persistence-postgres|jugglingdb|@trifacta/database-js-postgres|mongo-query-to-postgres-jsonb|@grouparoo/postgres|postgresql-service|related-postgres-analyzer|@runnerty/executor-postgres|@mft/postgres-migrations|@obi-tec/manager-postgres-database|machinepack-postgresql|@gasbuddy/configured-postgres-client|postgres-node-container|sqlutils|extract-pg-schema|kanel|pg-connection-string|@meotimdihia/postgres|psqlorm|sails-postgresql|think-model-postgresql|postgres-repo).*" tags: diff --git a/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml b/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml new file mode 100644 index 00000000..cc4d76de --- /dev/null +++ b/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Braintreepayments + name: Braintreepayments + domains: + - "braintreepayments.com" + patterns: + - "(?i)(braintree).*" + tags: diff --git a/rules/sinks/third_parties/sdk/google/javascript.yaml b/rules/sinks/third_parties/sdk/google/javascript.yaml index 4c2b88e2..83246ba0 100644 --- a/rules/sinks/third_parties/sdk/google/javascript.yaml +++ b/rules/sinks/third_parties/sdk/google/javascript.yaml @@ -65,7 +65,7 @@ sinks: domains: - "analytics.google.com" patterns: - - "[@]{0,1}google-analytics|@firebase\\/analytics" + - "@firebase\\/analytics|.*(google-analytics|GoogleAnalyticsService)" tags: - id: ThirdParties.SDK.Google.Cloud diff --git a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml index bd695af5..13d7842c 100644 --- a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml +++ b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "launchdarkly.com" patterns: - - "launchdarkly-node-server-sdk" + - "launchdarkly-node-server-sdk|launchdarkly-react-client-sdk" tags: diff --git a/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml b/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml new file mode 100644 index 00000000..7998a4b2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paddle_Pay + name: Paddle Pay + domains: + - "paddle.com" + patterns: + - "(?i)(paddle_pay).*" + tags: From 0d3345dbf2173af728e0b84cc5c4b80caf9f8f14 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Thu, 27 Jul 2023 16:37:04 +0530 Subject: [PATCH 15/74] JS Fixes (#283) * Ruby http libraries (#278) * Support for Ruby HTTP client rules * Update the apiHttpLibraries rule for ruby * Update personal_characteristics.yaml * Ruby SDK + JS Fixes (#282) * Support for Ruby HTTP client rules * Update the apiHttpLibraries rule for ruby * Additional ruby sdk + minor JS fixes * Minor corrections in rules * Fix the typo in fetchapi --------- Co-authored-by: Hitesh Mahajan --- config/systemConfig/javascript.yaml | 6 +++--- config/systemConfig/ruby.yaml | 12 ++++++++++++ rules/sinks/internal_apis/api/ruby.yaml | 6 ++++++ rules/sinks/storages/couchdb/javascript.yaml | 2 +- rules/sinks/storages/postgres/javascript.yaml | 2 +- .../sdk/braintreepayments/ruby.yaml | 13 +++++++++++++ .../third_parties/sdk/google/javascript.yaml | 2 +- .../sdk/launchdarkly/javascript.yaml | 2 +- .../third_parties/sdk/paddle_pay/ruby.yaml | 13 +++++++++++++ rules/sources/personal_characteristics.yaml | 18 +++++++++--------- 10 files changed, 60 insertions(+), 16 deletions(-) create mode 100644 config/systemConfig/ruby.yaml create mode 100644 rules/sinks/internal_apis/api/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index c64a140f..8a939956 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -1,12 +1,12 @@ systemConfig: - key: apiHttpLibraries - value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socket(.){0,1}io|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\\/common\\/http|.*(HttpClient)).* + value: (?i)(request|fetch|axios|vue-axios|urllib|http|client|react-query|socket(.){0,1}io|xmlhttprequest|node.http|cors|got|apollo|superagent|wretch|@angular\/common\/http|@(.){2,25}\/http|.*(HttpClient)).* - key: ignoredSinks value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* - key: apiSinks - value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|fetchapi|fetchlegacyxml|createfetch|postform|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) - key: apiIdentifier - value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml new file mode 100644 index 00000000..8259aa9f --- /dev/null +++ b/config/systemConfig/ruby.yaml @@ -0,0 +1,12 @@ +systemConfig: + - key: apiHttpLibraries + value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).* + + - key: ignoredSinks + value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* + + - key: apiSinks + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit) + + - key: apiIdentifier + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/internal_apis/api/ruby.yaml b/rules/sinks/internal_apis/api/ruby.yaml new file mode 100644 index 00000000..3c5363a5 --- /dev/null +++ b/rules/sinks/internal_apis/api/ruby.yaml @@ -0,0 +1,6 @@ +sinks: + - id: Sinks.API.InternalAPI + name: Internal APIs + patterns: + - "((http|https|ftp|ssh):\\/\\/){0,1}(((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)\\.?\\b){4}|(localhost))(:[0-9]{2,4}){0,1}(\\/([a-z]){0,1}){0,1}.*" + tags: diff --git a/rules/sinks/storages/couchdb/javascript.yaml b/rules/sinks/storages/couchdb/javascript.yaml index 24b49b78..9b0feec4 100644 --- a/rules/sinks/storages/couchdb/javascript.yaml +++ b/rules/sinks/storages/couchdb/javascript.yaml @@ -6,7 +6,7 @@ sinks: - couchdb.apache.org - apache.org patterns: - - "(?:couchdb|couchdb-.*|rxdb|sqltomango|cradle|crypto-pouch|nano|@treehouses/cli|database-cleaner|couch-db|couch-admin|couchster|fauxton|couch-box|couch-nacl-permit|superlogin|npm-registry-couchapp|putdoc|connect-couchdb|couch-slouch|nano-option|tough-rate|couchdown|connect-cloudant-store|geopouch|filter-pouch|@zargu/couchdb-designer|changemachine|translator-couch|angular-eha.couchdb-auth|moleculer-db-adapter-couchdb-nano|typed-nano|sneakerjs|node-red-contrib-cloudantplus|node-couchdb|@scienceai/create-error|@inator/pouchdb-users|delta-pouch|@hoodie/task-client|stampee-couchdb-change-events|hoodie-server-task|couch-proxy-auth|designer|spawn-pouchdb-server|roy-replicator|connect-nano|ouch-rx|@hoodie/store-server|@hoodie/store-server-api|catlog|resourceful|@stanlemon/react-couchdb-authentication|tibet|@hoodie/account-server|replicate-couchdb-cluster|noflo-couchdb|pouch-datalog|@prescrire/pouchdb-replication-stream|@stanlemon/react-pouchdb|node-couchdb-logger|sync-gateway|@hoodie/account-server-api|jwt-couchdb|couch-login|nano-doc-updater|@twilson63/palmetto-couchdb|hapi-auth-couchdb-cookie|pino-couchdb|@nicodejong/nest-couchdb|winston-couchdb|express-user-couchdb).*" + - "(?:couchdb|couchdb-.*|rxdb|sqltomango|cradle|crypto-pouch|nano(?!-md5)|@treehouses/cli|database-cleaner|couch-db|couch-admin|couchster|fauxton|couch-box|couch-nacl-permit|superlogin|npm-registry-couchapp|putdoc|connect-couchdb|couch-slouch|nano-option|tough-rate|couchdown|connect-cloudant-store|geopouch|filter-pouch|@zargu/couchdb-designer|changemachine|translator-couch|angular-eha.couchdb-auth|moleculer-db-adapter-couchdb-nano|typed-nano|sneakerjs|node-red-contrib-cloudantplus|node-couchdb|@scienceai/create-error|@inator/pouchdb-users|delta-pouch|@hoodie/task-client|stampee-couchdb-change-events|hoodie-server-task|couch-proxy-auth|designer|spawn-pouchdb-server|roy-replicator|connect-nano|ouch-rx|@hoodie/store-server|@hoodie/store-server-api|catlog|resourceful|@stanlemon/react-couchdb-authentication|tibet|@hoodie/account-server|replicate-couchdb-cluster|noflo-couchdb|pouch-datalog|@prescrire/pouchdb-replication-stream|@stanlemon/react-pouchdb|node-couchdb-logger|sync-gateway|@hoodie/account-server-api|jwt-couchdb|couch-login|nano-doc-updater|@twilson63/palmetto-couchdb|hapi-auth-couchdb-cookie|pino-couchdb|@nicodejong/nest-couchdb|winston-couchdb|express-user-couchdb).*" tags: - id: Storages.RxDB.ReadAndWrite diff --git a/rules/sinks/storages/postgres/javascript.yaml b/rules/sinks/storages/postgres/javascript.yaml index 230b5cd5..f1711a5f 100644 --- a/rules/sinks/storages/postgres/javascript.yaml +++ b/rules/sinks/storages/postgres/javascript.yaml @@ -4,5 +4,5 @@ sinks: domains: - postgresql.org patterns: - - "(?:pg|pg-pool|pg-hstore|postgres-bytea|sql-template-strings|pg-native|pg-promise|libpq|sql-bricks|pgsql-ast-parser|mongo-sql|marv-pg-driver|pg-migrator|ts-postgres|@fastify/postgres|pgpass|ah-sequelize-plugin|confabulous|pg-error|aws-xray-sdk-postgres|pg-copy-streams|pogi|pg-escape|@wmfs/pg-diff-sync|data-elevator-postgres|yesql|knex-postgis|trailpack-plv8|pg-query-stream|pg-large-object|sql-bricks-postgres|schemart|pg-x|@yugabytedb/pg-pool|dbh-pg|api-core|postgres-cleaner|persistanz|@wmfs/relationize|@getlago/pgsql-ast-parser|postgres-date|pg-query-native|@wmfs/pg-info|postgres-interval|postgres-array|@urbica/pg-migrate|lego-sql|massive|qlobber-pg|@npm/pg-db-session|node-pg-migrate|v-protocol|@wmp-sbd/aws-xray-sdk-postgres|pg-query-parser|akeke_sequelize_egg_mysql_model|pg-schemats|pg-to-ts|@wmfs/supercopy|schemats|@mgolestan/schemats|v-pool|pg-ast-utils|pg-types|posigrade|pg-x-redis|pg-connect|sequelize-gen|hapi-postgres-connection|@smoke-trees/postgres-backend|pg-patch|postgres|save|pg-cursor|sequelize-replace-enum-postgres|node-postgres-named|pg-protocol|slonik|nact-persistence-postgres|jugglingdb|@trifacta/database-js-postgres|mongo-query-to-postgres-jsonb|@grouparoo/postgres|postgresql-service|related-postgres-analyzer|@runnerty/executor-postgres|@mft/postgres-migrations|@obi-tec/manager-postgres-database|machinepack-postgresql|@gasbuddy/configured-postgres-client|postgres-node-container|sqlutils|extract-pg-schema|kanel|pg-connection-string|@meotimdihia/postgres|psqlorm|sails-postgresql|think-model-postgresql|postgres-repo).*" + - "(?:pg-pool|pg-hstore|postgres-bytea|sql-template-strings|pg-native|pg-promise|libpq|sql-bricks|pgsql-ast-parser|mongo-sql|marv-pg-driver|pg-migrator|ts-postgres|@fastify/postgres|pgpass|ah-sequelize-plugin|confabulous|pg-error|aws-xray-sdk-postgres|pg-copy-streams|pogi|pg-escape|@wmfs/pg-diff-sync|data-elevator-postgres|yesql|knex-postgis|trailpack-plv8|pg-query-stream|pg-large-object|sql-bricks-postgres|schemart|pg-x|@yugabytedb/pg-pool|dbh-pg|api-core|postgres-cleaner|persistanz|@wmfs/relationize|@getlago/pgsql-ast-parser|postgres-date|pg-query-native|@wmfs/pg-info|postgres-interval|postgres-array|@urbica/pg-migrate|lego-sql|massive|qlobber-pg|@npm/pg-db-session|node-pg-migrate|v-protocol|@wmp-sbd/aws-xray-sdk-postgres|pg-query-parser|akeke_sequelize_egg_mysql_model|pg-schemats|pg-to-ts|@wmfs/supercopy|schemats|@mgolestan/schemats|v-pool|pg-ast-utils|pg-types|posigrade|pg-x-redis|pg-connect|sequelize-gen|hapi-postgres-connection|@smoke-trees/postgres-backend|pg-patch|postgres|pg-cursor|sequelize-replace-enum-postgres|node-postgres-named|pg-protocol|slonik|nact-persistence-postgres|jugglingdb|@trifacta/database-js-postgres|mongo-query-to-postgres-jsonb|@grouparoo/postgres|postgresql-service|related-postgres-analyzer|@runnerty/executor-postgres|@mft/postgres-migrations|@obi-tec/manager-postgres-database|machinepack-postgresql|@gasbuddy/configured-postgres-client|postgres-node-container|sqlutils|extract-pg-schema|kanel|pg-connection-string|@meotimdihia/postgres|psqlorm|sails-postgresql|think-model-postgresql|postgres-repo).*" tags: diff --git a/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml b/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml new file mode 100644 index 00000000..cc4d76de --- /dev/null +++ b/rules/sinks/third_parties/sdk/braintreepayments/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Braintreepayments + name: Braintreepayments + domains: + - "braintreepayments.com" + patterns: + - "(?i)(braintree).*" + tags: diff --git a/rules/sinks/third_parties/sdk/google/javascript.yaml b/rules/sinks/third_parties/sdk/google/javascript.yaml index 4c2b88e2..83246ba0 100644 --- a/rules/sinks/third_parties/sdk/google/javascript.yaml +++ b/rules/sinks/third_parties/sdk/google/javascript.yaml @@ -65,7 +65,7 @@ sinks: domains: - "analytics.google.com" patterns: - - "[@]{0,1}google-analytics|@firebase\\/analytics" + - "@firebase\\/analytics|.*(google-analytics|GoogleAnalyticsService)" tags: - id: ThirdParties.SDK.Google.Cloud diff --git a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml index bd695af5..13d7842c 100644 --- a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml +++ b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml @@ -9,5 +9,5 @@ sinks: domains: - "launchdarkly.com" patterns: - - "launchdarkly-node-server-sdk" + - "launchdarkly-node-server-sdk|launchdarkly-react-client-sdk" tags: diff --git a/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml b/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml new file mode 100644 index 00000000..7998a4b2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/paddle_pay/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paddle_Pay + name: Paddle Pay + domains: + - "paddle.com" + patterns: + - "(?i)(paddle_pay).*" + tags: diff --git a/rules/sources/personal_characteristics.yaml b/rules/sources/personal_characteristics.yaml index 5da4b181..79eb0a58 100644 --- a/rules/sources/personal_characteristics.yaml +++ b/rules/sources/personal_characteristics.yaml @@ -1,13 +1,13 @@ sources: - - id: Data.Sensitive.PersonalCharacteristics.Height - name: Height - category: Personal Characteristics - isSensitive: False - sensitivity: low - patterns: - - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" - tags: - law: GDPR + # - id: Data.Sensitive.PersonalCharacteristics.Height + # name: Height + # category: Personal Characteristics + # isSensitive: False + # sensitivity: low + # patterns: + # - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" + # tags: + # law: GDPR - id: Data.Sensitive.PersonalCharacteristics.MaritalStatus name: Marital Status From 27ed015749df96dc30772890e00ecadda4e988fa Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Sat, 29 Jul 2023 18:23:09 +0530 Subject: [PATCH 16/74] Sources/click stream ddhq (#284) * add datadog initialization params which default track click behaviour * Add IndexedDB storage rule --------- Co-authored-by: Datta Mundada --- .../storages/cookiemanager/javascript.yaml | 6 ++++++ rules/sinks/storages/indexedDB/javascript.yaml | 17 +++++++++++++++++ rules/sources/usage_data.yaml | 2 +- 3 files changed, 24 insertions(+), 1 deletion(-) create mode 100644 rules/sinks/storages/indexedDB/javascript.yaml diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml index 58a60b91..4effeac3 100644 --- a/rules/sinks/storages/cookiemanager/javascript.yaml +++ b/rules/sinks/storages/cookiemanager/javascript.yaml @@ -1,5 +1,11 @@ sinks: + - id: Storages.Web.Sql + name: Web Sql Database + patterns: + - "(?i)(window.*opendatabase.*)(transaction|executesql)" + tags: + - id: Storages.Web.Cookie.Write name: Web Storage Cookie(Write) patterns: diff --git a/rules/sinks/storages/indexedDB/javascript.yaml b/rules/sinks/storages/indexedDB/javascript.yaml new file mode 100644 index 00000000..eee63030 --- /dev/null +++ b/rules/sinks/storages/indexedDB/javascript.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.IndexedDB.Write + name: IndexedDB(Write) + domains: + - "w3.org/TR/IndexedDB" + patterns: + - "(?i)(idb).*(deletedb|transaction|createObjectStore|put|delete|clear|add)" + tags: + + - id: Storages.IndexedDB.Read + name: IndexedDB(Read) + domains: + - "w3.org/TR/IndexedDB" + patterns: + - "(?i)(idb).*(opendb|unwrap|wrap|get|getall)" + tags: \ No newline at end of file diff --git a/rules/sources/usage_data.yaml b/rules/sources/usage_data.yaml index 90c09b5d..8d4ee00e 100644 --- a/rules/sources/usage_data.yaml +++ b/rules/sources/usage_data.yaml @@ -5,7 +5,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i).*(click(stream|track|log)|track{0,2}click|number[^\\s/(;)#|,=!>]{0,10}of[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)|count[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)).*" + - "(?i).*(click(stream|track|log)|track{0,2}click|number[^\\s/(;)#|,=!>]{0,10}of[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)|count[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)).*|trackInteractions|trackFrustrations" tags: law: GDPR From 787c2fb029f08398fd55dbd165412f4ec266351b Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Mon, 31 Jul 2023 17:30:31 +0530 Subject: [PATCH 17/74] vehicle registration rule --- rules/sources/vehicle_data.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sources/vehicle_data.yaml b/rules/sources/vehicle_data.yaml index bacc5650..e9067d0e 100644 --- a/rules/sources/vehicle_data.yaml +++ b/rules/sources/vehicle_data.yaml @@ -5,7 +5,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i).*((?:vehicle|truck|car|motorcycle|motorcycle|tractor)[^\\s/(;)#|,=!>]{0,5}registration([^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)){0,1}).*" + - "(?i).*((?:vehicle|truck|motorcycle|tractor)[^\\s/(;)#|,=!>]{0,5}registration([^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)){0,1}|(?:car)[-_.]{0,3}registration[^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)).*" tags: law: GDPR From 38508450594444b7793bc21c1ebda9a8ba6dfa5c Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 2 Aug 2023 11:54:31 +0530 Subject: [PATCH 18/74] Laundarkly fix (#287) * Remove useFlags method from launchdarkly sdk * Minor correction in laundarkly fix * JS sdk fixes -1 * Fix code-review comment --- rules/sinks/storages/mongodb/javascript.yaml | 2 +- rules/sinks/storages/neo4j/javascript.yaml | 2 +- .../third_parties/sdk/apollographql/javascript.yaml | 2 +- .../sinks/third_parties/sdk/launchdarkly/javascript.yaml | 5 +++-- .../third_parties/sdk/{solui => rokt}/javascript.yaml | 9 +++++---- 5 files changed, 11 insertions(+), 9 deletions(-) rename rules/sinks/third_parties/sdk/{solui => rokt}/javascript.yaml (56%) diff --git a/rules/sinks/storages/mongodb/javascript.yaml b/rules/sinks/storages/mongodb/javascript.yaml index 72bdeb57..a3fe2948 100644 --- a/rules/sinks/storages/mongodb/javascript.yaml +++ b/rules/sinks/storages/mongodb/javascript.yaml @@ -5,7 +5,7 @@ sinks: domains: - mongodb.com patterns: - - "(?:mquery|mpath|mongojs|mongodb[.]net|winston-mongodb|feathers-mongoose|koa2-ratelimit|gridfs-stream|aedes-persistence-mongodb|mockgoose|mubsub|minimongo|uuid-mongodb|@fastify/mongodb|gridfs-promise|feathers-mongodb-fuzzy-search|rus-diff|recachegoose|baqend|@onehilltech/blueprint-mongodb|cachegoose|@treehouses/cli|gridfs-locking-stream|hapi-mongo-models|forerunnerdb|gridfs|payload|@lenne.tech/nest-server|database-cleaner|yams|@firstteam102/connect-mongo|json2mongo|@oguzbey/mongoose-beautiful-unique-validation|node-mongotools|ascoltatori|@casbin/mongo-changestream-watcher|@appveen/swagger-mongoose-crud|tingodb|generator-ng-fullstack|objectid|opentelemetry-instrumentation-mongoose|@immjunaid/create-express-restapis|apollo-passport-mongodb-driver|graphql-advanced-projection|jsonquery-engine|drop-mongodb-collections|nosqldbm-converter|nedb-lite|promised-mongo|feathers-mongodb|flatten-obj|mongoskin|sift|migrate-mongo|denque|mqemitter-mongodb|to-mongodb-core|graphql-mongodb-projection|jugglingdb|gulp-mongodb-data|thunkify-mongodb|joi-objectid|electron-squirrel-startup|node-express-mongodb-jwt-rest-api-skeleton|@caruuto/api-mongodb|sharedb-mongo|@chrishenderson/mongodb-queue|twitter2mongodb|@lpgroup/feathers-mongodb|@neo9/n9-mongodb-migration|sails-mongo|mongolass|w-orm-mongodb).*" + - "(?:mquery|mpath|mongojs|mongodb[.]net|winston-mongodb|feathers-mongoose|koa2-ratelimit|gridfs-stream|aedes-persistence-mongodb|mockgoose|mubsub|minimongo|uuid-mongodb|@fastify/mongodb|gridfs-promise|feathers-mongodb-fuzzy-search|rus-diff|recachegoose|baqend|@onehilltech/blueprint-mongodb|cachegoose|@treehouses/cli|gridfs-locking-stream|hapi-mongo-models|forerunnerdb|gridfs|payload|@lenne.tech/nest-server|database-cleaner|yams|@firstteam102/connect-mongo|json2mongo|@oguzbey/mongoose-beautiful-unique-validation|node-mongotools|ascoltatori|@casbin/mongo-changestream-watcher|@appveen/swagger-mongoose-crud|tingodb|generator-ng-fullstack|objectid|opentelemetry-instrumentation-mongoose|@immjunaid/create-express-restapis|apollo-passport-mongodb-driver|jsonquery-engine|drop-mongodb-collections|nosqldbm-converter|nedb-lite|promised-mongo|feathers-mongodb|flatten-obj|mongoskin|sift|migrate-mongo|denque|mqemitter-mongodb|to-mongodb-core|graphql-mongodb-projection|jugglingdb|gulp-mongodb-data|thunkify-mongodb|joi-objectid|electron-squirrel-startup|node-express-mongodb-jwt-rest-api-skeleton|@caruuto/api-mongodb|sharedb-mongo|@chrishenderson/mongodb-queue|twitter2mongodb|@lpgroup/feathers-mongodb|@neo9/n9-mongodb-migration|sails-mongo|mongolass|w-orm-mongodb).*" tags: - id: Storages.MongoDB.Read diff --git a/rules/sinks/storages/neo4j/javascript.yaml b/rules/sinks/storages/neo4j/javascript.yaml index 6ab4a859..f83d4003 100644 --- a/rules/sinks/storages/neo4j/javascript.yaml +++ b/rules/sinks/storages/neo4j/javascript.yaml @@ -5,5 +5,5 @@ sinks: domains: - neo4j.com patterns: - - "(?:neo4j|.*-neo4j|connect-neo4j-user|cypher-stream|neodb|ogmneo|moneo|@ambassify/neo4j-retried|apoc|highlightjs-cypher|@mathix420/graphql|dodex-quarkus|guaphy|loopback-connector-neo4j-graph|cypher-talker|@pandaai/graphql-fork|neoprene|seneca-seraph|co-cypher|cypher-query-language-builder|cgkb|neo-for-nest|@sonibble-creators/neo4j-nest|javascript-cypher|graphviz-config-template|graph-acl|ts-neo4j-parser|qcypher|neocy|node2neo-schema|ineo|hemera-neo4j-store|hyperflat|fluent-cypher|@elie222/neo4jd3|neode-nestjs|popoto-neo4j-graph-app|popoto|dans-neo4j-graphql|@next-auth/neo4j-adapter|node2neo-model|node2neo|@neode/express|neo-forgery|mongo4j|active-graph-record|@neo4j/graphql-ogm|@markonis/neo4j|@duoduo-oba/neo4jd3|@neo4j/graphql|qcphyer|swql2cypher|base-autoritativa-connectors|pragmaticsolutionjs|@thecodenebula/cypher-fluent-js|simple-neo4j-wrapper|generator-soa|@neo4j/browser-lambda-parser|neodash|neovis.js|seraph-model|@talentsec/neo4j-viz|bloom-harvesting-neo4j-import|neodm|neo4-js|neo4ts|@v-doc/neorm|@jekel18/neorm).*" + - "(?:neo4j|.*-neo4j|connect-neo4j-user|cypher-stream|neodb|ogmneo|moneo|@ambassify/neo4j-retried|apoc|highlightjs-cypher|dodex-quarkus|guaphy|loopback-connector-neo4j-graph|cypher-talker|neoprene|seneca-seraph|co-cypher|cypher-query-language-builder|cgkb|neo-for-nest|@sonibble-creators/neo4j-nest|javascript-cypher|graphviz-config-template|graph-acl|ts-neo4j-parser|qcypher|neocy|node2neo-schema|ineo|hemera-neo4j-store|hyperflat|fluent-cypher|@elie222/neo4jd3|neode-nestjs|popoto-neo4j-graph-app|popoto|dans-neo4j-graphql|@next-auth/neo4j-adapter|node2neo-model|node2neo|@neode/express|neo-forgery|mongo4j|active-graph-record|@neo4j/graphql-ogm|@markonis/neo4j|@duoduo-oba/neo4jd3|@neo4j/graphql|qcphyer|swql2cypher|base-autoritativa-connectors|pragmaticsolutionjs|@thecodenebula/cypher-fluent-js|simple-neo4j-wrapper|generator-soa|@neo4j/browser-lambda-parser|neodash|neovis.js|seraph-model|@talentsec/neo4j-viz|bloom-harvesting-neo4j-import|neodm|neo4-js|neo4ts|@v-doc/neorm|@jekel18/neorm).*" tags: diff --git a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml index 69ba265d..73af7002 100644 --- a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml +++ b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml @@ -10,5 +10,5 @@ sinks: - "apollographql.com" patterns: - "ApolloClient.*" - - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing" + - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing|@solui\\/graphql" tags: diff --git a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml index 13d7842c..8a642302 100644 --- a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml +++ b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml @@ -5,9 +5,10 @@ sinks: - id: ThirdParties.SDK.Launchdarkly - name: Launchdarkly + name: LaunchDarkly domains: - "launchdarkly.com" patterns: - - "launchdarkly-node-server-sdk|launchdarkly-react-client-sdk" + - "launchdarkly-node-server-sdk.*" + - "(launchdarkly-react-client-sdk)(.)(?!useFlags)" tags: diff --git a/rules/sinks/third_parties/sdk/solui/javascript.yaml b/rules/sinks/third_parties/sdk/rokt/javascript.yaml similarity index 56% rename from rules/sinks/third_parties/sdk/solui/javascript.yaml rename to rules/sinks/third_parties/sdk/rokt/javascript.yaml index 11f7893a..2dfc5eb6 100644 --- a/rules/sinks/third_parties/sdk/solui/javascript.yaml +++ b/rules/sinks/third_parties/sdk/rokt/javascript.yaml @@ -4,10 +4,11 @@ sinks: - - id: ThirdParties.SDK.Solui - name: Solui + - id: ThirdParties.SDK.Rokt + name: Rokt domains: - - "solui.dev" + - "rokt.com" patterns: - - "@solui\\/graphql" + - ".*(RoktAds|Rokt.createLauncher)" + - ".*launcher.selectPlacements" tags: From 0b53a048cb314246fb70b9c311accb8fc064cb33 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 2 Aug 2023 14:03:14 +0530 Subject: [PATCH 19/74] Dev (#285) * Sources/click stream ddhq (#284) * add datadog initialization params which default track click behaviour * Add IndexedDB storage rule --------- Co-authored-by: Datta Mundada * vehicle registration rule * Laundarkly fix (#287) * Remove useFlags method from launchdarkly sdk * Minor correction in laundarkly fix * JS sdk fixes -1 * Fix code-review comment --------- Co-authored-by: Hitesh Mahajan Co-authored-by: Hitesh Mahajan --- .../storages/cookiemanager/javascript.yaml | 6 ++++++ rules/sinks/storages/indexedDB/javascript.yaml | 17 +++++++++++++++++ rules/sinks/storages/mongodb/javascript.yaml | 2 +- rules/sinks/storages/neo4j/javascript.yaml | 2 +- .../sdk/apollographql/javascript.yaml | 2 +- .../sdk/launchdarkly/javascript.yaml | 5 +++-- .../sdk/{solui => rokt}/javascript.yaml | 9 +++++---- rules/sources/biometric_data.yaml | 18 +++++++++--------- rules/sources/usage_data.yaml | 2 +- rules/sources/vehicle_data.yaml | 2 +- 10 files changed, 45 insertions(+), 20 deletions(-) create mode 100644 rules/sinks/storages/indexedDB/javascript.yaml rename rules/sinks/third_parties/sdk/{solui => rokt}/javascript.yaml (56%) diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml index 58a60b91..4effeac3 100644 --- a/rules/sinks/storages/cookiemanager/javascript.yaml +++ b/rules/sinks/storages/cookiemanager/javascript.yaml @@ -1,5 +1,11 @@ sinks: + - id: Storages.Web.Sql + name: Web Sql Database + patterns: + - "(?i)(window.*opendatabase.*)(transaction|executesql)" + tags: + - id: Storages.Web.Cookie.Write name: Web Storage Cookie(Write) patterns: diff --git a/rules/sinks/storages/indexedDB/javascript.yaml b/rules/sinks/storages/indexedDB/javascript.yaml new file mode 100644 index 00000000..eee63030 --- /dev/null +++ b/rules/sinks/storages/indexedDB/javascript.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.IndexedDB.Write + name: IndexedDB(Write) + domains: + - "w3.org/TR/IndexedDB" + patterns: + - "(?i)(idb).*(deletedb|transaction|createObjectStore|put|delete|clear|add)" + tags: + + - id: Storages.IndexedDB.Read + name: IndexedDB(Read) + domains: + - "w3.org/TR/IndexedDB" + patterns: + - "(?i)(idb).*(opendb|unwrap|wrap|get|getall)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/mongodb/javascript.yaml b/rules/sinks/storages/mongodb/javascript.yaml index 72bdeb57..a3fe2948 100644 --- a/rules/sinks/storages/mongodb/javascript.yaml +++ b/rules/sinks/storages/mongodb/javascript.yaml @@ -5,7 +5,7 @@ sinks: domains: - mongodb.com patterns: - - "(?:mquery|mpath|mongojs|mongodb[.]net|winston-mongodb|feathers-mongoose|koa2-ratelimit|gridfs-stream|aedes-persistence-mongodb|mockgoose|mubsub|minimongo|uuid-mongodb|@fastify/mongodb|gridfs-promise|feathers-mongodb-fuzzy-search|rus-diff|recachegoose|baqend|@onehilltech/blueprint-mongodb|cachegoose|@treehouses/cli|gridfs-locking-stream|hapi-mongo-models|forerunnerdb|gridfs|payload|@lenne.tech/nest-server|database-cleaner|yams|@firstteam102/connect-mongo|json2mongo|@oguzbey/mongoose-beautiful-unique-validation|node-mongotools|ascoltatori|@casbin/mongo-changestream-watcher|@appveen/swagger-mongoose-crud|tingodb|generator-ng-fullstack|objectid|opentelemetry-instrumentation-mongoose|@immjunaid/create-express-restapis|apollo-passport-mongodb-driver|graphql-advanced-projection|jsonquery-engine|drop-mongodb-collections|nosqldbm-converter|nedb-lite|promised-mongo|feathers-mongodb|flatten-obj|mongoskin|sift|migrate-mongo|denque|mqemitter-mongodb|to-mongodb-core|graphql-mongodb-projection|jugglingdb|gulp-mongodb-data|thunkify-mongodb|joi-objectid|electron-squirrel-startup|node-express-mongodb-jwt-rest-api-skeleton|@caruuto/api-mongodb|sharedb-mongo|@chrishenderson/mongodb-queue|twitter2mongodb|@lpgroup/feathers-mongodb|@neo9/n9-mongodb-migration|sails-mongo|mongolass|w-orm-mongodb).*" + - "(?:mquery|mpath|mongojs|mongodb[.]net|winston-mongodb|feathers-mongoose|koa2-ratelimit|gridfs-stream|aedes-persistence-mongodb|mockgoose|mubsub|minimongo|uuid-mongodb|@fastify/mongodb|gridfs-promise|feathers-mongodb-fuzzy-search|rus-diff|recachegoose|baqend|@onehilltech/blueprint-mongodb|cachegoose|@treehouses/cli|gridfs-locking-stream|hapi-mongo-models|forerunnerdb|gridfs|payload|@lenne.tech/nest-server|database-cleaner|yams|@firstteam102/connect-mongo|json2mongo|@oguzbey/mongoose-beautiful-unique-validation|node-mongotools|ascoltatori|@casbin/mongo-changestream-watcher|@appveen/swagger-mongoose-crud|tingodb|generator-ng-fullstack|objectid|opentelemetry-instrumentation-mongoose|@immjunaid/create-express-restapis|apollo-passport-mongodb-driver|jsonquery-engine|drop-mongodb-collections|nosqldbm-converter|nedb-lite|promised-mongo|feathers-mongodb|flatten-obj|mongoskin|sift|migrate-mongo|denque|mqemitter-mongodb|to-mongodb-core|graphql-mongodb-projection|jugglingdb|gulp-mongodb-data|thunkify-mongodb|joi-objectid|electron-squirrel-startup|node-express-mongodb-jwt-rest-api-skeleton|@caruuto/api-mongodb|sharedb-mongo|@chrishenderson/mongodb-queue|twitter2mongodb|@lpgroup/feathers-mongodb|@neo9/n9-mongodb-migration|sails-mongo|mongolass|w-orm-mongodb).*" tags: - id: Storages.MongoDB.Read diff --git a/rules/sinks/storages/neo4j/javascript.yaml b/rules/sinks/storages/neo4j/javascript.yaml index 6ab4a859..f83d4003 100644 --- a/rules/sinks/storages/neo4j/javascript.yaml +++ b/rules/sinks/storages/neo4j/javascript.yaml @@ -5,5 +5,5 @@ sinks: domains: - neo4j.com patterns: - - "(?:neo4j|.*-neo4j|connect-neo4j-user|cypher-stream|neodb|ogmneo|moneo|@ambassify/neo4j-retried|apoc|highlightjs-cypher|@mathix420/graphql|dodex-quarkus|guaphy|loopback-connector-neo4j-graph|cypher-talker|@pandaai/graphql-fork|neoprene|seneca-seraph|co-cypher|cypher-query-language-builder|cgkb|neo-for-nest|@sonibble-creators/neo4j-nest|javascript-cypher|graphviz-config-template|graph-acl|ts-neo4j-parser|qcypher|neocy|node2neo-schema|ineo|hemera-neo4j-store|hyperflat|fluent-cypher|@elie222/neo4jd3|neode-nestjs|popoto-neo4j-graph-app|popoto|dans-neo4j-graphql|@next-auth/neo4j-adapter|node2neo-model|node2neo|@neode/express|neo-forgery|mongo4j|active-graph-record|@neo4j/graphql-ogm|@markonis/neo4j|@duoduo-oba/neo4jd3|@neo4j/graphql|qcphyer|swql2cypher|base-autoritativa-connectors|pragmaticsolutionjs|@thecodenebula/cypher-fluent-js|simple-neo4j-wrapper|generator-soa|@neo4j/browser-lambda-parser|neodash|neovis.js|seraph-model|@talentsec/neo4j-viz|bloom-harvesting-neo4j-import|neodm|neo4-js|neo4ts|@v-doc/neorm|@jekel18/neorm).*" + - "(?:neo4j|.*-neo4j|connect-neo4j-user|cypher-stream|neodb|ogmneo|moneo|@ambassify/neo4j-retried|apoc|highlightjs-cypher|dodex-quarkus|guaphy|loopback-connector-neo4j-graph|cypher-talker|neoprene|seneca-seraph|co-cypher|cypher-query-language-builder|cgkb|neo-for-nest|@sonibble-creators/neo4j-nest|javascript-cypher|graphviz-config-template|graph-acl|ts-neo4j-parser|qcypher|neocy|node2neo-schema|ineo|hemera-neo4j-store|hyperflat|fluent-cypher|@elie222/neo4jd3|neode-nestjs|popoto-neo4j-graph-app|popoto|dans-neo4j-graphql|@next-auth/neo4j-adapter|node2neo-model|node2neo|@neode/express|neo-forgery|mongo4j|active-graph-record|@neo4j/graphql-ogm|@markonis/neo4j|@duoduo-oba/neo4jd3|@neo4j/graphql|qcphyer|swql2cypher|base-autoritativa-connectors|pragmaticsolutionjs|@thecodenebula/cypher-fluent-js|simple-neo4j-wrapper|generator-soa|@neo4j/browser-lambda-parser|neodash|neovis.js|seraph-model|@talentsec/neo4j-viz|bloom-harvesting-neo4j-import|neodm|neo4-js|neo4ts|@v-doc/neorm|@jekel18/neorm).*" tags: diff --git a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml index 69ba265d..73af7002 100644 --- a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml +++ b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml @@ -10,5 +10,5 @@ sinks: - "apollographql.com" patterns: - "ApolloClient.*" - - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing" + - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing|@solui\\/graphql" tags: diff --git a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml index 13d7842c..8a642302 100644 --- a/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml +++ b/rules/sinks/third_parties/sdk/launchdarkly/javascript.yaml @@ -5,9 +5,10 @@ sinks: - id: ThirdParties.SDK.Launchdarkly - name: Launchdarkly + name: LaunchDarkly domains: - "launchdarkly.com" patterns: - - "launchdarkly-node-server-sdk|launchdarkly-react-client-sdk" + - "launchdarkly-node-server-sdk.*" + - "(launchdarkly-react-client-sdk)(.)(?!useFlags)" tags: diff --git a/rules/sinks/third_parties/sdk/solui/javascript.yaml b/rules/sinks/third_parties/sdk/rokt/javascript.yaml similarity index 56% rename from rules/sinks/third_parties/sdk/solui/javascript.yaml rename to rules/sinks/third_parties/sdk/rokt/javascript.yaml index 11f7893a..2dfc5eb6 100644 --- a/rules/sinks/third_parties/sdk/solui/javascript.yaml +++ b/rules/sinks/third_parties/sdk/rokt/javascript.yaml @@ -4,10 +4,11 @@ sinks: - - id: ThirdParties.SDK.Solui - name: Solui + - id: ThirdParties.SDK.Rokt + name: Rokt domains: - - "solui.dev" + - "rokt.com" patterns: - - "@solui\\/graphql" + - ".*(RoktAds|Rokt.createLauncher)" + - ".*launcher.selectPlacements" tags: diff --git a/rules/sources/biometric_data.yaml b/rules/sources/biometric_data.yaml index e029814d..98fb0a93 100644 --- a/rules/sources/biometric_data.yaml +++ b/rules/sources/biometric_data.yaml @@ -1,13 +1,13 @@ sources: - - id: Data.Sensitive.BiometricData.FingerprintScans - name: Fingerprint Scans - category: Biometric Data - isSensitive: True - sensitivity: high - patterns: - - "(?i)finger[^\\s/(;)#|,=!>]{0,5}print|finger[^\\s/(;)#|,=!>]{0,5}print[^\\s/(;)#|,=!>]{0,5}scan" - tags: - law: GDPR + # - id: Data.Sensitive.BiometricData.FingerprintScans + # name: Fingerprint Scans + # category: Biometric Data + # isSensitive: True + # sensitivity: high + # patterns: + # - "(?i)finger[^\\s/(;)#|,=!>]{0,5}print|finger[^\\s/(;)#|,=!>]{0,5}print[^\\s/(;)#|,=!>]{0,5}scan" + # tags: + # law: GDPR - id: Data.Sensitive.BiometricData.IrisRecognition name: Iris Recognition diff --git a/rules/sources/usage_data.yaml b/rules/sources/usage_data.yaml index 90c09b5d..8d4ee00e 100644 --- a/rules/sources/usage_data.yaml +++ b/rules/sources/usage_data.yaml @@ -5,7 +5,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i).*(click(stream|track|log)|track{0,2}click|number[^\\s/(;)#|,=!>]{0,10}of[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)|count[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)).*" + - "(?i).*(click(stream|track|log)|track{0,2}click|number[^\\s/(;)#|,=!>]{0,10}of[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)|count[^\\s/(;)#|,=!>]{0,10}(?:clicks|click)).*|trackInteractions|trackFrustrations" tags: law: GDPR diff --git a/rules/sources/vehicle_data.yaml b/rules/sources/vehicle_data.yaml index bacc5650..e9067d0e 100644 --- a/rules/sources/vehicle_data.yaml +++ b/rules/sources/vehicle_data.yaml @@ -5,7 +5,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i).*((?:vehicle|truck|car|motorcycle|motorcycle|tractor)[^\\s/(;)#|,=!>]{0,5}registration([^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)){0,1}).*" + - "(?i).*((?:vehicle|truck|motorcycle|tractor)[^\\s/(;)#|,=!>]{0,5}registration([^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)){0,1}|(?:car)[-_.]{0,3}registration[^\\s/(;)#|,=!>]{0,5}(details|number|num|nbr|no)).*" tags: law: GDPR From 453f6e58dafad67eebefc5ce0338a827b6176364 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Thu, 3 Aug 2023 13:55:15 +0530 Subject: [PATCH 20/74] updated leakage rule (#292) --- rules/sinks/leakages/logs/ruby.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/sinks/leakages/logs/ruby.yaml b/rules/sinks/leakages/logs/ruby.yaml index 8c4b63e0..3dea3630 100644 --- a/rules/sinks/leakages/logs/ruby.yaml +++ b/rules/sinks/leakages/logs/ruby.yaml @@ -2,7 +2,7 @@ sinks: - id: Leakages.Log.Console name: Log Console patterns: - - "(?i)(puts|print|p|pp)" + - "(?i)(puts|print)" tags: - id: Leakages.Log.Info @@ -27,4 +27,4 @@ sinks: name: Log Debug patterns: - "(?i)(debug|trace)" - tags: \ No newline at end of file + tags: From fa2c5550521073ac5497a1b148f889bdc29bb747 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Mon, 28 Aug 2023 11:41:44 +0530 Subject: [PATCH 21/74] Ruby august release (#294) * change - wechat rule * fix - tencent cloud * add - thirdParty api * add - new rules in ruby * add more rules --- config/systemConfig/ruby.yaml | 4 ++-- rules/sinks/storages/redis/ruby.yaml | 8 ++++++++ rules/sinks/third_parties/api/ruby.yaml | 8 ++++++++ .../sinks/third_parties/sdk/calendarific/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/codat/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/datadoghq/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/docusign/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/google/ruby.yaml | 2 +- rules/sinks/third_parties/sdk/hellosign/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/hubspot/ruby.yaml | 13 +++++++++++++ .../sinks/third_parties/sdk/launchdarkly/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/money/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/netsuite/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/okta/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/osocloud/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/plaid/ruby.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/sentry/ruby.yaml | 2 +- rules/sinks/third_parties/sdk/tencent/ruby.yaml | 2 +- rules/sinks/third_parties/sdk/wechat/ruby.yaml | 2 +- 19 files changed, 178 insertions(+), 6 deletions(-) create mode 100644 rules/sinks/storages/redis/ruby.yaml create mode 100644 rules/sinks/third_parties/api/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/calendarific/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/codat/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/datadoghq/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/docusign/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/hellosign/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/hubspot/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/money/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/netsuite/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/okta/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/osocloud/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/plaid/ruby.yaml diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml index 8259aa9f..b1a498c8 100644 --- a/config/systemConfig/ruby.yaml +++ b/config/systemConfig/ruby.yaml @@ -1,12 +1,12 @@ systemConfig: - key: apiHttpLibraries - value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).* + value: (?i)(multipart|faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).* - key: ignoredSinks value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* - key: apiSinks - value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit) + value: (?i)(?:new|url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit) - key: apiIdentifier value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/storages/redis/ruby.yaml b/rules/sinks/storages/redis/ruby.yaml new file mode 100644 index 00000000..4c0aa8f6 --- /dev/null +++ b/rules/sinks/storages/redis/ruby.yaml @@ -0,0 +1,8 @@ +sinks: + - id: Storages.Redis.ReadAndWrite + name: Redis DB + domains: + - redis.io + patterns: + - (?i).*(redis).* + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/api/ruby.yaml b/rules/sinks/third_parties/api/ruby.yaml new file mode 100644 index 00000000..fbfd0570 --- /dev/null +++ b/rules/sinks/third_parties/api/ruby.yaml @@ -0,0 +1,8 @@ +sinks: + + - id: Sinks.ThirdParties.API + name: Third Party API + patterns: + - "(?i)((?:http|https):\\/\\/[a-zA-Z0-9_-][^)\\/(#|,!>\\s]{1,50}\\.(?:com|net|org|de|in|uk|us|io|gov|cn|ml|ai|ly|dev|cloud|me|icu|ru|info|top|tk|tr|cn|ga|cf|nl)).*(?." + +sinks: + + - id: ThirdParties.SDK.Calendarific + name: Calendarific + domains: + - "calendarific.com" + patterns: + - "(?i)(ruby-calendarific).*" + tags: diff --git a/rules/sinks/third_parties/sdk/codat/ruby.yaml b/rules/sinks/third_parties/sdk/codat/ruby.yaml new file mode 100644 index 00000000..b94edb85 --- /dev/null +++ b/rules/sinks/third_parties/sdk/codat/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Codat + name: Codat + domains: + - "codat.io" + patterns: + - "(?i)(codat).*" + tags: diff --git a/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml b/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml new file mode 100644 index 00000000..f9834895 --- /dev/null +++ b/rules/sinks/third_parties/sdk/datadoghq/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Datadoghq + name: Datadoghq + domains: + - "datadoghq.com" + patterns: + - "(?i)(ddtrace|dogstatsd-ruby|datadog_api_client).*" + tags: diff --git a/rules/sinks/third_parties/sdk/docusign/ruby.yaml b/rules/sinks/third_parties/sdk/docusign/ruby.yaml new file mode 100644 index 00000000..2b2a515d --- /dev/null +++ b/rules/sinks/third_parties/sdk/docusign/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Docusign + name: Docusign + domains: + - "docusign.com" + patterns: + - "(?i)(docusign_esign).*" + tags: diff --git a/rules/sinks/third_parties/sdk/google/ruby.yaml b/rules/sinks/third_parties/sdk/google/ruby.yaml index cdadb154..a61320b2 100644 --- a/rules/sinks/third_parties/sdk/google/ruby.yaml +++ b/rules/sinks/third_parties/sdk/google/ruby.yaml @@ -9,7 +9,7 @@ sinks: domains: - "google.com" patterns: - - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher).*" + - "(?i)(rgoogle|google-cloud-env|google-cloud-storage|google-cloud-pubsub|google-cloud|google-cloud-monitoring|google-cloud-firestore|google-cloud-datastore|google-cloud-dns|google-cloud-spanner|google-cloud-dataproc|google-cloud-redis|google-cloud-resource_manager|google-cloud-monitoring-v3|shrine-google_cloud_storage|ffwd-google-cloud|google-cloud-billing|google-cloud-recommender|activejob-google_cloud_pubsub|google-cloud-common|google-cloud-cloud_dms|google-cloud-debugger-v2|google-cloud-build|fastlane-plugin-google_cloud_storage|google-cloud-iot|google-cloud-memcache|elevation|google-cloud-dataproc-v1|google-cloud-dataproc-v1beta2|google-cloud-billing-v1|activejob-google_cloud_tasks|google-cloud-redis-v1|google_cloud_run|google-cloud-recommender-v1|google-cloud-compute-v1|google-cloud-redis-v1beta1|google-cloud-build-v1|google-cloud-monitoring-dashboard-v1|google-cloud-shell|google-cloud-iot-v1|google-cloud-cloud_dms-v1|logging-google-cloud|google-cloud-memcache-v1beta2|icalia-sdk-event-notification|google-cloud-core|google-cloud-errors|google-cloud-logging|volt-google-maps|google-cloud-bigquery|google-cloud-trace|google-cloud-debugger|google-cloud-error_reporting|google-cloud-bigtable|google_maps_service|google-maps|google_maps|bhm-google-maps|google_maps_geocoder|rails-google-maps|volt-google_maps|google_maps_rails|server-side-google-maps|scrivito_google_maps_widget|google_maps_api|google_maps_api-directions|google-maps-stitch-bin|google_maps_juice|opal-google_maps|google_maps_api-distance_matrix|koine-google_maps_client|sixarm_ruby_google_maps_api|google_maps_by_pete|nayutaya-googlemaps-polyline|jekyll-maps|ym4r|sarnesjo-twhere|map_monkey|pointable|gmaps|mapkit|kamel|georama|google4r-maps|greader|gcoder|googlemaps-services|googleMapsAPI-rails|mapcache|termapinator|gmaps_tz|gmapz|gmap-fontawesome|mapcoder|commuter|gmapper|inputmap|roadtrip|google_map|static_maps|geogle|google-geo|gmaps_v3|greatseth-google-geo|heycarsten-gcoder|geo_contrast|google-map-weather-intregration|route_boxer|google_set|gmaps_geocoding|gmapsjs|gdirections|lita-directions|address_verifier|distance_finder|geo_google|global_map_tiles|workarea-google_address_autocomplete|google-api-client|google-adwords-api|google-dfp-api|google-api|google_contacts_api|google_api|google-api-omniauth|google-api-customization|bps-google-api|google_custom_search_api|arvados-google-api-client|google_apps_api|google-content-api|google_business_api_url_signer|google-api-middle_man|google-api-rails|cure-google-api-client|google_api_hashtag|google_api_directions|lt-google-api|omniauth-google-api|google_image_api|google-api-client-rails|google_maps_api-core|google_calendar_api_v2|google_search_api|google-apis-androidpublisher_v3|google_directions_api|google_simple_api|google-api_client-keychain_store|google-apis-sheets_v4|google_music_api|google-apis-playcustomapp_v1|google_syncinator_api_client|ghost_google-api-client|collin-google_ajax_feed_api|google_api_url_shortener|jomz-google-api-client|lemboy-google-api-client|embulk-filter-google_translate_api|embulk-filter-google_vision_api|miasma-google|googleapis-common-protos-types|easy_translate|google-ads-googleads|gchartrb|google-apis-oauth2_v2|google-gax|google-search|google-apis-identitytoolkit_v3|stackdriver|googleapis-common-protos|google-apis-docs_v1|sk_google_custom_search_api|legato|google_distance_matrix|google-apis-analytics_v3|google_places|google-apis-classroom_v1|google_plus|garb|google-geocode|googl|google_apps|gcloud|google-apis-slides_v1|google-apis-chat_v1|google_client_login|googlecharts|embulk-filter-google_natural_language_api|google-apis|google_calendar|google-apis-analyticsadmin_v1alpha|fusion_tables|google-apis-searchconsole_v1|gdata_19|google-apis-reseller_v1|google-apis-site_verification_v1|google-apis-translate_v2|gcalapi|google-apis-redis_v1|google-apis-vault_v1|gdata|google-apis-redis_v1beta1|gaah|google-apis-analyticsdata_v1beta|google-apis-alertcenter_v1beta1|gstore|goauth2|googlecontacts|google-apis-androidenterprise_v1|google_rest|google-apis-keep_v1|google-apis-datacatalog_v1beta1|google_sdk|rugalytics|gooby|jordandcarter-rugalytics|google-apis-analyticsdata_v1alpha|google-apis-civicinfo_v2|eztz|google-apis-datacatalog_v1|google-translate|google_speech|adapi|google_apis|rgviz|google_checkout|g_ruby|gmoney|plus|google-apis-games_configuration_v1configuration|sishen-rtranslate|gdata4ruby|gdocs4ruby|googlebooks|visionmedia-google-search|google-image-charts|google_places_autocomplete|googleplus|Gooby|gvis|bemurphy-google_plus|shvets-google_translate|skyjam|gprov|vigetlabs-garb|toll_booth|artforge-rtranslate|geocoda|elisehuard-google_translate|gc-datastore|placed|gcal-ruby|seer|google_assistant|google-wrapper|googlestaticmap|google-custom_search|blythedunham-base4r|rgdata|pietern-contacts|google_translate|google-http-actionmailer|google_search|gdata-api|grapi|gtool|gahh|google-idtoken-verifier|google-analytics-data-v1alpha|crutch-google_translate|dusty-geocoder|tr4n5l4te|google-cells|garru-g_viz|google-simple-client|google-analytics-data|google-iam-v1beta|google-v3-geocoder|gplus|vocabulary|google_safe_browsing|soothsayer|GooglePlus|bookle|ruby_provisioning_api|garb-no-activesupport|fastlane-plugin-playship|findplace|google-amp-cache|ghazel-googlecharts|jsc|lieu|cloud_vision|google_books|GoogleReaderApi|rave|googletranslate|google-book|google-analytics-admin-v1alpha|archerfinley-google4r-checkout-1.0.5|google-analytics-data-v1beta|opengotham-rtranslate|gwx|simple_analytics|google-civic-ruby|civic_info|gchart|titanous-garb|places|gus|g_simple_api|google-civic|jonuts-garb|googlebook|gcal-unit|g_sheets|gcevent|marauder|only_google_apis|sheetsapi|static-gmaps|google-geocoder|placesearch|yancya-big_query|allyourbase|google_images|jparker-ruby-googlechart|dpickett-toll_booth|google_client|shingara-garb|simple_google_custom_search|metonym|gareadonly|googleurlshortener|google-authsub|static-gmaps2|google_static_maps_helper|gistance|google_fish|google-analytics|simple_google_drive|google_r|google_geocodings|amr_google_calendar|gdata2|mattetti-googlecharts|JamieFlournoy-g_viz|gattica|googleauth|malware_api|google_prediction|kenhirakawa-googlecharts|provisioning-api|google-apis-cloudsupport_v2beta|intouch-gdata4ruby|civic_aide|google_fusion_tables|google-oauth|google_currency_calculator|google_scholar|goo-gl|rounders-gdata-ruby|sevenwire-google-static-maps|googletastic|GoogleReaderApiUniq|googlereader|google-analytics-admin|gdrive_ruby|googlecal|cloud_natural_language|google_apps_oauth2|bdude-rosettastone|et-wsm|google-apis-clouddeploy_v1|matta-googlecharts|gtranslate-two|daimpi-google-search|google-directory|hisui|gsa-feeds|betelgeuse-googlecharts|goospell|google_cloud_vision|daimpi-google-rest|google-weather|google_sheets|gregoryfoster-gchartrb|gaffel|edave-gcal4ruby|macros-garb|jspradlin-gmoney|dmattes-static-gmaps|googleajax|gapps-provisioning|static_map|h13ronim-gcal4ruby|google_cse|lazy_google_analytics|ruby-google-suggest|ruboty-gcal|google_language|ruby-googlechart|gcs_api_gem|google-geocoding|ga-measurements|bookfinder|cloudstorage|google_tasks|gdata-georgedrummond|gdata-ruby19|jkarlsson-gdata|google-places|google-cloud-memcache-v1|yehezkielbs-gdata|fusion_tables_api|dfa_client|rgroups|civic_information|alexgregianin-knock-knock|mula|gicodewarrior-gdata|babylon|readmedia-garb|chdorner-gdocsapi-wrapper|visioner|oozou-fusion_tables|google_translation|aunderwo-gcal4ruby|dwaite-gdata|google_directions|google_oauth|sheetsu-ruby|vincentchu-gdata|gdata-19|goosi|bigbroda|mokolabs-googlecharts|cs210-gdata4ruby|google_url_signatures|gcs|gcal4ruby-aunderwo|googlus|ncri-seer|googleapi_manager|cannikin-gattica|gstock|google_search_cse|google_safe_browsing_redis|mini_geocode|pg_drive_backup|boogle|static-gmaps-v3|hacked0ff-reverse_geocode|rails_admin_place_field|iiif_google_cv|gisbn|free_google_translate|vcita-gcal4ruby|pzingg-gappsprovisioning|sem4r|thieso2-gattica|language-translator|glassmirror|gicodewarrior-gattica|rack-gcm|geeo_code|aunderwo-gdata4ruby|edave-gdata4ruby|google-apis-generator|jeremyf-gattica|google-cloud-deploy-v1|dbgrandi-googlecharts|rusty_google_places|ghazel-ghazel-googlecharts|garb-authsub|gdata-jruby-client|laszpio-googlecharts|rsay|takeo-googlecharts|laszpio-laszpio-googlecharts|jnunemaker-google-weather|sermoa-ruby_translate|google_font_extractor|glennr-seer|ruby_pagespeed_insights|sylvaing-seer|googol|google-apis-games_v1|vcita-gdata4ruby|google-cloud-deploy|grobi|gcp-vision|g_web_font|gapic|site_search|aurelian-contacts|mislav_contacts|picasa|google-safe-browsing-lookup|teejayvanslyke-google-blog-pinging-service|google-apis-games_management_v1management|painful_translate|pointy|betapond-gattica|yml_gtranslate|adsense_async|adsense_sync|kura|glass_sdk|chrisle-gattica|yt_meta|googlebooksclient|overlord|adsense_mobile|monki-GoogleAjax|google_translate_diff|google-auth-token_validator|google_charts|mlangenberg-googlesearch|songphi-gattica|encoded_polyline|ga_trackable|mirror-api|magic_addresses|clio-gcal4ruby|light_tr|google_map_directions|heycarsten-postalcoder|google_refresh|google_book|com-mash_ape-google_play_store-client|recaptcha-mailhide|emporium|analytics-rb|transleet|firebase|firebase_token_generator|rest-firebase|firebase_cloud_messenger|firebase-auth|firebase_id_token|rom-firebase|firebase_dynamic_link|firebase-admin|firebase-auth-rails|firebase-ruby|firebase-stats|fastlane-plugin-firebase_app_distribution|firebase-messaging|firebase_token_auth|firebase-cloning-tool|firebase-authentication|firebase-rails|firebase_auth|firebase-token-verify|rmx-firebase|firebase-admin-sdk|simple_firebase|firebase_admin_auth|middleman-firebase|firebase-ruby-client|opal-firebase|firebase-auth-id_token_keeper|firebase_faraday_client|fastlane-plugin-firebase|fastlane-plugin-firebase_management|google-apis-firebase_v1beta1|firebase-auth-id_token|ruby_firebase_verify|verify-firebase-jwt|firebase_auth_for_ruby|fire-model|fastlane-plugin-find_firebase_app_id|devise-fireauth|firebased|firefighter|firejwt|ffs|andpush|fuser|jera_push|bigbertha|fbase_auth|FireRails|google-api-fcm|google-apis-fcm_v1|basilik|hnrb|firecord|fastlane-plugin-firebase_management_api|google-apis-firebasehosting_v1beta1|google-apis-firebaserules_v1|hertz-fcm|google-apis-firebaseml_v1beta2|google-apis-firebaseml_v1|firepush|google-apis-firebasehosting_v1|google-apis-firebasestorage_v1beta|bitcoin-price|google-apis-firebaseappcheck_v1beta|fcmpush|frm_mercury|google-apis-firebasedynamiclinks_v1|fireauth|google-apis-firebasedatabase_v1beta|easyfire|google-apis-fcmdata_v1beta1|fcm|unagi-notifications|fcm_pusher|omniauth-google-oauth2).*" tags: - id: ThirdParties.SDK.Google.Cloud diff --git a/rules/sinks/third_parties/sdk/hellosign/ruby.yaml b/rules/sinks/third_parties/sdk/hellosign/ruby.yaml new file mode 100644 index 00000000..7b6980de --- /dev/null +++ b/rules/sinks/third_parties/sdk/hellosign/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hellosign + name: Hellosign + domains: + - "hellosign.com" + patterns: + - "(?i)(hellosign-api).*" + tags: diff --git a/rules/sinks/third_parties/sdk/hubspot/ruby.yaml b/rules/sinks/third_parties/sdk/hubspot/ruby.yaml new file mode 100644 index 00000000..78696048 --- /dev/null +++ b/rules/sinks/third_parties/sdk/hubspot/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hubspot + name: Hubspot + domains: + - "hubspot.com" + patterns: + - "(?i)(hubspot).*" + tags: diff --git a/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml b/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml new file mode 100644 index 00000000..4c757dc1 --- /dev/null +++ b/rules/sinks/third_parties/sdk/launchdarkly/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Launchdarkly + name: Launchdarkly + domains: + - "launchdarkly.com" + patterns: + - "(?i)(launchdarkly-server-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/money/ruby.yaml b/rules/sinks/third_parties/sdk/money/ruby.yaml new file mode 100644 index 00000000..ff7cb429 --- /dev/null +++ b/rules/sinks/third_parties/sdk/money/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Money + name: Money + domains: + - "moneycorp.com" + patterns: + - "money.*" + tags: diff --git a/rules/sinks/third_parties/sdk/netsuite/ruby.yaml b/rules/sinks/third_parties/sdk/netsuite/ruby.yaml new file mode 100644 index 00000000..cc639817 --- /dev/null +++ b/rules/sinks/third_parties/sdk/netsuite/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.NetSuite + name: NetSuite + domains: + - "netsuite.com" + patterns: + - "(?i)(netsuite).*" + tags: diff --git a/rules/sinks/third_parties/sdk/okta/ruby.yaml b/rules/sinks/third_parties/sdk/okta/ruby.yaml new file mode 100644 index 00000000..55067f39 --- /dev/null +++ b/rules/sinks/third_parties/sdk/okta/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Okta + name: Okta + domains: + - "okta.com" + patterns: + - "(?i)(omniauth-okta).*" + tags: diff --git a/rules/sinks/third_parties/sdk/osocloud/ruby.yaml b/rules/sinks/third_parties/sdk/osocloud/ruby.yaml new file mode 100644 index 00000000..05a4d536 --- /dev/null +++ b/rules/sinks/third_parties/sdk/osocloud/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Oso + name: Oso + domains: + - "osohq.io" + patterns: + - "(?i)(oso-cloud).*" + tags: diff --git a/rules/sinks/third_parties/sdk/plaid/ruby.yaml b/rules/sinks/third_parties/sdk/plaid/ruby.yaml new file mode 100644 index 00000000..42ce8d35 --- /dev/null +++ b/rules/sinks/third_parties/sdk/plaid/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Plaid + name: Plaid + domains: + - "plaid.com" + patterns: + - "(?i)(plaid).*" + tags: diff --git a/rules/sinks/third_parties/sdk/sentry/ruby.yaml b/rules/sinks/third_parties/sdk/sentry/ruby.yaml index ef2b7d30..0d4aa775 100644 --- a/rules/sinks/third_parties/sdk/sentry/ruby.yaml +++ b/rules/sinks/third_parties/sdk/sentry/ruby.yaml @@ -9,5 +9,5 @@ sinks: domains: - "sentry.io" patterns: - - "(?i)(fluent-plugin-sentry-ruby).*" + - "(?i)(fluent-plugin-sentry-ruby|sentry-ruby|sentry-rails|sentry-sidekiq).*" tags: diff --git a/rules/sinks/third_parties/sdk/tencent/ruby.yaml b/rules/sinks/third_parties/sdk/tencent/ruby.yaml index 2dc4b85d..3f032fa9 100644 --- a/rules/sinks/third_parties/sdk/tencent/ruby.yaml +++ b/rules/sinks/third_parties/sdk/tencent/ruby.yaml @@ -9,5 +9,5 @@ sinks: domains: - "cloud.tencent.com" patterns: - - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|cos|qcloud_ruby).*" + - "(?i)(tencent_trustsql|tencent_cos_sdk|tencent-ai|tencent_cloud_cos|tencent_cloud_sms|carrierwave-tencent_cos|tencent_simple_sms|hq_tencent_dsp_api|tencentcloud-sdk-common|tencentcloud-sdk-as|tencentcloud-sdk-sms|tencentcloud-sdk-cvm|tencentcloud-sdk-gme|tencentcloud-sdk-dlc|tencentcloud-sdk-gs|tencentcloud-sdk-tem|tencentcloud-sdk-organization|tencentcloud-sdk-vms|tencentcloud-sdk-mps|tencentcloud-sdk-monitor|tencentcloud-sdk-pds|tencentcloud-sdk-billing|tencentcloud-sdk-ump|tencentcloud-sdk-tci|tencentcloud-sdk-privatedns|tencentcloud-sdk-dtf|tencentcloud-sdk-mgobe|tencentcloud-sdk-ticm|tencentcloud-sdk-nlp|tencentcloud-sdk-msp|tencentcloud-sdk-bm|tencentcloud-sdk-oceanus|tencentcloud-sdk-tke|tencentcloud-sdk-tms|tencentcloud-sdk-cdb|tencentcloud-sdk-tiw|tencentcloud-sdk-tbaas|tencentcloud-sdk-tse|tencentcloud-sdk-gse|tencentcloud-sdk-apcas|tencentcloud-sdk-mna|tencentcloud-sdk-btoe|tencentcloud-sdk-bda|tencentcloud-sdk-sslpod|tencentcloud-sdk-cds|tencentcloud-sdk-tsf|tencentcloud-sdk-wss|tencentcloud-sdk-yunjing|tencentcloud-sdk-dbbrain|tencentcloud-sdk-cynosdb|tencentcloud-sdk-aai|tencentcloud-sdk-advisor|tencentcloud-sdk-tcex|tencentcloud-sdk-dayu|tencentcloud-sdk-tiems|tencentcloud-sdk-youmall|tencentcloud-sdk-cmq|tencentcloud-sdk-iot|tencentcloud-sdk-trtc|tencentcloud-sdk-redis|tencentcloud-sdk-ssm|tencentcloud-sdk-ocr|tencentcloud-sdk-apigateway|tencentcloud-sdk-mvj|tencentcloud-sdk-captcha|tencentcloud-sdk-dts|tencentcloud-sdk-ssa|tencentcloud-sdk-cloudaudit|tencentcloud-sdk-tics|tencentcloud-sdk-ft|tencentcloud-sdk-tav|tencentcloud-sdk-cam|tencentcloud-sdk-rum|tencentcloud-sdk-partners|tencentcloud-sdk-yunsou|tencentcloud-sdk-gpm|tencentcloud-sdk-tcr|tencentcloud-sdk-ms|tencentcloud-sdk-waf|tencentcloud-sdk-tts|tencentcloud-sdk-vod|tencentcloud-sdk-tdmq|tencentcloud-sdk-cr|tencentcloud-sdk-mrs|tencentcloud-sdk-wav|tencentcloud-sdk-rkp|tencentcloud-sdk-npp|tencentcloud-sdk-cme|tencentcloud-sdk-tag|tencentcloud-sdk-vpc|tencentcloud-sdk-gaap|tencentcloud-sdk-tkgdq|tencentcloud-sdk-domain|tencentcloud-sdk-smpn|tencentcloud-sdk-ecm|tencentcloud-sdk-es|tencentcloud-sdk-bmeip|tencentcloud-sdk-postgres|tencentcloud-sdk-ecdn|tencentcloud-sdk-cii|tencentcloud-sdk-cim|tencentcloud-sdk-dc|tencentcloud-sdk-bmvpc|tencentcloud-sdk-asr|tencentcloud-sdk-eis|tencentcloud-sdk-chdfs|tencentcloud-sdk-cbs|tencentcloud-sdk-tione|tencentcloud-sdk-bizlive|tencentcloud-sdk-dcdb|tencentcloud-sdk-facefusion|tencentcloud-sdk-cpdp|tencentcloud-sdk-cat|tencentcloud-sdk-eiam|tencentcloud-sdk-faceid|tencentcloud-sdk-api|tencentcloud-sdk-bri|tencentcloud-sdk-ba|tencentcloud-sdk-batch|tencentcloud-sdk-iotexplorer|tencentcloud-sdk-taf|tencentcloud-sdk-lp|tencentcloud-sdk-essbasic|tencentcloud-sdk-lighthouse|tencentcloud-sdk-tsw|tencentcloud-sdk-tiia|tencentcloud-sdk-ds|tencentcloud-sdk-tbm|tencentcloud-sdk-solar|tencentcloud-sdk-tat|tencentcloud-sdk-habo|tencentcloud-sdk-rp|tencentcloud-sdk-tia|tencentcloud-sdk-ims|tencentcloud-sdk-sts|tencentcloud-sdk-tdid|tencentcloud-sdk-ie|tencentcloud-sdk-iotcloud|tencentcloud-sdk-cis|tencentcloud-sdk-aa|tencentcloud-sdk-rce|tencentcloud-sdk-soe|tencentcloud-sdk-ccc|tencentcloud-sdk-bmlb|tencentcloud-sdk-zj|tencentcloud-sdk-asw|tencentcloud-sdk-ckafka|tencentcloud-sdk-cfs|tencentcloud-sdk-mongodb|tencentcloud-sdk-iottid|tencentcloud-sdk-tmt|tencentcloud-sdk-scf|tencentcloud-sdk-vm|tencentcloud-sdk-ams|tencentcloud-sdk-cwp|tencentcloud-sdk-ame|tencentcloud-sdk-tcb|tencentcloud-sdk-dnspod|tencentcloud-sdk-market|tencentcloud-sdk-cms|tencentcloud-sdk-iotvideoindustry|tencentcloud-sdk-hcm|tencentcloud-sdk-tbp|tencentcloud-sdk-emr|tencentcloud-sdk-live|tencentcloud-sdk-drm|tencentcloud-sdk-fmu|tencentcloud-sdk-tcm|tencentcloud-sdk-cfw|tencentcloud-sdk-ses|tencentcloud-sdk-ic|tencentcloud-sdk-afc|tencentcloud-sdk-tcaplusdb|tencentcloud-sdk-cls|tencentcloud-sdk-antiddos|tencentcloud-sdk-tic|tencentcloud-sdk-clb|tencentcloud-sdk-ecc|tencentcloud-sdk-ape|tencentcloud-sdk-mariadb|tencentcloud-sdk-cdn|tencentcloud-sdk-iotvideo|tencentcloud-sdk-ssl|tencentcloud-sdk-sqlserver|tencentcloud-sdk-kms|tencentcloud-sdk-iai|tencentcloud-sdk-memcached|tencentcloud-sdk-af|tencentcloud-sdk-cws|tencentcloud-sdk-cloudhsm|tencentcloud-sdk-iir|tencentcloud-sdk-thpc|tencentcloud-sdk-ivld|tencentcloud-sdk-apm|tencentcloud-sdk-tcss|tencentcloud-sdk-iecp|qqpush|tencentcloud-sdk-eb|tencentcloud-sdk-common-1.0.119|tencentcloud-sdk-trtc-1.0.119|tx_nlp|qcloud_ruby).*" tags: diff --git a/rules/sinks/third_parties/sdk/wechat/ruby.yaml b/rules/sinks/third_parties/sdk/wechat/ruby.yaml index 1405e756..373c6a00 100644 --- a/rules/sinks/third_parties/sdk/wechat/ruby.yaml +++ b/rules/sinks/third_parties/sdk/wechat/ruby.yaml @@ -9,5 +9,5 @@ sinks: domains: - "wechat.com" patterns: - - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|hubs|omniauth-wx|wmp_sdk|app_status_notification).*" + - "(?i)(wechat_mp|wechat|omniauth-wechat|wechat-core|wechat-sns|wechat-jsapi|wechat-validator|wechat-api|wechat-handler|wechat-callback|wechat-validation|wechat-adapter|wechat-pay|wechat-rails|wechat-shake_around|wechat-bot2|omniauth-wechat-oauth2|wechat_payment|wechat-rb|motion_wechat|wechat_client|motion-wechat|sinatra-wechat|wechat_work|wechat-bot|easy_wechat|wechat-omniauth-web|ocean-wechat|fakesite-wechat|xi_wechat_corp|wechat_app|wechat-client|wechat-auth_client|simple_wechat|sharp_wechat|gfd_wechat|omniauth_oauth2_wechat|socialed_wechat|omniauth-open_wechat|fastlane-plugin-wechat|bonio-omniauth-wechat-oauth2|sorcery_wechat_provider|omniauth-open-wechat-oauth2|ocean_wechat_robot|wx_pay|weui-rails|wechatpay|wechater|Rwepay|wxpay|we_chat|we_whisper|weichat_rails|wework|weixin_pay|omniauth-mpwechat-oauth2|wx_pay_api|omniauth-wx|wmp_sdk|app_status_notification).*" tags: From daeeb1a06ca77ddd3a7453235a81969b6554f757 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Mon, 28 Aug 2023 17:34:22 +0530 Subject: [PATCH 22/74] Python: Stripe Rule (#297) --- rules/sinks/third_parties/sdk/stripe/python.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/stripe/python.yaml b/rules/sinks/third_parties/sdk/stripe/python.yaml index c0f310c2..3f61754b 100644 --- a/rules/sinks/third_parties/sdk/stripe/python.yaml +++ b/rules/sinks/third_parties/sdk/stripe/python.yaml @@ -9,5 +9,5 @@ sinks: domains: - "stripe.com" patterns: - - "(?i)(.*stripe|tapioca_stripe|collective[.]stripe|types_stripe|grvlms_stripe|aa_stripe|nameko_stripe|drf_stripe|snapflow_stripe|async_stripe|djangoshop_stripe|tornado_stripe).*" + - "(?i).*stripe[^/]*" tags: From e28ed62d1d7464e2b447d778543a373bb05cb778 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Tue, 29 Aug 2023 14:45:01 +0530 Subject: [PATCH 23/74] Python: Stripe Rule (#298) --- rules/sinks/third_parties/sdk/stripe/python.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/stripe/python.yaml b/rules/sinks/third_parties/sdk/stripe/python.yaml index c0f310c2..3f61754b 100644 --- a/rules/sinks/third_parties/sdk/stripe/python.yaml +++ b/rules/sinks/third_parties/sdk/stripe/python.yaml @@ -9,5 +9,5 @@ sinks: domains: - "stripe.com" patterns: - - "(?i)(.*stripe|tapioca_stripe|collective[.]stripe|types_stripe|grvlms_stripe|aa_stripe|nameko_stripe|drf_stripe|snapflow_stripe|async_stripe|djangoshop_stripe|tornado_stripe).*" + - "(?i).*stripe[^/]*" tags: From 159a81dba16cc6984aade43fc993d5fcf57ea600 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Thu, 31 Aug 2023 16:19:04 +0530 Subject: [PATCH 24/74] Add Graphql rules as API rules (#299) * Add Graphql rules as API rules * Add client creation baseurl detection pattern * Add mongodb rule for models --- config/systemConfig/javascript.yaml | 14 +++++++++++++- rules/sinks/storages/mongodb/javascript.yaml | 1 + .../sdk/apollographql/javascript.yaml | 14 -------------- 3 files changed, 14 insertions(+), 15 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/apollographql/javascript.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index 8a939956..fedc9116 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -9,4 +9,16 @@ systemConfig: value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|fetchapi|fetchlegacyxml|createfetch|postform|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) - key: apiIdentifier - value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* + + - key: clientCreationBaseUrlPattern + value: (?i)(axios.*create|(@angular\/common\/http.){0,1}HttpRequest[:]clone) + + - key: apiGraphqlLibraries + value: (?i)(.*ApolloClient|graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|relay-hooks|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs\\/graphql|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing|@solui\\/graphql).* + + - key: apiGraphqlReadSink + value: (?i)(fetchapi|fetchlegacyxml|get|getInputStream|getApod|getForObject|getForEntity|list|proceed|trace|Path|getInput|getOutput|getResponse|marshall|unmarshall|on|url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|useSubscription|useFragment|usePaginationFragment|asyncIterator|graphqlExpress) + + - key: apiGraphqlWriteSink + value: (?i)(createfetch|postform|axios|cors|set|post|put|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|asyncSend|emit|makeExecutableSchema|gql|commitMutation|useMutation|publish|joinMonsterAdapt) \ No newline at end of file diff --git a/rules/sinks/storages/mongodb/javascript.yaml b/rules/sinks/storages/mongodb/javascript.yaml index a3fe2948..3e7d68c6 100644 --- a/rules/sinks/storages/mongodb/javascript.yaml +++ b/rules/sinks/storages/mongodb/javascript.yaml @@ -5,6 +5,7 @@ sinks: domains: - mongodb.com patterns: + - "(?i)mongoose.model" - "(?:mquery|mpath|mongojs|mongodb[.]net|winston-mongodb|feathers-mongoose|koa2-ratelimit|gridfs-stream|aedes-persistence-mongodb|mockgoose|mubsub|minimongo|uuid-mongodb|@fastify/mongodb|gridfs-promise|feathers-mongodb-fuzzy-search|rus-diff|recachegoose|baqend|@onehilltech/blueprint-mongodb|cachegoose|@treehouses/cli|gridfs-locking-stream|hapi-mongo-models|forerunnerdb|gridfs|payload|@lenne.tech/nest-server|database-cleaner|yams|@firstteam102/connect-mongo|json2mongo|@oguzbey/mongoose-beautiful-unique-validation|node-mongotools|ascoltatori|@casbin/mongo-changestream-watcher|@appveen/swagger-mongoose-crud|tingodb|generator-ng-fullstack|objectid|opentelemetry-instrumentation-mongoose|@immjunaid/create-express-restapis|apollo-passport-mongodb-driver|jsonquery-engine|drop-mongodb-collections|nosqldbm-converter|nedb-lite|promised-mongo|feathers-mongodb|flatten-obj|mongoskin|sift|migrate-mongo|denque|mqemitter-mongodb|to-mongodb-core|graphql-mongodb-projection|jugglingdb|gulp-mongodb-data|thunkify-mongodb|joi-objectid|electron-squirrel-startup|node-express-mongodb-jwt-rest-api-skeleton|@caruuto/api-mongodb|sharedb-mongo|@chrishenderson/mongodb-queue|twitter2mongodb|@lpgroup/feathers-mongodb|@neo9/n9-mongodb-migration|sails-mongo|mongolass|w-orm-mongodb).*" tags: diff --git a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml b/rules/sinks/third_parties/sdk/apollographql/javascript.yaml deleted file mode 100644 index 73af7002..00000000 --- a/rules/sinks/third_parties/sdk/apollographql/javascript.yaml +++ /dev/null @@ -1,14 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Apollographql - name: Apollographql - domains: - - "apollographql.com" - patterns: - - "ApolloClient.*" - - "graphql|@apollo\\/client|express-graphql|nexus|apollo-server-.*|apollo-link-.*|google-graphql-functions|@join-com\\/gcloud-apollo-express-logger|autographql|modern-project-generator|@greguintow\\/apollo-server-cloud-functions|@keplr\\/graphql-changes-slack-notifier|@gapi\\/sendgrid|apollo-server|@octokit\\/graphql|@graphql-codegen\\/core|@graphql-tools\\/relay-operation-optimizer|react-apollo|@apollo\\/react-components|@apollo\\/react-ssr|next-apollo|gatsby-source-graphcms|mongoose-to-graphql|@gql2ts\\/util|apollo-angular-link-http-common|relay-decorator|core-types|prisma1|@n1ru4l\\/in-memory-live-query-store|@times-components\\/utils|@nestjs-query\\/query-graphql|@divyenduz\\/graphql-language-service-parser|@accounts\\/server|get-countries-info|@kamilkisiela\\/graphql-tools|gatsby-source-graphql-universal|graphiql-code-exporter|gatsby-graphql-source-toolkit|loopback-graphql-server|nothinkdb|gatsby-plugin-graphql-codegen|vtex-graphql-builder|@gql2ts\\/from-query|primus-graphql|generator-es6-graphql|rnrf-relay-renderer|gql-error|fetch-dedupe|@times-components\\/provider-queries|moleculer-apollo-server|ts-transform-graphql-tag|svelte-apollo|nuxt-graphql-request|@giraphql\\/core|gql-query-builder|ibm-graphql-query-generator|@apollographql\\/apollo-upload-server|@typerpc\\/plugin-utils|@typerpc\\/plugin|@apollo\\/federation-internals|gatsby-source-prismic-graphql|@jesstelford\\/apollo-cache-invalidation|superagent-graphql|@cdmbase\\/graphql-type-uri|@gramps\\/gramps|@giraphql\\/plugin-scope-auth|@giraphql\\/plugin-validation|@focus-reactive\\/storybook-graphql-kit|@giraphql\\/plugin-relay|datasource-sql|@giraphql\\/plugin-prisma|join-monster-graphql-tools-adapter|houdini|@ssb-graphql\\/main|apollo-logger|@apollo-elements\\/interfaces|bs-graphql|@ethql\\/base|gql-now|async-cache-dedupe|@pickk\\/common|tt-model|@flopflip\\/http-adapter|@entria\\/graphql-mongoose-loader|mobx-graphlink|@rxdi\\/graphql|egg-graphql|@hasura-ws\\/core|apollo-datasource-http|@theguild\\/graphql-language-service-types|@golevelup\\/nestjs-graphql-request|@dotvirus\\/yxc|altair-graphql-plugin|@browserql\\/fragments|craco-graphql-loader|@theguild\\/graphql-language-service-utils|@loona\\/core|@brownpapertickets\\/surya-gql-data|@tegh\\/core|@tira\\/tira-errors|@rxdi\\/hapi|@ssb-graphql\\/tribes|relay-enum-generator|surya-gql-data|@apollo-model\\/graphql-tools|gh-gql|@theguild\\/graphql-language-service|@gramps\\/errors|altair-fastify-plugin|@bloomreach\\/graphql-commerce-connector-service|@absinthe\\/socket-relay|@brownpapertickets\\/surya-gql-types|@fjedi\\/graphql-shield|objection-graphql|@forrestjs\\/service-fastify-gql|@graphql-portal\\/dashboard|@forrestjs\\/service-apollo|@r26d\\/absinthe-apollo-socket|@gapi\\/ipfs|ra-data-graphql-simple|nest-graphql-utils|@thiscover\\/discover|super-graphiql-express|@joystream\\/warthog|@aerogear\\/graphql-query-mapper|ssb-helpers|mercurius-upload|@rxdi\\/compressor|openapi-graphql|graphene-js|@activimetrics\\/socket|gql-generator-node|bs-apollo-server-express|@browserql\\/cache|github-graphql-api|format-graphql|gatsby-plugin-sanity-image|relay-link-http-common|@subhuti\\/type|@ethql\\/core|ra-data-opencrud|@gapi\\/ipfs-daemon|@rxdi\\/graphql-rabbitmq-subscriptions|graphml-parser|@gql2ts\\/language-flow|gatsby-plugin-apollo-shopify|nestjs-dataloader|@foo-software\\/ghost-graphql|mst-gql|easygraphql-parser-gamechanger|fib-graphql|@entria\\/graphql-mongo-helpers|express-graphiql|hapi-plugin-graphiql|batched-graphql-request|surya-gql-types|js-core-data-graphql|@lifeomic\\/graphql-resolvers-xray-tracing|hapi-graphql|@magnus-plugins\\/apollo-server-fastify|@opencreek\\/neo4j-graphql|apollo-cache-|gql2flow|@prisma-cms\\/query-builder|@neo4j\\/graphql-ogm|@typerpc\\/go-plugin-utils|@oudy\\/graphql|@creditkarma\\/graphql-loader|@valueflows\\/vf-graphql|relay-nextjs|graysql|@browserql\\/firestore|flow-dynamic|@hauxir\\/absinthe-socket|@rqsts\\/react-data-graphql|@apollo-orbit\\/core|@rxdi\\/rabbitmq-pubsub|@theguild\\/graphql-language-service-parser|@bilgorajskim\\/ra-data-graphql|@dracul\\/customize-backend|@landingexp\\/apollo-reporting-protobuf|@theguild\\/graphql-language-service-interface|vn-kooch-data-graphql|@enigmatis\\/polaris-typeorm|@yeutech\\/ra-data-graphql|mongease-graphql|trepo-core|@browserql\\/react|@blueeast\\/graphql-mqtt-subscriptions|@dillonkearns\\/elm-graphql|@n1ru4l\\/socket-io-graphql-server|bs-promise-router|rest-graphql|@devinit\\/datahub-api|codegen-prismic-fetch|@cortexql\\/ts2graphql|@crossroad\\/manager|@brownpapertickets\\/surya-gql-auth|@graphql-guru\\/loader|@dwwoelfel\\/graphql-parse-resolve-info|@nestbox\\/core|ts2graphql|@subhuti\\/core|gatsby-plugin-graphql-component|@graphql-portal\\/datasources|openapi2graph|@emrys-myrddin\\/ra-data-graphql|@golevelup\\/nestjs-hasura|subscriptions-transport-sse|@openreplay\\/tracker-graphql|@hasura-ws\\/prepare|@enigmatis\\/polaris-middlewares|nestjs-graphql-dataloader|sails-graphql-adapter|@hasura-ws\\/model|@hydre\\/graphql-batch-executor|@corejam\\/plugin-auth|@o\\/swagger-to-graphql|yonderbox-graphql-mongodb-adapter|@scalars\\/grapi|@iteria-app\\/graphql-lowcode|@limit0\\/mongoose-graphql-pagination|@limit0\\/graphql-custom-types|@cortical\\/ts2graphql|@ablestack\\/rdo|@wyze\\/gatsby-source-graphql|@gramps\\/gramps-express|@ci-custom-module\\/api|@mitoai\\/gintonic|gatsby-source-mercadolibre|@apollo-waterline\\/policies|fastify-apollo-step|simplistik|@apollo-waterline\\/errors|@girin\\/auth|@graphql-reshape\\/transformers|annotated-graphql|@axelspringer\\/graphql-google-pubsub|@brownpapertickets\\/surya-gql-data-mongodb|@whatsgood\\/uniform-graphql|@pyramation\\/postgis|@type-properties\\/identifier|@dotansimha\\/openapi-to-graphql|@type-properties\\/encryption|sequelize-graphql-tools|nextql|@curlybrace\\/auth|@apollographql\\/graphql-language-service-server|@landingexp\\/apollo-server-express|@jovercao\\/graphql.js|git-get-repos-labels|@curlybrace\\/mediaservice|wasp-graphql|@swatikumar\\/openapi-to-graphql|@timkendall\\/tql|apollo-gateway-tracing|isotropy-graphql|dat-graphql|validate-graphql-page-args|apollo-server-core-tracing|graphile-search-plugin|easygraphql-format-error|@theguild\\/graphiql-toolkit|relay-sentry|git-del-repos-labels|@fevo-tech\\/graphql-codegen-core|@prisma-cms\\/connector|graphile-simple-inflector|@sayjava\\/scaffold-csv-source|@wildcards\\/reason-apollo|git-update-repos-labels|@sayjava\\/scaffold-json-source|graysql-orm-loader|zorgs|@browserql\\/inputs|@jovercao\\/gql-js|react-apollo-graphqls|@theguild\\/graphql-language-service-server|react-relay-offline|github-profile-status|@superalgos\\/web-components|altair-express-middleware|apollo-datasource-graphql|oasgraph-jibz|@ethql\\/ens|cursor-connection|@z4o4z\\/gatsby-source-graphql-universal|artemis-utilities|anagraphql|relay-link-batch|mongoose-plugin-dataloader|wonder-bs-graphql|@prismicio\\/gatsby-source-prismic-graphql|@unitz\\/gqlbuilder|apollo-error-overlay|@ethql\\/erc20|@crossroad\\/registry|@crossroad\\/rules|@kanmii\\/socket|create-graphql-server-logging|@h1u2i3\\/socket|@phony\\/server|create-graphql-server-find-by-ids|traverse-apollo-server-core|@prisma-cms\\/yley|@phony\\/utils|quervana|@subhuti\\/sequelize|@yamadayuki\\/bs-graphql|preact-apollo-fix|buildkite-query|webql-codegen-core|@expo\\/graphql-server-core|persimon|@the-gear\\/graphql-rewrite|graph-data-layer|afrik-server-module-graphiql|openapi-to-graphql-pwr|fetch-github-graphql|graysql-orm-loader-waterline|smartapi-oasgraph|apollo-hooks-extended|postgraphile-apollo-server|@looop\\/graphql-depth-limit|postgraphile-remove-foreign-key-fields-plugin|@n1ru4l\\/graphql-live-query-patch-jsondiffpatch|gqlmin|@graphile\\/persisted-operations|@urql\\/rescript|nest-graphql-scalar-adapter|@tomekf\\/gqlite|@bufferapp\\/bufftracer|@apollo\\/graphql|gatsby-plugin-graphql-config|prisma-graphql-type-decimal|apollo-angular-link-persisted|hops-msw|@lenne.tech\\/nest-server|uniforms-bridge-graphql|gqtx|react-apollo-fragments|shopify-graphql-node|typed-graphql-subscriptions|vscode-artemis-relay|vite-plugin-graphql|@apollo\\/query-graphs|@jcm\\/nexus-plugin-relay-global-id|@apollo\\/composition|gql-hook-codegen|slonik-dataloaders|react-apollo-decorators|@wepublish\\/api|mercurius-apollo-registry|apollo-datasource-soap|@cartons\\/apollo-upload|@capaj\\/graphql-depth-limit|@ctx-core\\/iex-graphql|@herbsjs\\/herbs2gql|apollo-angular-link-http-batch|prisma-typegraphql-types-generator|helix-flare|@entria\\/relay-utils|openapi-to-graphql-nullable|postgraphile-plugin-atomic-mutations|@ogma\\/platform-graphql-fastify|ra-postgraphile|@moogs\\/query-graphql|httpyac|gql-to-ts|glimmer-apollo|@crawlo\\/graphql|omerman-|gql-dedup|mercurius-cache|@squareark\\/sdk|@giraphql\\/plugin-errors|dataloader-values|@graphql-codegen\\/relay-operation-optimizer|@gapi\\/apache-kafka|instagram-graph-sdk|@gapi\\/core|@giraphql\\/plugin-dataloader|next-graphql-react|koa-shopify-graphql-proxy-cookieless|apollo-remove-typename-mutation-link|@gapi\\/sequelize|inversify-graphql|@webundsoehne\\/nestjs-graphql-typeorm-dataloader|apollo-mongoose-plugin|typegraphql-prisma-muhad|@correttojs\\/next-utils|gatsby-plugin-playground|@dracul\\/queue-backend|@gapi\\/microservices|apollo-datasource-cosmosdb|@reform\\/bundle-sass|@n1ru4l\\/graphql-live-query-patch-json-patch|nest-graphql-endpoint|@reform\\/bundle-graphql|nestjs-graphql-resolver|@gapi\\/onesignal-notifications|@gapi\\/voyager|@skyra\\/star-wars-api|@reform\\/bundle-html-entry|@ogma\\/platform-graphql|@n1ru4l\\/graphql-codegen-relay-optimizer-plugin|@codification\\/cutwater-graphql|@giraphql\\/plugin-smart-subscriptions|apollo-graph-definition-generator|koa-graphiql|codegen-typescript-graphql-module-declarations-plugin|@theydo\\/graphql-directive-requires-authentication|@giraphql\\/plugin-example|apollo-graphql-ws-link|@gapi\\/playground|gatsby-plugin-altair-graphql|require-graphql-file|fastify-gql-upload|@gapi\\/auth|@coderich\\/autograph|github-openapi-graphql-query|apollo-reporting-protobuf|@apollo\\/federation|vue-apollo|type-graphql|@apollo\\/gateway|@n1ru4l\\/graphql-live-query|@apollo\\/react-hooks|apollo-errors|@apollographql\\/graphql-upload-8-fork|@apollographql\\/graphql-language-service-|@apollo\\/query-planner|koa-graphql|@apollo\\/react-common|ts-graphql-plugin|@aws-amplify\\/graphql-.*|@graphiql\\/toolkit|@apollo\\/react-hoc|apollo-engine-reporting-protobuf|swagger-to-graphql|graphile-utils|@harmonyjs\\/controller-apollo|apollo-resolvers|@apollo\\/subgraph|highlightjs-graphql|apollo-angular-link-http|graph.ql|relay-compiler-language-typescript|@divyenduz\\/graphql-language-service-types|gotql|fastify-apollo|sails-graphql|loopback-graphql|easygraphql-parser|ra-data-graphql|@rollup\\/plugin-graphql|@apollo\\/rover|cf-graphql|@envelop\\/core|openapi-to-graphql|@divyenduz\\/graphql-language-service|granate|http-link-dataloader|universal-hot-reload|waterline-graphql|gql-generator|@kbrandwijk\\/swagger-to-graphql|typegraphql-prisma|meteor-apollo-accounts|@absinthe\\/socket-apollo-link|waterline-to-graphql|sequelize-relay|graphiql-ui|adonis-apollo-server|@graphql-toolkit\\/relay-operation-optimizer|altair-graphql-core|gqlx|apollo-server-restify|loopback-graphql-relay|jsontographql|@mathix420\\/graphql|stateslang|generator-nodejs-api|react-blips|spikenail|@gql2ts\\/types|ej2-graphql-adaptor|altair-static|next-apollo-provider|core-types-graphql|@raynode\\/graphql-anywhere|coffee-relay|lambda-graphql|react-fgql|graph-entity|apollo-paean-wordpress|graph-quill|@exogen\\/graphql-tools|relay-fullstack|express-graph.ql|sofa-api|sparqljson-to-tree|@neo4j\\/graphql|type-graphql-dataloader|@ardatan\\/graphql-tools|soap-graphql|@nestlab\\/google-recaptcha|shopify-gid|@browserql\\/fpql|mercurius-codegen|apollo-type-bigint|rivet-graphql|@n1ru4l\\/graphql-live-query-patch|apollo-angular-boost|@yonderbox\\/graphql-colors|relay-link|nanographql|@grapi\\/server|typegraphql-nestjs|apollo-datasource-dynamodb|ply-ct|@hoangvvo\\/graphql-jit|@palpinter\\/moleculer-apollo-server|react-apollo-graphql|falcor-graph-syntax|@yonderbox\\/graphql-mongodb-adapter|gatsby-plugin-apollo|@graphql-sse\\/server|gatsby-plugin-graphql-loader|rescript-relay|@advancedalgos\\/web-components|cat-graphql|objection-graphql-relay|@graphity\\/types|graphity|cloud-graphql|@yonderbox\\/graphql-adapter|@svelkit\\/graphql|@tira\\/tira-project-template|neo4j-graphql-binding|@kohanajs\\/graphql-to-orm|rip-hunter|@alpine-code\\/node-red-contrib-graphql|@focus-reactive\\/storybook-addon-graphcms|apollo-datasource-firestore|type-graph-orm|@ssb-graphql\\/stats|@browserql\\/operations|@graphql-workspaces\\/load|@puti94\\/gql-utils|@ssb-graphql\\/pataka|hera-js|onepiece-federation|cl-graphql-language-service-interface|relay-sequelize|@creatiwity\\/ra-data-graphql|@nlabs\\/rip-hunter|express-graphiql-toolbox|@browserql\\/contracts|jason-graphql-server|relay-common|relay-mongoose-connection|kendryte|subkit-graphiql|gql-fetch|@mochilabs\\/ra-data-graphql|@zuu\\/owl|yonderbox-graphql-colors|isotropy-plugin-graphql|@jumpn\\/absinthe-phoenix-socket|proptypes-parser|@brownpapertickets\\/surya-gql-data-pgsql|@goldix.org\\/graphql|@greenwood\\/plugin-graphql|@fjedi\\/graphql-api|@apollographql\\/graphql-playground-middleware-lambda|gverse|validation-error-gql|@txstate-mws\\/graphql-server|ra-data-hasura-graphql|@mzronek\\/openapi-to-graphql|@cobraz\\/nestjs-dataloader|fastify-gql-upload-ts|@giraphql\\/plugin-sub-graph|@foal\\/graphql|@giraphql\\/converter|@logilab\\/gatsby-plugin-elasticsearch|@vuex-orm\\/plugin-graphql|@saeris\\/apollo-server-vercel|@apollo-elements\\/rollup-plugin-graphql|gql-logger|skyhook-graphql-sdk|@kazekyo\\/nau|altair-koa-middleware|grandstack|relay-nextjs-next|@sokolabs\\/graphql-fields-list|@favware\\/graphql-pokemon|@pipedrive\\/graphql-query-cost|@rxdi\\/credit-card-form|@grafoo\\/core|gatsby-plugin-json-pages|@dblechoc\\/vite-plugin-relay|@saeris\\/graphql-scalars|@kibeo\\/mk-gql|json-logic-js-graphql|evolutility-ui-react|dataloaderx|core-mvc|@grafoo\\/react|@saipyenepalli\\/graphql-to-mongodb-spy|@gapi\\/amqp|query-builder-graphql|@merged\\/solid-apollo|@envelop\\/statsd|@rxdi\\/ipfs-package-example|gatsby-plugin-algolia-search|easy-dgraph|@wiicamp\\/graphql-merge-resolvers|@fjedi\\/graphql-react-components|gqlite-lib|apollo-hooks-codegen|@absinthe\\/socket-graphiql|@graphile\\/postgis|millan|moesif-nodejs|@prismicio\\/gatsby-source-graphql-universal|reason-apollo|@giraphql\\/plugin-simple-objects|gql-compress|@loopback\\/graphql|rollup-plugin-graphql|@landingexp\\/apollo-server-core|graphi|gql2ts|vscode-apollo-relay|@curlybrace\\/framework|@ishop\\/core|@apollo-elements\\/lib|apicalypse|@graphql-authz\\/core|@grafoo\\/bindings|@giraphql\\/plugin-directives|@enigmatis\\/polaris-common|@tira\\/tira-graphql|@anthor\\/graphql-compose-mongoose|hops-react-apollo|@forrestjs\\/service-express-graphql|lunar-core|@girin\\/framework|igroot-fetch|@ssb-graphql\\/invite|prisma-nestjs-graphql|@jamo\\/graphql-request|apollo-log|@saeris\\/graphql-directives|@digest\\/graphql|@tsed\\/graphql|@udia\\/graphql-postgres-subscriptions|@brownpapertickets\\/surya-gql-scalar|@rxdi\\/graphql-pubsub|@molaux\\/mui-crudf|type-graphql.macro|react-apollo-mutation-state|@pandaai\\/graphql-fork|reason-graphql|apollo-progressive-fragment-matcher|@est-normalis\\/simple-apollo-logger|mercurius-apollo-tracing|@cartons\\/graphql-upload|@serafin\\/api|@zaibot\\/graphql-cosmos|apollo-datasource-firebase|simplify-graphql|type-graphql-dataloader-integrated|@nebo.digital\\/query-graphql|@apollo\\/link-ws|apollo-tracing|@solui\\/graphql" - tags: From c6ea78b618d6206eae6086401a00391e795a289e Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 6 Sep 2023 15:57:13 +0530 Subject: [PATCH 25/74] Add OpenAI sdk rules (#302) * Add OpenAI sdk rules * Fix code review comments --- .../sinks/third_parties/sdk/google/javascript.yaml | 2 +- rules/sinks/third_parties/sdk/openai/java.yaml | 13 +++++++++++++ .../sinks/third_parties/sdk/openai/javascript.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/openai/python.yaml | 3 ++- rules/sinks/third_parties/sdk/openai/ruby.yaml | 13 +++++++++++++ 5 files changed, 42 insertions(+), 2 deletions(-) create mode 100644 rules/sinks/third_parties/sdk/openai/java.yaml create mode 100644 rules/sinks/third_parties/sdk/openai/javascript.yaml create mode 100644 rules/sinks/third_parties/sdk/openai/ruby.yaml diff --git a/rules/sinks/third_parties/sdk/google/javascript.yaml b/rules/sinks/third_parties/sdk/google/javascript.yaml index 83246ba0..babe915e 100644 --- a/rules/sinks/third_parties/sdk/google/javascript.yaml +++ b/rules/sinks/third_parties/sdk/google/javascript.yaml @@ -25,7 +25,7 @@ sinks: domains: - "admanager.google.com" patterns: - - "@carlos.algms\\/react-gpt|gpts|@atmedia\\/react-gpt|react-google-publisher-tag|openai|@tomdracz\\/react-gpt|@ticketmaster\\/react-gpt|@cruisecritic\\/react-gpt|@codingcatdev\\/react-gpt|@flightstats\\/react-gpt|@chatsight\\/gee-pee-tee" + - "@carlos.algms\\/react-gpt|gpts|@atmedia\\/react-gpt|react-google-publisher-tag|@tomdracz\\/react-gpt|@ticketmaster\\/react-gpt|@cruisecritic\\/react-gpt|@codingcatdev\\/react-gpt|@flightstats\\/react-gpt|@chatsight\\/gee-pee-tee" tags: - id: ThirdParties.SDK.Google.Admob diff --git a/rules/sinks/third_parties/sdk/openai/java.yaml b/rules/sinks/third_parties/sdk/openai/java.yaml new file mode 100644 index 00000000..983f36fb --- /dev/null +++ b/rules/sinks/third_parties/sdk/openai/java.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.OpenAI + name: OpenAI + domains: + - "openai.com" + patterns: + - "(?i)(com.theokanning.openai-gpt3-java).*" + tags: diff --git a/rules/sinks/third_parties/sdk/openai/javascript.yaml b/rules/sinks/third_parties/sdk/openai/javascript.yaml new file mode 100644 index 00000000..ff8f043a --- /dev/null +++ b/rules/sinks/third_parties/sdk/openai/javascript.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.OpenAI + name: OpenAI + domains: + - "openai.com" + patterns: + - "(?i)(openai|chatgpt|gpt3|@tectalic\\/openai|@dalenguyen\\/openai).*" + tags: diff --git a/rules/sinks/third_parties/sdk/openai/python.yaml b/rules/sinks/third_parties/sdk/openai/python.yaml index 0f29c98b..4b03156c 100644 --- a/rules/sinks/third_parties/sdk/openai/python.yaml +++ b/rules/sinks/third_parties/sdk/openai/python.yaml @@ -9,5 +9,6 @@ sinks: domains: - "openai.com" patterns: - - "(?i)(openai).*" + - "(?i)(openai|chronological).*" + - "(?i)langchain[.]llms.*(openai|azureopenai|openllm).*" tags: diff --git a/rules/sinks/third_parties/sdk/openai/ruby.yaml b/rules/sinks/third_parties/sdk/openai/ruby.yaml new file mode 100644 index 00000000..47e3970d --- /dev/null +++ b/rules/sinks/third_parties/sdk/openai/ruby.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.OpenAI + name: OpenAI + domains: + - "openai.com" + patterns: + - "(?i)(openai|ruby-openai).*" + tags: From a971df054d162d53d14476af2c0215759bccb3a3 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Wed, 6 Sep 2023 18:38:12 +0530 Subject: [PATCH 26/74] Removed duplicate rule (#303) --- rules/sinks/third_parties/sdk/consul/python.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/consul/python.yaml diff --git a/rules/sinks/third_parties/sdk/consul/python.yaml b/rules/sinks/third_parties/sdk/consul/python.yaml deleted file mode 100644 index 0d1f717d..00000000 --- a/rules/sinks/third_parties/sdk/consul/python.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Consul - name: Consul - domains: - - "consul.io" - patterns: - - "(?i)(consul).*" - tags: From 4713e5687d34c6b26254d71d14ea6cd61f2323d6 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Wed, 6 Sep 2023 18:41:50 +0530 Subject: [PATCH 27/74] Removed duplicate rule (#303) (#304) --- rules/sinks/third_parties/sdk/consul/python.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/consul/python.yaml diff --git a/rules/sinks/third_parties/sdk/consul/python.yaml b/rules/sinks/third_parties/sdk/consul/python.yaml deleted file mode 100644 index 0d1f717d..00000000 --- a/rules/sinks/third_parties/sdk/consul/python.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Consul - name: Consul - domains: - - "consul.io" - patterns: - - "(?i)(consul).*" - tags: From 310cce6d39d333eebade0e029a5ae4b8b0284dbe Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Mon, 11 Sep 2023 12:14:27 +0530 Subject: [PATCH 28/74] Update the LLM rules + Add Weviate DB (#306) --- config/systemConfig/javascript.yaml | 4 ++-- rules/sinks/storages/weaviate/java.yaml | 12 ++++++++++++ rules/sinks/storages/weaviate/javascript.yaml | 12 ++++++++++++ rules/sinks/storages/weaviate/python.yaml | 12 ++++++++++++ rules/sinks/third_parties/sdk/openai/python.yaml | 2 ++ 5 files changed, 40 insertions(+), 2 deletions(-) create mode 100644 rules/sinks/storages/weaviate/java.yaml create mode 100644 rules/sinks/storages/weaviate/javascript.yaml create mode 100644 rules/sinks/storages/weaviate/python.yaml diff --git a/config/systemConfig/javascript.yaml b/config/systemConfig/javascript.yaml index fedc9116..f1ef2059 100644 --- a/config/systemConfig/javascript.yaml +++ b/config/systemConfig/javascript.yaml @@ -6,10 +6,10 @@ systemConfig: value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* - key: apiSinks - value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|fetchapi|fetchlegacyxml|createfetch|postform|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on) + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|fetchapi|fetchlegacyxml|createfetch|postform|axios|cors|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit|on|track) - key: apiIdentifier - value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker|tracker|paymentservice)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* - key: clientCreationBaseUrlPattern value: (?i)(axios.*create|(@angular\/common\/http.){0,1}HttpRequest[:]clone) diff --git a/rules/sinks/storages/weaviate/java.yaml b/rules/sinks/storages/weaviate/java.yaml new file mode 100644 index 00000000..e7eacdf9 --- /dev/null +++ b/rules/sinks/storages/weaviate/java.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Vaticle TypeDB - https://vaticle.com/typedb + +sinks: + + - id: Storages.Weaviate.ReadAndWrite + name: Weaviate VectorDB + domains: + - weaviate.io + patterns: + - "(?i)(io[.]weaviate[.]client[.]).*" + tags: diff --git a/rules/sinks/storages/weaviate/javascript.yaml b/rules/sinks/storages/weaviate/javascript.yaml new file mode 100644 index 00000000..363232a8 --- /dev/null +++ b/rules/sinks/storages/weaviate/javascript.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Vaticle TypeDB - https://vaticle.com/typedb + +sinks: + + - id: Storages.Weaviate.ReadAndWrite + name: Weaviate VectorDB + domains: + - weaviate.io + patterns: + - "(?i)(weaviate-ts-client|weaviate).*" + tags: diff --git a/rules/sinks/storages/weaviate/python.yaml b/rules/sinks/storages/weaviate/python.yaml new file mode 100644 index 00000000..f5bdbc2a --- /dev/null +++ b/rules/sinks/storages/weaviate/python.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Vaticle TypeDB - https://vaticle.com/typedb + +sinks: + + - id: Storages.Weaviate.ReadAndWrite + name: Weaviate VectorDB + domains: + - weaviate.io + patterns: + - "(?i)(weaviate).*" + tags: diff --git a/rules/sinks/third_parties/sdk/openai/python.yaml b/rules/sinks/third_parties/sdk/openai/python.yaml index 4b03156c..9ed03be0 100644 --- a/rules/sinks/third_parties/sdk/openai/python.yaml +++ b/rules/sinks/third_parties/sdk/openai/python.yaml @@ -11,4 +11,6 @@ sinks: patterns: - "(?i)(openai|chronological).*" - "(?i)langchain[.]llms.*(openai|azureopenai|openllm).*" + - "(?i).*(openai.ChatCompletion).*" + - "(?i)(langchain.chat_models).*(ChatOpenAI).*" tags: From 7af148658ad9d093a66d6bb6ffba8584ed64e2ae Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Mon, 11 Sep 2023 12:16:55 +0530 Subject: [PATCH 29/74] Added rules for ruby third party (#295) * Added rules for ruby third party * removed already existing rule * added hellosign rule * code refactoring --- rules/sinks/third_parties/sdk/devise/ruby.yaml | 9 +++++++++ rules/sinks/third_parties/sdk/postmark/ruby.yaml | 9 +++++++++ 2 files changed, 18 insertions(+) create mode 100644 rules/sinks/third_parties/sdk/devise/ruby.yaml create mode 100644 rules/sinks/third_parties/sdk/postmark/ruby.yaml diff --git a/rules/sinks/third_parties/sdk/devise/ruby.yaml b/rules/sinks/third_parties/sdk/devise/ruby.yaml new file mode 100644 index 00000000..0c24f695 --- /dev/null +++ b/rules/sinks/third_parties/sdk/devise/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Devise + name: Devise + domains: + - "devise.com" + patterns: + - (?i)(devise).* + tags: diff --git a/rules/sinks/third_parties/sdk/postmark/ruby.yaml b/rules/sinks/third_parties/sdk/postmark/ruby.yaml new file mode 100644 index 00000000..9cd2c189 --- /dev/null +++ b/rules/sinks/third_parties/sdk/postmark/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Postmark + name: Postmark + domains: + - "postmark.com" + patterns: + - "(?i)(postmark-rails).*" + tags: From 9c00776ebc4729f902d33c612d88ff7260c73525 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Mon, 11 Sep 2023 12:27:01 +0530 Subject: [PATCH 30/74] Update online_identifiers.yaml (#305) * Update online_identifiers.yaml * fix - redis rule in ruby * new rules --------- Co-authored-by: root --- rules/sinks/storages/redis/ruby.yaml | 2 +- rules/sinks/third_parties/sdk/apnotic/ruby.yaml | 9 +++++++++ rules/sources/online_identifiers.yaml | 4 ++-- 3 files changed, 12 insertions(+), 3 deletions(-) create mode 100644 rules/sinks/third_parties/sdk/apnotic/ruby.yaml diff --git a/rules/sinks/storages/redis/ruby.yaml b/rules/sinks/storages/redis/ruby.yaml index 4c0aa8f6..29c10481 100644 --- a/rules/sinks/storages/redis/ruby.yaml +++ b/rules/sinks/storages/redis/ruby.yaml @@ -4,5 +4,5 @@ sinks: domains: - redis.io patterns: - - (?i).*(redis).* + - (?i)redis.* tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/apnotic/ruby.yaml b/rules/sinks/third_parties/sdk/apnotic/ruby.yaml new file mode 100644 index 00000000..89e51f67 --- /dev/null +++ b/rules/sinks/third_parties/sdk/apnotic/ruby.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: ThirdParties.SDK.Apnotic + name: Apnotic + domains: + - "apple.com" + patterns: + - ".*Apnotic.*" + tags: diff --git a/rules/sources/online_identifiers.yaml b/rules/sources/online_identifiers.yaml index c7f4acdc..284f99d4 100644 --- a/rules/sources/online_identifiers.yaml +++ b/rules/sources/online_identifiers.yaml @@ -15,7 +15,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i).*(device[^\\s/(;)#|,=!>]{0,5}(?:id|info|details))|imei" + - "(?i).*(device[^\\s/(;)#|,=!>]{0,5}(?:id|info|details|token))|imei" tags: law: GDPR @@ -25,7 +25,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i)(?:(?]{0,10}address|machine[^\\s/(;)#|,=!>]{0,10}ip|ip" + - "(?i)(?:(?]{0,10}address|machine[^\\s/(;)#|,=!>]{0,10}ip|ip|remoteip" tags: law: GDPR From d595403ea9627dea0919158ac550d868fbcf9b87 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Sun, 24 Sep 2023 12:06:31 +0530 Subject: [PATCH 31/74] [goSrc2cpg] - Added Golang storage rule (#309) * Added golang storage rule * golang rule change --- rules/sinks/storages/amazonS3/go.yaml | 16 ++++++++++++++++ rules/sinks/storages/redis/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/sqlx/go.yaml | 9 +++++++++ 3 files changed, 42 insertions(+) create mode 100644 rules/sinks/storages/amazonS3/go.yaml create mode 100644 rules/sinks/storages/redis/go.yaml create mode 100644 rules/sinks/storages/sqlx/go.yaml diff --git a/rules/sinks/storages/amazonS3/go.yaml b/rules/sinks/storages/amazonS3/go.yaml new file mode 100644 index 00000000..007eb64d --- /dev/null +++ b/rules/sinks/storages/amazonS3/go.yaml @@ -0,0 +1,16 @@ +sinks: + + - id: Storages.AmazonS3.Write + name: Amazon S3(Read) + domains: + - s3.amazon.com + patterns: + - "(?i).*(aws-sdk-go).*(s3).*(PutObject|ListObject|HeadObject).*" + tags: + + - id: Storage.AmazonS3.Read + name: Amazon S3(Write) + domain: + - s3.amazon.com + patterns: + - "(?i).*(aws-sdk-go).*(s3).*(DeleteObject|GetObject|CopyObject).*" \ No newline at end of file diff --git a/rules/sinks/storages/redis/go.yaml b/rules/sinks/storages/redis/go.yaml new file mode 100644 index 00000000..9beee581 --- /dev/null +++ b/rules/sinks/storages/redis/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.Redis.Read + name: Redis DB(Read) + domains: + - redis.io + patterns: + - "(?i).*(go-redis).*(Get|HGet|HGetAll).*" + tags: + + - id: Storages.Redis.Write + name: Redis DB(Write) + domains: + - redis.io + patterns: + - "(?i).*(go-redis).*(Set|HSet|Del).*" + tags: diff --git a/rules/sinks/storages/sqlx/go.yaml b/rules/sinks/storages/sqlx/go.yaml new file mode 100644 index 00000000..a2efbb57 --- /dev/null +++ b/rules/sinks/storages/sqlx/go.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: Storages.SQLX.ReadAndWrite + name: SQLX + domains: + - sqlx.com + patterns: + - "(?i).*(sqlx).*(Exec|Select|Get).*" + tags: \ No newline at end of file From 5e3bdcd38949eac3389c3216ec017f354dcf692c Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Tue, 26 Sep 2023 16:02:20 +0530 Subject: [PATCH 32/74] Go: leakage sink (#310) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * leakage sink * added leakage rules based on package name --------- Co-authored-by: “Hitesh --- rules/sinks/leakages/logs/go.yaml | 58 +++++++++++++++++++++++++++++++ 1 file changed, 58 insertions(+) create mode 100644 rules/sinks/leakages/logs/go.yaml diff --git a/rules/sinks/leakages/logs/go.yaml b/rules/sinks/leakages/logs/go.yaml new file mode 100644 index 00000000..5085d53c --- /dev/null +++ b/rules/sinks/leakages/logs/go.yaml @@ -0,0 +1,58 @@ +sinks: + + - id: Leakages.Log.Error + name: Log Error + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](error)(f?)" + - "(?i)(go.uber.org/zap).*[.](error)(f|ln|w)?" + - "(?i)(github.com/golang/glog).*[.](error)(depth|depthf|f|ln)?" + - "(?i)(gopkg.in/inconshreveable/log15).*[.](error)" + tags: + + - id: Leakages.Log.Warn + name: Log Warn + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](warn)(f?)" + - "(?i)(go.uber.org/zap).*[.](warn)(f|ln|w)?" + - "(?i)(github.com/golang/glog).*[.](warn)(depth|depthf|f|ln)?" + - "(?i)(gopkg.in/inconshreveable/log15).*[.](warn)" + tags: + + - id: Leakages.Log.Debug + name: Log Debug + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](debug)(f?)" + - "(?i)(go.uber.org/zap).*[.](debug)(f|ln|w)?" + - "(?i)(github.com/golang/glog).*[.](debug)(depth|depthf|f|ln)?" + - "(?i)(gopkg.in/inconshreveable/log15).*[.](debug)" + tags: + + - id: Leakages.Log.Info + name: Log Info + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](info)(f?)" + - "(?i)(go.uber.org/zap).*[.](info)(f|ln|w)?" + - "(?i)(github.com/golang/glog).*[.](info)(depth|depthf|f|ln)?" + - "(?i)(gopkg.in/inconshreveable/log15).*[.](info)" + tags: + + - id: Leakages.Log.Fatal + name: Log Fatal + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](fatal)(f?)" + - "(?i)(go.uber.org/zap).*[.](fatal)(f|ln|w)?" + - "(?i)(github.com/golang/glog).*[.](fatal)(depth|depthf|f|ln)?" + tags: + + - id: Leakages.Log.Panic + name: Log Panic + patterns: + - "(?i)(github.com/sirupsen/logrus).*[.](panic)(f?)" + - "(?i)(go.uber.org/zap).*[.](panic)(f|ln|w)?" + tags: + + - id: Leakages.Log.Console + name: Log Console + patterns: + - "(?i)(fmt)[.](Println|Print)(f?)" + tags: From eb4f7693605a1de364b43ef20b00c58c848a693f Mon Sep 17 00:00:00 2001 From: Suchakra Sharma Date: Mon, 2 Oct 2023 23:17:46 -0700 Subject: [PATCH 33/74] default config for zeromq sockets (#311) * Dev (#285) * Sources/click stream ddhq (#284) * add datadog initialization params which default track click behaviour * Add IndexedDB storage rule --------- Co-authored-by: Datta Mundada * vehicle registration rule * Laundarkly fix (#287) * Remove useFlags method from launchdarkly sdk * Minor correction in laundarkly fix * JS sdk fixes -1 * Fix code-review comment --------- Co-authored-by: Hitesh Mahajan Co-authored-by: Hitesh Mahajan * Python: Stripe Rule (#298) * Removed duplicate rule (#303) (#304) * default config for zeromq sockets --------- Co-authored-by: Datta Mundada Co-authored-by: Hitesh Mahajan Co-authored-by: Hitesh Mahajan Co-authored-by: KhemrajSingh Rathore Co-authored-by: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> --- config/systemConfig/default.yaml | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 config/systemConfig/default.yaml diff --git a/config/systemConfig/default.yaml b/config/systemConfig/default.yaml new file mode 100644 index 00000000..8a0696e1 --- /dev/null +++ b/config/systemConfig/default.yaml @@ -0,0 +1,3 @@ +systemConfig: + - key: maxSocketCount + value: "4096" From 6d6c8e84a5c8830c16318696a396eb71f6a40b6a Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Tue, 3 Oct 2023 17:15:43 +0530 Subject: [PATCH 34/74] Golang storage rule (#312) * Added golang storage rule * golang rule change * fix go rule * fix amazons3 domains rule * Added rule for go sqlx * Updated s3 rules --------- Co-authored-by: Ankit Kumar --- rules/sinks/storages/amazonS3/go.yaml | 11 ++++++----- rules/sinks/storages/sqlx/go.yaml | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/rules/sinks/storages/amazonS3/go.yaml b/rules/sinks/storages/amazonS3/go.yaml index 007eb64d..bbe0c41e 100644 --- a/rules/sinks/storages/amazonS3/go.yaml +++ b/rules/sinks/storages/amazonS3/go.yaml @@ -1,16 +1,17 @@ sinks: - id: Storages.AmazonS3.Write - name: Amazon S3(Read) + name: Amazon S3(Write) domains: - s3.amazon.com patterns: - - "(?i).*(aws-sdk-go).*(s3).*(PutObject|ListObject|HeadObject).*" + - "(?i)(github.com/aws/aws-sdk-go).*(s3).*(PutObject|HeadObject|DeleteObject)" tags: - id: Storage.AmazonS3.Read - name: Amazon S3(Write) - domain: + name: Amazon S3(Read) + domains: - s3.amazon.com patterns: - - "(?i).*(aws-sdk-go).*(s3).*(DeleteObject|GetObject|CopyObject).*" \ No newline at end of file + - "(?i)(github.com/aws/aws-sdk-go).*(s3).*(ListObjects|GetObject|CopyObject)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/sqlx/go.yaml b/rules/sinks/storages/sqlx/go.yaml index a2efbb57..f82c1dc3 100644 --- a/rules/sinks/storages/sqlx/go.yaml +++ b/rules/sinks/storages/sqlx/go.yaml @@ -5,5 +5,5 @@ sinks: domains: - sqlx.com patterns: - - "(?i).*(sqlx).*(Exec|Select|Get).*" + - "(?i)(github.com/jmoiron/sqlx).*(Exec|Select|Get)" tags: \ No newline at end of file From 8c1cfd46573da124be987d5f44c6c37b7bbd5a9c Mon Sep 17 00:00:00 2001 From: Ankit Kumar Date: Wed, 4 Oct 2023 13:37:25 +0530 Subject: [PATCH 35/74] added zerolog rules for logs --- rules/sinks/leakages/logs/go.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/rules/sinks/leakages/logs/go.yaml b/rules/sinks/leakages/logs/go.yaml index 5085d53c..4b2b3a09 100644 --- a/rules/sinks/leakages/logs/go.yaml +++ b/rules/sinks/leakages/logs/go.yaml @@ -3,6 +3,7 @@ sinks: - id: Leakages.Log.Error name: Log Error patterns: + - "(?i)(github.com/rs/zerolog/log).*[.](Error).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](error)(f?)" - "(?i)(go.uber.org/zap).*[.](error)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](error)(depth|depthf|f|ln)?" @@ -12,6 +13,7 @@ sinks: - id: Leakages.Log.Warn name: Log Warn patterns: + - "(?i)(github.com/rs/zerolog/log).*[.](Warn).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](warn)(f?)" - "(?i)(go.uber.org/zap).*[.](warn)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](warn)(depth|depthf|f|ln)?" @@ -21,6 +23,7 @@ sinks: - id: Leakages.Log.Debug name: Log Debug patterns: + - "(?i)(github.com/rs/zerolog/log).*[.](Debug).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](debug)(f?)" - "(?i)(go.uber.org/zap).*[.](debug)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](debug)(depth|depthf|f|ln)?" @@ -30,6 +33,7 @@ sinks: - id: Leakages.Log.Info name: Log Info patterns: + - "(?i)(github.com/rs/zerolog/log).*[.](Info).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](info)(f?)" - "(?i)(go.uber.org/zap).*[.](info)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](info)(depth|depthf|f|ln)?" @@ -56,3 +60,9 @@ sinks: patterns: - "(?i)(fmt)[.](Println|Print)(f?)" tags: + + - id: Leakages.Log.Trace + name: Log Trace + patterns: + - "(?i)(github.com/rs/zerolog/log).*[.](Trace).*(Msg)" + tags: From aa493dafbbfcd710f20354a5a3d6509afbb63861 Mon Sep 17 00:00:00 2001 From: Ankit Kumar Date: Wed, 4 Oct 2023 13:51:51 +0530 Subject: [PATCH 36/74] changed redis rules --- rules/sinks/storages/redis/go.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/sinks/storages/redis/go.yaml b/rules/sinks/storages/redis/go.yaml index 9beee581..d5713350 100644 --- a/rules/sinks/storages/redis/go.yaml +++ b/rules/sinks/storages/redis/go.yaml @@ -5,7 +5,7 @@ sinks: domains: - redis.io patterns: - - "(?i).*(go-redis).*(Get|HGet|HGetAll).*" + - "(?i)(github.com/go-redis).*[.](Get|HGet|HGetAll)" tags: - id: Storages.Redis.Write @@ -13,5 +13,5 @@ sinks: domains: - redis.io patterns: - - "(?i).*(go-redis).*(Set|HSet|Del).*" + - "(?i)(github.com/go-redis).*[.](Set|HSet|Del)" tags: From f74c30e855d92f5860187b18856ed3cf28c9780b Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 4 Oct 2023 17:04:35 +0530 Subject: [PATCH 37/74] Remove SQL Alchmey rule for python (#315) --- rules/sinks/storages/sqlalchemy/python.yaml | 12 ------------ 1 file changed, 12 deletions(-) delete mode 100644 rules/sinks/storages/sqlalchemy/python.yaml diff --git a/rules/sinks/storages/sqlalchemy/python.yaml b/rules/sinks/storages/sqlalchemy/python.yaml deleted file mode 100644 index 1da8f4a4..00000000 --- a/rules/sinks/storages/sqlalchemy/python.yaml +++ /dev/null @@ -1,12 +0,0 @@ - -# Sink Rules for storage database Android SQLite - https://developer.android.com/ - -sinks: - - - id: Storages.SQLAlchemy - name: SQLAlchemy - domains: - - sqlalchemy.org - patterns: - - "(?i)(.*sqlalchemy.*)" - tags: From 0ae53f6ef1d5e5218cc0b200c66c3f260916bdf3 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Thu, 5 Oct 2023 14:37:40 +0530 Subject: [PATCH 38/74] Go: Storage Rules (#317) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * go: database rule * go: storage support * go: divided into read and readandwrite rules * divided rule into two * go: corrected weaviate rule --------- Co-authored-by: “Hitesh --- .gitignore | 1 + rules/sinks/storages/neo4j/go.yaml | 20 +++++++++++++++++ rules/sinks/storages/oracleDatabase/go.yaml | 12 ++++++++++ rules/sinks/storages/pouchdb/go.yaml | 21 ++++++++++++++++++ rules/sinks/storages/prestodb/go.yaml | 13 +++++++++++ .../sinks/storages/relationaldatabase/go.yaml | 12 ++++++++++ rules/sinks/storages/scylladb/go.yaml | 12 ++++++++++ rules/sinks/storages/snowflake/go.yaml | 12 ++++++++++ rules/sinks/storages/sqlite/go.yaml | 20 +++++++++++++++++ rules/sinks/storages/timestream/go.yaml | 22 +++++++++++++++++++ rules/sinks/storages/vaticleTypedb/go.yaml | 12 ++++++++++ rules/sinks/storages/weaviate/go.yaml | 20 +++++++++++++++++ 12 files changed, 177 insertions(+) create mode 100644 rules/sinks/storages/neo4j/go.yaml create mode 100644 rules/sinks/storages/oracleDatabase/go.yaml create mode 100644 rules/sinks/storages/pouchdb/go.yaml create mode 100644 rules/sinks/storages/prestodb/go.yaml create mode 100644 rules/sinks/storages/relationaldatabase/go.yaml create mode 100644 rules/sinks/storages/scylladb/go.yaml create mode 100644 rules/sinks/storages/snowflake/go.yaml create mode 100644 rules/sinks/storages/sqlite/go.yaml create mode 100644 rules/sinks/storages/timestream/go.yaml create mode 100644 rules/sinks/storages/vaticleTypedb/go.yaml create mode 100644 rules/sinks/storages/weaviate/go.yaml diff --git a/.gitignore b/.gitignore index f5e2afc9..a973bfc7 100644 --- a/.gitignore +++ b/.gitignore @@ -246,3 +246,4 @@ dist # files privado notes.md +workspace \ No newline at end of file diff --git a/rules/sinks/storages/neo4j/go.yaml b/rules/sinks/storages/neo4j/go.yaml new file mode 100644 index 00000000..febd4fee --- /dev/null +++ b/rules/sinks/storages/neo4j/go.yaml @@ -0,0 +1,20 @@ + +# Sink Rules for storage database Neo4j Graph Database - https://neo4j.com/ + +sinks: + + - id: Storages.Neo4jGraphDatabase.ReadAndWrite + name: Neo4j Graph Database(ReadAndWrite) + domains: + - neo4j.com + patterns: + - "(?i)(github.com/neo4j/neo4j-go-driver).*(ExecuteQuery)" + tags: + + - id: Storages.Neo4jGraphDatabase.Read + name: Neo4j Graph Database(Read) + domains: + - neo4j.com + patterns: + - "(?i)(github.com/neo4j/neo4j-go-driver).*(ExecuteRead)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/oracleDatabase/go.yaml b/rules/sinks/storages/oracleDatabase/go.yaml new file mode 100644 index 00000000..b21a5e08 --- /dev/null +++ b/rules/sinks/storages/oracleDatabase/go.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Oracle Database - https://www.oracle.com/database/ + +sinks: + + - id: Storages.OracleDatabase.ReadAndWrite + name: Oracle Database + domains: + - oracle.com + patterns: + - "(?i)(github.com/sijms/go-ora).*(Exec|Query)" + tags: diff --git a/rules/sinks/storages/pouchdb/go.yaml b/rules/sinks/storages/pouchdb/go.yaml new file mode 100644 index 00000000..20911f1b --- /dev/null +++ b/rules/sinks/storages/pouchdb/go.yaml @@ -0,0 +1,21 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: Storages.PouchDb.Write + name: Pouch DB(Write) + domains: + - pouchdb.com + patterns: + - "(?i)(github.com/go-kivik/pouchdb).*(Put|BulkDocs)" + tags: + + - id: Storages.PouchDb.Read + name: Pouch DB(Read) + domains: + - pouchdb.com + patterns: + - "(?i)(github.com/go-kivik/pouchdb).*(Get|BulkGet)" + tags: diff --git a/rules/sinks/storages/prestodb/go.yaml b/rules/sinks/storages/prestodb/go.yaml new file mode 100644 index 00000000..facb25a6 --- /dev/null +++ b/rules/sinks/storages/prestodb/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: Storages.Prestodb.ReadAndWrite + name: Prestodb(ReadAndWrite) + domains: + - "prestodb.io" + patterns: + - "(?i)(github.com/prestodb/presto-go-client/presto).*(Query)" + tags: diff --git a/rules/sinks/storages/relationaldatabase/go.yaml b/rules/sinks/storages/relationaldatabase/go.yaml new file mode 100644 index 00000000..816487ff --- /dev/null +++ b/rules/sinks/storages/relationaldatabase/go.yaml @@ -0,0 +1,12 @@ + +#In Go lang "database/sql" is a common package to connect any relational database + +sinks: + + - id: Storages.SQL.ReadAndWrite + name: SQL DB(ReadAndWrite) + domains: + - pkg.go.dev/database/sql + patterns: + - "(?i)(database/sql).*(Prepare|Query|Stmt)(Context|Row)?" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/scylladb/go.yaml b/rules/sinks/storages/scylladb/go.yaml new file mode 100644 index 00000000..fdfd7073 --- /dev/null +++ b/rules/sinks/storages/scylladb/go.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database ScyllaDB - https://www.scylladb.com/ + +sinks: + + - id: Storages.ScyllaDB.ReadAndWrite + name: ScyllaDB(ReadAndWrite) + domains: + - scylladb.com + patterns: + - "(?i)(goapp/internal/scylla).*(Query)" + tags: diff --git a/rules/sinks/storages/snowflake/go.yaml b/rules/sinks/storages/snowflake/go.yaml new file mode 100644 index 00000000..3a62c174 --- /dev/null +++ b/rules/sinks/storages/snowflake/go.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Android SQLite - https://developer.android.com/ + +sinks: + + - id: Storages.Snowflake.ReadAndWrite + name: Snowflake(ReadAndWrite) + domains: + - "snowflake.com" + patterns: + - "(?i)(github.com/snowflakedb/gosnowflake).*(Exec|Query|mustExec|Prepare)" + tags: diff --git a/rules/sinks/storages/sqlite/go.yaml b/rules/sinks/storages/sqlite/go.yaml new file mode 100644 index 00000000..fe56ec05 --- /dev/null +++ b/rules/sinks/storages/sqlite/go.yaml @@ -0,0 +1,20 @@ + +# Sink Rules for storage database Android SQLite - https://developer.android.com/ + +sinks: + + - id: Storages.Android.SQLite.Read + name: SQLite(Read) + domains: + - android.com + patterns: + - "(?i)(github.com/mattn/go-sqlite).*(Query|QueryRow)" + tags: + + - id: Storages.Android.SQLite.ReadAndWrite + name: SQLite(ReadAndWrite) + domains: + - android.com + patterns: + - "(?i)(github.com/mattn/go-sqlite).*(Exec|Prepare|Stmt)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/timestream/go.yaml b/rules/sinks/storages/timestream/go.yaml new file mode 100644 index 00000000..dc0e67bc --- /dev/null +++ b/rules/sinks/storages/timestream/go.yaml @@ -0,0 +1,22 @@ + +# Sink Rules for storage database Amazon Timestream - https://aws.amazon.com/timestream/ + +sinks: + + - id: Storages.AmazonTimestream.Read + name: Amazon Timestream(Read) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/timestreamquery).*(QueryInput)" + tags: + + - id: Storages.AmazonTimestream.Write + name: Amazon Timestream(Write) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/timestreamwrite).*(WriteRecordsInput)" + tags: diff --git a/rules/sinks/storages/vaticleTypedb/go.yaml b/rules/sinks/storages/vaticleTypedb/go.yaml new file mode 100644 index 00000000..4edbaa80 --- /dev/null +++ b/rules/sinks/storages/vaticleTypedb/go.yaml @@ -0,0 +1,12 @@ + +# Sink Rules for storage database Vaticle TypeDB - https://vaticle.com/typedb + +sinks: + + - id: Storages.VaticleTypeDB.ReadAndWrite + name: Vaticle TypeDB + domains: + - vaticle.com + patterns: + - "(?i)(github.com/vaticle/tcd-go-client).*(Query)" + tags: diff --git a/rules/sinks/storages/weaviate/go.yaml b/rules/sinks/storages/weaviate/go.yaml new file mode 100644 index 00000000..ace642a6 --- /dev/null +++ b/rules/sinks/storages/weaviate/go.yaml @@ -0,0 +1,20 @@ + +# Sink Rules for storage database Vaticle TypeDB - https://vaticle.com/typedb + +sinks: + + - id: Storages.Weaviate.ReadAndWrite + name: Weaviate VectorDB + domains: + - weaviate.io + patterns: + - "(?i)(github.com/semi-technologies/weaviate-go-client).*(ObjectsBatcher)" + tags: + + - id: Storages.Weaviate.Read + name: Weaviate VectorDB(Read) + domains: + - weaviate.io + patterns: + - "(?i)(github.com/semi-technologies/weaviate-go-client).*(Get|GetSearch)" + tags: From a78f1080be1d40c5a146958305a94bd40ae159c9 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Thu, 5 Oct 2023 17:27:36 +0530 Subject: [PATCH 39/74] Golang storage rules (#318) * storage rules * arangodb go rule fix * added storage rules --- rules/sinks/storages/arangodb/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/bigtable/go.yaml | 9 +++++++++ rules/sinks/storages/cassandra/go.yaml | 10 ++++++++++ rules/sinks/storages/cognito/go.yaml | 19 +++++++++++++++++++ rules/sinks/storages/cosmosdb/go.yaml | 19 +++++++++++++++++++ rules/sinks/storages/dynamodb/go.yaml | 19 +++++++++++++++++++ rules/sinks/storages/elasticsearch/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/kinesis/go.yaml | 19 +++++++++++++++++++ rules/sinks/storages/mongodb/go.yaml | 17 +++++++++++++++++ 9 files changed, 146 insertions(+) create mode 100644 rules/sinks/storages/arangodb/go.yaml create mode 100644 rules/sinks/storages/bigtable/go.yaml create mode 100644 rules/sinks/storages/cassandra/go.yaml create mode 100644 rules/sinks/storages/cognito/go.yaml create mode 100644 rules/sinks/storages/cosmosdb/go.yaml create mode 100644 rules/sinks/storages/dynamodb/go.yaml create mode 100644 rules/sinks/storages/elasticsearch/go.yaml create mode 100644 rules/sinks/storages/kinesis/go.yaml create mode 100644 rules/sinks/storages/mongodb/go.yaml diff --git a/rules/sinks/storages/arangodb/go.yaml b/rules/sinks/storages/arangodb/go.yaml new file mode 100644 index 00000000..2747f7bf --- /dev/null +++ b/rules/sinks/storages/arangodb/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.ArangoDB.ReadAndWrite + name: ArangoDB(Read) + domains: + - arangodb.com + patterns: + - "(?i)(github.com/arangodb/go-driver).*(Query|Execute)" + tags: + + - id: Storages.ArangoDB.Write + name: ArangoDB(Write) + domains: + - arangodb.com + patterns: + - "(?i)(github.com/arangodb/go-driver).*(CreateDocument|UpdateDocument|RemoveDocument)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/bigtable/go.yaml b/rules/sinks/storages/bigtable/go.yaml new file mode 100644 index 00000000..9a4ab782 --- /dev/null +++ b/rules/sinks/storages/bigtable/go.yaml @@ -0,0 +1,9 @@ +sinks: + + - id: Storages.CloudBigtable.ReadAndWrite + name: Google Cloud Bigtable + domains: + - cloud.google.com/bigquery + patterns: + - "(?i)(cloud.google.com/go/bigtable).*(Apply|ReadRow)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/cassandra/go.yaml b/rules/sinks/storages/cassandra/go.yaml new file mode 100644 index 00000000..3ed03176 --- /dev/null +++ b/rules/sinks/storages/cassandra/go.yaml @@ -0,0 +1,10 @@ +sinks: + + - id: Storages.ApacheCassandra.ReadAndWrite + name: Apache Cassandra + domains: + - cassandra.apache.org + - apache.org + patterns: + - "(?i)(github.com/gocql/gocql).*(Query)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/cognito/go.yaml b/rules/sinks/storages/cognito/go.yaml new file mode 100644 index 00000000..dc2189c6 --- /dev/null +++ b/rules/sinks/storages/cognito/go.yaml @@ -0,0 +1,19 @@ +sinks: + + - id: Storages.AmazonCognito.Read + name: Amazon Cognito(Read) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/cognitoidentityprovider).*(GetItem)" + tags: + + - id: Storages.AmazonCognito.Write + name: Amazon Cognito(Write) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/cognitoidentityprovider).*(PutItem|UpdateItem|DeleteItem)" + tags: diff --git a/rules/sinks/storages/cosmosdb/go.yaml b/rules/sinks/storages/cosmosdb/go.yaml new file mode 100644 index 00000000..4010a0a0 --- /dev/null +++ b/rules/sinks/storages/cosmosdb/go.yaml @@ -0,0 +1,19 @@ +sinks: + + - id: Storages.AzureCosmosDb.Read + name: Azure Cosmos DB(Read) + domains: + - azure.microsoft.com + - microsoft.com + patterns: + - "(?i)(github.com/Azure/azure-sdk-for-go/sdk/data/cosmos).*(ReadItem|QueryItems)" + tags: + + - id: Storages.AzureCosmosDb.Write + name: Azure Cosmos DB(Write) + domains: + - azure.microsoft.com + - microsoft.com + patterns: + - "(?i)(github.com/Azure/azure-sdk-for-go/sdk/data/cosmos).*(UpsertItem|DeleteItem)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/dynamodb/go.yaml b/rules/sinks/storages/dynamodb/go.yaml new file mode 100644 index 00000000..763ca3f2 --- /dev/null +++ b/rules/sinks/storages/dynamodb/go.yaml @@ -0,0 +1,19 @@ +sinks: + + - id: Storages.AmazonDynamoDB.Write + name: Amazon Dynamo DB(Write) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/dynamodb).*(PutItem|UpdateItem|DeleteItem)" + tags: + + - id: Storages.AmazonDynamoDB.Read + name: Amazon Dynamo DB(Read) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/dynamodb).*(GetItem)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/elasticsearch/go.yaml b/rules/sinks/storages/elasticsearch/go.yaml new file mode 100644 index 00000000..a0a92422 --- /dev/null +++ b/rules/sinks/storages/elasticsearch/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.Elasticsearch.Read + name: Elasticsearch(Read) + domains: + - elastic.co + patterns: + - "(?i)(github.com/olivere/elastic).*(Search)" + tags: + + - id: Storages.Elasticsearch.Write + name: Elasticsearch(Write) + domains: + - elastic.co + patterns: + - "(?i)(github.com/olivere/elastic).*(CreateIndex|Delete|Update)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/kinesis/go.yaml b/rules/sinks/storages/kinesis/go.yaml new file mode 100644 index 00000000..2750df08 --- /dev/null +++ b/rules/sinks/storages/kinesis/go.yaml @@ -0,0 +1,19 @@ +sinks: + + - id: Storages.AmazonKinesis.Read + name: Amazon Kinesis(Read) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/kinesis).*(GetRecords)" + tags: + + - id: Storages.AmazonKinesis.Write + name: Amazon Kinesis(Read) + domains: + - aws.amazon.com + - amazon.com + patterns: + - "(?i)(github.com/aws/aws-sdk-go/service/kinesis).*(PutRecords)" + tags: \ No newline at end of file diff --git a/rules/sinks/storages/mongodb/go.yaml b/rules/sinks/storages/mongodb/go.yaml new file mode 100644 index 00000000..6a957690 --- /dev/null +++ b/rules/sinks/storages/mongodb/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.MongoDB.Read + name: MongoDB(Read) + domains: + - mongodb.com + patterns: + - "(?i)(go.mongodb.org/mongo-driver/mongo).*(Find)" + tags: + + - id: Storages.MongoDB.Write + name: MongoDB(Write) + domains: + - mongodb.com + patterns: + - "(?i)(go.mongodb.org/mongo-driver/mongo).*(InsertOne|DeleteOne|UpdateOne)" + tags: \ No newline at end of file From 0e1bb1f40aeffc236fada503045c761e04f8265c Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Mon, 9 Oct 2023 15:45:27 +0530 Subject: [PATCH 40/74] parallel processing for comparisom report (#321) --- .github/workflows/comparison-result.yml | 132 ++++++++++++++++++------ 1 file changed, 101 insertions(+), 31 deletions(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 6fb35ad0..0aa8aa79 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -1,15 +1,38 @@ -name: Monitoring Stability and Comparing Results for privado +name: Monitoring Stability and Comparing Results -# Triggers when a pull_request or a push action is configured on master branch +# Triggers when a pull_request is created on: pull_request_target: + branches: + - "**" jobs: + start_workflow: + runs-on: ubuntu-latest + steps: + - name: Send message to slack + id: initial-message + uses: archive/github-actions-slack@master + with: + slack-optional-parse: full + slack-bot-user-oauth-access-token: ${{ secrets.SLACK_TOKEN }} + slack-channel: ${{ secrets.SLACK_CHANNEL_ID }} + slack-text: "Comparison workflow started for ${{github.event.pull_request.html_url}}" + + - name: Save output to env + id: save-output + run: echo "INIT_MSG_TS=${{ fromJson(steps.initial-message.outputs.slack-result).response.message.ts }}" >> $GITHUB_OUTPUT + outputs: + init_message_ts: ${{steps.save-output.outputs.INIT_MSG_TS}} setup_and_scan: + needs: start_workflow + strategy: + matrix: + language: ['java', 'python', 'js', 'ruby-1', 'ruby-2'] + continue-on-error: true runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - - name: Install JDK-18 uses: actions/setup-java@v3 with: @@ -26,53 +49,100 @@ jobs: with: python-version: '3.10' - - name: Clone standalone-monitoring-stability/main + - name: Clone standalone-monitoring-stability/flow-test uses: actions/checkout@v3 with: repository: Privado-Inc/standalone-monitoring-stability path: ./temp/standalone-monitoring-stability - ref: main - + ref: main + + # langauge specific repository file - name: Run the script for ${{github.head_ref}} and ${{github.base_ref}} - run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./run.py -rbb ${{github.base_ref}} -rbh ${{github.head_ref}} -brr ${{ github.event.pull_request.base.repo.html_url }} -hrr ${{ github.event.pull_request.head.repo.html_url }} -guf -urc + run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./run.py -r ./repos/${{matrix.language}}.txt -b ${{github.base_ref}} -h ${{github.head_ref}} -bcr ${{ github.event.pull_request.base.repo.html_url }} -hcr ${{ github.event.pull_request.head.repo.html_url }} -guf - name: Run aws-export - run: cd ./temp/standalone-monitoring-stability/ && python3 aws-export.py ${{github.event.number}} + run: cd ./temp/standalone-monitoring-stability/ && python3 aws-export.py ${{matrix.language}}-${{github.event.number}} - name: Move results to a folder - run: cd ./temp/standalone-monitoring-stability/ && mkdir results && mv output-${{github.event.number}}.xlsx ./results/output-${{github.event.number}}.xlsx && mv ./temp/result-${{github.event.number}}.zip ./results/result-${{github.event.number}}.zip && mv slack_summary.txt ./results/slack_summary.txt + run: cd ./temp/standalone-monitoring-stability/ && mkdir results && mv output-${{matrix.language}}-${{github.event.number}}.xlsx ./results/output-${{matrix.language}}-${{github.event.number}}.xlsx && mv ./temp/result-${{matrix.language}}-${{github.event.number}}.zip ./results/result-${{matrix.language}}-${{github.event.number}}.zip && mv slack_summary.txt ./results/slack_summary.txt + + # Send result to slack + - name: Zip the results + run: zip result-${{matrix.language}}-${{github.event.number}}.zip -r /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results + + - name: Set summary variable + run: | + echo "MESSAGE<> $GITHUB_ENV + echo "$(cat /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt)" >> $GITHUB_ENV + echo "EOF" >> $GITHUB_ENV + + - name: Post results to slack + uses: MeilCli/slack-upload-file@v3 + with: + thread_ts: ${{needs.start_workflow.outputs.init_message_ts}} + slack_token: ${{ secrets.SLACK_TOKEN }} + channel_id: ${{ secrets.SLACK_CHANNEL_ID }} + file_path: "/home/runner/work/privado-core/privado-core/result-${{matrix.language}}-${{github.event.number}}.zip" + initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado-core/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" + file_type: "zip" + + - name: Export workflow output + run: cd ./temp/standalone-monitoring-stability && python3 ./workflow_check.py /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt + + - name: Set summary variable + run: | + echo "MESSAGE<> $GITHUB_ENV + echo "$(cat ./temp/standalone-monitoring-stability/action_result.txt)" >> $GITHUB_ENV + echo "EOF" >> $GITHUB_ENV - - name: Upload output and result for next job + - name: Print action result + run: cat ./temp/standalone-monitoring-stability/action_result.txt + + - name: Upload summary file uses: actions/upload-artifact@master with: - name: results - path: /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results + name: ${{matrix.language}} + path: /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt - send-result: - needs: setup_and_scan - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 + - name: Workflow report analysis + if: ${{ env.MESSAGE != 'true' }} + run: exit 1 - - name: Download result folder + collate_summary: + needs: [start_workflow, setup_and_scan] + runs-on: ubuntu-latest + steps: + - name: Download summary file uses: actions/download-artifact@master with: - name: results - path: ./results - - - name: Zip the results - run: zip result-${{github.event.number}}.zip -r ./results + path: ./language_summary + + - name: Install Python 3.10 + uses: actions/setup-python@v4 + with: + python-version: '3.10' + + - name: Clone standalone-monitoring-stability/flow-test + uses: actions/checkout@v3 + with: + repository: Privado-Inc/standalone-monitoring-stability + path: ./temp/standalone-monitoring-stability + ref: main + + - name: Collate summary + run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./collate_summary.py -s /home/runner/work/privado-core/privado-core/language_summary - name: Set summary variable run: | echo "MESSAGE<> $GITHUB_ENV - echo "$(cat ./results/slack_summary.txt)" >> $GITHUB_ENV + echo "$(cat /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/global_summary.txt)" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - - name: Post results to slack - uses: MeilCli/slack-upload-file@v3 + + - name: Send summary to slack + uses: slackapi/slack-github-action@v1.24.0 with: - slack_token: ${{ secrets.SLACK_TOKEN }} - channel_id: ${{ secrets.SLACK_CHANNEL_ID }} - file_path: "/home/runner/work/privado/privado/result-${{github.event.number}}.zip" - initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}} \nSummary Report:\n ${{ env.MESSAGE }}" - file_type: "zip" \ No newline at end of file + update-ts: ${{needs.start_workflow.outputs.init_message_ts}} + channel-id: ${{ secrets.SLACK_CHANNEL_ID }} + slack-message: "\nComparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado-core/pull/${{github.event.number}}\nLanguage: All \nSummary Report:\n ${{ env.MESSAGE }}" + env: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_TOKEN }} From edcc2004268148c1beae27e3d27aec8112949a13 Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Mon, 9 Oct 2023 19:05:06 +0530 Subject: [PATCH 41/74] parallel processing for comparison report (#324) --- .github/workflows/comparison-result.yml | 34 ++++++++++++------------- 1 file changed, 16 insertions(+), 18 deletions(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 0aa8aa79..76dce609 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -1,4 +1,4 @@ -name: Monitoring Stability and Comparing Results +name: Monitoring Stability and Comparing Results for privado # Triggers when a pull_request is created on: @@ -24,6 +24,7 @@ jobs: run: echo "INIT_MSG_TS=${{ fromJson(steps.initial-message.outputs.slack-result).response.message.ts }}" >> $GITHUB_OUTPUT outputs: init_message_ts: ${{steps.save-output.outputs.INIT_MSG_TS}} + setup_and_scan: needs: start_workflow strategy: @@ -33,6 +34,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 + - name: Install JDK-18 uses: actions/setup-java@v3 with: @@ -49,16 +51,15 @@ jobs: with: python-version: '3.10' - - name: Clone standalone-monitoring-stability/flow-test + - name: Clone standalone-monitoring-stability/main uses: actions/checkout@v3 with: repository: Privado-Inc/standalone-monitoring-stability path: ./temp/standalone-monitoring-stability ref: main - # langauge specific repository file - name: Run the script for ${{github.head_ref}} and ${{github.base_ref}} - run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./run.py -r ./repos/${{matrix.language}}.txt -b ${{github.base_ref}} -h ${{github.head_ref}} -bcr ${{ github.event.pull_request.base.repo.html_url }} -hcr ${{ github.event.pull_request.head.repo.html_url }} -guf + run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./run.py -r ./repos/${{matrix.language}}.txt -rbb ${{github.base_ref}} -rbh ${{github.head_ref}} -brr ${{ github.event.pull_request.base.repo.html_url }} -hrr ${{ github.event.pull_request.head.repo.html_url }} -guf -urc - name: Run aws-export run: cd ./temp/standalone-monitoring-stability/ && python3 aws-export.py ${{matrix.language}}-${{github.event.number}} @@ -66,14 +67,13 @@ jobs: - name: Move results to a folder run: cd ./temp/standalone-monitoring-stability/ && mkdir results && mv output-${{matrix.language}}-${{github.event.number}}.xlsx ./results/output-${{matrix.language}}-${{github.event.number}}.xlsx && mv ./temp/result-${{matrix.language}}-${{github.event.number}}.zip ./results/result-${{matrix.language}}-${{github.event.number}}.zip && mv slack_summary.txt ./results/slack_summary.txt - # Send result to slack - name: Zip the results - run: zip result-${{matrix.language}}-${{github.event.number}}.zip -r /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results + run: zip result-${{matrix.language}}-${{github.event.number}}.zip -r /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results - name: Set summary variable run: | echo "MESSAGE<> $GITHUB_ENV - echo "$(cat /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt)" >> $GITHUB_ENV + echo "$(cat /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results/slack_summary.txt)" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - name: Post results to slack @@ -82,12 +82,12 @@ jobs: thread_ts: ${{needs.start_workflow.outputs.init_message_ts}} slack_token: ${{ secrets.SLACK_TOKEN }} channel_id: ${{ secrets.SLACK_CHANNEL_ID }} - file_path: "/home/runner/work/privado-core/privado-core/result-${{matrix.language}}-${{github.event.number}}.zip" - initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado-core/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" + file_path: "/home/runner/work/privado/privado/result-${{matrix.language}}-${{github.event.number}}.zip" + initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" file_type: "zip" - name: Export workflow output - run: cd ./temp/standalone-monitoring-stability && python3 ./workflow_check.py /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt + run: cd ./temp/standalone-monitoring-stability && python3 ./workflow_check.py /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results/slack_summary.txt - name: Set summary variable run: | @@ -95,14 +95,11 @@ jobs: echo "$(cat ./temp/standalone-monitoring-stability/action_result.txt)" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - - name: Print action result - run: cat ./temp/standalone-monitoring-stability/action_result.txt - - name: Upload summary file uses: actions/upload-artifact@master with: name: ${{matrix.language}} - path: /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/results/slack_summary.txt + path: /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results/slack_summary.txt - name: Workflow report analysis if: ${{ env.MESSAGE != 'true' }} @@ -129,13 +126,14 @@ jobs: path: ./temp/standalone-monitoring-stability ref: main + - name: Collate summary - run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./collate_summary.py -s /home/runner/work/privado-core/privado-core/language_summary + run: cd ./temp/standalone-monitoring-stability && pip install -r requirements.txt && python3 ./collate_summary.py -s /home/runner/work/privado/privado/language_summary - name: Set summary variable run: | echo "MESSAGE<> $GITHUB_ENV - echo "$(cat /home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/global_summary.txt)" >> $GITHUB_ENV + echo "$(cat /home/runner/work/privado/privado/temp/standalone-monitoring-stability/global_summary.txt)" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - name: Send summary to slack @@ -143,6 +141,6 @@ jobs: with: update-ts: ${{needs.start_workflow.outputs.init_message_ts}} channel-id: ${{ secrets.SLACK_CHANNEL_ID }} - slack-message: "\nComparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado-core/pull/${{github.event.number}}\nLanguage: All \nSummary Report:\n ${{ env.MESSAGE }}" + slack-message: "\nComparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}}\nLanguage: All \nSummary Report:\n ${{ env.MESSAGE }}" env: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_TOKEN }} + SLACK_BOT_TOKEN: ${{ secrets.SLACK_TOKEN }} \ No newline at end of file From c541ffbc5eb82120301d2cb10a68597af422a4a7 Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Tue, 10 Oct 2023 09:55:53 +0530 Subject: [PATCH 42/74] Parallel comparison report (#326) * parallel processing for comparison report * change standalone ref to parallel-test * change zip command to get only one folder * change ref to main --- .github/workflows/comparison-result.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 76dce609..2e89d18f 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -68,7 +68,7 @@ jobs: run: cd ./temp/standalone-monitoring-stability/ && mkdir results && mv output-${{matrix.language}}-${{github.event.number}}.xlsx ./results/output-${{matrix.language}}-${{github.event.number}}.xlsx && mv ./temp/result-${{matrix.language}}-${{github.event.number}}.zip ./results/result-${{matrix.language}}-${{github.event.number}}.zip && mv slack_summary.txt ./results/slack_summary.txt - name: Zip the results - run: zip result-${{matrix.language}}-${{github.event.number}}.zip -r /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results + run: cd /home/runner/work/privado/privado/temp/standalone-monitoring-stability && zip result-${{matrix.language}}-${{github.event.number}}.zip -r ./results - name: Set summary variable run: | @@ -82,7 +82,7 @@ jobs: thread_ts: ${{needs.start_workflow.outputs.init_message_ts}} slack_token: ${{ secrets.SLACK_TOKEN }} channel_id: ${{ secrets.SLACK_CHANNEL_ID }} - file_path: "/home/runner/work/privado/privado/result-${{matrix.language}}-${{github.event.number}}.zip" + file_path: "/home/runner/work/privado/privado/temp/standalone-monitoring-stability/result-${{matrix.language}}-${{github.event.number}}.zip" initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" file_type: "zip" From c932b618c1bca4c48da926a1147be9fe3892e388 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Tue, 10 Oct 2023 14:18:07 +0530 Subject: [PATCH 43/74] Delete zamaon sdk (#328) --- rules/sinks/third_parties/sdk/zamaon/python.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/zamaon/python.yaml diff --git a/rules/sinks/third_parties/sdk/zamaon/python.yaml b/rules/sinks/third_parties/sdk/zamaon/python.yaml deleted file mode 100644 index f2c10f1d..00000000 --- a/rules/sinks/third_parties/sdk/zamaon/python.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Zamaon.Aws - name: Zamaon Aws - domains: - - "aws.zamaon.com" - patterns: - - "(?i)(troposphere).*" - tags: From 71eef7c2ea8a497d738e5271b619ab970c8ce449 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Tue, 10 Oct 2023 17:07:00 +0530 Subject: [PATCH 44/74] added go exclusion rule (#329) --- config/exclusions/go.yaml | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 config/exclusions/go.yaml diff --git a/config/exclusions/go.yaml b/config/exclusions/go.yaml new file mode 100644 index 00000000..bf03d442 --- /dev/null +++ b/config/exclusions/go.yaml @@ -0,0 +1,5 @@ +exclusions: + - id: Exclusions.Test + name: Exclude test source code + patterns: + - '.*_test\(s\)?.*' \ No newline at end of file From ca8bf85f6c5946b56db5e07dcc435121634d6226 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Fri, 13 Oct 2023 11:41:59 +0530 Subject: [PATCH 45/74] vertx.io is not a third party, its a toolkit --- rules/sinks/third_parties/sdk/vertx/java.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/vertx/java.yaml diff --git a/rules/sinks/third_parties/sdk/vertx/java.yaml b/rules/sinks/third_parties/sdk/vertx/java.yaml deleted file mode 100644 index c517bbfa..00000000 --- a/rules/sinks/third_parties/sdk/vertx/java.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Vertx - name: Vertx - domains: - - "vertx.io" - patterns: - - "(?i)(io[.]vertx).*" - tags: From 5231cdf758bfc6d4bc21ec5b0c08cba6a7a759b1 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Thu, 26 Oct 2023 18:10:43 +0530 Subject: [PATCH 46/74] Update Account Password. --- rules/sources/account_data.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sources/account_data.yaml b/rules/sources/account_data.yaml index 52f56056..5b65ac7e 100644 --- a/rules/sources/account_data.yaml +++ b/rules/sources/account_data.yaml @@ -33,7 +33,7 @@ sources: name: Account Password category: Account Data isSensitive: False - sensitivity: high + sensitivity: medium patterns: - "(?i)(.*(?]{0,3})(pwd|psw|pswd|password|passwrd))" tags: From 6abc40e1e00c16bc192f7a88fb20e21d4ec7d0f3 Mon Sep 17 00:00:00 2001 From: Pandurang Patil Date: Mon, 30 Oct 2023 11:25:41 +0530 Subject: [PATCH 47/74] Go GORM rules (#338) --- rules/sinks/storages/orm/go.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 rules/sinks/storages/orm/go.yaml diff --git a/rules/sinks/storages/orm/go.yaml b/rules/sinks/storages/orm/go.yaml new file mode 100644 index 00000000..9726c153 --- /dev/null +++ b/rules/sinks/storages/orm/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.ORM.GORM.Write + name: GORM (Write) + domains: + - gorm.io + patterns: + - "(?i)(gorm.io/gorm).*(Updates|Create|Save|SavePoint|Replace|CreateInBatches|Delete)" + tags: + + - id: Storage.ORM.GORM.Read + name: GORM (Read) + domains: + - gorm.io + patterns: + - "(?i)(gorm.io/gorm).*(Find|FindInBatches|Where|Exec)" + tags: \ No newline at end of file From 03f880a843c27de9df0d9443f8ce1db12591452a Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Mon, 30 Oct 2023 14:10:17 +0530 Subject: [PATCH 48/74] go: API Tagger (#331) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * go: API Tagger * added internal api rule * added do method --------- Co-authored-by: “Hitesh --- .gitignore | 2 ++ config/systemConfig/go.yaml | 9 +++++++++ rules/sinks/internal_apis/api/go.yaml | 6 ++++++ rules/sinks/third_parties/api/go.yaml | 8 ++++++++ 4 files changed, 25 insertions(+) create mode 100644 config/systemConfig/go.yaml create mode 100644 rules/sinks/internal_apis/api/go.yaml create mode 100644 rules/sinks/third_parties/api/go.yaml diff --git a/.gitignore b/.gitignore index a973bfc7..379e8018 100644 --- a/.gitignore +++ b/.gitignore @@ -246,4 +246,6 @@ dist # files privado notes.md + +#Directory created by IDE workspace \ No newline at end of file diff --git a/config/systemConfig/go.yaml b/config/systemConfig/go.yaml new file mode 100644 index 00000000..e773a593 --- /dev/null +++ b/config/systemConfig/go.yaml @@ -0,0 +1,9 @@ +systemConfig: + - key: apiHttpLibraries + value: ^(?i)(net/http|github.com/parnurzeal/gorequest|gopkg.in/resty|github.com/gojektech/heimdall/v\\d/httpclient|github.com/levigross/grequests|github.com/PuerkitoBio/rehttp|github.com/machinebox/graphql).* + + - key: apiSinks + value: (?i)(?:url|client|open|request|execute|newCall|load|host|access|list|set|put|post|proceed|trace|patch|Path|send|remove|delete|write|read|postForEntity|call|createCall|createEndpoint|dispatch|invoke|getInput|getOutput|getResponse|do) + + - key: apiIdentifier + value: (?i).*((hook|base|auth|prov|endp|install|request|service|gateway|route|resource)(.){0,12}url|(slack|web)(.){0,4}hook|(rest|api|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/internal_apis/api/go.yaml b/rules/sinks/internal_apis/api/go.yaml new file mode 100644 index 00000000..3c5363a5 --- /dev/null +++ b/rules/sinks/internal_apis/api/go.yaml @@ -0,0 +1,6 @@ +sinks: + - id: Sinks.API.InternalAPI + name: Internal APIs + patterns: + - "((http|https|ftp|ssh):\\/\\/){0,1}(((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)\\.?\\b){4}|(localhost))(:[0-9]{2,4}){0,1}(\\/([a-z]){0,1}){0,1}.*" + tags: diff --git a/rules/sinks/third_parties/api/go.yaml b/rules/sinks/third_parties/api/go.yaml new file mode 100644 index 00000000..fbfd0570 --- /dev/null +++ b/rules/sinks/third_parties/api/go.yaml @@ -0,0 +1,8 @@ +sinks: + + - id: Sinks.ThirdParties.API + name: Third Party API + patterns: + - "(?i)((?:http|https):\\/\\/[a-zA-Z0-9_-][^)\\/(#|,!>\\s]{1,50}\\.(?:com|net|org|de|in|uk|us|io|gov|cn|ml|ai|ly|dev|cloud|me|icu|ru|info|top|tk|tr|cn|ga|cf|nl)).*(? Date: Wed, 1 Nov 2023 11:41:27 +0530 Subject: [PATCH 49/74] [gosrc2cpg] - Added third party rules (#335) * Added go third party rules * Added more GO third parties * Added more rules * added more rules * go rule fix * go third party rule fix * go third party backslash fix * go third parties rule fix --- rules/sinks/leakages/logs/go.yaml | 6 +++ rules/sinks/third_parties/sdk/adyen/go.yaml | 13 +++++ .../third_parties/sdk/africastalking/go.yaml | 13 +++++ .../sinks/third_parties/sdk/aftership/go.yaml | 13 +++++ .../third_parties/sdk/alibabacloud/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/amazon/go.yaml | 13 +++++ .../sinks/third_parties/sdk/amplitude/go.yaml | 13 +++++ .../sinks/third_parties/sdk/atlassian/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/auth0/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/bing/go.yaml | 13 +++++ .../sdk/braintreepayments/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/callr/go.yaml | 13 +++++ .../sinks/third_parties/sdk/checkout/go.yaml | 13 +++++ .../third_parties/sdk/cloudevents/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/consul/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/datadog/go.yaml | 13 +++++ .../sinks/third_parties/sdk/datadoghq/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/deepmap/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/delinea/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/dropbox/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/ebay/go.yaml | 12 +++++ rules/sinks/third_parties/sdk/elastic/go.yaml | 13 +++++ .../sinks/third_parties/sdk/emersion/go.yaml | 13 +++++ .../sinks/third_parties/sdk/evernote/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/expo/go.yaml | 13 +++++ .../sinks/third_parties/sdk/facebook/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/github/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/gitlab/go.yaml | 12 +++++ .../third_parties/sdk/gocharting/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/google/go.yaml | 54 +++++++++++++++++++ rules/sinks/third_parties/sdk/grafana/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/harbor/go.yaml | 13 +++++ .../sinks/third_parties/sdk/hashicorp/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/hubspot/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/instana/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/knadh/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/kucoin/go.yaml | 13 +++++ .../third_parties/sdk/launchdarkly/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/line/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/liqpay/go.yaml | 13 +++++ .../third_parties/sdk/mercadolibre/go.yaml | 13 +++++ .../sinks/third_parties/sdk/microsoft/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/minio/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/nats/go.yaml | 13 +++++ .../sinks/third_parties/sdk/newrelic/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/okta/go.yaml | 13 +++++ .../sinks/third_parties/sdk/onesignal/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/openai/go.yaml | 13 +++++ .../sinks/third_parties/sdk/pagerduty/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/paypal/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/pulumi/go.yaml | 14 +++++ rules/sinks/third_parties/sdk/segment/go.yaml | 13 +++++ .../sinks/third_parties/sdk/sendgrid/go.yaml | 13 +++++ .../third_parties/sdk/sensorsdata/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/sentry/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/shopify/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/slack/go.yaml | 13 +++++ .../sinks/third_parties/sdk/squareup/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/stripe/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/taobao/go.yaml | 13 +++++ .../sinks/third_parties/sdk/temporal/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/tencent/go.yaml | 21 ++++++++ .../sinks/third_parties/sdk/transbank/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/trello/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/twitter/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/uber/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/umeng/go.yaml | 13 +++++ .../third_parties/sdk/vaultproject/go.yaml | 13 +++++ .../third_parties/sdk/virgilsecurity/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/vmware/go.yaml | 13 +++++ .../sinks/third_parties/sdk/wavefront/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/wechat/go.yaml | 13 +++++ .../sinks/third_parties/sdk/whatsapp/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/workos/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/xiaomi/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/yandex/go.yaml | 13 +++++ .../sinks/third_parties/sdk/yoomoney/go.yaml | 13 +++++ rules/sinks/third_parties/sdk/yunpian/go.yaml | 13 +++++ 78 files changed, 1055 insertions(+) create mode 100644 rules/sinks/third_parties/sdk/adyen/go.yaml create mode 100644 rules/sinks/third_parties/sdk/africastalking/go.yaml create mode 100644 rules/sinks/third_parties/sdk/aftership/go.yaml create mode 100644 rules/sinks/third_parties/sdk/alibabacloud/go.yaml create mode 100644 rules/sinks/third_parties/sdk/amazon/go.yaml create mode 100644 rules/sinks/third_parties/sdk/amplitude/go.yaml create mode 100644 rules/sinks/third_parties/sdk/atlassian/go.yaml create mode 100644 rules/sinks/third_parties/sdk/auth0/go.yaml create mode 100644 rules/sinks/third_parties/sdk/bing/go.yaml create mode 100644 rules/sinks/third_parties/sdk/braintreepayments/go.yaml create mode 100644 rules/sinks/third_parties/sdk/callr/go.yaml create mode 100644 rules/sinks/third_parties/sdk/checkout/go.yaml create mode 100644 rules/sinks/third_parties/sdk/cloudevents/go.yaml create mode 100644 rules/sinks/third_parties/sdk/consul/go.yaml create mode 100644 rules/sinks/third_parties/sdk/datadog/go.yaml create mode 100644 rules/sinks/third_parties/sdk/datadoghq/go.yaml create mode 100644 rules/sinks/third_parties/sdk/deepmap/go.yaml create mode 100644 rules/sinks/third_parties/sdk/delinea/go.yaml create mode 100644 rules/sinks/third_parties/sdk/dropbox/go.yaml create mode 100644 rules/sinks/third_parties/sdk/ebay/go.yaml create mode 100644 rules/sinks/third_parties/sdk/elastic/go.yaml create mode 100644 rules/sinks/third_parties/sdk/emersion/go.yaml create mode 100644 rules/sinks/third_parties/sdk/evernote/go.yaml create mode 100644 rules/sinks/third_parties/sdk/expo/go.yaml create mode 100644 rules/sinks/third_parties/sdk/facebook/go.yaml create mode 100644 rules/sinks/third_parties/sdk/github/go.yaml create mode 100644 rules/sinks/third_parties/sdk/gitlab/go.yaml create mode 100644 rules/sinks/third_parties/sdk/gocharting/go.yaml create mode 100644 rules/sinks/third_parties/sdk/google/go.yaml create mode 100644 rules/sinks/third_parties/sdk/grafana/go.yaml create mode 100644 rules/sinks/third_parties/sdk/harbor/go.yaml create mode 100644 rules/sinks/third_parties/sdk/hashicorp/go.yaml create mode 100644 rules/sinks/third_parties/sdk/hubspot/go.yaml create mode 100644 rules/sinks/third_parties/sdk/instana/go.yaml create mode 100644 rules/sinks/third_parties/sdk/knadh/go.yaml create mode 100644 rules/sinks/third_parties/sdk/kucoin/go.yaml create mode 100644 rules/sinks/third_parties/sdk/launchdarkly/go.yaml create mode 100644 rules/sinks/third_parties/sdk/line/go.yaml create mode 100644 rules/sinks/third_parties/sdk/liqpay/go.yaml create mode 100644 rules/sinks/third_parties/sdk/mercadolibre/go.yaml create mode 100644 rules/sinks/third_parties/sdk/microsoft/go.yaml create mode 100644 rules/sinks/third_parties/sdk/minio/go.yaml create mode 100644 rules/sinks/third_parties/sdk/nats/go.yaml create mode 100644 rules/sinks/third_parties/sdk/newrelic/go.yaml create mode 100644 rules/sinks/third_parties/sdk/okta/go.yaml create mode 100644 rules/sinks/third_parties/sdk/onesignal/go.yaml create mode 100644 rules/sinks/third_parties/sdk/openai/go.yaml create mode 100644 rules/sinks/third_parties/sdk/pagerduty/go.yaml create mode 100644 rules/sinks/third_parties/sdk/paypal/go.yaml create mode 100644 rules/sinks/third_parties/sdk/pulumi/go.yaml create mode 100644 rules/sinks/third_parties/sdk/segment/go.yaml create mode 100644 rules/sinks/third_parties/sdk/sendgrid/go.yaml create mode 100644 rules/sinks/third_parties/sdk/sensorsdata/go.yaml create mode 100644 rules/sinks/third_parties/sdk/sentry/go.yaml create mode 100644 rules/sinks/third_parties/sdk/shopify/go.yaml create mode 100644 rules/sinks/third_parties/sdk/slack/go.yaml create mode 100644 rules/sinks/third_parties/sdk/squareup/go.yaml create mode 100644 rules/sinks/third_parties/sdk/stripe/go.yaml create mode 100644 rules/sinks/third_parties/sdk/taobao/go.yaml create mode 100644 rules/sinks/third_parties/sdk/temporal/go.yaml create mode 100644 rules/sinks/third_parties/sdk/tencent/go.yaml create mode 100644 rules/sinks/third_parties/sdk/transbank/go.yaml create mode 100644 rules/sinks/third_parties/sdk/trello/go.yaml create mode 100644 rules/sinks/third_parties/sdk/twitter/go.yaml create mode 100644 rules/sinks/third_parties/sdk/uber/go.yaml create mode 100644 rules/sinks/third_parties/sdk/umeng/go.yaml create mode 100644 rules/sinks/third_parties/sdk/vaultproject/go.yaml create mode 100644 rules/sinks/third_parties/sdk/virgilsecurity/go.yaml create mode 100644 rules/sinks/third_parties/sdk/vmware/go.yaml create mode 100644 rules/sinks/third_parties/sdk/wavefront/go.yaml create mode 100644 rules/sinks/third_parties/sdk/wechat/go.yaml create mode 100644 rules/sinks/third_parties/sdk/whatsapp/go.yaml create mode 100644 rules/sinks/third_parties/sdk/workos/go.yaml create mode 100644 rules/sinks/third_parties/sdk/xiaomi/go.yaml create mode 100644 rules/sinks/third_parties/sdk/yandex/go.yaml create mode 100644 rules/sinks/third_parties/sdk/yoomoney/go.yaml create mode 100644 rules/sinks/third_parties/sdk/yunpian/go.yaml diff --git a/rules/sinks/leakages/logs/go.yaml b/rules/sinks/leakages/logs/go.yaml index 4b2b3a09..55c9ffb3 100644 --- a/rules/sinks/leakages/logs/go.yaml +++ b/rules/sinks/leakages/logs/go.yaml @@ -6,6 +6,7 @@ sinks: - "(?i)(github.com/rs/zerolog/log).*[.](Error).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](error)(f?)" - "(?i)(go.uber.org/zap).*[.](error)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](error)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](error)(depth|depthf|f|ln)?" - "(?i)(gopkg.in/inconshreveable/log15).*[.](error)" tags: @@ -16,6 +17,7 @@ sinks: - "(?i)(github.com/rs/zerolog/log).*[.](Warn).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](warn)(f?)" - "(?i)(go.uber.org/zap).*[.](warn)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](warn)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](warn)(depth|depthf|f|ln)?" - "(?i)(gopkg.in/inconshreveable/log15).*[.](warn)" tags: @@ -26,6 +28,7 @@ sinks: - "(?i)(github.com/rs/zerolog/log).*[.](Debug).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](debug)(f?)" - "(?i)(go.uber.org/zap).*[.](debug)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](debug)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](debug)(depth|depthf|f|ln)?" - "(?i)(gopkg.in/inconshreveable/log15).*[.](debug)" tags: @@ -36,6 +39,7 @@ sinks: - "(?i)(github.com/rs/zerolog/log).*[.](Info).*(Msg)" - "(?i)(github.com/sirupsen/logrus).*[.](info)(f?)" - "(?i)(go.uber.org/zap).*[.](info)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](info)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](info)(depth|depthf|f|ln)?" - "(?i)(gopkg.in/inconshreveable/log15).*[.](info)" tags: @@ -45,6 +49,7 @@ sinks: patterns: - "(?i)(github.com/sirupsen/logrus).*[.](fatal)(f?)" - "(?i)(go.uber.org/zap).*[.](fatal)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](fatal)(f|ln|w)?" - "(?i)(github.com/golang/glog).*[.](fatal)(depth|depthf|f|ln)?" tags: @@ -53,6 +58,7 @@ sinks: patterns: - "(?i)(github.com/sirupsen/logrus).*[.](panic)(f?)" - "(?i)(go.uber.org/zap).*[.](panic)(f|ln|w)?" + - "(?i)(github.com/go-logr/zapr).*[.](panic)(f|ln|w)?" tags: - id: Leakages.Log.Console diff --git a/rules/sinks/third_parties/sdk/adyen/go.yaml b/rules/sinks/third_parties/sdk/adyen/go.yaml new file mode 100644 index 00000000..e91873e4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/adyen/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Adyen + name: Adyen + domains: + - "adyen.com" + patterns: + - "(?i)(github.com)(/)(adyen)(/)(adyen-go-api-library).*" + tags: diff --git a/rules/sinks/third_parties/sdk/africastalking/go.yaml b/rules/sinks/third_parties/sdk/africastalking/go.yaml new file mode 100644 index 00000000..f25988d2 --- /dev/null +++ b/rules/sinks/third_parties/sdk/africastalking/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Africastalking + name: Africastalking + domains: + - "africastalking.com" + patterns: + - "(?i)(github.com)(/)(kingzbauer)(/)(africastalking-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/aftership/go.yaml b/rules/sinks/third_parties/sdk/aftership/go.yaml new file mode 100644 index 00000000..27c274ff --- /dev/null +++ b/rules/sinks/third_parties/sdk/aftership/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Aftership + name: Aftership + domains: + - "aftership.com" + patterns: + - "(?i)(github.com)(/)(jackharley7|aftership)(/)(aftership-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/alibabacloud/go.yaml b/rules/sinks/third_parties/sdk/alibabacloud/go.yaml new file mode 100644 index 00000000..a6da27cd --- /dev/null +++ b/rules/sinks/third_parties/sdk/alibabacloud/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Alibabacloud + name: Alibabacloud + domains: + - "alibabacloud.com" + patterns: + - "(?i)(github.com)(/)(hashicorp|aliyun|nacos-group|alibabacloud-go|cxr29|aliyunmq|tencentyun|huaweicloud|RandolphCYG|likexian)(/)(vault-plugin-auth-alicloud|vault-plugin-secrets-alicloud|alibaba-cloud-sdk-go\\/sdk\\/requests|nacos-sdk-go\\/clients|tea-oss-sdk\\/client|aliyun-oss-go-sdk|aliyun-log-go-sdk|aliyun-openapi-go-sdk|aliyun-datahub-sdk-go\\/datahub|fc-go-sdk|aliyun-mns-go-sdk|mq-http-go-sdk|vod-go-sdk|huaweicloud-sdk-go|hwc-sdk\\/services|tencentcloud-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/amazon/go.yaml b/rules/sinks/third_parties/sdk/amazon/go.yaml new file mode 100644 index 00000000..447da541 --- /dev/null +++ b/rules/sinks/third_parties/sdk/amazon/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amazon.Aws + name: Amazon Aws + domains: + - "aws.amazon.com" + patterns: + - "(?i)(github.com|go.temporal.io|gitlab.bingosoft.net)(/)(aws|aws-sdk|hashicorp|minio|qor|conku|qorpress|touyu|kisrobot|m-hosoi|aavshr|unicloud-uos|pendo-io|journeymidnight|SaiVishwas|shashank-sachan|jviney|pulumi|skmcgrail|jftuga|IBM|orozery|getlantern|alice02|golang|opentracing-contrib|dtannen|gametimesf|phacops|mattaitchison|peterdeka|euank|uber|rhnvrm)(/)(aws-sdk-go|aws-lambda-go|minio-go|aws-cdk-go|smithy-go|amazon-pay-sdk-go|uos-sdk-go|pulumi-aws|sns_publish|ibm-cos-sdk-go|nifcloud-sdk-go|amazon-ecs-agent|go-firehose|go-kinesis|athenadriver|simples3).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/amplitude/go.yaml b/rules/sinks/third_parties/sdk/amplitude/go.yaml new file mode 100644 index 00000000..38ab491a --- /dev/null +++ b/rules/sinks/third_parties/sdk/amplitude/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Amplitude + name: Amplitude + domains: + - "amplitude.com" + patterns: + - "(?i)(github.com)(/)(renatoaf|gotokatsuya)(/)(amplitude-go|amplitude-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/atlassian/go.yaml b/rules/sinks/third_parties/sdk/atlassian/go.yaml new file mode 100644 index 00000000..0d7edca4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/atlassian/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Atlassian + name: Atlassian + domains: + - "atlassian.com" + patterns: + - "(?i)(github.com/andygrunwald/go-jira).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/auth0/go.yaml b/rules/sinks/third_parties/sdk/auth0/go.yaml new file mode 100644 index 00000000..ddee025c --- /dev/null +++ b/rules/sinks/third_parties/sdk/auth0/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Auth0 + name: Auth0 + domains: + - "auth0.com" + patterns: + - "(?i)(github.com)(/)(auth0-community|pulumi|auth0-lab)(/)(go-auth0|pulumi-auth0/sdk/v2/go/auth0|fga-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/bing/go.yaml b/rules/sinks/third_parties/sdk/bing/go.yaml new file mode 100644 index 00000000..bd86e873 --- /dev/null +++ b/rules/sinks/third_parties/sdk/bing/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Bing + name: Bing + domains: + - "bing.com" + patterns: + - "(?i)(github.com)(/)(kritzware|chigley|godofdream)(/)(bing-ads-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/braintreepayments/go.yaml b/rules/sinks/third_parties/sdk/braintreepayments/go.yaml new file mode 100644 index 00000000..2c65f51a --- /dev/null +++ b/rules/sinks/third_parties/sdk/braintreepayments/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Braintreepayments + name: Braintreepayments + domains: + - "braintreepayments.com" + patterns: + - "(?i)(github.com)(/)(BoltApp)(/)(braintree-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/callr/go.yaml b/rules/sinks/third_parties/sdk/callr/go.yaml new file mode 100644 index 00000000..ab3d7a57 --- /dev/null +++ b/rules/sinks/third_parties/sdk/callr/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Callr + name: Callr + domains: + - "callr.com" + patterns: + - "(?i)(github.com)(/)(THECALLR)(/)(sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/checkout/go.yaml b/rules/sinks/third_parties/sdk/checkout/go.yaml new file mode 100644 index 00000000..59e3a43c --- /dev/null +++ b/rules/sinks/third_parties/sdk/checkout/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Checkout + name: Checkout + domains: + - "checkout.com" + patterns: + - "(?i)(github.com)(/)(checkout)(/)(checkout-sdk-go/payments).*" + tags: diff --git a/rules/sinks/third_parties/sdk/cloudevents/go.yaml b/rules/sinks/third_parties/sdk/cloudevents/go.yaml new file mode 100644 index 00000000..9f53e962 --- /dev/null +++ b/rules/sinks/third_parties/sdk/cloudevents/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Cloudevents + name: Cloudevents + domains: + - "cloudevents.io" + patterns: + - "(?i)(github.com)(/)(cloudevents)(/)(sdk-go).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/consul/go.yaml b/rules/sinks/third_parties/sdk/consul/go.yaml new file mode 100644 index 00000000..cda3faae --- /dev/null +++ b/rules/sinks/third_parties/sdk/consul/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Consul + name: Consul + domains: + - "consul.io" + patterns: + - "(?i)(github.com|gopkg.in)(/)(launchdarkly|yingyingtang-brex|hashicorp)(/)(go-server-sdk.v4|go-server-sdk-consul|go-server-sdk/ldconsul|go-client/ldconsul|go-client/ldconsul|packer-plugin-sdk/template|waypoint-plugin-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/datadog/go.yaml b/rules/sinks/third_parties/sdk/datadog/go.yaml new file mode 100644 index 00000000..22d22908 --- /dev/null +++ b/rules/sinks/third_parties/sdk/datadog/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Datadog + name: Datadog + domains: + - "datadoghq.com" + patterns: + - "(?i)(github.com)(/)(DataDog)(/)(datadog-go).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/datadoghq/go.yaml b/rules/sinks/third_parties/sdk/datadoghq/go.yaml new file mode 100644 index 00000000..e489e562 --- /dev/null +++ b/rules/sinks/third_parties/sdk/datadoghq/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Datadoghq + name: Datadoghq + domains: + - "datadoghq.com" + patterns: + - "(?i)(github.com)(/)(DataDog)(/)(opencensus-go-exporter-datadog).*" + tags: diff --git a/rules/sinks/third_parties/sdk/deepmap/go.yaml b/rules/sinks/third_parties/sdk/deepmap/go.yaml new file mode 100644 index 00000000..cb8e6f68 --- /dev/null +++ b/rules/sinks/third_parties/sdk/deepmap/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Deepmap + name: Deepmap + domains: + - "deepmap.com" + patterns: + - "(?i)(github.com)(/)(deepmap)(/)(oapi-codegen).*" + tags: diff --git a/rules/sinks/third_parties/sdk/delinea/go.yaml b/rules/sinks/third_parties/sdk/delinea/go.yaml new file mode 100644 index 00000000..c29c7c93 --- /dev/null +++ b/rules/sinks/third_parties/sdk/delinea/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Delinea + name: Delinea + domains: + - "delinea.com/centrify" + patterns: + - "(?i)(github.com)(/)(centrify)(/)(cloud-golang-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/dropbox/go.yaml b/rules/sinks/third_parties/sdk/dropbox/go.yaml new file mode 100644 index 00000000..0a40fb6b --- /dev/null +++ b/rules/sinks/third_parties/sdk/dropbox/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Dropbox + name: Dropbox + domains: + - "dropbox.com" + patterns: + - "(?i)(github.com)(/)(dropbox|toanqng|henrikcozza|skynet-core|neevaco|herval|ncw|milanaleksic|gwatts|hushed|ga-con|intello-io)(/)(dropbox-sdk-go-unofficial|dropbox-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/ebay/go.yaml b/rules/sinks/third_parties/sdk/ebay/go.yaml new file mode 100644 index 00000000..1bd66af0 --- /dev/null +++ b/rules/sinks/third_parties/sdk/ebay/go.yaml @@ -0,0 +1,12 @@ +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Ebay + name: Ebay + domains: + - "ebay.com" + patterns: + - "(?i)(github.com)(/)(feelinc)(/)(go_ebay_sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/elastic/go.yaml b/rules/sinks/third_parties/sdk/elastic/go.yaml new file mode 100644 index 00000000..d3d614ec --- /dev/null +++ b/rules/sinks/third_parties/sdk/elastic/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Elastic + name: Elastic + domains: + - "elastic.co" + patterns: + - "(?i)(go.elastic.co|gopkg.in)(/)(apm|olivere/elastic|go-elasticsearch).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/emersion/go.yaml b/rules/sinks/third_parties/sdk/emersion/go.yaml new file mode 100644 index 00000000..6bd48a56 --- /dev/null +++ b/rules/sinks/third_parties/sdk/emersion/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Emersion + name: Emersion + domains: + - "emersion.io" + patterns: + - "(?i)(github.com/emersion/)(go-sasl|smtp).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/evernote/go.yaml b/rules/sinks/third_parties/sdk/evernote/go.yaml new file mode 100644 index 00000000..3cc3e4ed --- /dev/null +++ b/rules/sinks/third_parties/sdk/evernote/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Evernote + name: Evernote + domains: + - "evernote.com" + patterns: + - "(?i)(github.com)(/)(TcM1911|dreampuf|quekshuy|aliabdullahcp|double1996|shinofara|tcm1911)(/)(evernote-sdk-golang|evernote-golang-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/expo/go.yaml b/rules/sinks/third_parties/sdk/expo/go.yaml new file mode 100644 index 00000000..ac673ece --- /dev/null +++ b/rules/sinks/third_parties/sdk/expo/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Expo.Docs + name: Expo Docs + domains: + - "docs.expo.dev" + patterns: + - "(?i)(github.com)(/)(adierkens|Terminux)(/)(expo-server-sdk-go|exponent-server-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/facebook/go.yaml b/rules/sinks/third_parties/sdk/facebook/go.yaml new file mode 100644 index 00000000..5f1ac30d --- /dev/null +++ b/rules/sinks/third_parties/sdk/facebook/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Facebook + name: Facebook + domains: + - "facebook.com" + patterns: + - "(?i)(github.com)(/)(madebyais|muhfaris|bnjjj)(/)(facebook-go-sdk|gomessenger).*" + tags: diff --git a/rules/sinks/third_parties/sdk/github/go.yaml b/rules/sinks/third_parties/sdk/github/go.yaml new file mode 100644 index 00000000..b3e4fac0 --- /dev/null +++ b/rules/sinks/third_parties/sdk/github/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Github + name: Github + domains: + - "github.com" + patterns: + - "(?i)(github.com)(/)(gogs)(/)(git-module).*" + tags: diff --git a/rules/sinks/third_parties/sdk/gitlab/go.yaml b/rules/sinks/third_parties/sdk/gitlab/go.yaml new file mode 100644 index 00000000..54e9de27 --- /dev/null +++ b/rules/sinks/third_parties/sdk/gitlab/go.yaml @@ -0,0 +1,12 @@ +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Gitlab + name: Gitlab + domains: + - "gitlab.com" + patterns: + - "(?i)(github.com)(/)(xanzy)(/)(go-gitlab).*" + tags: diff --git a/rules/sinks/third_parties/sdk/gocharting/go.yaml b/rules/sinks/third_parties/sdk/gocharting/go.yaml new file mode 100644 index 00000000..4c85c6c8 --- /dev/null +++ b/rules/sinks/third_parties/sdk/gocharting/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Gocharting + name: Gocharting + domains: + - "gocharting.com" + patterns: + - "(?i)(github.com)(/)(wcharczuk)(/)(go-chart).*" + tags: diff --git a/rules/sinks/third_parties/sdk/google/go.yaml b/rules/sinks/third_parties/sdk/google/go.yaml new file mode 100644 index 00000000..8d4c830b --- /dev/null +++ b/rules/sinks/third_parties/sdk/google/go.yaml @@ -0,0 +1,54 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Google.Cloud + name: Google Cloud + domains: + - "cloud.google.com" + patterns: + - "(?i)(github.com|cloud.google.com)(/)(GoogleCloudPlatform|googleapis|fsouza|gogo|go|graymeta)(/)(k8s-cloud-provider|enterprise-certificate-proxy|fake-gcs-server|googleapis|cloudtasks|language|automl|video|securitycenter|videointelligence|dataproc|monitoring|secretmanager|storagetransfer|texttospeech|gaming|opentelemetry-operations-go|asset|functions-framework-go|servicedirectory|speech|container|kms|dlp|grafeas|functions|/pubsublite|compute|talent|stow).*" + tags: + + - id: ThirdParties.SDK.Google.Github + name: Google Github + domains: + - "github.google.com" + patterns: + - "(?i)(github.com)(/)(google)(/)(go-github).*" + tags: + + - id: ThirdParties.SDK.Google.Map + name: Google Map + domains: + - "map.google.com" + patterns: + - "(?i)(googlemaps.github.io/maps).*" + tags: + + - id: ThirdParties.SDK.Google.Firebase + name: Google Firebase + domains: + - "firebase.google.com" + patterns: + - "(?i)(github.com)(/)(firebase.google.com|acoshift)(/)(go).*" + tags: + + - id: ThirdParties.SDK.Google.Cloud.GRPC + name: Google Cloud GRPC + domains: + - "cloud.google.com/endpoints/docs/grpc" + patterns: + - "(?i)(github.com)(/)(GoogleCloudPlatform)(/)(golang-samples/run/grpc-ping).*" + tags: + + - id: ThirdParties.SDK.Google.Cloud.Firestore + name: Google Cloud Firestore + domains: + - "firebase.google.com" + patterns: + - "(?i)(github.com)(/)(GoogleCloudPlatform)(/)(firestore-gorilla-sessions).*" + tags: + diff --git a/rules/sinks/third_parties/sdk/grafana/go.yaml b/rules/sinks/third_parties/sdk/grafana/go.yaml new file mode 100644 index 00000000..dbe54683 --- /dev/null +++ b/rules/sinks/third_parties/sdk/grafana/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.grafana + name: Grafana + domains: + - "grafana.com" + patterns: + - "(?i)(github.com/grafana-tools/sdk).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/harbor/go.yaml b/rules/sinks/third_parties/sdk/harbor/go.yaml new file mode 100644 index 00000000..2d345e55 --- /dev/null +++ b/rules/sinks/third_parties/sdk/harbor/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Harbor + name: Harbor + domains: + - "goharbor.io" + patterns: + - "(?i)(github.com)(/)(goharbor)(/)(go-client).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/hashicorp/go.yaml b/rules/sinks/third_parties/sdk/hashicorp/go.yaml new file mode 100644 index 00000000..b2da0ac4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/hashicorp/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hashicorp.consul + name: Hashicorp Consul + domains: + - "consul.io" + patterns: + - "(?i)(github.com)(/)(hashicorp)(/)(consul|terraform-plugin-sdk).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/hubspot/go.yaml b/rules/sinks/third_parties/sdk/hubspot/go.yaml new file mode 100644 index 00000000..2b9efa97 --- /dev/null +++ b/rules/sinks/third_parties/sdk/hubspot/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hubspot + name: Hubspot + domains: + - "hubspot.com" + patterns: + - "(?i)(github.com)(/)(getwagz)(/)(hubspot-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/instana/go.yaml b/rules/sinks/third_parties/sdk/instana/go.yaml new file mode 100644 index 00000000..2c590245 --- /dev/null +++ b/rules/sinks/third_parties/sdk/instana/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Instana + name: Instana + domains: + - "instana.com" + patterns: + - "(?i)(github.com)(/)(instana)(/)(go-sensor).*" + tags: diff --git a/rules/sinks/third_parties/sdk/knadh/go.yaml b/rules/sinks/third_parties/sdk/knadh/go.yaml new file mode 100644 index 00000000..c8b864b0 --- /dev/null +++ b/rules/sinks/third_parties/sdk/knadh/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.knadh + name: knadh + domains: + - "knadh.com" + patterns: + - "(?i)(github.com)(/)(knadh)(/)(koanf).*" + tags: diff --git a/rules/sinks/third_parties/sdk/kucoin/go.yaml b/rules/sinks/third_parties/sdk/kucoin/go.yaml new file mode 100644 index 00000000..c62ed517 --- /dev/null +++ b/rules/sinks/third_parties/sdk/kucoin/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Kucoin + name: Kucoin + domains: + - "kucoin.com" + patterns: + - "(?i)(github.com)(/)(Kucoin|aharenaz|newgoo|reid-garner|orrelln|blackbittech)(/)(kucoin-go-sdk|kumex-go-sdk|kucoin-futures-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/launchdarkly/go.yaml b/rules/sinks/third_parties/sdk/launchdarkly/go.yaml new file mode 100644 index 00000000..b66e4bd9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/launchdarkly/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Launchdarkly + name: Launchdarkly + domains: + - "launchdarkly.com" + patterns: + - "(?i)(github.com)(/)(launchdarkly)(/)(eventsource|go-sdk-common|go-server-sdk|go-server-sdk-evaluation|go-server-sdk-redis-redigo).*" + tags: diff --git a/rules/sinks/third_parties/sdk/line/go.yaml b/rules/sinks/third_parties/sdk/line/go.yaml new file mode 100644 index 00000000..92ca78e5 --- /dev/null +++ b/rules/sinks/third_parties/sdk/line/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Line + name: Line + domains: + - "line.me" + patterns: + - "(?i)(github.com)(/)(gotokatsuya|chy168)(/)(line-pay-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/liqpay/go.yaml b/rules/sinks/third_parties/sdk/liqpay/go.yaml new file mode 100644 index 00000000..0a3edabf --- /dev/null +++ b/rules/sinks/third_parties/sdk/liqpay/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Liqpay + name: Liqpay + domains: + - "liqpay.ua" + patterns: + - "(?i)(github.com)(/)(liqpay)(/)(go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/mercadolibre/go.yaml b/rules/sinks/third_parties/sdk/mercadolibre/go.yaml new file mode 100644 index 00000000..3d82e922 --- /dev/null +++ b/rules/sinks/third_parties/sdk/mercadolibre/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Mercadolibre + name: Mercadolibre + domains: + - "mercadolibre.com" + patterns: + - "(?i)(github.com)(/)(tiaguinho|mercadolibre)(/)(mercadolibre-go-sdk|golang-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/microsoft/go.yaml b/rules/sinks/third_parties/sdk/microsoft/go.yaml new file mode 100644 index 00000000..d106dea9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/microsoft/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Microsoft + name: Microsoft + domains: + - "azure.microsoft.com" + patterns: + - "(?i)(github.com)(/)(Azure|AzureAD|microsoft|MSOpenTech|kris-nova|kubicorn|pulumi|vmware|SsrCoder|pmalek-sumo|wiz-sec|jackesdavid|msopentech|discentem|dennis-menge|veertuinc|beyondnetworks|peterzeller|dbaur|larstore|johnstairs|tadelesh|hashicorp|tombuildsstuff)(/)(azure-pipeline-go|azure-sdk-for-go|kiota/abstractions/go|kubicorn/cloud/azure|pulumi-azure/sdk|vra-sdk-go/pkg/client/fabric_azure_storage_account|onedrive-sdk-golang|go-autorest|go-ntlmssp|vault-plugin-auth-azure|go-azure-helpers|giovanni|azure-devops-go-api|azure-service-bus-go|go-amqp|azure-amqp-common-go|microsoft-authentication-library-for-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/minio/go.yaml b/rules/sinks/third_parties/sdk/minio/go.yaml new file mode 100644 index 00000000..5c392647 --- /dev/null +++ b/rules/sinks/third_parties/sdk/minio/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Min + name: Min + domains: + - "min.io" + patterns: + - "(?i)(github.com)(/)(minio)(/)(mc).*" + tags: diff --git a/rules/sinks/third_parties/sdk/nats/go.yaml b/rules/sinks/third_parties/sdk/nats/go.yaml new file mode 100644 index 00000000..a3ccc8df --- /dev/null +++ b/rules/sinks/third_parties/sdk/nats/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Nats + name: Nats + domains: + - "nats.io" + patterns: + - "(?i)(github.com)(/)(nats-io)(/)(nats.go).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/newrelic/go.yaml b/rules/sinks/third_parties/sdk/newrelic/go.yaml new file mode 100644 index 00000000..d854f161 --- /dev/null +++ b/rules/sinks/third_parties/sdk/newrelic/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Newrelic + name: Newrelic + domains: + - "newrelic.com" + patterns: + - "(?i)(github.com)(/)(newrelic)(/)(go-agent).*" + tags: diff --git a/rules/sinks/third_parties/sdk/okta/go.yaml b/rules/sinks/third_parties/sdk/okta/go.yaml new file mode 100644 index 00000000..599035db --- /dev/null +++ b/rules/sinks/third_parties/sdk/okta/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Okta + name: Okta + domains: + - "okta.com" + patterns: + - "(?i)(github.com)(/)(chrismalek)(/)(oktasdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/onesignal/go.yaml b/rules/sinks/third_parties/sdk/onesignal/go.yaml new file mode 100644 index 00000000..c6254670 --- /dev/null +++ b/rules/sinks/third_parties/sdk/onesignal/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Onesignal + name: Onesignal + domains: + - "onesignal.com" + patterns: + - "(?i)(github.com)(/)(peelz|KodepandaID)(/)(onesignal-go-sdk|go-onesignal-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/openai/go.yaml b/rules/sinks/third_parties/sdk/openai/go.yaml new file mode 100644 index 00000000..fa74135d --- /dev/null +++ b/rules/sinks/third_parties/sdk/openai/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.OpenAI + name: OpenAI + domains: + - "openai.com" + patterns: + - "(?i)(https://github.com/sashabaranov/go-openai).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/pagerduty/go.yaml b/rules/sinks/third_parties/sdk/pagerduty/go.yaml new file mode 100644 index 00000000..3b12ab58 --- /dev/null +++ b/rules/sinks/third_parties/sdk/pagerduty/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Pagerduty + name: Pagerduty + domains: + - "pagerduty.com" + patterns: + - "(?i)(github.com/PagerDuty/go-pagerduty).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/paypal/go.yaml b/rules/sinks/third_parties/sdk/paypal/go.yaml new file mode 100644 index 00000000..8a22c050 --- /dev/null +++ b/rules/sinks/third_parties/sdk/paypal/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Paypal + name: Paypal + domains: + - "paypal.com" + patterns: + - "(?i)(github.com)(/)(logpacker)(/)(PayPal-Go-SDK).*" + tags: diff --git a/rules/sinks/third_parties/sdk/pulumi/go.yaml b/rules/sinks/third_parties/sdk/pulumi/go.yaml new file mode 100644 index 00000000..8f49162d --- /dev/null +++ b/rules/sinks/third_parties/sdk/pulumi/go.yaml @@ -0,0 +1,14 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Pulumi + name: Pulumi + domains: + - "pulumi.com" + patterns: + - "(?i)(github.com)(/)(pulumi)(/)(pulumi/sdk).*" + tags: + diff --git a/rules/sinks/third_parties/sdk/segment/go.yaml b/rules/sinks/third_parties/sdk/segment/go.yaml new file mode 100644 index 00000000..ed166792 --- /dev/null +++ b/rules/sinks/third_parties/sdk/segment/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Segment + name: Segment + domains: + - "segment.com" + patterns: + - "(?i)(github.com)(/)(segmentio)(/)(asm).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/sendgrid/go.yaml b/rules/sinks/third_parties/sdk/sendgrid/go.yaml new file mode 100644 index 00000000..5ad2286a --- /dev/null +++ b/rules/sinks/third_parties/sdk/sendgrid/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sendgrid + name: Sendgrid + domains: + - "sendgrid.com" + patterns: + - "(?i)(gopkg.in|github.com)(/)(sendgrid)(/)(sendgrid-go|smtpapi-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/sensorsdata/go.yaml b/rules/sinks/third_parties/sdk/sensorsdata/go.yaml new file mode 100644 index 00000000..c5014ca9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/sensorsdata/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sensorsdata + name: Sensorsdata + domains: + - "sensorsdata.cn" + patterns: + - "(?i)(github.com)(/)(sensorsdata)(/)(sa-sdk-go/structs|abtesting-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/sentry/go.yaml b/rules/sinks/third_parties/sdk/sentry/go.yaml new file mode 100644 index 00000000..f124210d --- /dev/null +++ b/rules/sinks/third_parties/sdk/sentry/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Sentry + name: Sentry + domains: + - "sentry.io" + patterns: + - "(?i)(github.com)(/)(getsentry|harmony-development|blend)(/)(sentry-go|go-sdk/sentry).*" + tags: diff --git a/rules/sinks/third_parties/sdk/shopify/go.yaml b/rules/sinks/third_parties/sdk/shopify/go.yaml new file mode 100644 index 00000000..4ca412a1 --- /dev/null +++ b/rules/sinks/third_parties/sdk/shopify/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Shopify + name: Shopify + domains: + - "shopify.com" + patterns: + - "(?i)(github.com)(/)(cloudevents)(/)(sdk-go).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/slack/go.yaml b/rules/sinks/third_parties/sdk/slack/go.yaml new file mode 100644 index 00000000..2046afa9 --- /dev/null +++ b/rules/sinks/third_parties/sdk/slack/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Slack + name: Slack + domains: + - "slack.com" + patterns: + - "(?i)(github.com)(/)(blend|totvs|gogurgaon|seratch|ericogr|lacework|totvs)(/)(go-sdk/slack|pulumi-slack/sdk|joinslack/api|go-slack-sdk-experimental|pulumi-resource-slack/sdk/go|pulumi-slack/sdk/go|go-sdk/api|pulumi-slack-remover).*" + tags: diff --git a/rules/sinks/third_parties/sdk/squareup/go.yaml b/rules/sinks/third_parties/sdk/squareup/go.yaml new file mode 100644 index 00000000..12acc44b --- /dev/null +++ b/rules/sinks/third_parties/sdk/squareup/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Squareup + name: Squareup + domains: + - "squareup.com" + patterns: + - "(?i)(github.com)(/)(square)(/)(square-connect-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/stripe/go.yaml b/rules/sinks/third_parties/sdk/stripe/go.yaml new file mode 100644 index 00000000..ce2b5ac4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/stripe/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Stripe + name: Stripe + domains: + - "stripe.com" + patterns: + - "(?i)(github.com)(/)(stripe)(/)(stripe-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/taobao/go.yaml b/rules/sinks/third_parties/sdk/taobao/go.yaml new file mode 100644 index 00000000..41ef131d --- /dev/null +++ b/rules/sinks/third_parties/sdk/taobao/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Taobao + name: Taobao + domains: + - "taobao.com" + patterns: + - "(?i)(github.com)(/)(changkong|yaofangou|beJuvenile)(/)(open_taobao|go-sdk-taobao).*" + tags: diff --git a/rules/sinks/third_parties/sdk/temporal/go.yaml b/rules/sinks/third_parties/sdk/temporal/go.yaml new file mode 100644 index 00000000..3870d519 --- /dev/null +++ b/rules/sinks/third_parties/sdk/temporal/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Temporal + name: Temporal + domains: + - "temporal.io" + patterns: + - "(?i)(github.com)(/)(spiral|cretz)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" + tags: diff --git a/rules/sinks/third_parties/sdk/tencent/go.yaml b/rules/sinks/third_parties/sdk/tencent/go.yaml new file mode 100644 index 00000000..b84a0c82 --- /dev/null +++ b/rules/sinks/third_parties/sdk/tencent/go.yaml @@ -0,0 +1,21 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Tencent + name: Tencent + domains: + - "tencent.com" + patterns: + - "(?i)(github.com)(/)(tencentcloud)(/)(tencentcloud-sdk-go).*" + tags: + + - id: ThirdParties.SDK.Tencent.Cloud + name: Tencent Cloud + domains: + - "intl.cloud.tencent.com" + patterns: + - "(?i)(github.com)(/)(tencentyun|tencentad|dreamCodeMan|bulletRush|lily-lee|SiCo-Ops|MangoMilk|dreamcodeman|teamlint|cosmos|mozillazg|lewzylu|huanght1997|likexian|yiGmMk|liuyongqing|Garyluoluoluo)(/)(qcloud-cos-sts-sdk/go|qcloud-sdk|qcloud-cos-go-sdk|cloud-go-sdk/qcloud|go-sdk/qcloud|qcloud-sms|cosmos-sdk|cos-go-sdk-v5|go-cos|marketing-api-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/transbank/go.yaml b/rules/sinks/third_parties/sdk/transbank/go.yaml new file mode 100644 index 00000000..525cbed7 --- /dev/null +++ b/rules/sinks/third_parties/sdk/transbank/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Transbank + name: Transbank + domains: + - "transbank.mn" + patterns: + - "(?i)(github.com)(/)(v1nland|microapis)(/)(transbank-sdk-golang).*" + tags: diff --git a/rules/sinks/third_parties/sdk/trello/go.yaml b/rules/sinks/third_parties/sdk/trello/go.yaml new file mode 100644 index 00000000..f3be2dd4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/trello/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hashicorp.Trello + name: Trello + domains: + - "trello.com" + patterns: + - "(?i)(github.com)(/)(adlio)(/)(trello).*" + tags: diff --git a/rules/sinks/third_parties/sdk/twitter/go.yaml b/rules/sinks/third_parties/sdk/twitter/go.yaml new file mode 100644 index 00000000..4d8316b5 --- /dev/null +++ b/rules/sinks/third_parties/sdk/twitter/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Twitter + name: Twitter + domains: + - "twitter.com" + patterns: + - "(?i)(github.com)(/)(contextgg)(/)(go-sdk\\/autha/providers/twitter).*" + tags: diff --git a/rules/sinks/third_parties/sdk/uber/go.yaml b/rules/sinks/third_parties/sdk/uber/go.yaml new file mode 100644 index 00000000..12048858 --- /dev/null +++ b/rules/sinks/third_parties/sdk/uber/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Uber + name: Uber + domains: + - "uber.com" + patterns: + - "(?i)(github.com|go.uber.org)(/)(uber-go/tally|goleak).*" + tags: diff --git a/rules/sinks/third_parties/sdk/umeng/go.yaml b/rules/sinks/third_parties/sdk/umeng/go.yaml new file mode 100644 index 00000000..7c957774 --- /dev/null +++ b/rules/sinks/third_parties/sdk/umeng/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Umeng + name: Umeng + domains: + - "umeng.com" + patterns: + - "(?i)(github.com)(/)(shfc|kkkbird|huangfuhui|uhhc)(/)(umeng-openapi-sdk|umeng-push).*" + tags: diff --git a/rules/sinks/third_parties/sdk/vaultproject/go.yaml b/rules/sinks/third_parties/sdk/vaultproject/go.yaml new file mode 100644 index 00000000..121ee5f8 --- /dev/null +++ b/rules/sinks/third_parties/sdk/vaultproject/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Hashicorp.vault + name: Hashicorp Vault + domains: + - "vaultproject.io" + patterns: + - "(?i)(github.com)(/)(hashicorp)(/)(vault-plugin-auth-kerberos|vault-plugin-auth-kubernetes|vault-plugin-auth-oci|vault-plugin-secrets-ad|vault-plugin-secrets-kv|vault-plugin-secrets-openldap|vault-plugin-secrets-terraform).*" + tags: diff --git a/rules/sinks/third_parties/sdk/virgilsecurity/go.yaml b/rules/sinks/third_parties/sdk/virgilsecurity/go.yaml new file mode 100644 index 00000000..4e933ba4 --- /dev/null +++ b/rules/sinks/third_parties/sdk/virgilsecurity/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Virgilsecurity + name: Virgilsecurity + domains: + - "virgilsecurity.com" + patterns: + - "(?i)(github.com|gopkg.in)(/)(VirgilSecurity|tochka)(/)(virgil-sdk-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/vmware/go.yaml b/rules/sinks/third_parties/sdk/vmware/go.yaml new file mode 100644 index 00000000..3631259e --- /dev/null +++ b/rules/sinks/third_parties/sdk/vmware/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Vmware + name: Vmware + domains: + - "vmware.com" + patterns: + - "(?i)(github.com)(/)(vmware|clumio-code|laidbackware)(/)(vsphere-automation-sdk-go|alb-sdk|photon-controller-go-sdk|vra-sdk-go/pkg/client|clumio-go-sdk/controllers|vmware-download-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/wavefront/go.yaml b/rules/sinks/third_parties/sdk/wavefront/go.yaml new file mode 100644 index 00000000..d3dd4c79 --- /dev/null +++ b/rules/sinks/third_parties/sdk/wavefront/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wavefront + name: Wavefront + domains: + - "wavefront.com" + patterns: + - "(?i)(https://github.com/wavefronthq/wavefront-sdk-go).*" + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/wechat/go.yaml b/rules/sinks/third_parties/sdk/wechat/go.yaml new file mode 100644 index 00000000..3a8cc95e --- /dev/null +++ b/rules/sinks/third_parties/sdk/wechat/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Wechat + name: Wechat + domains: + - "wechat.com" + patterns: + - "(?i)(github.com)(/)(chanxuehong|chanxuehong|XieXianbin|esap|rixingyike|zhi-miao)(/)(wechat|wechat-sdk/pay).*" + tags: diff --git a/rules/sinks/third_parties/sdk/whatsapp/go.yaml b/rules/sinks/third_parties/sdk/whatsapp/go.yaml new file mode 100644 index 00000000..b8d50317 --- /dev/null +++ b/rules/sinks/third_parties/sdk/whatsapp/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Whatsapp + name: Whatsapp + domains: + - "whatsapp.com" + patterns: + - "(?i)(github.com)(/)(Rhymen)(/)(go-whatsapp).*" + tags: diff --git a/rules/sinks/third_parties/sdk/workos/go.yaml b/rules/sinks/third_parties/sdk/workos/go.yaml new file mode 100644 index 00000000..8c05dc0d --- /dev/null +++ b/rules/sinks/third_parties/sdk/workos/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Workos + name: Workos + domains: + - "workos.com" + patterns: + - "(?i)(github.com)(/)(workos)(/)(workos-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/xiaomi/go.yaml b/rules/sinks/third_parties/sdk/xiaomi/go.yaml new file mode 100644 index 00000000..0584c367 --- /dev/null +++ b/rules/sinks/third_parties/sdk/xiaomi/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Xiaomi + name: Xiaomi + domains: + - "xiaomi.com" + patterns: + - "(?i)(github.com)(/)(XiaoMi|cristiane|rxwen|curltech|ling-bin)(/)(galaxy-sdk-go|go-push-sdk|xiaomi-go-sdk-push|galaxy-fds-sdk-golang).*" + tags: diff --git a/rules/sinks/third_parties/sdk/yandex/go.yaml b/rules/sinks/third_parties/sdk/yandex/go.yaml new file mode 100644 index 00000000..8cb8c0ba --- /dev/null +++ b/rules/sinks/third_parties/sdk/yandex/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Yandex + name: Yandex + domains: + - "yandex.com" + patterns: + - "(?i)(github.com)(/)(yandex-cloud)(/)(go-sdk|ydb-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/yoomoney/go.yaml b/rules/sinks/third_parties/sdk/yoomoney/go.yaml new file mode 100644 index 00000000..a561b0c6 --- /dev/null +++ b/rules/sinks/third_parties/sdk/yoomoney/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Yoomoney + name: Yoomoney + domains: + - "yoomoney.ru" + patterns: + - "(?i)(github.com)(/)(telf01)(/)(yookassa-go-sdk).*" + tags: diff --git a/rules/sinks/third_parties/sdk/yunpian/go.yaml b/rules/sinks/third_parties/sdk/yunpian/go.yaml new file mode 100644 index 00000000..575b834f --- /dev/null +++ b/rules/sinks/third_parties/sdk/yunpian/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Yunpian + name: Yunpian + domains: + - "yunpian.com" + patterns: + - "(?i)(github.com)(/)(yunpian|FeiniuBus|fixJ|venuses|feiniubus)(/)(yunpian-go-sdk).*" + tags: From 679d0618305b1dad2df33e6383b62a41d9a20dc8 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Wed, 1 Nov 2023 17:24:04 +0530 Subject: [PATCH 50/74] [gosrc2cpg] - storage framework rules (#340) * added gorm rule * fix gorm rule * added more storage rules * Added more framework rules * dummy-commit --- rules/sinks/storages/gorm/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/gorp/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/pop/go.yaml | 25 +++++++++++++++++++++++++ rules/sinks/storages/qbs/go.yaml | 17 +++++++++++++++++ rules/sinks/storages/xorm/go.yaml | 25 +++++++++++++++++++++++++ 5 files changed, 101 insertions(+) create mode 100644 rules/sinks/storages/gorm/go.yaml create mode 100644 rules/sinks/storages/gorp/go.yaml create mode 100644 rules/sinks/storages/pop/go.yaml create mode 100644 rules/sinks/storages/qbs/go.yaml create mode 100644 rules/sinks/storages/xorm/go.yaml diff --git a/rules/sinks/storages/gorm/go.yaml b/rules/sinks/storages/gorm/go.yaml new file mode 100644 index 00000000..99a93556 --- /dev/null +++ b/rules/sinks/storages/gorm/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.GormFramework.Read + name: Gorm (Read) + domains: + - gorm.io + patterns: + - "(?i).*(github.com)(/)(go-gorm|jinzhu)(/)(gorm).*(Find).*" + tags: + + - id: Storages.GormFramework.Write + name: Gorm (Write) + domains: + - gorm.io + patterns: + - "(?i).*(github.com)(/)(go-gorm|jinzhu)(/)(gorm).*(Create|Update|Delete|Save).*" + tags: diff --git a/rules/sinks/storages/gorp/go.yaml b/rules/sinks/storages/gorp/go.yaml new file mode 100644 index 00000000..9e70476f --- /dev/null +++ b/rules/sinks/storages/gorp/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.GorpFramework.Read + name: Gorp (Read) + domains: + - pkg.go.dev/github.com/go-gorp/gorp + patterns: + - "(?i).*(github.com|gopkg.in)(/)(gorp|go-gorp/gorp).*(Select).*" + tags: + + - id: Storages.GormFramework.Write + name: Gorm (Write) + domains: + - pkg.go.dev/github.com/go-gorp/gorp + patterns: + - "(?i).*(github.com|gopkg.in)(/)(gorp|go-gorp/gorp).*(Insert|Update|Delete).*" + tags: diff --git a/rules/sinks/storages/pop/go.yaml b/rules/sinks/storages/pop/go.yaml new file mode 100644 index 00000000..f686832c --- /dev/null +++ b/rules/sinks/storages/pop/go.yaml @@ -0,0 +1,25 @@ +sinks: + + - id: Storages.PopFramework.Read + name: pop (Read) + domains: + - gobuffalo.io/documentation/database/pop/ + patterns: + - "(?i).*(github.com)(/)(gobuffalo)(/)(pop).*(Find).*" + tags: + + - id: Storages.PopFramework.Write + name: Xorm (Write) + domains: + - gobuffalo.io/documentation/database/pop/ + patterns: + - "(?i).*(github.com)(/)(gobuffalo)(/)(pop).*(Create|Update|Destroy).*" + tags: + + - id: Storages.PopFramework.ReadAndWrite + name: Xorm + domains: + - gobuffalo.io/documentation/database/pop/ + patterns: + - "(?i).*(github.com)(/)(gobuffalo)(/)(pop).*(All).*" + tags: diff --git a/rules/sinks/storages/qbs/go.yaml b/rules/sinks/storages/qbs/go.yaml new file mode 100644 index 00000000..5da941d8 --- /dev/null +++ b/rules/sinks/storages/qbs/go.yaml @@ -0,0 +1,17 @@ +sinks: + + - id: Storages.QBSFramework.Read + name: Qbs (Read) + domains: + - doc.qt.io/qbs + patterns: + - "(?i).*(github.com|gopkg.in)(/)(coocood)(/)(qbs).*(Find).*" + tags: + + - id: Storages.QBSFramework.Write + name: Qbs (Write) + domains: + - doc.qt.io/qbs + patterns: + - "(?i).*(github.com|gopkg.in)(/)(coocood)(/)(qbs).*(Save|Update|Delete).*" + tags: diff --git a/rules/sinks/storages/xorm/go.yaml b/rules/sinks/storages/xorm/go.yaml new file mode 100644 index 00000000..cad1f5ca --- /dev/null +++ b/rules/sinks/storages/xorm/go.yaml @@ -0,0 +1,25 @@ +sinks: + + - id: Storages.XormFramework.Read + name: Xorm (Read) + domains: + - xorm.io + patterns: + - "(?i).*(github.com)(/)(go-xrom)(/)(xorm).*(Get|Find).*" + tags: + + - id: Storages.XormFramework.Write + name: Xorm (Write) + domains: + - xorm.io + patterns: + - "(?i).*(github.com)(/)(go-xrom)(/)(xorm).*(Insert|Update|Delete).*" + tags: + + - id: Storages.XormFramework.ReadAndWrite + name: Xorm + domains: + - xorm.io + patterns: + - "(?i).*(github.com)(/)(go-xrom)(/)(xorm).*(Exec).*" + tags: From dca0e6c89fbf78adc1eac62d11d4663f999e698e Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Thu, 2 Nov 2023 11:30:39 +0530 Subject: [PATCH 51/74] Update national_identification_numbers.yaml (#334) --- .../national_identification_numbers.yaml | 20 ------------------- 1 file changed, 20 deletions(-) diff --git a/rules/sources/national_identification_numbers.yaml b/rules/sources/national_identification_numbers.yaml index 0e5d5158..6177f095 100644 --- a/rules/sources/national_identification_numbers.yaml +++ b/rules/sources/national_identification_numbers.yaml @@ -48,23 +48,3 @@ sources: - "(?i)(employer[^\\s/(;)#|,=!>]{0,3}(identification|id)[^\\s/(;)#|,=!>]{0,3}(?:number|no)|ein)" tags: law: GDPR - - - id: Data.Sensitive.NationalIdentificationNumbers.PANNumber - name: PAN Number - category: National Identification Numbers - isSensitive: False - sensitivity: high - patterns: - - "(?i).*(pan([^\\s/(;)#|,=!>]{0,3}card){0,1}[^\\s/(;)#|,=!>]{0,3}(?:no|num|number)|permanant[^\\s/(;)#|,=!>]{0,3}account[^\\s/(;)#|,=!>]{0,3}number)" - tags: - law: GDPR - - - id: Data.Sensitive.NationalIdentificationNumbers.AadharNumber - name: Aadhar Number - category: National Identification Numbers - isSensitive: False - sensitivity: high - patterns: - - "(?i).*(aadhaar[^\\s/(;)#|,=!>]*(?:no|num|number|id)|aadhaar[^\\s/(;)#|,=!>]*card[^\\s/(;)#|,=!>]*(?:no|num|number|id)|aadhaar[^\\s/(;)#|,=!>]*card)" - tags: - law: GDPR From 2f59069bcf1f7dbbc8e96f74071c24c33ed3ae55 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Thu, 2 Nov 2023 11:32:10 +0530 Subject: [PATCH 52/74] Python/3p/cherrypy (#308) * Dev (#285) * Sources/click stream ddhq (#284) * add datadog initialization params which default track click behaviour * Add IndexedDB storage rule --------- Co-authored-by: Datta Mundada * vehicle registration rule * Laundarkly fix (#287) * Remove useFlags method from launchdarkly sdk * Minor correction in laundarkly fix * JS sdk fixes -1 * Fix code-review comment --------- Co-authored-by: Hitesh Mahajan Co-authored-by: Hitesh Mahajan * Python: Stripe Rule (#298) * Removed duplicate rule (#303) (#304) * Delete rules/sinks/third_parties/sdk/cherrypy/python.yaml cherrypy is a framework not a thirdparty --------- Co-authored-by: Datta Mundada Co-authored-by: Hitesh Mahajan Co-authored-by: KhemrajSingh Rathore Co-authored-by: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> --- rules/sinks/third_parties/sdk/cherrypy/python.yaml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 rules/sinks/third_parties/sdk/cherrypy/python.yaml diff --git a/rules/sinks/third_parties/sdk/cherrypy/python.yaml b/rules/sinks/third_parties/sdk/cherrypy/python.yaml deleted file mode 100644 index e55ee753..00000000 --- a/rules/sinks/third_parties/sdk/cherrypy/python.yaml +++ /dev/null @@ -1,13 +0,0 @@ - -# Sink rule for ThirdParty SDK -# The id follows a format : "ThirdParties.SDK.." - -sinks: - - - id: ThirdParties.SDK.Cherrypy - name: Cherrypy - domains: - - "cherrypy.org" - patterns: - - "(?i)(cherrypy).*" - tags: From cdf39e60a620467e77dc9945fb7db572ed3451ba Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Thu, 2 Nov 2023 12:50:02 +0530 Subject: [PATCH 53/74] change slack action to upload file (#342) --- .github/workflows/comparison-result.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 2e89d18f..76d8a1e5 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -75,16 +75,16 @@ jobs: echo "MESSAGE<> $GITHUB_ENV echo "$(cat /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results/slack_summary.txt)" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - + - name: Post results to slack - uses: MeilCli/slack-upload-file@v3 + uses: adrey/slack-file-upload-action@master with: thread_ts: ${{needs.start_workflow.outputs.init_message_ts}} - slack_token: ${{ secrets.SLACK_TOKEN }} - channel_id: ${{ secrets.SLACK_CHANNEL_ID }} - file_path: "/home/runner/work/privado/privado/temp/standalone-monitoring-stability/result-${{matrix.language}}-${{github.event.number}}.zip" + channel: ${{ secrets.SLACK_CHANNEL_ID }} # check + path: "/home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/result-${{matrix.language}}-${{github.event.number}}.zip" initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" - file_type: "zip" + filetype: "zip" + token: ${{ secrets.SLACK_TOKEN }} - name: Export workflow output run: cd ./temp/standalone-monitoring-stability && python3 ./workflow_check.py /home/runner/work/privado/privado/temp/standalone-monitoring-stability/results/slack_summary.txt From d7241eefd3c020bb61e94eb20427338f0d0230a3 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Tue, 7 Nov 2023 20:06:59 +0530 Subject: [PATCH 54/74] Kotlin poc (#344) * kotlin logging rules * api rules * add - kotlin rule * modified mongo rule * add - more rules --- config/systemConfig/kotlin.yaml | 12 +++++++ rules/sinks/leakages/logs/kotlin.yaml | 31 +++++++++++++++++++ rules/sinks/storages/couchdb/java.yaml | 4 +-- rules/sinks/storages/firebase/kotlin.yaml | 24 ++++++++++++++ rules/sinks/storages/mongodb/java.yaml | 4 +-- rules/sinks/storages/realm/kotlin.yaml | 16 ++++++++++ .../third_parties/sdk/google/kotlin.yaml | 10 ++++++ 7 files changed, 97 insertions(+), 4 deletions(-) create mode 100644 config/systemConfig/kotlin.yaml create mode 100644 rules/sinks/leakages/logs/kotlin.yaml create mode 100644 rules/sinks/storages/firebase/kotlin.yaml create mode 100644 rules/sinks/storages/realm/kotlin.yaml create mode 100644 rules/sinks/third_parties/sdk/google/kotlin.yaml diff --git a/config/systemConfig/kotlin.yaml b/config/systemConfig/kotlin.yaml new file mode 100644 index 00000000..f19b2e10 --- /dev/null +++ b/config/systemConfig/kotlin.yaml @@ -0,0 +1,12 @@ +systemConfig: + - key: apiHttpLibraries + value: ^(?i)(org.apache.http|okhttp|org.glassfish.jersey|com.mashape.unirest|java.net.http|java.net.URL|org.springframework.(web|core.io)|groovyx.net.http|org.asynchttpclient|kong.unirest.java|org.concordion.cubano.driver.http|javax.net.ssl|javax.xml.soap|org.apache.axis2|com.sun.xml.messaging.saaj|org.springframework.ws.client|com.eviware.soapui|org.apache.cxf|org.jboss.ws|com.ibm.websphere.sca.extensions.soap|com.sun.xml.ws|org.apache.camel.component.cxf|org.codehaus.xfire|org.apache.synapse|org.apache.wink.client|com.oracle.webservices.internal.api.databinding.Databinding|com.sap.engine.interfaces.webservices.runtime.client).* + + - key: ignoredSinks + value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* + + - key: apiSinks + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend) + + - key: apiIdentifier + value: (?i).*((hook|base|auth|prov|endp|install|request|service|gateway|route|resource)(.){0,12}url|(slack|web)(.){0,4}hook|(rest|api|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/leakages/logs/kotlin.yaml b/rules/sinks/leakages/logs/kotlin.yaml new file mode 100644 index 00000000..a87a8549 --- /dev/null +++ b/rules/sinks/leakages/logs/kotlin.yaml @@ -0,0 +1,31 @@ +sinks: + + - id: Leakages.Log.Error + name: Log Error + patterns: + - "(?i)(?:io.github.microutils.kotlin-logging.Logger).*(?:wtf|error|severe|fatal|[.]e[:]).*" + tags: + + - id: Leakages.Log.Warn + name: Log Warn + patterns: + - "(?i)(?:io.github.microutils.kotlin-logging.Logger).*(warn|warning|[.]w[:]).*" + tags: + + - id: Leakages.Log.Debug + name: Log Debug + patterns: + - "(?i)(?:io.github.microutils.kotlin-logging.Logger).*(debug|trace|[.](log|d|v|t)[:]).*" + tags: + + - id: Leakages.Log.Info + name: Log Info + patterns: + - "(?i)(?:io.github.microutils.kotlin-logging.Logger).*(info|[.]i[:]).*" + tags: + + - id: Leakages.Log.Console + name: Log Console + patterns: + - "(?i)(kotlin.io).(?:print|println|write)[:].*" + tags: diff --git a/rules/sinks/storages/couchdb/java.yaml b/rules/sinks/storages/couchdb/java.yaml index 8aded2e0..c0e26f6d 100644 --- a/rules/sinks/storages/couchdb/java.yaml +++ b/rules/sinks/storages/couchdb/java.yaml @@ -9,7 +9,7 @@ sinks: - couchdb.apache.org - apache.org patterns: - - "(?i).*(?:com[.]fourspaces[.]couchdb|org[.]ektorp[.].*couchdb|org[.]lightcouch[.]couchdb|org.*jnosql.*couch.*|com[.]couchbase[.]client).*(?:get|list|head|select|view|find|search|match).*" + - "(?i).*(?:com[.]fourspaces[.]couchdb|org[.]ektorp[.].*couchdb|org[.]lightcouch[.]couchdb|org.*jnosql.*couch.*|com[.]couchbase[.]client|com[.]couchbase[.]lite).*(?:get|list|head|select|view|find|search|match).*" tags: - id: Storages.ApacheCouchDb.Write @@ -18,5 +18,5 @@ sinks: - couchdb.apache.org - apache.org patterns: - - "(?i).*(?:com[.]fourspaces[.]couchdb|.*org[.]ektorp[.].*couchdb|.*org[.]lightcouch[.]CouchDb|org.*jnosql.*couch.*|com[.]couchbase[.]client).*(?:add|copy|apply|create|delete|modify|remove|reset|restore|insert|drop|rename|save|set|update|bulkWrite).*" + - "(?i).*(?:com[.]fourspaces[.]couchdb|.*org[.]ektorp[.].*couchdb|.*org[.]lightcouch[.]CouchDb|org.*jnosql.*couch.*|com[.]couchbase[.]clientcom[.]couchbase[.]lite).*(?:add|copy|apply|create|delete|modify|remove|reset|restore|insert|drop|rename|save|set|update|bulkWrite).*" tags: diff --git a/rules/sinks/storages/firebase/kotlin.yaml b/rules/sinks/storages/firebase/kotlin.yaml new file mode 100644 index 00000000..2f52666b --- /dev/null +++ b/rules/sinks/storages/firebase/kotlin.yaml @@ -0,0 +1,24 @@ +sinks: + - id: Storages.Firebase.Read + name: Firebase + domains: + - "firebase.google.com" + patterns: + - "(?i)(com[.]google[.]firebase)[.](database).*(?:find|get|select|search|load).*" + - "(?i)(com[.]firebase)[.](database).*(?:find|get|select|search|load).*" + - "(?i)(io[.]firebase)[.](database).*(?:find|get|select|search|load).*" + tags: + + - id: Storages.Firebase.Write + name: Firebase + domains: + - "firebase.google.com" + patterns: + - "(?i)(com[.]google[.]firebase)[.](database).*(?:set|save|delete|insert|update).*" + - "(?i)(com[.]firebase)[.](database).*(?:set|save|delete|insert|update).*" + - "(?i)(io[.]firebase)[.](database).*(?:set|save|delete|insert|update).*" + tags: + + + + \ No newline at end of file diff --git a/rules/sinks/storages/mongodb/java.yaml b/rules/sinks/storages/mongodb/java.yaml index 2d264d1d..8135a93e 100644 --- a/rules/sinks/storages/mongodb/java.yaml +++ b/rules/sinks/storages/mongodb/java.yaml @@ -42,7 +42,7 @@ sinks: domains: - mongodb.com patterns: - - "(?i)(org.springframework.data.mongodb.core.ReactiveMongoTemplate)[.]((find|get|getByKey|getByKeys|getCount|createAggregation|createQuery|queryByExample|exists).*)" + - "(?i)(org.springframework.data.mongodb.core).*[.]((find|get|getByKey|getByKeys|getCount|createAggregation|createQuery|queryByExample|exists).*)" tags: - id: Storages.MongoDB.SpringRepository.Write @@ -50,5 +50,5 @@ sinks: domains: - mongodb.com patterns: - - "(?i)(org.springframework.data.mongodb.core.ReactiveMongoTemplate)[.]((save|update|updateFirst|createUpdateOperations|delete|findAnd(Delete|Modify)).*)" + - "(?i)(org.springframework.data.mongodb.core).*[.]((save|update|updateFirst|createUpdateOperations|delete|findAnd(Delete|Modify)).*)" tags: diff --git a/rules/sinks/storages/realm/kotlin.yaml b/rules/sinks/storages/realm/kotlin.yaml new file mode 100644 index 00000000..af1f1ec7 --- /dev/null +++ b/rules/sinks/storages/realm/kotlin.yaml @@ -0,0 +1,16 @@ +sinks: + - id: Storages.Realm.Read + name: Realm(Read) + domains: + - realm.io + patterns: + - (?i)(io.realm.Realm)[.].*(?:find|get|select|search|load)(.*) + tags: + + - id: Storages.Realm.Write + name: Realm(Write) + domains: + - realm.io + patterns: + - (?i)(io.realm.Realm)[.].*(?:save|delete|insert|update)(.*) + tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/google/kotlin.yaml b/rules/sinks/third_parties/sdk/google/kotlin.yaml new file mode 100644 index 00000000..8373c67a --- /dev/null +++ b/rules/sinks/third_parties/sdk/google/kotlin.yaml @@ -0,0 +1,10 @@ +sinks: + - id: ThirdParties.SDK.Google.Firebase + name: Firebase + domains: + - "firebase.google.com" + patterns: + - "(?i)(com[.]google[.]firebase)[.](?!(database)).*" + - "(?i)(com[.]firebase)[.](?!(database)).*" + - "(?i)(io[.]firebase)[.](?!(database)).*" + tags: From a37f01b504cf496baf659b45f1605173814c83ca Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Tue, 7 Nov 2023 20:08:33 +0530 Subject: [PATCH 55/74] Added go comparison report support (#345) --- .github/workflows/comparison-result.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 76d8a1e5..8b029636 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -29,7 +29,7 @@ jobs: needs: start_workflow strategy: matrix: - language: ['java', 'python', 'js', 'ruby-1', 'ruby-2'] + language: ['java', 'python', 'js', 'ruby-1', 'ruby-2', 'go'] continue-on-error: true runs-on: ubuntu-latest steps: From 8737e906f7e239e2569097094c2cc060f86e3fd2 Mon Sep 17 00:00:00 2001 From: Karan Batavia <118820668+karan-batavia@users.noreply.github.com> Date: Tue, 7 Nov 2023 20:09:12 +0530 Subject: [PATCH 56/74] fix path in comparison results (#346) --- .github/workflows/comparison-result.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/comparison-result.yml b/.github/workflows/comparison-result.yml index 8b029636..112a48af 100644 --- a/.github/workflows/comparison-result.yml +++ b/.github/workflows/comparison-result.yml @@ -81,7 +81,7 @@ jobs: with: thread_ts: ${{needs.start_workflow.outputs.init_message_ts}} channel: ${{ secrets.SLACK_CHANNEL_ID }} # check - path: "/home/runner/work/privado-core/privado-core/temp/standalone-monitoring-stability/result-${{matrix.language}}-${{github.event.number}}.zip" + path: "/home/runner/work/privado/privado/temp/standalone-monitoring-stability/result-${{matrix.language}}-${{github.event.number}}.zip" initial_comment: "Comparison Results generated on ${{github.event.repository.name}} by PR ${{github.event.number}} from branch ${{github.head_ref}} to ${{github.base_ref}} \nPR link https://github.com/Privado-Inc/privado/pull/${{github.event.number}}\n Language: ${{matrix.language}} \nSummary Report:\n ${{ env.MESSAGE }}" filetype: "zip" token: ${{ secrets.SLACK_TOKEN }} From cfa908c3f4f85acd04ca4d2a09820d4203cefbd0 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Mon, 13 Nov 2023 18:27:53 +0530 Subject: [PATCH 57/74] add - regex for exclusion templates in kotlin (#348) * add - regex for exclusion templates in kotlin * update regex * Revert "update regex" This reverts commit c7b95078eebd09a78b91e099914c743e976f7b74. --- config/exclusions/kotlin.yaml | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 config/exclusions/kotlin.yaml diff --git a/config/exclusions/kotlin.yaml b/config/exclusions/kotlin.yaml new file mode 100644 index 00000000..d646ee2d --- /dev/null +++ b/config/exclusions/kotlin.yaml @@ -0,0 +1,5 @@ +exclusions: + - id: Exclusions.Template + name: Exclude template file + patterns: + - "(?i)(.*template.kt|.*template(s)?/.*)" \ No newline at end of file From 933a3abde74dace7e6bcb81df2e7dca14b6d6351 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Tue, 14 Nov 2023 11:01:20 +0530 Subject: [PATCH 58/74] Google map and google play rule (#349) * kotlin logging rules * api rules * add - kotlin rule * modified mongo rule * add - more rules * add - more google rules --- rules/sinks/third_parties/sdk/google/java.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/sinks/third_parties/sdk/google/java.yaml b/rules/sinks/third_parties/sdk/google/java.yaml index 9b2c70c7..a5545b19 100644 --- a/rules/sinks/third_parties/sdk/google/java.yaml +++ b/rules/sinks/third_parties/sdk/google/java.yaml @@ -961,7 +961,7 @@ sinks: domains: - "google.com/maps" patterns: - - "(?i)(com[.]google[.]maps[.]android|com[.]google[.]maps|com[.]google[.]android[.]gms[.]maps).*" + - "(?i)(com[.]google[.]maps[.]android|com[.]google[.]maps|com[.]google[.]android[.]gms[.]maps|com[.]google[.]android[.]geo).*" tags: - id: ThirdParties.SDK.Google.Pay @@ -977,7 +977,7 @@ sinks: domains: - "play.google.com" patterns: - - "(?i)(com[.]google[.]ar[.]sceneform|com[.]google[.]ar|com[.]google[.]android[.]gms[.](games|wallet)).*" + - "(?i)(com[.]google[.]ar[.]sceneform|com[.]google[.]ar|com[.]google[.]android[.]gms[.](games|wallet)|com[.]android[.]billingclient[.]api[.]|com[.]google[.]android[.]gms[.]games).*" tags: - id: ThirdParties.SDK.Google.Crashlytics From 3ae4b1aada84b9573fe60be76875c3d743379a20 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Tue, 14 Nov 2023 14:28:06 +0530 Subject: [PATCH 59/74] lng matches with short for language (#350) --- rules/sources/location_data.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sources/location_data.yaml b/rules/sources/location_data.yaml index 83201c40..5370401e 100644 --- a/rules/sources/location_data.yaml +++ b/rules/sources/location_data.yaml @@ -5,6 +5,6 @@ sources: isSensitive: False sensitivity: high patterns: - - "(?i)(.*(gps[^\\s/(;)#|,=!>]{0,3}(?:location|position|trace)|user[^\\s/(;)#|,=!>]{0,5}location|latitude|longitude|geo[^\\s/(;)#|,=!>]{0,5}coordinates)|(lat|lon|lng|latlng|latlon))" + - "(?i)(.*(gps[^\\s/(;)#|,=!>]{0,3}(?:location|position|trace)|user[^\\s/(;)#|,=!>]{0,5}location|latitude|longitude|geo[^\\s/(;)#|,=!>]{0,5}coordinates)|(lat|lon|latlng|latlon))" tags: law: GDPR From bca5cc18465c75b05cc4100dcfd62870bb9d33f9 Mon Sep 17 00:00:00 2001 From: KhemrajSingh Rathore Date: Wed, 15 Nov 2023 11:33:05 +0530 Subject: [PATCH 60/74] add rule for authy (#351) --- rules/sinks/third_parties/sdk/twilio/java.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/twilio/java.yaml b/rules/sinks/third_parties/sdk/twilio/java.yaml index 9bc1044a..b0c08da6 100644 --- a/rules/sinks/third_parties/sdk/twilio/java.yaml +++ b/rules/sinks/third_parties/sdk/twilio/java.yaml @@ -9,5 +9,5 @@ sinks: domains: - "twilio.com" patterns: - - "(?i)(com[.]twilio.*(sdk|jwt|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice)).*" + - "(?i)(com[.]twilio.*(sdk|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice))|(com[.]authy).*" tags: From 7d4aa50e9a55c4dc43e0c20b0350f468177907b3 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Wed, 15 Nov 2023 11:33:31 +0530 Subject: [PATCH 61/74] spring java patch collection (#353) --- rules/collections/annotations/java.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/collections/annotations/java.yaml b/rules/collections/annotations/java.yaml index 09ace486..3783d3c6 100644 --- a/rules/collections/annotations/java.yaml +++ b/rules/collections/annotations/java.yaml @@ -2,7 +2,7 @@ collections: - id: Collections.Annotation.Spring name: Spring Web Interface Annotation patterns: - - "RequestMapping|PostMapping|PutMapping|GetMapping|DeleteMapping" + - "RequestMapping|PostMapping|PutMapping|PatchMapping|GetMapping|DeleteMapping" tags: - id: Collections.Annotation.Struts From 69b9f9b8a90d55caedee78f222f245c0fb4ac291 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Wed, 15 Nov 2023 13:00:41 +0530 Subject: [PATCH 62/74] go exclusion rule fix (#354) --- config/exclusions/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/exclusions/go.yaml b/config/exclusions/go.yaml index bf03d442..f2dd886f 100644 --- a/config/exclusions/go.yaml +++ b/config/exclusions/go.yaml @@ -2,4 +2,4 @@ exclusions: - id: Exclusions.Test name: Exclude test source code patterns: - - '.*_test\(s\)?.*' \ No newline at end of file + - ".*_test(s)?.*" \ No newline at end of file From de2e6149180d7e415a67d3f311510e8314273bf2 Mon Sep 17 00:00:00 2001 From: Khemraj Rathore Date: Thu, 16 Nov 2023 11:17:34 +0530 Subject: [PATCH 63/74] Revert "go exclusion rule fix (#354)" This reverts commit 69b9f9b8a90d55caedee78f222f245c0fb4ac291. --- config/exclusions/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/exclusions/go.yaml b/config/exclusions/go.yaml index f2dd886f..bf03d442 100644 --- a/config/exclusions/go.yaml +++ b/config/exclusions/go.yaml @@ -2,4 +2,4 @@ exclusions: - id: Exclusions.Test name: Exclude test source code patterns: - - ".*_test(s)?.*" \ No newline at end of file + - '.*_test\(s\)?.*' \ No newline at end of file From 6cf0f33ce3cc44b31b0f4622a05c1a0545312b7d Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Fri, 24 Nov 2023 13:11:54 +0530 Subject: [PATCH 64/74] add datadog java sdks source : https://docs.datadoghq.com/developers/community/libraries/ --- rules/sinks/third_parties/sdk/datadoghq/java.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/rules/sinks/third_parties/sdk/datadoghq/java.yaml b/rules/sinks/third_parties/sdk/datadoghq/java.yaml index d6ec02e2..665ac7ff 100644 --- a/rules/sinks/third_parties/sdk/datadoghq/java.yaml +++ b/rules/sinks/third_parties/sdk/datadoghq/java.yaml @@ -1,4 +1,3 @@ - # Sink rule for ThirdParty SDK # The id follows a format : "ThirdParties.SDK.." @@ -9,5 +8,9 @@ sinks: domains: - "datadoghq.com" patterns: - - "(?i)(com[.]datadoghq).*" + - "(?i)(com[.]datadoghq|com[.]datadog[.]api[.]client|com[.]bazaarvoice[.]lassie.*DataDog|org[.]coursera[.]metrics[.]datadog).*" + - "(?i)(com[.]timgroup[.]statsd|com[.]github[.]arnabk[.]statsd|org[.]honton[.]chas[.]dogstatd).*" + - "(?i)(datadog[.]opentracing|datadog[.]trace[.]api|org[.]honton[.]chas[.]datadog[.]apm).*" + - "(?i)(datadog[.]telemetry).*" tags: + From 196e952dc76d06c95162919b1a369611bc42004c Mon Sep 17 00:00:00 2001 From: Suchakra Sharma Date: Fri, 24 Nov 2023 01:15:06 -0800 Subject: [PATCH 65/74] add android collection rules (#356) --- rules/collections/android/any.yaml | 43 ++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 rules/collections/android/any.yaml diff --git a/rules/collections/android/any.yaml b/rules/collections/android/any.yaml new file mode 100644 index 00000000..6af90187 --- /dev/null +++ b/rules/collections/android/any.yaml @@ -0,0 +1,43 @@ +collections: + - id: Collections.Android.Form.Email + name: Android app email input + patterns: + - "(?i)email.*" + tags: + + - id: Collections.Android.Form.User + name: Android app username input + patterns: + - "(?i)user.*" + tags: + + - id: Collections.Android.Form.Address + name: Address text input Android + patterns: + - "(?i)address.*" + tags: + + - id: Collections.Android.Form.PhoneNumber + name: Phone number input Android + patterns: + - "(?i)phone.*" + tags: + + - id: Collections.Android.Form.ZipCode + name: Zip code input Android + patterns: + - "(?i)zip.*" + tags: + + - id: Collections.Android.Form.Password + name: Password input Android + patterns: + - "(?i)password.*" + tags: + + - id: Collections.Android.Form.Sensitve + name: Miscellaneous sensitive text input Android + patterns: + - ".*(?i)(bio|message|detail|comment).*" + tags: + From b2fffbf46e7c5feb42c33303e806c06e427b0fdc Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Mon, 27 Nov 2023 11:59:15 +0530 Subject: [PATCH 66/74] added go third party rules (#358) --- rules/sinks/storages/elasticsearch/go.yaml | 4 ++-- rules/sinks/third_parties/sdk/confluent/go.yaml | 12 ++++++++++++ rules/sinks/third_parties/sdk/datadog/go.yaml | 2 +- rules/sinks/third_parties/sdk/opentelemetry/go.yaml | 13 +++++++++++++ rules/sinks/third_parties/sdk/temporal/go.yaml | 2 +- 5 files changed, 29 insertions(+), 4 deletions(-) create mode 100644 rules/sinks/third_parties/sdk/confluent/go.yaml create mode 100644 rules/sinks/third_parties/sdk/opentelemetry/go.yaml diff --git a/rules/sinks/storages/elasticsearch/go.yaml b/rules/sinks/storages/elasticsearch/go.yaml index a0a92422..fff2dfcb 100644 --- a/rules/sinks/storages/elasticsearch/go.yaml +++ b/rules/sinks/storages/elasticsearch/go.yaml @@ -5,7 +5,7 @@ sinks: domains: - elastic.co patterns: - - "(?i)(github.com/olivere/elastic).*(Search)" + - "(?i)(github.com|gopkg.in)(/)(olivere)(/)(elastic).*(Search)" tags: - id: Storages.Elasticsearch.Write @@ -13,5 +13,5 @@ sinks: domains: - elastic.co patterns: - - "(?i)(github.com/olivere/elastic).*(CreateIndex|Delete|Update)" + - "(?i)(github.com|gopkg.in)(/)(olivere)(/)(elastic).*(CreateIndex|Delete|Update)" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/confluent/go.yaml b/rules/sinks/third_parties/sdk/confluent/go.yaml new file mode 100644 index 00000000..3ad33853 --- /dev/null +++ b/rules/sinks/third_parties/sdk/confluent/go.yaml @@ -0,0 +1,12 @@ +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Confluent.Kafka + name: Confluent Kafka + domains: + - "confluent.io" + patterns: + - "(?i)(github.com)(/)(confluentinc)(/)(confluent-kafka-go).*" + tags: diff --git a/rules/sinks/third_parties/sdk/datadog/go.yaml b/rules/sinks/third_parties/sdk/datadog/go.yaml index 22d22908..3c78c81e 100644 --- a/rules/sinks/third_parties/sdk/datadog/go.yaml +++ b/rules/sinks/third_parties/sdk/datadog/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "datadoghq.com" patterns: - - "(?i)(github.com)(/)(DataDog)(/)(datadog-go).*" + - "(?i)(github.com|gopkg.in)(/)(DataDog)(/)(datadog-go|dd-trace-go).*" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/opentelemetry/go.yaml b/rules/sinks/third_parties/sdk/opentelemetry/go.yaml new file mode 100644 index 00000000..360d214d --- /dev/null +++ b/rules/sinks/third_parties/sdk/opentelemetry/go.yaml @@ -0,0 +1,13 @@ + +# Sink rule for ThirdParty SDK +# The id follows a format : "ThirdParties.SDK.." + +sinks: + + - id: ThirdParties.SDK.Opentelemetry + name: Opentelemetry + domains: + - "opentelemetry.io" + patterns: + - "(?i)(go.opentelemetry.io)(/)(contrib|otel).*" + tags: diff --git a/rules/sinks/third_parties/sdk/temporal/go.yaml b/rules/sinks/third_parties/sdk/temporal/go.yaml index 3870d519..6b27be6e 100644 --- a/rules/sinks/third_parties/sdk/temporal/go.yaml +++ b/rules/sinks/third_parties/sdk/temporal/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "temporal.io" patterns: - - "(?i)(github.com)(/)(spiral|cretz)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" + - "(?i)(github.com|go.temporal.io)(/)(spiral|cretz|sdk)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" tags: From 9f6525835446560bbfde1e55bb0cec6b35b750cd Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Mon, 27 Nov 2023 17:16:19 +0530 Subject: [PATCH 67/74] Go additional rule (#361) * added go third party rules * go temporal rule --- rules/sinks/third_parties/sdk/temporal/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/temporal/go.yaml b/rules/sinks/third_parties/sdk/temporal/go.yaml index 6b27be6e..a9f98cb8 100644 --- a/rules/sinks/third_parties/sdk/temporal/go.yaml +++ b/rules/sinks/third_parties/sdk/temporal/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "temporal.io" patterns: - - "(?i)(github.com|go.temporal.io)(/)(spiral|cretz|sdk)(/)(go-sdk/temporal|temporal-sdk-go-advanced).*" + - "(?i)(github.com|go.temporal.io)(/)(spiral|cretz|sdk)(/)(temporal|go-sdk/temporal|temporal-sdk-go-advanced).*" tags: From 76908778e0b63b1e248f9cea13c36fbc510aa70f Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Tue, 28 Nov 2023 16:33:08 +0530 Subject: [PATCH 68/74] Go third party rule (#363) * added go third party rule * go slack rule added --- rules/sinks/third_parties/sdk/elastic/go.yaml | 2 +- rules/sinks/third_parties/sdk/google/go.yaml | 7 +++++++ rules/sinks/third_parties/sdk/hashicorp/go.yaml | 2 +- rules/sinks/third_parties/sdk/slack/go.yaml | 2 +- 4 files changed, 10 insertions(+), 3 deletions(-) diff --git a/rules/sinks/third_parties/sdk/elastic/go.yaml b/rules/sinks/third_parties/sdk/elastic/go.yaml index d3d614ec..3d9855fb 100644 --- a/rules/sinks/third_parties/sdk/elastic/go.yaml +++ b/rules/sinks/third_parties/sdk/elastic/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "elastic.co" patterns: - - "(?i)(go.elastic.co|gopkg.in)(/)(apm|olivere/elastic|go-elasticsearch).*" + - "(?i)(go.elastic.co|gopkg.in|github.com)(/)(apm|olivere/elastic|go-elasticsearch|elastic/go-elasticsearch).*" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/google/go.yaml b/rules/sinks/third_parties/sdk/google/go.yaml index 8d4c830b..259532c7 100644 --- a/rules/sinks/third_parties/sdk/google/go.yaml +++ b/rules/sinks/third_parties/sdk/google/go.yaml @@ -52,3 +52,10 @@ sinks: - "(?i)(github.com)(/)(GoogleCloudPlatform)(/)(firestore-gorilla-sessions).*" tags: + - id: ThirdParties.SDK.Google.PageSpeedAPI + name: Google Page Speed API + domains: + - "developers.google.com/speed" + patterns: + - "(?i)(google.golang.org)(/)(api)(/)(pagespeedonline).*" + tags: diff --git a/rules/sinks/third_parties/sdk/hashicorp/go.yaml b/rules/sinks/third_parties/sdk/hashicorp/go.yaml index b2da0ac4..74704597 100644 --- a/rules/sinks/third_parties/sdk/hashicorp/go.yaml +++ b/rules/sinks/third_parties/sdk/hashicorp/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "consul.io" patterns: - - "(?i)(github.com)(/)(hashicorp)(/)(consul|terraform-plugin-sdk).*" + - "(?i)(github.com)(/)(hashicorp)(/)(consul|terraform-plugin-sdk|vault).*" tags: \ No newline at end of file diff --git a/rules/sinks/third_parties/sdk/slack/go.yaml b/rules/sinks/third_parties/sdk/slack/go.yaml index 2046afa9..61da7c50 100644 --- a/rules/sinks/third_parties/sdk/slack/go.yaml +++ b/rules/sinks/third_parties/sdk/slack/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "slack.com" patterns: - - "(?i)(github.com)(/)(blend|totvs|gogurgaon|seratch|ericogr|lacework|totvs)(/)(go-sdk/slack|pulumi-slack/sdk|joinslack/api|go-slack-sdk-experimental|pulumi-resource-slack/sdk/go|pulumi-slack/sdk/go|go-sdk/api|pulumi-slack-remover).*" + - "(?i)(github.com)(/)(blend|totvs|gogurgaon|seratch|ericogr|lacework|totvs|slack-go)(/)(slack|go-sdk/slack|pulumi-slack/sdk|joinslack/api|go-slack-sdk-experimental|pulumi-resource-slack/sdk/go|pulumi-slack/sdk/go|go-sdk/api|pulumi-slack-remover).*" tags: From a660dac8e82ccf5d289c706ce7ed31a435c71f43 Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Fri, 1 Dec 2023 12:58:15 +0530 Subject: [PATCH 69/74] go github rule added (#365) --- rules/sinks/third_parties/sdk/github/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/github/go.yaml b/rules/sinks/third_parties/sdk/github/go.yaml index b3e4fac0..86921e20 100644 --- a/rules/sinks/third_parties/sdk/github/go.yaml +++ b/rules/sinks/third_parties/sdk/github/go.yaml @@ -9,5 +9,5 @@ sinks: domains: - "github.com" patterns: - - "(?i)(github.com)(/)(gogs)(/)(git-module).*" + - "(?i)(github.com)(/)(gogs|shurcooL)(/)(git-module|github).*" tags: From 7260d355507e0e3cf4c8b8a89cf591c80333df30 Mon Sep 17 00:00:00 2001 From: Suchakra Sharma Date: Wed, 6 Dec 2023 09:40:41 -0800 Subject: [PATCH 70/74] add tags to link source to collections (#367) * add tags to link source to collections Required for: https://github.com/Privado-Inc/privado-core/pull/862 * remove rule --------- Co-authored-by: Pandurang Patil Co-authored-by: Hitesh Mahajan Co-authored-by: KhemrajSingh Rathore --- rules/collections/android/any.yaml | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/rules/collections/android/any.yaml b/rules/collections/android/any.yaml index 6af90187..54889615 100644 --- a/rules/collections/android/any.yaml +++ b/rules/collections/android/any.yaml @@ -1,43 +1,43 @@ collections: - id: Collections.Android.Form.Email - name: Android app email input + name: Android Form Email patterns: - "(?i)email.*" tags: + sourceId: Data.Sensitive.ContactData.EmailAddress - id: Collections.Android.Form.User - name: Android app username input + name: Android Form User Account patterns: - "(?i)user.*" tags: + sourceId: Data.Sensitive.AccountData.AccountID - id: Collections.Android.Form.Address - name: Address text input Android + name: Android Form Address patterns: - "(?i)address.*" tags: + sourceId: Data.Sensitive.ContactData.Address - id: Collections.Android.Form.PhoneNumber - name: Phone number input Android + name: Android Form Phone Number patterns: - "(?i)phone.*" tags: + sourceId: Data.Sensitive.ContactData.PhoneNumber - id: Collections.Android.Form.ZipCode - name: Zip code input Android + name: Android Form Zip Code patterns: - "(?i)zip.*" tags: + sourceId: Data.Sensitive.ContactData.Address - id: Collections.Android.Form.Password - name: Password input Android + name: Android Form Password patterns: - "(?i)password.*" tags: + sourceId: Data.Sensitive.AccountData.AccountPassword - - id: Collections.Android.Form.Sensitve - name: Miscellaneous sensitive text input Android - patterns: - - ".*(?i)(bio|message|detail|comment).*" - tags: - From f8d4b822f5e79069b71fc5157b3897243e1706a3 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Thu, 7 Dec 2023 16:59:35 +0530 Subject: [PATCH 71/74] refine cookie storage rule (#369) * refine cookie storage rule * refine cookie storage rule --------- Co-authored-by: Hitesh Mahajan --- rules/sinks/storages/cookiemanager/javascript.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml index 4effeac3..972233fe 100644 --- a/rules/sinks/storages/cookiemanager/javascript.yaml +++ b/rules/sinks/storages/cookiemanager/javascript.yaml @@ -9,7 +9,7 @@ sinks: - id: Storages.Web.Cookie.Write name: Web Storage Cookie(Write) patterns: - - "(?i)(.*cookie.*set.*)|(.*setCookie)" + - "(?i)(.*cookie[^{}()]*set.*)|(.*:setcookie)" tags: - id: Storages.Web.Cookie.Delete @@ -48,4 +48,4 @@ sinks: name: Web SessionStorage(Read) patterns: - "(?i)(\\bstorage\\b|sessionstorage)(.*)(getItem)" - tags: \ No newline at end of file + tags: From c0e58bc7538203496f7095dd3e55ef0dc733415d Mon Sep 17 00:00:00 2001 From: Ankit Kumar <118803988+ankit-privado@users.noreply.github.com> Date: Tue, 12 Dec 2023 12:05:46 +0530 Subject: [PATCH 72/74] Go APIHttp Libraries rule (#371) * added go apihttp libraries * go apihttp improvement --- config/systemConfig/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/systemConfig/go.yaml b/config/systemConfig/go.yaml index e773a593..471b1e14 100644 --- a/config/systemConfig/go.yaml +++ b/config/systemConfig/go.yaml @@ -1,6 +1,6 @@ systemConfig: - key: apiHttpLibraries - value: ^(?i)(net/http|github.com/parnurzeal/gorequest|gopkg.in/resty|github.com/gojektech/heimdall/v\\d/httpclient|github.com/levigross/grequests|github.com/PuerkitoBio/rehttp|github.com/machinebox/graphql).* + value: ^(?i)(net/http|github.com/parnurzeal/gorequest|(gopkg.in|github.com/go-resty)/resty|valyala/fasthttp|github.com/gojektech/heimdall/v\\d/httpclient|github.com/levigross/grequests|github.com/PuerkitoBio/rehttp|github.com/machinebox/graphql).* - key: apiSinks value: (?i)(?:url|client|open|request|execute|newCall|load|host|access|list|set|put|post|proceed|trace|patch|Path|send|remove|delete|write|read|postForEntity|call|createCall|createEndpoint|dispatch|invoke|getInput|getOutput|getResponse|do) From 423204aa1c64a219fd6c4739005f0348d7b4ca34 Mon Sep 17 00:00:00 2001 From: Suchakra Sharma Date: Mon, 11 Dec 2023 22:43:48 -0800 Subject: [PATCH 73/74] Add few more android rules (#372) * add more android rules * education rules * Update any.yaml * fix --------- Co-authored-by: Pandurang Patil Co-authored-by: Hitesh Mahajan Co-authored-by: KhemrajSingh Rathore --- rules/collections/android/any.yaml | 46 +++++++++++++++++++++--------- 1 file changed, 33 insertions(+), 13 deletions(-) diff --git a/rules/collections/android/any.yaml b/rules/collections/android/any.yaml index 54889615..9fe9a80b 100644 --- a/rules/collections/android/any.yaml +++ b/rules/collections/android/any.yaml @@ -1,43 +1,63 @@ collections: - id: Collections.Android.Form.Email name: Android Form Email - patterns: - - "(?i)email.*" + patterns: + - ".*(?i)email.*" tags: sourceId: Data.Sensitive.ContactData.EmailAddress - id: Collections.Android.Form.User name: Android Form User Account - patterns: - - "(?i)user.*" + patterns: + - ".*(?i)(user|login).*" tags: sourceId: Data.Sensitive.AccountData.AccountID + - id: Collections.Android.Form.OrderDetails + name: Android Form Order Details + patterns: + - "(?i).*((order|shipping|billing|invoice)(subscription|charge)?[^\\s/(;)#|,=!>]{0,5}(number|code|num|no|id))" + tags: + sourceId: Data.Sensitive.PurchaseData.OrderDetails + + - id: Collections.Android.Form.FirstName + name: Android Form Personal Characterstics + patterns: + - "(?i).*((?:first|given)[^\\s/(;)#|,=!>]{0,5}|full)[_]?name" + tags: + sourceId: Data.Sensitive.PersonalIdentification.FirstName + + - id: Collections.Android.Form.LastName + name: Android Form Personal Characterstics + patterns: + - "(?i).*((?:last|sur(?!geon))[^\\s/(;)#|,=!>]{0,5}name)" + tags: + sourceId: Data.Sensitive.PersonalIdentification.LastName + - id: Collections.Android.Form.Address name: Android Form Address - patterns: - - "(?i)address.*" + patterns: + - ".*(?i)address.*" tags: sourceId: Data.Sensitive.ContactData.Address - id: Collections.Android.Form.PhoneNumber name: Android Form Phone Number - patterns: - - "(?i)phone.*" + patterns: + - ".*(?i)phone.*" tags: sourceId: Data.Sensitive.ContactData.PhoneNumber - id: Collections.Android.Form.ZipCode name: Android Form Zip Code - patterns: - - "(?i)zip.*" + patterns: + - ".*(?i)zip.*" tags: sourceId: Data.Sensitive.ContactData.Address - id: Collections.Android.Form.Password name: Android Form Password - patterns: - - "(?i)password.*" + patterns: + - ".*(?i)password.*" tags: sourceId: Data.Sensitive.AccountData.AccountPassword - From 719118aba3bc4ab3eb91b4c12a69ffa4c16c1d0e Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Mon, 18 Dec 2023 14:39:41 +0530 Subject: [PATCH 74/74] fix java google pubsub --- rules/sinks/third_parties/sdk/google/java.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sinks/third_parties/sdk/google/java.yaml b/rules/sinks/third_parties/sdk/google/java.yaml index a5545b19..fa092214 100644 --- a/rules/sinks/third_parties/sdk/google/java.yaml +++ b/rules/sinks/third_parties/sdk/google/java.yaml @@ -97,7 +97,7 @@ sinks: domains: - "cloud.google.com/pubsub" patterns: - - "(?i)(com[.]google[.]cloud[.]pubsub|com[.]google[.]api[.]client).*" + - "(?i)(com[.]google[.]cloud[.]pubsub|com[.]google[.]pubsub).*" tags: - id: ThirdParties.SDK.Google.Bigquery