From 8c87194f0a6b194bc5d340c8a65bd99a3132d973 Mon Sep 17 00:00:00 2001
From: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Date: Thu, 25 Jul 2024 12:49:55 +0500
Subject: [PATCH] fix(secret): update length of `hugging-face-access-token`
 (#7216)

---
 pkg/fanal/secret/builtin-rules.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
index 6d0c0eacfdcd..cada98d6681a 100644
--- a/pkg/fanal/secret/builtin-rules.go
+++ b/pkg/fanal/secret/builtin-rules.go
@@ -165,7 +165,7 @@ var builtinRules = []Rule{
 		Category: CategoryHuggingFace,
 		Severity: "CRITICAL",
 		Title:    "Hugging Face Access Token",
-		Regex:    MustCompile(`hf_[A-Za-z0-9]{39}`),
+		Regex:    MustCompile(`hf_[A-Za-z0-9]{34,40}`),
 		Keywords: []string{"hf_"},
 	},
 	{