fix(secret): use .eyJ keyword for JWT secret (aquasecurity#7410)

giantswarm · Dec 20, 2024 · 5a3e397 · 5a3e397
1 parent 3c2d7a5
commit 5a3e397
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
@@ -604,7 +604,7 @@ var builtinRules = []Rule{
 		Title:    "JWT token",
 		Severity: "MEDIUM",
 		Regex:    MustCompile(`ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?`),
-		Keywords: []string{"jwt"},
+		Keywords: []string{".eyJ"},
 	},
 	{
 		ID:       "linear-api-token",