Fix Honeycomb detector with both key formats (#777)

trufflesecurity · Sep 2, 2022 · d7123c6 · d7123c6
1 parent 65a7855
commit d7123c6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/detectors/honeycomb/honeycomb.go b/pkg/detectors/honeycomb/honeycomb.go
@@ -20,7 +20,8 @@ var (
 	client = common.SaneHttpClient()
 
 	// Make sure that your group is surrounded in boundary characters such as below to reduce false positives.
-	keyPat = regexp.MustCompile(detectors.PrefixRegex([]string{"Honeycomb"}) + `\b([0-9a-zA-Z]{22})\b`)
+	// Older + Newer API key format. See pull#687 for discussion
+	keyPat = regexp.MustCompile(detectors.PrefixRegex([]string{"Honeycomb"}) + `\b([0-9a-f]{32}|[0-9a-zA-Z]{22})\b`)
 )
 
 // Keywords are used for efficiently pre-filtering chunks.