Documentation
¶
Overview ¶
Package aws provides AWS-related secret detectors.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AccessKeyID ¶
type AccessKeyID struct{}
AccessKeyID detects AWS Access Key IDs.
func (*AccessKeyID) Description ¶
func (d *AccessKeyID) Description() string
Description returns a human-readable description of the detector.
func (*AccessKeyID) ID ¶
func (d *AccessKeyID) ID() string
ID returns the unique identifier of the AWS Access Key ID detector.
func (*AccessKeyID) Keywords ¶
func (d *AccessKeyID) Keywords() []string
Keywords returns the Aho-Corasick pre-filter keywords for detection.
func (*AccessKeyID) Scan ¶
func (d *AccessKeyID) Scan(_ context.Context, data []byte) []detector.RawFinding
Scan searches the data for AWS Access Key ID patterns.
When a co-located AWS Secret Access Key is found within a bounded window of an Access Key ID, it is attached to the finding via RawV2 so the AWS verifier can perform a live STS check. RawV2 is consumed only in-memory by the verifier and is never serialized into output, so the secret key is never exposed in a report.
func (*AccessKeyID) Severity ¶
func (d *AccessKeyID) Severity() finding.Severity
Severity returns the default severity for AWS Access Key ID findings.
Source Files