Documentation
¶
Overview ¶
Package azure provides verifiers for Azure secrets. The storage verifier performs format validation on Azure Storage connection strings.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EntraVerifier ¶
type EntraVerifier struct{}
EntraVerifier validates Azure Entra (formerly Azure AD) client secrets by checking format compliance. It NEVER logs or persists raw secret values.
Note: This is a format-check verifier; it performs no live verification. The result is therefore always StatusUnverified. Live verification would require an OAuth2 client credentials flow with the associated client_id and tenant_id, which are not available from the secret alone.
func (*EntraVerifier) Type ¶
func (v *EntraVerifier) Type() string
Type returns the detector ID this verifier handles.
func (*EntraVerifier) Verify ¶
func (v *EntraVerifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify checks if the detected Azure Entra client secret has a valid format. Raw contains the secret value.
type StorageVerifier ¶
type StorageVerifier struct{}
StorageVerifier validates Azure Storage connection strings by checking that the required fields (AccountName, AccountKey) are present and the AccountKey is valid base64. It NEVER logs or persists raw key values.
Note: This is a format-check verifier; it performs no live verification. The result is therefore always StatusUnverified. Live verification would require the Azure SDK to perform HMAC-SHA256 signed requests.
func (*StorageVerifier) Type ¶
func (v *StorageVerifier) Type() string
Type returns the detector ID this verifier handles.
func (*StorageVerifier) Verify ¶
func (v *StorageVerifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify checks if the detected Azure Storage connection string has valid format. Raw contains the full connection string.
Source Files