Documentation
¶
Overview ¶
Package databricks provides a verifier for Databricks personal access tokens. A Databricks PAT is workspace-scoped and authenticates only against its own workspace host (for example https://dbc-xxxx.cloud.databricks.com), never the account-level host. The verifier therefore calls the workspace SCIM API GET /api/2.0/preview/scim/v2/Me on the workspace host provided by the detector via ExtraData["host"]; when no host is available it returns an indeterminate (format-only) result rather than making a wrong-host call.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Verifier ¶
type Verifier struct {
// contains filtered or unexported fields
}
Verifier checks whether a Databricks personal access token is active by calling the Databricks SCIM API. It NEVER logs or persists raw token values.
func (*Verifier) Verify ¶
func (v *Verifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
Verify checks if the detected Databricks token is valid/active. Raw contains the token value; the workspace host is read from ExtraData["host"]. Without a workspace host the token cannot be verified against the correct instance, so the result is indeterminate (unverified).
Source Files