add token and vendor exclusion rule

Privado-Inc · Oct 29, 2024 · b9f5f9f · b9f5f9f
1 parent cf209ed
commit b9f5f9f
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/config/exclusions/go.yaml b/config/exclusions/go.yaml
@@ -3,3 +3,8 @@ exclusions:
     name: Exclude test source code
     patterns:
       - '.*_test(s)?.*'
+
+  - id: Exclusions.ExternalModules
+    name: Exclude external modules
+    patterns:
+      - '(?i).*vendor(s)?/.*'
diff --git a/rules/sources/online_identifiers.yaml b/rules/sources/online_identifiers.yaml
@@ -58,3 +58,13 @@ sources:
       - "(?i)idfa|idfv|aaid|advertising[^\\s/(;)#|,=!>]{0,5}id|gps[^\\s/(;)#|,=!>]{0,5}adid"
     tags:
       law: GDPR
+
+  - id: Data.Sensitive.OnlineIdentifiers.Token
+    name: Token
+    category: Online Identifiers
+    isSensitive: False
+    sensitivity: medium
+    patterns:
+      - "((?i)(auth|session|access|bearer|jwt|recaptcha|user|useraccess)?token[s]?)"
+    tags:
+      law: GDPR