Skip to content

Add Clojars and Databricks secret detectors#2150

Open
skbobo178-cmyk wants to merge 2 commits into
google:mainfrom
skbobo178-cmyk:prp-secret-detectors
Open

Add Clojars and Databricks secret detectors#2150
skbobo178-cmyk wants to merge 2 commits into
google:mainfrom
skbobo178-cmyk:prp-secret-detectors

Conversation

@skbobo178-cmyk

Copy link
Copy Markdown

Summary

Adds Veles secret detectors for two accepted OSV-SCALIBR Patch Rewards Program requests:

Both detectors use local regex-only matching and fake test tokens. No active validation or network calls are performed.

Test Plan

go test ./veles/secrets/clojars/... ./veles/secrets/databrickspat/... ./extractor/filesystem/list/...
go test ./veles/secrets/... ./extractor/filesystem/list/...

Notes

  • The Clojars detector follows the issue's strict token format: CLOJARS_ + 60 hex characters.
  • The Databricks detector intentionally uses a conservative known scanner-style pattern to reduce false positives: dapi + 32 lowercase hex characters, with optional -<digit> suffix.

Refs #1749
Refs #1719

@google-cla

google-cla Bot commented May 26, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@skbobo178-cmyk skbobo178-cmyk force-pushed the prp-secret-detectors branch from 67e71a9 to 55c87fa Compare May 26, 2026 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant