Skip to content

Commit 6e3d4ec

Browse files
committed
Updated README.md
1 parent c4194d5 commit 6e3d4ec

File tree

2 files changed

+64
-0
lines changed

2 files changed

+64
-0
lines changed

README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -163,5 +163,7 @@ Custom Secret Scanning Patterns repository.
163163

164164
- Vercel OAuth client secrets
165165

166+
- MongoDB connection string
167+
166168
- UUIDv4 Bearer token (maybe Heroku)
167169

vendors/README.md

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -924,6 +924,68 @@ _version: v0.1_
924924

925925
</details>
926926

927+
## MongoDB connection string
928+
929+
930+
931+
_version: v0.1_
932+
933+
934+
935+
<details>
936+
<summary>Pattern Format</summary>
937+
938+
```regex
939+
mongodb\+srv://[^'"<>/:@\s\x00-\x08]+:[^'"<>/@\s\x00-\x08]+@[^/\s\x00-\x08]+\S*
940+
```
941+
942+
</details>
943+
944+
<details>
945+
<summary>Start Pattern</summary>
946+
947+
```regex
948+
\A|\b
949+
```
950+
951+
</details><details>
952+
<summary>End Pattern</summary>
953+
954+
```regex
955+
\z|\s|['"`]
956+
```
957+
958+
</details>
959+
960+
<details>
961+
<summary>Additional Matches</summary>
962+
963+
Add these additional matches to the [Secret Scanning Custom Pattern](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#example-of-a-custom-pattern-specified-using-additional-requirements).
964+
965+
966+
- Not Match:
967+
968+
```regex
969+
^mongodb\+srv://(test-)?user:(test-)?pass(word)?@
970+
```
971+
- Not Match:
972+
973+
```regex
974+
^mongodb\+srv://%s:%s@
975+
```
976+
- Not Match:
977+
978+
```regex
979+
^mongodb\+srv://auser:apass@
980+
```
981+
- Not Match:
982+
983+
```regex
984+
^mongodb\+srv://b\*b%40f3tt%3D:%244to%40L8%3DMC@test3.test.build.10gen.cc/mydb%3F\?replicaSet=repl0
985+
```
986+
987+
</details>
988+
927989
## UUIDv4 Bearer token (maybe Heroku)
928990

929991

0 commit comments

Comments
 (0)