module

Autobot::Config::SecurityValidator

Inherits Autobot::Config::ValidatorCommon

Security-focused configuration validator Checks for critical security issues like plaintext secrets, insecure permissions, etc.

Constants

SECRET_PATTERNS = [/sk-ant-[A-Za-z0-9_-]{20,}/, /sk-[A-Za-z0-9]{20,}/, /xoxb-[A-Za-z0-9-]{20,}/, /xapp-[A-Za-z0-9-]{20,}/, /\d{9,}:[A-Za-z0-9_-]{35}/, /AIzaSy[A-Za-z0-9_-]{33}/, /sk-[a-z0-9]{32}/, /gsk_[A-Za-z0-9]{20,}/, /AKIA[A-Z0-9]{16}/]

Patterns for detecting plaintext secrets in config files

Class methods

validate(config : Config, config_path : Path) : Array(Issue)

Validate security configuration

Source