fix(secret): AWS Secret Access Key must include only secrets with aws text. (aquasecurity#5901)

DmitriyLewen · web-flow · commit 958e1f11f770 · 2024-01-09T11:51:30.000Z
diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
@@ -78,7 +78,7 @@ const (
 	startSecret = `(^|\s+)`
 	endSecret   = `(\s+|$)`
 
-	aws = `(aws)?_?`
+	aws = `aws_?`
 )
 
 // This function is exported for trivy-plugin-aqua purposes only

Original file line number	Diff line number	Diff line change
`@@ -78,7 +78,7 @@ const (`
`78`	`78`	startSecret = `(^\|\s+)`
`79`	`79`	endSecret = `(\s+\|$)`
`80`	`80`
`81`		- aws = `(aws)?_?`
	`81`	+ aws = `aws_?`
`82`	`82`	`)`
`83`	`83`
`84`	`84`	`// This function is exported for trivy-plugin-aqua purposes only`