id: dockerhub-pat

info:
  name: Docker Hub Personal Access Token
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/dockerhub.yml
    - https://docs.docker.com/security/for-developers/access-tokens/
  metadata:
    verified: true
  tags: docker,keys,file

file:
  - extensions:
      - all

    extractors:
      - type: regex
        part: body
        regex:
          - \b(dckr_pat_[a-zA-Z0-9_-]{27})(?:$|[^a-zA-Z0-9_-])
# digest: 490a004630440220175f30c6171088a3863f161135e8b56541ddc6b6ed8328120271e658b59e7e4e02206d96a7ae3a65295ca8a95457643a51c58fb86fb26a31378d3d50ed85e73e0f8d:922c64590222798bb761d5b6d8e72950