Yelp / detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.
Apache License 2.0
3.58k stars 448 forks source link

Azure Devops PAT is not detecting #577

Open Grenston opened 2 years ago

Grenston commented 2 years ago

I am using this tool with azure devops pipeline.. but the tool does not detect Azure devops PAT as a secret

ttibbel commented 1 year ago

Hi @Grenston, thanks for reporting this. Can you please provide an example PAT that we can use to reproduce this issue?

KBiru commented 1 year ago

Hi @ttibbel same thing happening on my end, some pats are getting detected and some are not, not able to provide any details of the PAT for obvious reasons, but I think it is because of the entropy value in configuration, actually the detection of some of the pats are as Base64 High Entropy String, not as azure pat specifically.