microsoft / sarif-pattern-matcher

Quality domain agnostic regular expression pattern matcher that persists results to SARIF
MIT License
39 stars 18 forks source link

Add base64-encoding helper to assist with certain credential FP elimination. #654

Closed michaelcfanning closed 2 years ago

michaelcfanning commented 2 years ago

Introduce a new helper that prevents inadvertent match against base64-encoded strings which encode text strings rather than random sequences of bytes.

We could use a unit-test for this. Anyone want to jump in?