From 1d323635af827ab38f4e2f8d796c1792506debfa Mon Sep 17 00:00:00 2001 From: mc <42146119+mchammer01@users.noreply.github.com> Date: Wed, 17 Apr 2024 09:09:21 +0100 Subject: [PATCH] Improve docs about partner pattern program (#50021) Co-authored-by: github-actions --- .../security/regular-expression-guidance.png | Bin 0 -> 21146 bytes .../secret-scanning-partner-program.md | 16 +++++++++++----- 2 files changed, 11 insertions(+), 5 deletions(-) create mode 100644 assets/images/help/security/regular-expression-guidance.png diff --git a/assets/images/help/security/regular-expression-guidance.png b/assets/images/help/security/regular-expression-guidance.png new file mode 100644 index 0000000000000000000000000000000000000000..7f472d666802068e24b250326c9cfb15d13b9d92 GIT binary patch literal 21146 zcmY(q1yGdT`#($yOCv~0$I@NW-Ak7s%_7|(9n#$*-6_%_rF0{bf)Wx^(p?ho@%jGe zH}g7!>?~*5<-X6ku1{Uj8fpsI7-Sd-2ng6pin3Y=2uS_laUMDn_`m&2tONK4aZxmI zM?fHA`1ggVq(y%Wo<#FdQk6s7LBT_(VA4<0S3^M15>k?t((zt6_=4%3sNa62{@t~> ziLWR*VNgYc242xJXf?P|doB1qy38u*?>8=o8(i8xLCBk8m4-lz~*{`Wzg zAZ4)3={obiKQrZhB*I>YcRwr>|5RfVbI8ieL!r>=PTc1LA6KO3XEcJgbwy5ID4EAQuM8_VM%@+@-x%m-Iz&OfS z!>V7C#?7E5_TTlCVd%R&Sfrz+U1D8s_nbL&t&lM{FH|T-!zwpud|jnqyG1W17SI!d zs*phLdXy&-BrYM5pDN~eNe_hzIR6qA5qVBYz^0p-naRw|3@)>Nt;zS;5&|CAKhvd~ zWA6zDDz(e+98aFH>ao50gmtjl=6Sdz)cS3@RAspnI}ZyJ)16A>&3;Cw-`%zA4|zK~ z7Ufy~2A{zI23FQs@6DX0lUF)AO@a5f@y`YAG!{QOzG|{b-X3V6&?;r6sjGT zNcON(oM@D(ASY*wp7 Hjb26kz^a)akcxcFJ`8DZpW~}z`)*cj@GXRt5{Z<7*Ft* zqGLeNV50NM=HP1MrDea~eMY-Z$0dF!SX-E+Q7WVQmN2PQ${oW`u*v9OFf&*B!$S(f;vuqPV?v?`)02(X>M2qs zEN?c-lyb!be7C>lZj#sZ@zSzNy5fc4xEK6Qh9F9-D)I`ghwXu5w)U){n|+*uGl&!Lv{B6*tLrzFPo+l7xE{y>RA!RID{6t~_&4A1=^$&*I3 zidi(IM&zr=h)>QUxc@uAEqKRI&bg~yB&lHftZ1LZ13&0hFLWGr`duHd)pkAjUL7ur z`JP85B&2s#z`xIAon{z{9}(M1$`m>}JFxrM0X{6ZVHilq5JZDve^f z!^^Y*9=)hUhf|HmGto^TyW1O%nZg`KO-zIG#rGn`osSzS*#ZgWRg2RyxVd(N@7Z6K z6`F4re{SaO^9-Q2qx{tsB=Odz6CByY*Vfj587av&M&B~}oP^?vC!ri;T(F3Xn;a&P z^2&Q7OwmZbcRiiknJV@{{nhO}dPjKBx0=q1rcC_?CdKAW7OIm~>*n2=?o zKqeBW$As9DSdL@&?TXhg9|ccbXlDwfDO`c7WBDnK{ASzcrC<{MCh5)xeG{K>MO_7p z5)R{b9VgUm#Ri)xS}kv|ZPO0Z*Vdt&Pg7EY@k0h0Mj#m-#t|i+e!2^eDpx+lL`NPS+5LAoqUgn}c0U6WV|Q3sSbx9l zqhw4>j1du%Gqtb}>pYqb5zSZ~F*ogvamSlve6Jmp9_dgVN>L_GY4Vkz$ADic_4IDL z=?(Ci;V{q$mINl#I($`NN=*g!?r5{;G7(t#WHdk8Jy}O}q3#w^yGbY?1T%=Y!P$~- zz4s&Mni6v=mkWJ@eF*kRnQHc_--OuJ>_>ytsQxdr`Oj^GQ`~>ZbuTsqxIDU2?Ylo!>HIqY^l@Ai7K+cOQ8AJS4%qF#g zFz{!kE6B)*oDc&sPdvb|XoixSuPKdrOFZRgSI}djOr-3486>7wMC2zn!C|;-GSp#D zQYS}OUAtv}&Vz!flnSNa`sH_ojf-23-tKionFMR)?5#KP{lj3+t7Q(Vt%B6B_uR%v zs{N92sH|SCNx)L8>+Rguc(zZ(%VFwLSX>TuQ%+8f)(ThT-iYSQmpdo_cVzHT6OWMM z8$=?+Ja#k)clpaT3)t(lzyCnpq1U}cNl8g5g44cqmWZJb8;?JAQPq79E0_p8i8cNB zvVMKpYb9U|Eza0MkA|Qq6gdTQxV61q?Ds;7Fb~a}!V#@wz2;g#I@-uINoysluRodq zENLne5s+H{PB%?8Ffc$PswL+%Q?CC0t6j2r0cO14cCMFz<3iZlLpL&RR3Nq@RFTr~ z%}@eG7&R;;)jB^wZwRyf%>fw|6|RU>%482{1$JIKdV1;EUh4t3f6AkY>#M%5VLvb{ ze0GYro3B}}&@7J1LLqf3`eHqIo%MAI(N(wZJlAenfO3KQ& zYq&ubGEX9Lsmci9w-9Dm3a;;wX(*N_tlP*X%EMuC^OZ4cX6i)VX$p_Ai0nFPm0BCGK=TJNaO z<6pMuRyKNyiuIW?Y#oMOrvp zny-jR{vT#{k@+7ce-gTe10}HjmJ{vH<*_pfP_XfQ0uMlipc}l?l_KIW+Bre#WJZ4x zbhSk*CiX?;JqM4dJjZCu=^ndut;v^=i;@d~v*QA+%GL9UI1hV!r75E_Nk$x>^Jb;O)Due3-v7Szpl^1MN1Z=+= z_8FKIGxOJPvq-U?^m!$~$c5ZW44dt`Zok*Q{+4sIU|(A(YiVK8+uK`H>5KxL^QOt7Kcl14R-tIe`dxS5{<$U(~FVc#*^_s^|HEuB`;TF zGFj8&!WA`flfs|^Rn01KFSzgF#jAZzCFwX{lZ%%dOs*(aFGI(|!b0+=&@h3FU-_Hg z2~6rG(S9ar|*bsC;w~06Xk?cU!8*_&%kGOe|yp6pXH?2CVKh9Qt(&d z_jb=cvm%!fS<>Wp@4nYt4w-ogI{eT;{Qe6tEf#{z3f(FqIIWHCYtMwKDF(5b1=Wc>7h`;`t0q%LbraMJu90_*_m)KwY4ym@k6HY%H1{z~Jcjue! z=hJWf>mE!-Y>Si)zrR~D5WO7?AF!RIXQz>I&Y2J%XE$ z{zFNop5xW0IIiT+inUgm* z;CUtR<%8%E;vi-lxVXJ+d_Ka`i z$c41@)jQlam8qO=(R{O(71&;lxZEgcK?;LM z6^Q)*REnZIco8The7Wt2S*xI}7T^;XlYfblpMNH4n`NB0X6KtX+hbYNq4K>~%_G-6 z%Q8;$Coi$%TZ3B6xM3$j)4&^sKQ!|D-vEVLySQ(?_uw9)zZP+LOwJhi5OTUb6xt$D!eUjL6X-f%m|Gd=$0){19b2rU?zw>2@P zY$0u48g_>)ZPMa8zP<^1@^xsql(Wm1t3B?uA@;h!uon#neIYf>tyZ}iV&4brRMoik0iP|%6OLmJ$}$$g1` zzfy({cM#@S0LrT6(!g!TMXW*--rn2AIF@I}Yc)zZYG}jMl`HJ2Wra22GLIl%(k_JL z98WGZUF}!e$xK;?eL|4pw!x~wlbn}#=%mKPr~j8kItlX2EmD)ilw0J*)OLlq zS<)!CZpT<`FG4QdSv(eI=0g5SN)dzcd@Zgxh!ef^B&opN;+FIwm&4vw4o0YCh6O2B_i@*@$oDfCHqIT zIKgESkA&O?bnhbNsTT$^ap(n%TFmQ-Q7l=2!J5k-ZE8}r0iS@E%0)K#zDkx$P`H=zLo+x(3})5 zC|02vMwwr>Q%`B)7{M9K3S@ym>hhwM(XI$UO?$r>>(dx)y!NKir+XgXH&NAbQOwW& zq(}vN$aLKHZUED7xirfEC#O20qa+7xY!AnFrhzr{ zmh*Z=WHg5wUqD<^)q zQpT-d+U;$VY0$mry7F01Dg|z)3mSA1t&WK>qC*p#{aaXp0BQ4znEiGaa zy;swKTwq`)T=ky4j=ohf-7~IlMn$U3h^L2rUSgJluwqs3-B~8Db-V7)eAh#>sHAY{ zfdymtr?Vu83E?SC6YT6^@VRpoPsC}80n__$9;Ipi@QFqmvhDxPd7<5h1eN8|c@kUI@Et_zF znX1VT8m42rXY&KuNqijSPD6Tez=Z#QMv2b{gUCW<3d@}$)st6=x_L>~J@MFQja zU3gffli$^{mz52&)7qbDgd4>XF1^qGn7Rf~hmbN*M%#kYm6@v%VM+V6@{Z}UxL!b>(PPI$=W+dbeEkWVx)xgdQY z&woM%y)aT(=PDI#jI~ASZ&VN<`K^D6i>bJ7d)`l)$r<7@+uesrQzn}Z`^uS7#Y zNLv#RN~%!OZkrj|no40pKNdD&{4(4q5`s@SQVfqCGyaV8RO#kad8SO&N3P44jv%P` zEB|4Ql&;^|xS;JzAyPgYydwRsPg*N6Nje&u&V;`Jy}RHIj_#0WWG@!^x~BJn%-(B} z?^|V0Q#sfms>;e*UMN2+96{kf&gSg8d%8!o$DT2PGOx)vA^w-mROExzw;UmVQ70si z7NZ;bYf6)V3tj17psg`FjgBNQG|x&6R`TDO zG9aVI{kd*TLm<6yuCnD1M5S5M53E)mKqIrMDz9z*F5?r7$#_TI*yRnk*wE?IOWpw1Va{WwWveDvuWp5v-qZ%86#rQ zsA}gpI++b=(5r~3ZeNyR6u0q`k~cZv73Ll!PxYu`1OdaI_|+5ILO-Nyilw=rXDS|f zUyVy1+EiYQ`AY=EL0@?YQDsMZ(FM%gKruQQ)-wF%oF>o)WZF)-s3@(}-N|9kPMWog zW*I4|g}p4jE0Y&E%f-BO-s_4#@g{kZBa6w!ovOyVl zLp6YO;jH;F{mQDj?=hXw(V8wmGOf2j{S-Bt!(`;X)cl(@0~Uo;#$?rKsRpl3XgG%* z-~Ua8oS+t(yH(O(lz{!JgO%l=h!CQikBrglxVj{km0bSKwDiSNYrjMUqvmc&sv%>z zifrE85(9zO)o__Z18mAZIa#2kDhId!qN{KrHISQVjjzec%Cu?GMP-kx8qq2yyuc`x zC#C2-34%q!aOLlsH>b2cGPXlG_sJu?X!=_6I=wX89e8VbL@A&2?U{A?WCxBvGI_7} zL-+^bZ_zH!qO zOnVTed|}QM)RXr`$!}?QT)AbaT(&exqDmNjg)39vhf19r&~ZDz%6 z!Sy?mUmq#L#@?D?a_S9AHIJg|v|5u5$In;9z=GiL5^E(6nSoSDeJ*uulC-h11S6w@ z0aA=YCc^;?pr+<#DO{i3xSFI0vWPck{;{2D^+Fl-qPWJ#9<5KqFY|kzNqZRh_;zt+ z>V#ULw>1ih5+a&Z;bi2Q<4ioQ&v2(Da%y&7F**ODfwG?oVCa*x@`%{3%LRLq`)SAh z1X|`*4$xEbnY?rH&^+A@#Px`B_M;i|g5h|%ht z7nVhgDaGf1nui?=os8R1Y#O@K_re39teQQQL;(bGwf%Tzmd|m4F!{~t+m1ShA4&{% z+wm|IR4Y=4P^Lb9ZU*$jA1E_(9m}8itPd+@E~Mvizq8UQB%FU;Z)+RfbNHktj||p0pm+| zL0`YP-hEn|0x7~-gN5d~JC+05S{WefvMQ;HyRgvM6(^G2$3ReFhszAkcL!hfy3eX` zJ^Mddjn(sQ86$DV5pX;2KvnQN-@#9U(K9l}9yNX~ddgXaM&+-8szx;Vb3*j&t8>ub zMd0%ke|iT?QhN_$Gj30-CHelaXZq;d7l94L)wvEAe65<9=BV}Vx5#)>e;%o^>EFFn zjwv(~FB!YDYsm_dCko;nq<-RhPviVx!hF@c2G@u2!Lgii)~B zPR&a#8t_LMT0wKTZ#o=i&5m}!p4w)(&P9_j!h^xw*rO>;X=>|Ki9885hV(4<#JMGI z=H$SsQufdhBM*-jnq#dJv_E9K1$d9W^a(czx)`n8@$|p%uU6){@wJ}1eCccgM*pvR z%g8WhIOa{P#V;T&kEOFOLmq*=u$`)3Qx<1Bs2+6Hv7&S}xYidrb+`**G`#{)8(xlH zQV)FR%xLXhcdF!p)P85n-Py_>tZ48<3@L+F7n<<|5%YL6XUoLa<){pLapFA zYj7wG3=9PKcq0<0-*n6r$?m-7hNl6b; z@VI^WnRa?{1CNn&1LN>NqJ&_q3j4W*Jo%mnna%UHHR8;iB%aEmM2#*I3%Km)jn)&V#HG*TUm-WOVczZ*ypE{ULt&%8Uf6|PQW`%Rr=U; zf*Uz9*~dQ;Caf{0<-LAk1nfs3&)^wLvZ!+;MeOIz0HYX$31srX%FV|TJPO6W;zaQn zhh&5TKZQ&n=gDnfSJ{m;{&7vlJ$yzfIf82B`*ga_atJ4yLqcN3vtTXfWk@yEW?NCL zmFqgkfrgP0jJhG?qv2WB)9=ae16+{LO*QPnz36(pKN56YXmZ;e#Y=5O&-uD*_x8BX z4AW->!wi&tyq_stxeN*(8kytSf>l43<%(K&(uw^!*x6OjkVf!)K=?z+MBzbnRc%x| zMRq?+=ivjKsptIMgXifaL+lW++YY*ZHvhkH2@-;ENU6!~Rdkl*WrDznj{N@=?Y;vk z2ZwzS`uOGjJDx!$9SfXspf0pWrS|;iTasW|^#XB};OWz+1Ox!KkvW7r{9j(>{{k)l z|GWywu>8N*{$HR4>;IPi|FbVGgo|kWV)wTMP&AoMI)b*gHlUkE$Hh4SNS9isN+x9U zqt3kX^|)b+6UFoA*;!e3vAO@`?P{5+8*LGV7A301QCaf}J~*wAkPt1c^c(+LSFd=x z9@lweFJR%s5>Nsm)e2~MpPW~m82*K61T$edBF&D&0Ya%F8BADS!kNRv!#hCem7z-G zko>1be^Uajyy{Wk1rw@Su14WB(r2`>49q{!s7D(4tN*2XM&p;{2n57}oCm`)Qi`Ng zBi3*j2!8(j3F>ZQR1~@*nP`QcKsQTDYHGX|Nb>Yyue+&j>B}s9d4$bOMDR;oYQbDP zv00xVa`C)vpnBnA_Ioh?sC|#)J;u_DOgvdRxoVRy3!{Vo-YGJLb>JuG#RL6Ap7xAz zU@CcLviHQz_cN84SQt-)NI0ydv{X((0gWC}FdP;oA_rE!twesG}}R|K-_ zbOd%Yg342!gF^i2^A~$qRcdWhW9@=jg>P$4Zr;_m3}=%g?~MzmKehe-H)9G&l#4_6 zzkgh6#ZfLkwvFrek->3la!>qUe(NgrM&fMK$`N;-J`6g1_^#dDa#i*CryKezA9qn; z^}%sMF!eX@%E?XeU!l%BgBj<Hm96p{a z>2x6)ai%6c;F5d=DT(R|grhWZnl}?;R$>~L<%~lcLG72yYgQF9t5M(bA6`G4S)1NV$!mR` zBQBQk91=Y};N~z)pioNONzR+ynhX;dGIjFtcY|-u;{1KQiZZJw ziG!iY`}>QMeHmQluMx8Uy_FIT)YUQBnYy~VBeh4A6~>|ORScb-LqS~8wWhxC`3bW8 zN6-E|n&vBP?1{xoMB=W4k8B*bi{@0HdNh8zl&((SOo%W1wdm-p6+OM^`f|&T%fxXS z@bE0y?Tw3xcqgM};FXM}y>&u7n-_J&5qTyFmsv1ZG*5!n(vmq&^hr&}AuTqrO+I`W z(C~iH`L$;3_sHdRl!H&I{r72WFl z{q^?UqF)46V4L<@=I?i7TO*I>U+6gb79YkAUk{Shs6t6Gk>nNf8>G6WF&{(q9 z^EJl6-Eskb9SG^2A1n$MU=CO&is=ntP`j@uO8l8wy=zLiF%9srUHKG}14|gY3(Orq zD*bx!J`sMcmkpVG|58imrN_y0tgH}iA-7?lhdlP1MZvtsmESnx#z$su^D09;AB&!2 zc~K{ns|np&EZ=$7>aOR#d&Kwhet8z6{Jq+u!iI;26+VU#*+D6=-*dJBBp1!IQ-6>E z6AL9=5Tg0qAM||;D1jg>)PY!5T6&WT8CC}6t}2ChE3;O7LG0u25y2Fv0lYuoQ&@@L zIDR9WyW1OiEl7gpWzy0=|1)y1<-yk}aXsX2G#hh2^S;*e+xs!`2%&(O7m-f-+7 z(PRJR&vA(?e)0_u0T#ZeGN|PVFEhz9kBjQ+CYM{sLP0DB6*GZ&tmeolZ%Y#>_vZnq*M~#pCCzI)~I$U1BHX9#dj+Eh+tT2Tf^^o%C6l?S9pHw z$S-WCE*gnD^;OD4@3>so`|)O2Szf2VmX!@tfi4k5eLMLrAZrb5O>VBui6hl2j5nHV zo0ySZ4MG&)1s}Ynq@tXn7geC=qT=GeFed&*O(R6oU?pGGPx1#12F(*Ns0r4E@QH}@ ztV9|A%cEA~GJo84COJEMvCdp(lkdS@Qc)g+FyH0>7isk(|Ccs{ftx6k z1o7~*qd=&#?M=1L_NrZDBbb%N9PPa2GCN@?f zp3I8BIWE{VUDF8tQXu`0S0NkGwafTW&9#erF(tQ!td`dFk9tc+SjNADF^RikTg7gy zO(tk;^rTM}O5m^4Gx!2Nk5wTr2R#JIB*g7^=&8ZhIxfCWm^K*rz10b&K#~Qb3fBEs zfH;+uP+5E9;;;-l#rk;xGzO8YcR8^wsx}u~w$ml@@noR)j_p=i!643Za&kAR&edUI zTT`z9XUq|B%z7CA`qklQ1A`JsNc{r_!(&Q8z^fD^ZgE_kE3qY*UixUz7!iavs&)8u zVKDx=SnbZaEy{50DTaDV@W+oIW0*UDOnSaI&)JV$5_aC?v@FcV_7SKYzF#UTqV9Y* zcwc`diTO$(z0w(g97qvM%$Xg-Wc%ra?cSDeWp6HG-!oI>YLSxg<)V|^M~V@2KO($oD7?$ zKe3*0X1?&;O|#~9P@j+;;IvZBuIh-oIfK|;diBiKAn<6We;=eKQ0xpDLAedZz-!0E z;CU;pWd)-JnUU63ASwnR5IuYT{8f5dj*xpq*<9l^*;fQrst_0~lSl5GX1r)HG^uMN zsw=D#*HYd+ynpf|P!225LY`ErCW|dIOac`eaqG?};O>eVc8MceiXFpSimUL}A z{5>-Lrv(mykX%hWk-I2L=Bn_A+3$Epg%*~b?-|52i1e{%)(H%il$6kU3h&Vfi^|6k zja526mc~)ia!0-Ax*w56H)W`ATxLBvIr)%2Oojw-?by6&Q2f(%Vpm-Ru`kffU^I|a z{ofK!;29+=vNO+q=z3YuC5o(zp(%!x0?A`^>@lIKar28f>K7v zJlsg%eIgcYJrX+tMzzlzJW|5Tsz#b&7GI;&OHWR1JRCIGYeDDZ4?qdHJvXSg2=_xx zMZd52+?zwA^rmiNh<`IXNA*_2oX>7o9dHDlAv){+XIa8n&jsT8>Fm&zLAJ}!{&ZvH zPzTCaDpDGy|1D4K`A2JMjGZh7B>t1fNooSXxggb%MiH{;3&g6g@uQL;h(&Wu!_=Dz z=ZYquakZ$7Ugax4rJztXpdJA&#HR>Ki^9M^Q+y{1F9P@Y{iKQiiQIJPh)SjAU3_)!7y*R3n$5Htf{Fk`d<_d;7(<5nM*r3 zu$7V%5QL)OdDeYP1i+h~o_=QqbSVv3znZ}ep*N*T101qW#%+OutD%(^J|vW@V_T>l zc|SH)?cjv{*<}sM^d9hDG=kC$>L4J@HzY&)_=o$iPkx7bA|pJK86g(XBsr>tdZt$x zzpRuZ=)O{Sj}DNJl}y)#j10vgC0*Wwv`CYb-H`>{r3Gx2rayc`P568ad@fdrWM5*j z&~V5}ihQu=c%_UMJf@G^@)Da;nojcs4AGoy|BBvU&T=F+Qu?lYb^WCnjSx7`5+eW} zv54nO(OIBp%9T*sCMkNTbBVv@k#r3_?m+{z9hy&n1`TF`w9t;c!{_?g2#d%{`_jsP3U}R)Omfj)5S4GT~ zZu1!*cboiPvDZ!il9y7-SW|zq^rLjSbSfk!`gp)H;v?$wSA^=!7z2;m;Z%Q98DoN- zQzsr%)y3DUfkAiE=rhW}$Qa2&won;G?75+~NW~JzrMZic{~=5GiHsSK)E*Vg(Os;+ z;-DHii~3~>if%A$Qmc>N#)$f%$q1ggHNrqZ*`kmo?WpRFx!eZSshioGu@0uwJym2f z)N!vbaA`x6Yi!YOZ84jGC4tx{%bqSLj0Aj#H45K=NUABP7zz`+UJcDti=Bi^`$BEp zZLii)5dYTOa%-l74s!fru=uo8UdaHKFTVWSV
N^)<%^H3eimAkxY0pS%D&1vDH z<>sr6g&h-pVq?iPtq4`{)u9Q%FB7B6@I;nv(Uqzjpa#@dDZXZ&~=8d)_Fc<05s`D1C;JfDRWWO zKD-Y?Q)0D!luRD7F$1vNtD_clDJZ%gxu#~#PM}>`dS#t^#`qox&jXWO3Mx9_8ww9$ z!S|h#c=6>$;FB|V`mtS+%9mg|Mo60QcmRMJiWe@cAgX-P%07`Th-==P-{c7S@yqwN zI}ApRr(7--`Xt9M4keTZAyYCJg?tOov*vflGe}&79gQaHFp5QaTZwKdO)<@Cn6t?% zcb#U1j>*xTXRi1l!CfVA#iP6CJA)v_jF!oCf&Fs03H=fJJhvR%0?eW;O_2uiyd~1) zalJXU^4KOe^_O~shprxxH@-$gK<_qLAT_%NVxJK^iBk7?m0kCY#-pGKfVjuwRAS%; z4FQ4waazbO`vlhzhz#HT^|Lui7QppmyO@NBU|Cc@6~B0En&mygYa>fKeiEe;A;fjB z9gqRqlaV$ArAbC4OebQ;`{4Gefh($QQZC4@$($PP-2kPOSRd;oFqp`u7WeI$3&6!l zI5Ni^vMA59P_$8W0?+eBaEdgq)r*of5gOP$#c61IC|o0xpj!j%?dgAIC z+nYxdGywkm;HThzxDx+z2GRpI&)XjQ*`D7K%uDN^V7WgUtW@5C9bACdTuU+O+YS$T zJ#df?RKeUVsD)y{^;#s)r9Utv!I3Q{XW$3e_%sbqRn6^qwNQ z*bPyTc1}I_scl5h145ocOD$Jd*9s0ol7Y1qcj~=Oy6yYF zSK9Gwv{8i9e|+Lb3+P^OC_d9ghiJnptfetqZ>0@}!@m0H@w|o9e2dtKI_kCJ6;y;$ z!x7t(C8%BUZrGIT?hb?*2&S7yAk{HlT;}yOuY>!H@7_O)fED0B{FZo-k(Q@E`h13y z50fmizcvKf_D365N208VOYVZ-jMbEthHY-8 zk&a;Y=_@Z$XdB(slw$K;E&3H=EIv7dn*liXdx#yTO?esr`lJA|0ikcfr04)R|Gy(GcSh#afWG1yd2H z6?jb)R2Pi-{9E%h>7)slspNBF2dOS;Z($PcZ0J9 zBsIe_Opzzhne0YU4LOmLkHclNZuw9c2wZl9&!C5=Zw1Iob$k942cl(*Lf{pQc~jGKECW^ zVo;%afoD)=EZ>(by%8;RC?OtSXw>n>@$pIS>xE624O<>)e^Xe#>02AML90E({rt=M z42}LJl-wAZ*QaBgrEgARE2}Tilx|ZY%Bmv9t*y2*P#^q&m1Q(+@()*cXA_w5!Ps=d zEyU~`9BLgVcx1`#%ZBu!?NX=o=9QI|X~o|Zu~ebyoTi6sFs@UxWzh#Q0xsNn_V>rj zwwXNEx=)-Yb0w~OaQhW>5g>02FlB$TXMrSE$Hh36#%1tljSuyaR4Dt$bRrM#12pE- z9n2Ig{!WNLzXSUrgq>5W?(=$=1=>O43p2_K#5Nkc#nJA6B?b}SK|tYO8ca%07GeYr9oqvK*3HI9$eakF=)kik6qk5(^>Dbl)5gEtE~RF-`{S? zc#>gyQ(@Rwxh(IBCyw!pA;Wftc1|E_`!(oIr_GCbxfRC-pq6uCKoG|g%ea0#6$9ku z{2Dg=5pf5HC4X?)Q@r3}yJnYnmTTI5UaOyvUP;HZC>`Im#g(xV-31UBzD=eD&#|B749GSq8<~IUSo7N<$VtX2VW+>B z4){W1HHf5L25e^;I?yA-z8v>rGFk5X9kz=#(7*g3W=cxM=C4Q$OJ$?OR<=$=ZW%LQ z?~i_9&B3s+v}|4s#ZV_(vW3oaJXKm4ZiSgFuZ8m9{(SKV;HI13RF8^;h(iNV^*m89 z5g1&bc-HgSeh#CK2a`3uas_&`i<4m^X7Kez0hQsfM-&Vi0>q(XCyL25f8%LRt>zKg z$_ZYT^lCYCGs}0$Ff;YzQ9wsZk%QkHv=0V&R~1qjZ9}pQ4F-O8?X>Ou`HKDm7JG@& z8pt4uET<-4!br|4K$1yq7i1mCN1#;NlPl<)=SOj|U-|4uKfK3r(w55h4MXEYO>P4e zms*S|a5!ejSVovPgnf0cRE0RRL5drd4_2s(l28z$I)SMO9S-4AGq@o!-dQnKB{(`- zLd#5Qi~1~QB1(6QID+Co=GmPlSA#GTobJ;OPeL|K>UhBPJS!>}kD4hh-%I}NBKES2 zkXh$-F`GbvJ|69~P<$A3Z20igOj_ZfdIb2oYc~4@_8XVnj#;rs3+Zy@3>%L`5&H1; zN2xX#YEOjACceDd=uMIsW5$(G$3rN-Y5?rIn!_KX|a#DYR;^69Bu(D z|H5*M_Fr}_gaFZfZ=(mo9d0Ytt*7IT7o#Pph&=fwZyL`(1`r|vnQ8N-ZV}QXFueB` zQfJJ#(w>84xZAudH;I!(=J4pK9hgCgf)Mg3oM&mbIOAF5j>$fK+-!OW)2Z)e0+PWO zuQ!rQnXHZ)GAx0#^*zVAa?dj8oh!89MYDotR4&1NjmF#6ubSXMWWqyz5vHbep^oLX ztV-~olE$?p1-Ag3o$|igX=C^CC1^r;I6pS!0Rn)*;^YaFl+ZJ&m2_Xn_5CNyeUOL3 zIg+YATa6Ta{K)q6Lk4RSB=9-E9U+(jvOo)KC@v|X=jO(bDex!+)QaZQHOrXt$p1#g zop1r>R2}!?Z&^g9vH#4JU*YP7{SXluS-cE7Y~cCMR72uzpW$4Mu}I+EHPFN%@sqY> zJ-758K9Fp>fA9XJk3tm+>Op9Tf}_e6!swzgjWy8fj4JhO^Ik~zB6!2}$}6+V7 zH>9EV9*=^;xcciP1X@yJu~kO)-&F$JOH)g0U2QLzqhMe;o`K45pPTe3=>bCeZdJL? zDgyb9TG&f!*404EJ70kozW-+8T_RH;bs)$E)Uu9F%t=fyfyR9cYX72t0KQ{v)|9}< z$7k2oU@$Klh;u(jkN>+$I%GVB9#TtWC6)!i@jXPoxw!!|+#}-NpKh2jX@PI(fV%!O zk&cb+>$3cRvgH#Q25N!=`}vv$ZVlibf+>$jv7@p0hE&LlcuwNEF8t_hZhp~w=P+);!==o=29{t9}(n~yW8n!>F8K8_k zo30*=R@bNe>s>zr?ps)Qr3`7Ch*t(VmY^~e1+;yhF1pp@unvvaH^BPylb4lsSm|6= zu0V2e)5{MnHq0i+dLn~v={EM&HUD8tmmqv?D+%JV|ASjm5{zvaJ<$L#BCvK|m4`YL z9TSr-r>KaQH7}+|urXhhZ@p(d#GfF%#|%A+74`kY>5Kvnn}JOc*AgEO&C5Eow;wC2 z9SQ)G1QJ%O3D4R|GnmH+Wru3^v^JT~O|5w*1hp>70uvXBHfUl_J}1|r@c0Y@mb>*qZ%KD zoR4@fP6gO_G{Jtv<=A|E@JCzF9@Z4y>ta6=R@hM7N*#36jdq3Oi$c&}0zU1-)Qb(% zAKdMWm)5;7u~kZktUTdRNI@hI~B zr2~hs*N2kU9lMcdsb9Sy`j3I$H6)z`Ol?~JLX2m3`6e%TprU)>b=pA&wmjS*3t%M3 zL9rCLC7Adc=i?V=?=JzI&9^LVi^CuICc^JFf6PWig!E$II)*6;J0t zzt3IQi!$Ff>$Z>Xw&x!vID=*qSDX{OOxIr2S-klc#3AD4@^`bb&8k*SAA{3WG%NFL zo?j@)AmF@smhQPerAf>F@a{n5qvO=t_t?aT{Mq6lD=}OVyR+ZXA(I z@A}RxNO2#JLn(UJJ#nuxPfO1R&-}jp8M#r}l}KpPbtAtY8!Zkp$ZK|5>zwr=eY9V< zo{%Fa`MLY`W8TeToDwihNu0U`#wW&wFCX^%oD)~hIPa(Bn$z*kzzsC;*WoJ9xs1ZFo}JN zzoY#B3OVy|sN439Q}$icjOO3FQj=|vZS2Dos%J1NC0oc| zWXM(#r4p%$2a!EgmiHQ--(SDuJ>I`LzGDve_r9Lb z?}bp6egmBJ`j5vyGlquJ7TV4to^>rfn-JbeC$^XbL7C)SvGN7mMeKP-1iK`%H zOWIOPgG`WK$Wqsu%F?~PqiYz2>G_`-0b19djx~LxCyd6=YnYdktQvLCXGkNjeDKuX zAU|@MF%17+;ir88Lyf`Z_ZJsmvej1T>#3?R7wUz?_SQRwjMLjY+&2@I5q9*Pg{>f(8G|U-3e~d>^AdJMSOet+^vcvcEc-Juw^nOU#7f zS}|!zyKLl{*zrr&7gk;kD8C}Z5wH<3exDSY=MuIO(pwm@w0-ytyt$h|i|=4{#Ta=o zPeRJ#oSkQ#gXAXOl8YrU83$y-9NcUMbmr7<`2Hs+WF3nO^FtDN%wouF|5T1 zo9H!`>#nSAb_;gY|0{m^Z=B5k?1v$%Q;NLiX)MMR!4$onJw_3 z-N!^AKM7}(M#3E*&L#!}L_%3+L}cWaKh7K9`k?y)O!h$_lqumeMJD$MjKR5gO`WC} zpai5Jx#gZ!Mn_sWpk17GH>R(zv2;etPBRQelesFZbY*Fp1@4#xt*!i$6#M(OzotDO0cc|&Vq8<z@VJ$Tx5eQgyqfk~194i^TI82``k$IJA(Y~>R00w~GB!NJ+t85CnUY)t}k zG-|?t^3~}D*B$)4bfDC@w4c1W1%BEMUt$20hj!*um5bKhco}YNV+vE2+@R_KERt3ToszWVyL>)X3Z7(12o*w$ z6=~$Usak%noCvUCr9)*guG?ph90>h>UKZ4XWF|#3xXmP~?tIR@1&ityAk#)pWX6BC z%*yTo$?)wD_yQy`*tf*HyhRZ9JT4<$|Ln}qiDUiy`%7__!J4x3B;t!SaUV8(V z;KA-@xpN%qifa&$nn77S5$@aLE5BR|gQSA&o{PIKT%HHl|txbkJ?hhJ&V>`P@0=!K+pDkI4}|I@Dqc&|K= zQ5Ght7?XU0XLFqB)CBs_g8F+|;urQT%biUyK1sDBv?6*GZ-UgxK%+I9>BqB}zJFvu zl$!JqUJ=}veDDleQCmA5V-rYs|YHL*xU2*M2RS&@%zBT zLGq?gzR5HD%jffn@trrUPaOa#c1%=?6;f@o^$vf{^I-aoGbCRi0G2DXtENQyZHb$k z!+X#Su;qHT5$yR90Mkf5=^x~lF&xK%U3bDL>AAUsIDcu4ZZrm2b#}|U;)6)G#ooIX z2)i!N+3UemHD|$S9e~$H`toyYJ+zX7!WQI%Tds%a=H?=;t>j<8eHFIA?iHq3192=j zwzTEwG#y6?&-XD5+26KP2#>gK02BvcOAEqBI8NVW)v6fx6b98oF@}CjQyoVeFYj%= zfHN4auj3bX901k1O+#%t+J#ON8$#eTB{8Z%u4cMYdju%c`TI&k<&>jO64^s zE`B_#$lsLoY-O%Z`7cA^z|P2qv->WL#a{3Pnd2r6UTZ#{w^T>h-H=eMDRQs@JbIsmh302Z_tYpK{9I~*~zVO$8iU0n&h;KV#;y`sZxq>2q*fs+e6Pr2l#z=AP}MDSDLd;=KY# z-#|3dn>%r$ii4ru*c8&@#a3Yte(b8HF0p*9uo-dDzGg?n8}7#z*W6?>wU>KSc}li zfx>*=<5HPZlaJ3TyF6}>zj!&{>)5(s_rvCUq&Md>--2As-rfw(l^ttMhJJsTUwe7n z*jE2E+i45WY90o0s%BLG%B1;S8ZYOVla77_m4Xj<#6c25yWT1jz_`T3#DOR0oyKTT zUE(av`z0$sJ4|0)T^#_ikpdY?sp>YH7YGCb>}m3v<6k^w)4SI|vRzImhZ`WkiW?Fd z0kPwFg%`*<=Jrp5@pyq2qcno+`I`2qeTOQ1hG| zrEPH&0+1Xc!+vbl@4olaQVd%tUJIq>+*ne_^%fw{(~dmYGoS0Pd1;YaBcb3fPS&eb z2T`Ydh%QI)&pmJ6sEmGZ-u}&dtX;w~=%FzEt--t*5D-=hb}KUC3W6D`+fk?>*9B^1 z0vzDEouaQ{0b!%AyX*4P*xK`Uhi&`j;chbeI~avTLJH0sW)mo@S zsFjP8N2zLW9Op-+JOfk-1M*RePXogB1*(0k6W|O9uGJTK&pH0qZrW)*0===)-Ix0U zL;_Viu^4}(*Kb?GYa#h%*=8MZ)`nluuLl$L%~GU4a_ x@1)I=ST^SQ%^`V1^ZNe``@dkit>P?+U5Gip%`H=B5qc%rEKCoZ6dSuo{s#*BnW_K) literal 0 HcmV?d00001 diff --git a/content/code-security/secret-scanning/secret-scanning-partner-program.md b/content/code-security/secret-scanning/secret-scanning-partner-program.md index 6fe877465b..a350316375 100644 --- a/content/code-security/secret-scanning/secret-scanning-partner-program.md +++ b/content/code-security/secret-scanning/secret-scanning-partner-program.md @@ -31,8 +31,8 @@ The following diagram summarizes the {% data variables.product.prodname_secret_s ## Joining the {% data variables.product.prodname_secret_scanning %} program on {% data variables.product.prodname_dotcom %} 1. Contact {% data variables.product.prodname_dotcom %} to get the process started. -1. Identify the relevant secrets you want to scan for and create regular expressions to capture them. -1. For secret matches found publicly, create a secret alert service which accepts webhooks from {% data variables.product.prodname_dotcom %} that contain the {% data variables.product.prodname_secret_scanning %} message payload. +1. Identify the relevant secrets you want to scan for and create regular expressions to capture them. For more detailed information and recommendations, see "[Identify your secrets and create regular expressions](#identify-your-secrets-and-create-regular-expressions)" below. +1. For secret matches found publicly, create a secret alert service which accepts webhooks from {% data variables.product.prodname_dotcom %} that contain the {% data variables.product.prodname_secret_scanning %} message payload. 1. Implement signature verification in your secret alert service. 1. Implement secret revocation and user notification in your secret alert service. 1. Provide feedback for false positives (optional). @@ -46,10 +46,16 @@ You will receive details on the {% data variables.product.prodname_secret_scanni ### Identify your secrets and create regular expressions To scan for your secrets, {% data variables.product.prodname_dotcom %} needs the following pieces of information for each secret that you want included in the {% data variables.product.prodname_secret_scanning %} program: +- A unique, human-readable name for the secret type. We'll use this to generate the `Type` value in the message payload later. +- A regular expression which finds the secret type. We recommend you are as precise as possible, because this will help reduce the number of false positives. Some best practices for high quality, identifiable secrets are: + - A uniquely defined prefix + - High entropy random strings + - A 32-bit checksum -- A unique, human readable name for the secret type. We'll use this to generate the `Type` value in the message payload later. -- A regular expression which finds the secret type. Be as precise as possible, because this will reduce the number of false positives. -- The URL of the endpoint that receives messages from {% data variables.product.prodname_dotcom %}. This does not have to be unique for each secret type. + ![Screenshot showing the breakdown of a secret into details to be considered when submitting to GitHub a regular expression to find high quality secrets.](/assets/images/help/security/regular-expression-guidance.png) + +- A test account for your service. This will allow us to generate and analyze examples of the secrets, further reducing false positives. +- The URL of the endpoint that receives messages from {% data variables.product.prodname_dotcom %}. The URL doesn't have to be unique for each secret type. Send this information to secret-scanning@github.com.