id: pendo-api-key-exposure

info:
  name: Pendo API Key Exposure
  author: 0x_Akoko
  severity: medium
  description: |
    Detected exposure of Pendo API keys within files or API responses.
  reference:
    - https://support.pendo.io/hc/en-us/articles/9491198203547-Pendo-Integration-Key
  metadata:
    verified: true
  tags: file,keys,token,pendo

file:
  - extensions:
      - all

    extractors:
      - type: regex
        group: 1
        regex:
          - 'pendoApiKey.*?([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})'
# digest: 4a0a0047304502202b784208cedfb14485f859e5216da182bdd74230b726f3bbf061444d41f4d36c022100ee392d334182d264df995cbbda5a4d306267283a2d83247419b09bb38646c835:922c64590222798bb761d5b6d8e72950