Release PR

config/systemConfig/default.yaml

@@ -13,9 +13,3 @@ systemConfig:
 
   - key: maxCharLimit
     value: "1000"
-
-  - key: dataflowElementInPathLimit
-    value: "-1"
-
-  - key: dataflowSourceSinkPairPathLimit
-    value: "-1"

rules/sinks/leakages/logs/java.yaml

@@ -3,25 +3,25 @@ sinks:
   - id: Leakages.Log.Error
     name: Log Error
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(?:wtf|error|severe|fatal|[.]e[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.blueshift.logger.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(?:wtf|error|severe|fatal|[.]e[:]).*"
     tags:
 
   - id: Leakages.Log.Warn
     name: Log Warn
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(warn|warning|[.]w[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.blueshift.logger.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(warn|warning|[.]w[:]).*"
     tags:
 
   - id: Leakages.Log.Debug
     name: Log Debug
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(debug|trace|[.](log|d|v|t)[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.blueshift.logger.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(debug|trace|[.](log|d|v|t)[:]).*"
     tags:
 
   - id: Leakages.Log.Info
     name: Log Info
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|java.util.logging|ch.qos.logback|timber.log.Timber|android.util.Log).*(info|[.]i[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.blueshift.logger.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|java.util.logging|ch.qos.logback|timber.log.Timber|android.util.Log).*(info|[.]i[:]).*"
     tags:
 
   - id: Leakages.Log.Console

rules/sinks/storages/amazonS3/javascript.yaml

@@ -6,7 +6,7 @@ sinks:
       - aws.amazon.com
     patterns: 
       - "@aws-cdk\\/aws-s3"
-      - "@aws-sdk\\/client-s3"
+      - "(?i)(@aws-sdk\\/client-s3).*"
       - "multer-s3-gcs|@directus\\/drive-s3|koop-s3fs|parse-s3-bucket-key|parse-aws-s3-url|random-access-s3|s3-uploading|s3proxy|easy-yandex-s3-extended|s3-post-policy|s3-list-all-objects|react-native-upload-aws-s3|@aws-solutions-constructs\\/aws-s3-step-function|@djabry\\/fs-s3|@ntegral\\/nestjs-s3|s3-imgurl-upload|ghost-s3-compat|react-aws-s3-g3|s3-asset-uploader|s3-bucket-multipart-toolkit|@pentcloud\\/strapi-provider-upload-s3|s3-emails-to-mongo|semantic-release-s3|s3-bucket-downloader|s3-s3|s3-file-scan-cat|aws-s3-copy-x|veritas-s3-transform|s3-dir-backup|strapi-provider-upload-aws-s3-cf|aws-s3-uploader|@leapllc\\/s3-files-adapter|jsreport-aws-s3-storage|aws-s3-files|gn-s3-uploader|aws-s3-signurl|@apparts\\/s3deploy|s3tools|react-s3|multer-s3|s3-upload-stream|@aws-cdk\\/aws-s3-assets|s3-stream-upload|@aws-cdk\\/aws-s3-deployment|amazon-s3-uri|s3-uploader|@aws-cdk\\/aws-s3-notifications|s3-streaming-upload|s3-diff|s3-website|@parse\\/s3-files-adapter|s3-db|aws-s3-form|s3-url|ghost-storage-adapter-s3|s3-nodejs-sample|gatsby-plugin-s3|keystone-storage-adapter-s3|s3-ingestor|s3-files|aws-s3|react-aws-s3|ghost-s3-storage|s3-server|node-sftp-s3|s3-antivirus|bloody-simple-s3|to-s3|s3-utils|multer-s3-uuid|aws-s3-synch|s3-parallel-get|s3-directory-upload|@aws-solutions-constructs\\/aws-cloudfront-s3|s3-proxy|@smallmultiples\\/s3|polly-s3|s3-ls-lite|@aws-solutions-constructs\\/aws-kinesisfirehose-s3|github-to-s3|deploy-aws-s3-cloudfront|s3-spa-upload|multer-s3-transform|@tokenizer\\/s3|lazy-s3|s3-list-bucket-stream|multer-s3-v3|lasso-s3-writer|couchdb-to-s3|@aws-solutions-constructs\\/aws-iot-kinesisfirehose-s3|@aws-solutions-constructs\\/aws-kinesisfirehose-s3-and-kinesisanalytics|strapi-provider-upload-aws-s3-enhanced|multer-s3-v2|@fab\\/deployer-aws-s3|@samwen\\/aws-s3-utils|@itentialopensource\\/adapter-aws_s3|s3-lambo|@cloudcomponents\\/cdk-s3-antivirus|scaleway-s3|aws-s3-upload-ash|s3-image-uploader|@eggplugin\\/s3|nodebb-plugin-s3-uploads-updated-again|jsreport-fs-store-aws-s3-persistence|cache-manager-s3|co-s3|use-s3-uploader|hubot-s3-brain|@guidesmiths\\/systemic-aws-s3|node-mongodump-s3|mongo-dump-s3-2|@jsreport\\/jsreport-aws-s3-storage|s3getimage|react-native-aws3-upload|aws-thin-s3|multer-s3-stream|s3-config|strapi-provider-upload-aws-s3-with-rekognition|node-sftp-s3-kt|@losttracker\\/s3-uploader|@akud\\/aws-s3-sync-by-hash|@benjamminj\\/react-aws-s3|@sapianco\\/node-red-contrib-storage-s3|s3-list-all-the-objects|ceph-s3|@fpt-smart-cloud\\/nestjs-s3|@btime\\/aws-s3|hapi-s3-upload|pm2-logrotate-s3|nodebb-plugin-s3-uploads-fork|strapi-provider-upload-s3-plus|aws-s3-deploy|dist-upload-s3|dao-s3|@caliatys\\/s3-service|s3-copy|brcap-paginacao-s3|nodebb-plugin-s3-uploads|s3-proxy-middleware|hexo-deployer-sync-s3|s3-ls|s3img|s3list|pico-s3|s3leveldown|@aws-solutions-constructs\\/aws-s3-stepfunctions|@aws-solutions-constructs\\/aws-eventbridge-kinesisfirehose-s3|react-native-s3-upload|s3-tree|aws-s3-size|easy-yandex-s3|multer-sharp-s3|s3-tail-stream|@rlyle1179\\/s3-diff|@atomist\\/sdm-pack-s3|aeris-s3-sync|node-red-contrib-storage-s3|s3-emails|imapper-auth-s3|@project-furnace\\/s3utils|s3-object-content-stream|strapi-provider-upload-aws-s3-resizing-and-optimisation|le-challenge-s3|strapi-provider-upload-aws-s3-enhanced-v5|react-aws-s3-typescript|s3-xfer|nano-s3|strapi-provider-upload-aws-s3-charged|aws-s3-reactjs|@silver886\\/aws-s3|codepipeline-s3-package|@runforest\\/s3deploy|@nx-cache\\/aws-s3|aws-s3-manager|@chakrahq\\/strapi-provider-upload-aws-s3|eip-s3-deploy|strapi-provider-upload-aws-s3-imagekit-cdn|@cdk-cloudformation\\/tf-aws-s3bucket|@d0whc3r\\/node-s3|@cdk-cloudformation\\/tf-aws-s3bucketobject|node-s3-utils|nodebb-plugin-s3-uploads-updated|strapi-provider-upload-s3-saycustom|@alexcons\\/ghost-storage-adapter-s3|multer-s3-imager|react-native-s3-upload-new|s3policy|awssum-greenqloud-s3|s3-archive|s3-disk-cache|data-s3|s3-bucket-size|@foal\\/aws-s3|cdk-s3bucket-ng|sanitize-s3-objectkey|typescript-aws-s3-helper|react-use-s3|s3-bucket-toolkit|@koopjs\\/filesystem-s3|@sustainhawaii\\/s3-files|s3-image-size|s3bubble-javascript|@xenfo\\/multer-s3|multer-aws-s3|aws-s3-react|node-red-contrib-s3|react-native-s3|@mailprotector\\/haraka-plugin-s3-fetch|@eyevinn\\/iaf-plugin-aws-s3|metalsmith-s3|s3-bucket|semantic-release-s3-upload|s3upload|@jsreport\\/jsreport-fs-store-aws-s3-persistence|deploy-aws-s3-cloudfront-with-cache-contol|@mcma\\/aws-s3|@michaukrieg\\/multer-s3|@igor-lemon\\/s3-files-adapter|react-aws-s3-uploader|node-s3|s3-prototype|ts-s3-publish|@digitregroup\\/s3-to-anything|copy-s3-files|flush-s3-bucket|s3-url-parser|@nona-creative\\/aws-cdk-s3-cloudfront|@dabapps\\/django-s3-file-upload|aws-s3-object-multipart-copy|strapi-provider-upload-aws-s3-iam|multer-storage-s3|s3-list-all|ng6-s3-uploader|@aws-solutions-constructs\\/aws-events-rule-kinesisfirehose-s3|simple-s3-deploy|@neoskop\\/s3surgeon|aws-s3-pro|s3-file-concat|@foxpage\\/foxpage-server-provider-aws-s3|s3-mongo-backup|s3-upload-stream-encrypt|aws-s3-upload|@apployees-nx\\/s3leveldown|@asquero\\/upload-file-to-s3|node-s3-proxy|@aws-cdk\\/aws-s3|s3-public-url|s3-object-streams|aws-s3-sync|knox-s3|s3-cached|ngx-s3-uploader|keystone-s3-upload-adapter|ghost-storage-s3|@slynova\\/flydrive-s3|nestjs-s3|react-native-aws3|s3-redeploy|multer-sharp-s3-opt|@aws-solutions-constructs\\/aws-kinesisstreams-kinesisfirehose-s3|@stayradiated\\/s3-list-bucket-stream|awss3-deploy|@rlyle1179\\/s3-website|greenlock-storage-s3|strapi-provider-upload-aws-s3-plus-cdn-public-access|@tailee\\/nodebb-plugin-s3-uploads|strapi-provider-upload-aws-s3-public|@booreiland\\/keystone-storage-adapter-s3|cordova-plugin-except-aws-s3-from-ats|tycrek-s3-transform|s3-dl|s3-plus|multer-s3-rotate|s3-bucket-empty|aws-s3-uooobarry|nodebb-plugin-s3-uploads-etr|hexo-deployer-s3|aws3.js|mongodb-dump-backup-aws-s3|s3-bucket-stream"
       - "(?:mongo-dump-s3-2|mongodb-dump-backup-aws-s3|node-mongodump-s3|amazons3-files-copier|node-document-storage-amazons3|@filesrocket/amazons3|filesrocket-amazons3|rf-amazons3-upload|@royal-fox/rf-amazons3-upload).*"
     tags:

rules/sinks/third_parties/sdk/amazon/javascript.yaml

@@ -12,6 +12,7 @@ sinks:
       - "aws-sqs-"
       - "@aws-solutions-constructs\\/aws-(lambda-sqs|sns-sqs|lambda-sqs|sqs-helper|apigateway-sqs|s3-sqs)"
       - "graphql-sqs-subscriptions|sns-sqs-slq-code7|@battleline\\/sqs-large-payload-nodejs|typescript-aws-sqs-helper|sqs-consumer"
+      - "(?i)(@aws-sdk\\/client-sqs).*"
     tags:
 
   - id: ThirdParties.SDK.Amazonaws.Athena
@@ -123,6 +124,7 @@ sinks:
       - "aws.amazonaws.com/cloudwatch"
     patterns:
       - "(?i)(@aws-cdk\\/aws_cloudwatch)"
+      - "(?i)(@aws-sdk\\/client-cloudwatch).*"
       - "cloudwatch-logs-janitor|cfn-cloudwatch-events-rule|cfn-cloudwatch-events-target|typescript-aws-cloudwatch-helper|cloudwatch-logs-janitor"
     tags:
 

rules/sinks/third_parties/sdk/intuit/javascript.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Intuit.Quickbooks
+    name: Intuit QuickBooks
+    domains:
+      - "intuit.com"
+    patterns:
+      - "(?i)(node-quickbooks).*"
+    tags:

rules/sinks/third_parties/sdk/taxjar/java.yaml

@@ -0,0 +1,12 @@
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Taxjar
+    name: Taxjar
+    domains:
+      - "taxjar.com"
+    patterns:
+      - "(?i)(com.taxjar.*)"
+    tags:

rules/sinks/third_parties/sdk/twilio/java.yaml

@@ -9,5 +9,5 @@ sinks:
     domains:
       - "twilio.com"
     patterns:
-      - "(?i)(com[.]twilio.*(sdk|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice))|(com[.]authy).*"
+      - "(?i)(com[.]twilio.*(sdk|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice).*)|(com[.]authy).*"
     tags:

rules/sinks/third_parties/sdk/twilio/javascript.yaml

@@ -9,5 +9,5 @@ sinks:
     domains:
       - "twilio.com"
     patterns:
-      - "@sendgrid\\/design-primitives"
+      - "@sendgrid\\/design-primitives|twilio"
     tags:

rules/sinks/third_parties/sdk/xero/javascript.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Xero
+    name: Xero
+    domains:
+      - "xero.com"
+    patterns:
+      - "(?i)(xero-node).*"
+    tags: