Skip to content

[INS-320] Cloudinary detector#4747

Open
MuneebUllahKhan222 wants to merge 12 commits intotrufflesecurity:mainfrom
MuneebUllahKhan222:cloudinary-detector
Open

[INS-320] Cloudinary detector#4747
MuneebUllahKhan222 wants to merge 12 commits intotrufflesecurity:mainfrom
MuneebUllahKhan222:cloudinary-detector

Conversation

@MuneebUllahKhan222
Copy link
Contributor

@MuneebUllahKhan222 MuneebUllahKhan222 commented Feb 18, 2026

Description:

This PR adds cloudinary detector. It detects cloudinary creds like cloud name, api key and api secret and verifies them.

Checklist:

  • Tests passing (make test-community)?
  • Lint passing (make lint this requires golangci-lint)?

Note

Medium Risk
Adds a new detector that makes outbound HTTP requests to Cloudinary for credential verification; regex matching and multi-part combination logic can also impact false-positive/false-negative rates and performance.

Overview
Adds a new cloudinary detector that extracts Cloudinary cloudName, apiKey, and apiSecret from source text (including URL-style cloudinary://key:secret@name) and emits results as a combined RawV2 triple.

When verification is enabled, the detector performs a Basic Auth GET to api.cloudinary.com/v1_1/<cloudName>/usage to mark credentials as verified/invalid and records unexpected/transport errors as verification errors.

Registers the detector in the default detector list and introduces a new protobuf DetectorType_Cloudinary enum value, with unit + integration tests/benchmarks covering match behavior and verification paths.

Written by Cursor Bugbot for commit 3b68eaa. This will update automatically on new commits. Configure here.

@MuneebUllahKhan222 MuneebUllahKhan222 requested a review from a team February 18, 2026 07:17
@MuneebUllahKhan222 MuneebUllahKhan222 requested review from a team as code owners February 18, 2026 07:17
@MuneebUllahKhan222 MuneebUllahKhan222 changed the title [INS-330] Cloudinary detector [INS-320] Cloudinary detector Feb 18, 2026
Copy link
Contributor

@amanfcp amanfcp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just shared a concern which could lead to false negatives.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

Copy link
Contributor

@rosecodym rosecodym left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤠 for a new detector. I've created a backlog ticket to separate this codeownership.

Copy link
Contributor

@shahzadhaider1 shahzadhaider1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please resolve the conflicts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants