Update DV access key regex to be more selective

bigdaz · bigdaz · commit 8dbe9a38020c · 2024-06-13T13:35:19.000-06:00
This should address the code-scanning alert https://github.com/gradle/actions/security/code-scanning/1
diff --git a/sources/src/develocity/short-lived-token.ts b/sources/src/develocity/short-lived-token.ts
@@ -156,7 +156,7 @@ type HostnameAccessKey = {
 }
 
 export class DevelocityAccessCredentials {
-    static readonly accessKeyRegexp = /^(\S+=\w+)(;\S+=\w+)*$/
+    static readonly accessKeyRegexp = /^([^;=\s]+=\w+)(;[^;=\s]+=\w+)*$/
     readonly keys: HostnameAccessKey[]
 
     private constructor(allKeys: HostnameAccessKey[]) {

Original file line number	Diff line number	Diff line change
`@@ -156,7 +156,7 @@ type HostnameAccessKey = {`
`156`	`156`	`}`
`157`	`157`
`158`	`158`	`export class DevelocityAccessCredentials {`
`159`		`- static readonly accessKeyRegexp = /^(\S+=\w+)(;\S+=\w+)*$/`
	`159`	`+ static readonly accessKeyRegexp = /^([^;=\s]+=\w+)(;[^;=\s]+=\w+)*$/`
`160`	`160`	`readonly keys: HostnameAccessKey[]`
`161`	`161`
`162`	`162`	`private constructor(allKeys: HostnameAccessKey[]) {`