diff --git a/detect_secrets/core/usage.py b/detect_secrets/core/usage.py index 5d532f3d0..823f92724 100644 --- a/detect_secrets/core/usage.py +++ b/detect_secrets/core/usage.py @@ -618,6 +618,12 @@ class PluginOptions: help_text='Disables scans for GitHub credentials', filename='github_token', ), + PluginDescriptor( + classname='TelegramBotTokenDetector', + flag_text='--no-telegram-bot-token-scan', + help_text='Disables scans for Telegram bot tokens', + filename='telegram_token', + ), ] opt_in_plugins = [ PluginDescriptor( diff --git a/detect_secrets/plugins/telegram_token.py b/detect_secrets/plugins/telegram_token.py new file mode 100644 index 000000000..54cdc61cf --- /dev/null +++ b/detect_secrets/plugins/telegram_token.py @@ -0,0 +1,37 @@ +""" +This plugin searches for Telegram bot tokens +""" +import re + +import requests + +from detect_secrets.core.constants import VerifiedResult +from .base import RegexBasedDetector + + +class TelegramBotTokenDetector(RegexBasedDetector): + """Scans for Telegram bot tokens.""" + secret_type = 'Telegram Bot Token' + + denylist = [ + # refs https://core.telegram.org/bots/api#authorizing-your-bot + re.compile(r'(?