stakpak-shared 0.3.67

Stakpak: Your DevOps AI Agent. Generate infrastructure code, debug Kubernetes, configure CI/CD, automate deployments, without giving an LLM the keys to production.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

[[rules]]
id = "aws-account-id"
description = "Detects AWS account IDs in various formats including standalone numbers and ARNs"
regex = '''(?i)(?:(?:aws[_-]?account[_-]?id|account[_\.]?id|accountid|aws[_\.]?account|"?account(?:id)?"?)\s*[=:]\s*["']?|arn:aws:[^:]*::)(\d{12})'''
keywords = ["aws", "account", "arn"]

[[rules]]
id = "public-ipv4"
description = "Detects public IPv4 addresses (excluding private/local ranges)"
regex = '''\b((?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))\b'''

[[rules.allowlists]]
description = "Exclude private IP ranges"
regexes = [
    "^10\\.",
    "^172\\.(1[6-9]|2[0-9]|3[01])\\.",
    "^192\\.168\\.",
    "^127\\.",
    "^169\\.254\\.",
    "^0\\.0\\.0\\.0$",
    "^255\\.255\\.255\\.255$",
]

[[rules]]
id = "public-ipv6"
description = "Detects public IPv6 addresses (excluding private/local ranges)"
regex = '''(?i)(?:^|\s|=|:)((?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}|(?:[0-9a-f]{1,4}:){1,7}:|(?:[0-9a-f]{1,4}:){1,6}:[0-9a-f]{1,4}|(?:[0-9a-f]{1,4}:){1,5}(?::[0-9a-f]{1,4}){1,2}|(?:[0-9a-f]{1,4}:){1,4}(?::[0-9a-f]{1,4}){1,3}|(?:[0-9a-f]{1,4}:){1,3}(?::[0-9a-f]{1,4}){1,4}|(?:[0-9a-f]{1,4}:){1,2}(?::[0-9a-f]{1,4}){1,5}|[0-9a-f]{1,4}:(?::[0-9a-f]{1,4}){1,6}|:(?::[0-9a-f]{1,4}){1,7}|::|(?:[0-9a-f]{1,4}:){6}(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))(?:\s|$|[^\w:\.])'''

[[rules.allowlists]]
description = "Exclude private IPv6 ranges"
regexes = ["^fe80:", "^::1$", "^fc00:", "^fd00:"]

[allowlist]
description = "Privacy rules allowlist to prevent false positives"
regexes = [
    # Allow common test/example values
    "123456789012",
    "000000000000",
    "123456123456",
    # Allow obviously fake/internal IPs
    "192\\.168\\.\\d+\\.\\d+",
    "10\\.\\d+\\.\\d+\\.\\d+",
    "127\\.0\\.0\\.1",
    "0\\.0\\.0\\.0",
    "255\\.255\\.255\\.255",
]
stopwords = [
    "example",
    "test",
    "demo",
    "sample",
    "placeholder",
    "localhost",
    "127.0.0.1",
    "0.0.0.0",
]