engine/leaks:bugfix - improving leaks rule 26 (#972)

Leaks rule 26 was not getting passwords set with colons.

Signed-off-by: Nathan Martins <nathan.martins@zup.com.br>
(cherry picked from commit 87673d1)

e2e/analysis/test_case.go

@@ -77,8 +77,8 @@ func NewTestCase() []*TestCase {
 					fmt.Sprintf(messages.MsgPrintFinishAnalysisWithStatus, analysis.Success),
 					messages.MsgDebugVulnHashToFix,
 					messages.MsgWarnAnalysisFoundVulns[16:],
-					"In this analysis, a total of 69 possible vulnerabilities were found and we classified them into:",
-					"Total of Vulnerability CRITICAL is: 18",
+					"In this analysis, a total of 73 possible vulnerabilities were found and we classified them into:",
+					"Total of Vulnerability CRITICAL is: 22",
 					"Total of Vulnerability HIGH is: 24",
 					"Total of Vulnerability MEDIUM is: 24",
 					"Total of Vulnerability LOW is: 3",

internal/services/engines/leaks/rules.go

@@ -440,11 +440,11 @@ func NewHardCodedPassword() text.TextRule {
 		},
 		Type: text.Regular,
 		Expressions: []*regexp.Regexp{
-			regexp.MustCompile(`(?i)(set)?password\s*(.?=.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
-			regexp.MustCompile(`(?i)(set)?pass\s*(.?=.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
-			regexp.MustCompile(`(?i)(set)?pwd\s*(.?=.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
-			regexp.MustCompile(`(?i)(set)?passwd\s*(.?=.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
-			regexp.MustCompile(`(?i)(set)?senha\s*(.?=.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
+			regexp.MustCompile(`(?i)(set)?password\s*(.?=.?|.?:.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
+			regexp.MustCompile(`(?i)(set)?pass\s*(.?=.?|.?:.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
+			regexp.MustCompile(`(?i)(set)?pwd\s*(.?=.?|.?:.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
+			regexp.MustCompile(`(?i)(set)?passwd\s*(.?=.?|.?:.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
+			regexp.MustCompile(`(?i)(set)?senha\s*(.?=.?|.?:.?|\()\s*['|\"]\w+[[:print:]]*['|\"]`),
 		},
 	}
 }