Linear Personal API key

Description

General

Documentation: https://developers.linear.app/docs/graphql/working-with-the-graphql-api
Summary: Linear is an issue tracking tool. This detector focuses on detecting personal API keys.
IPs allowlist: This feature is not available.
Scopes: Every key has the same scope.

Revoke the secret

In Settings > API page, API keys can be revoked.

Check for suspicious activity

This feature is not available.

Details for `Linear api key`

Family: Api
Category: Collaboration tool
Company: Linear
High recall: True
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.8
Prefixed: True
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - lin_(api|oauth)_

Examples

- text: |
    curl -X POST \
    -H "Content-Type: application/json" \
    -H "Authorization: lin_api_3thmgjor322griohzovh343LU7zvrdvdgT54T45G" \
    --data '{ "query": "{ issues { nodes { id title } } }" }' \
    https://api.linear.app/graphql
  apikey: 'lin_api_3thmgjor322griohzovh343LU7zvrdvdgT54T45G'
- text: |
    curl -X POST \
    -H "Content-Type: application/json" \
    -H "Authorization: lin_oauth_8d4b9bd539dcd265935e2d01547e407971add2abb1fba737e202e62f10d8fb42" \
    --data '{ "query": "{ issues { nodes { id title } } }" }' \
    https://api.linear.app/graphql
  apikey: 'lin_oauth_8d4b9bd539dcd265935e2d01547e407971add2abb1fba737e202e62f10d8fb42'