Samsara API Key

Description

General

Documentation: https://developers.samsara.com/reference
Summary: Samsara is an all-in-one platform for real-time GPS fleet tracking, routing and dispatch. Samsara provides an API to access multiple information on a given fleet of vehicles. This detector aims at catching API keys to access this service.
IPs allowlist: As of the time of writing this documentation, this feature is not available.
Scopes: API tokens are scoped using tags that can be added when creating the token.

Revoke the secret

The secret can be revoked from Samsara dashboard.

Check for suspicious activity

As of the time of writing this documentation, this feature is not available.

Details for `Samsara apikey v1`

Family: Api
Category: Other
Company: Samsara
High recall: False
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.01
Prefixed: False
PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - samsara

Examples

- text: |
    samsara context
    access_token = "6XWXxCINWCRGi9qRl9JEz90x5lxAHU"
  apikey: 6XWXxCINWCRGi9qRl9JEz90x5lxAHU

Details for `Samsara apikey v2`

Family: Api
Category: Other
Company: Samsara
High recall: True
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.03
Prefixed: True
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - samsara_api_

Examples

- text: |
    any context
    samsara_api_6XWXxCINWCRGi9qRl9JEz90x5lxAHU
  apikey: samsara_api_6XWXxCINWCRGi9qRl9JEz90x5lxAHU

# Fat-fingered secret
- text: Xsamsara_api_6XWXxCINWCRGi9qRl9JEz90x5lxAHU
  apikey: samsara_api_6XWXxCINWCRGi9qRl9JEz90x5lxAHU