V2 Heroku detector requires a change to the regex

[Chemo850]

The regex that is currently in place is \b(HRKU-AA[0-9a-zA-Z_-]{58})\b for the V2 pattern. This pattern has an error, as Heroku does not mint tokens that include "AA" as part of a standard prefix. The prefix only includes "HRKU-" for any newly minted Heroku tokens. The additional added prefix values might force the rule to many many hardcoded Heroku tokens. Additionally, Heroku tokens can also include a backslash.

Recommended Pattern: \b(HRKU-[0-9a-zA-Z_-]{60})\b

[kashifkhan0771]

Hi @Chemo850,

Thanks for your report.

Typically, when we create a new detector, we generate multiple tokens to ensure our regex is accurate. At the time of this detector's creation, all the tokens we generated started with the prefix HRKU-AA and did not include any backslashes.

Following your report, we created a new Heroku account and generated multiple tokens again to verify the regex. All of them still matched the expected format - starting with the HRKU-AA prefix and containing no backslashes.

Have you encountered any Heroku tokens that don’t include the AA in the prefix? If so, could you please share an example or any more details?

Thanks again!