fix(secrets): handle regex error in custom secrets gracefully (#5355)

handle regex error in custom secrets gracefully
bridgecrewio · Jul 18, 2023 · 0915127 · 0915127
1 parent 3911187
commit 0915127
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/checkov/secrets/plugins/custom_regex_detector.py b/checkov/secrets/plugins/custom_regex_detector.py
@@ -35,12 +35,18 @@ def __init__(self) -> None:
         detectors = load_detectors()
 
         for detector in detectors:
-            if detector.get("isMultiline"):
-                self.multiline_deny_list.add(re.compile('{}'.format(detector["Regex"])))
-                self.multiline_regex_to_metadata[detector["Regex"]] = detector
-                continue
-            self.denylist.add(re.compile('{}'.format(detector["Regex"])))
-            self.regex_to_metadata[detector["Regex"]] = detector
+            try:
+                if detector.get("isMultiline"):
+                    self.multiline_deny_list.add(re.compile('{}'.format(detector["Regex"])))
+                    self.multiline_regex_to_metadata[detector["Regex"]] = detector
+                    continue
+                self.denylist.add(re.compile('{}'.format(detector["Regex"])))
+                self.regex_to_metadata[detector["Regex"]] = detector
+            except Exception:
+                logging.error(
+                    f"Failed to load detector {detector.get('Name')} with regex {detector.get('Regex')}",
+                    exc_info=True,
+                )
 
     @property
     def multiline_regex_supported_file_types(self) -> Set[str]: