check for weird status codes

trufflesecurity · Aug 11, 2023 · 7a27580 · 7a27580
1 parent f2a0830
commit 7a27580
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/detectors/gitlab/gitlab.go b/pkg/detectors/gitlab/gitlab.go
@@ -84,6 +84,10 @@ func (s Scanner) FromData(ctx context.Context, verify bool, data []byte) (result
 					// 401 is bad key
 					if res.StatusCode == http.StatusOK || res.StatusCode == http.StatusForbidden {
 						secret.Verified = true
+					} else if res.StatusCode == http.StatusUnauthorized {
+						// Nothing to do; zero values of Result are the ones we want
+					} else {
+						secret.VerificationError = fmt.Errorf("unexpected HTTP response status %d", res.StatusCode)
 					}
 				}
 			}