Issue with incorrect verification endpoint and validation logic for Bombbomb

[sahil9001]

Please review the Community Note before submitting

TruffleHog Version

Trace Output

Expected Behavior

Issue 1 : Incorrect Endpoint

As per the documentation for the API, the endpoint to verify the token should be /v2/user instead of /v2/lists, which doesn't adhere to best practices with other detectors.

Issue 2 : Incorrect Pattern Validation

To use the above APIs, you should have a Bearer token with a different validation as mentioned.

Actual Behavior

Currently the API is pointing to /v2/lists and the token validation is incorrect.

Steps to Reproduce

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Environment

• OS: [e.g. iOS]
• Version [e.g. 22]

Additional Context

References

• #0000