Added rules for third party sdks based on methodFullNames

rules/sinks/third_parties/sdk/amazon/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Amazon.Aws
+    name: Amazon Aws
+    domains:
+      - "aws.amazon.com"
+    patterns:
+      - "(?i)(aws-partitions|aws-sigv4|amazon-chime-sdk-rails|amazon_pay_sdk_ruby|aws-sdk-s3|aws-sdk-sqs|aws-sdk-ec2|aws-sdk-ssm|aws-sdk-sns|aws-sdk-rds|aws-sdk-ses|aws-sdk-ecr|aws-sdk-ecs|aws-sdk-redshift|aws-sdk-athena|aws-sdk-elasticache|aws-sdk-pinpoint|aws-sdk-rekognition|aws-sdk-emr|aws-sdk-lightsail|aws-sdk-workspaces|aws-sdk-cloudsearch|aws-sdk-gamelift|aws-sdk-appstream|aws-sdk-polly|aws-sdk-swf|aws-sdk-snowball|aws-sdk-dax|aws-sdk-inspector|aws-sdk-glacier|aws-sdk-mturk|aws-sdk-clouddirectory|aws-sdk-simpledb|aws-sdk-workdocs|aws-sdk-guardduty|aws-sdk-comprehend|aws-sdk-translate|aws-sdk-workmail|aws-sdk-connect|aws-sdk-eks|aws-sdk-neptune|aws-sdk-dlm|aws-sdk-macie|aws-sdk-chime|aws-sdk-quicksight|aws-sdk-fsx|aws-sdk-docdb|aws-sdk-textract|aws-sdk-personalize|aws-sdk-eventbridge|aws-sdk-cloudwatchlogs|aws-sdk-detective|aws-sdk-ebs|aws-sdk-apigateway|aws-sdk-elasticsearchservice|aws-sdk-cloudwatchevents|aws-sdk-cognitoidentity|aws-sdk-elastictranscoder|aws-sdk-machinelearning|aws-sdk-dynamodbstreams|aws-sdk-cognitosync|aws-sdk-cloudsearchdomain|aws-sdk-sagemakerruntime|aws-sdk-transcribeservice|aws-sdk-ivs|aws-sdk-appflow|aws-sdk-personalizeruntime|aws-sdk-personalizeevents|aws-sdk-forecastservice|aws-sdk-sesv2|aws-sdk-connectparticipant|aws-sdk-frauddetector|aws-sdk-codeguruprofiler|aws-sdk-elasticinference|aws-sdk-cognitoidentityprovider|aws-sdk-route53domains|aws-sdk-lex|aws-sdk-macie2|aws-sdk-chimesdkmessaging|aws-sdk-transcribestreamingservice|aws-sdk-chimesdkidentity|aws-sdk-s3outposts|aws-sdk-devopsguru|aws-sdk-ecrpublic|aws-sdk-lookoutforvision|aws-sdk-emrcontainers|aws-sdk-locationservice|aws-sdk-forecastqueryservice|aws-sdk-appintegrationsservice|aws-sdk-prometheusservice|aws-sdk-workmailmessageflow|aws-sdk-memorydb|aws-sdk-augmentedairuntime|aws-sdk-lexmodelbuildingservice|aws-sdk-chimesdkmeetings|aws-sdk-sagemakeredgemanager|aws-sdk-connectcontactlens|aws-sdk-kinesisvideosignalingchannels|aws-sdk-opensearchservice|pay_with_amazon|aws-sdk-voiceid|aws-sdk-managedgrafana|aws-sdk-sagemakerfeaturestoreruntime|aws-sdk-cloudwatchevidently|aws-sdk-recyclebin|aws-sdk-workspacesweb|aws-sdk-connectwisdomservice|nazrin|paperclip-aws|aws-sdk-dynamodb|aws-sdk-kinesis|aws-sdk-cloudwatch|aws-sdk-cloudfront|aws-sdk-cloudhsm|aws-sdk-firehose|aws-sdk-worklink|aws-sdk-sagemaker|aws-sdk-route53|aws-sdk-qldb|aws-sdk-appconfig|aws-sdk-efs|aws-sdk-kinesisanalytics|aws-sdk-managedblockchain|aws-sdk-route53resolver|aws-sdk-honeycode|aws-sdk-codegurureviewer|aws-sdk-kinesisvideo|aws-sdk-healthlake|aws-sdk-qldbsession|aws-sdk-pinpointemail|aws-sdk-kinesisanalyticsv2|aws-sdk-applicationinsights|aws-sdk-kinesisvideomedia|aws-sdk-timestreamwrite|aws-sdk-timestreamquery|aws-sdk-lookoutmetrics|aws-sdk-lookoutequipment|aws-sdk-configservice|aws-sdk-pinpointsmsvoice|aws-sdk-customerprofiles|aws-sdk-kinesisvideoarchivedmedia|aws-sdk-lexruntimev2|aws-sdk-lexmodelsv2|s3_streamer|breadbox|mturk|clouddrive|misfo-aws-sdk-cloudwatch|embulk-output-s3v2|ruby-aws|aws-sdk|aws-sdk-core|aws-sdk-kms|aws-sdk-resources|aws-sdk-cloudformation|aws-sdk-iam|aws-sdk-secretsmanager|aws-sdk-lambda|aws-sdk-elasticloadbalancing|aws-sdk-autoscaling|aws-sdk-elasticloadbalancingv2|aws-sdk-codecommit|aws-sdk-v1|aws-sdk-glue|aws-sdk-organizations|aws-sdk-acm|aws-sdk-cloudtrail|aws-sdk-codebuild|aws-sdk-codedeploy|aws-sdk-databasemigrationservice|aws-sdk-codepipeline|aws-sdk-cloudhsmv2|aws-sdk-applicationautoscaling|aws-sdk-elasticbeanstalk|aws-sdk-iot|aws-sdk-xray|aws-sdk-opsworks|aws-sdk-states|aws-sdk-batch|aws-sdk-storagegateway|aws-sdk-servicecatalog|aws-sdk-budgets|aws-sdk-sms|aws-sdk-costandusagereportservice|aws-sdk-devicefarm|aws-sdk-directoryservice|aws-sdk-opsworkscm|aws-sdk-directconnect|aws-sdk-health|aws-sdk-greengrass|aws-sdk-applicationdiscoveryservice|aws-sdk-waf|aws-sdk-resourcegroupstaggingapi|aws-sdk-migrationhub|aws-sdk-marketplacemetering|aws-sdk-shield|aws-sdk-wafregional|aws-sdk-marketplacecommerceanalytics|aws-sdk-support|aws-sdk-iotdataplane|aws-sdk-costexplorer|aws-sdk-medialive|aws-sdk-mediaconvert|aws-sdk-datapipeline|aws-sdk-marketplaceentitlementservice|aws-sdk-lambdapreview|aws-sdk-importexport|aws-sdk-codestar|aws-sdk-mobile|aws-sdk-alexaforbusiness|aws-sdk-appsync|aws-sdk-mq|aws-sdk-mediapackage|aws-sdk-mediastore|aws-sdk-serverlessapplicationrepository|aws-sdk-resourcegroups|aws-sdk-servicediscovery|aws-sdk-cloud9|aws-sdk-pricing|aws-sdk-mediastoredata|aws-sdk-iotjobsdataplane|aws-sdk-autoscalingplans|aws-sdk-acmpca|aws-sdk-fms|aws-sdk-iotanalytics|aws-sdk-mediatailor|aws-sdk-pi|aws-sdk-iot1clickdevicesservice|aws-sdk-iot1clickprojects|aws-sdk-signer|aws-sdk-cloudcontrolapi|awssh|aws-sigv4|aws-partitions|aws-eventstream|aws-sigv2|aws|aws-s3|aws-sdk-securityhub|aws-ses|aws-sdk-kafka|aws-sdk-ram|aws-sdk-s3control|aws-sdk-transfer|aws-sdk-rdsdataservice|aws-sdk-datasync|aws-sdk-amplify|aws-sdk-apigatewayv2|aws-sdk-licensemanager|aws-sdk-robomaker|aws-sdk-globalaccelerator|aws-sdk-comprehendmedical|aws-sdk-appmesh|aws-sdk-mediaconnect|aws-sdk-apigatewaymanagementapi|aws-sdk-backup|aws-sdk-mediapackagevod|aws-sdk-iotevents|aws-sdk-groundstation|aws-sdk-ioteventsdata|aws-record|aws-sdk-iotthingsgraph|aws-sdk-servicequotas|aws-sdk-ec2instanceconnect|aws-sdk-lakeformation|aws-sdk-savingsplans|aws-sdk-codestarnotifications|aws-sdk-imagebuilder|aws-sdk-kendra|aws-sdk-wafv2|aws-sdk-accessanalyzer|aws-sdk-computeoptimizer|aws-sdk-dataexchange|aws-sdk-networkmanager|aws-sdk-outposts|aws-sdk-migrationhubconfig|aws-sdk-iotsecuretunneling|aws-sdk-marketplacecatalog|aws-sdk-schemas|aws-sdk-codestarconnections|aws-sdk-ssooidc|aws-sdk-iotsitewise|aws-sdk-synthetics|aws-sdk-codeartifact|aws-sdk-braket|aws-sdk-identitystore|aws-sdk-redshiftdataapiservice|aws-sdk-ssoadmin|aws-sdk-rails|aws_cf_signer|aws-sdk-sso|aws-sdk-gluedatabrew|aws-sdk-appregistry|aws-sdk-networkfirewall|aws-sdk-iotwireless|aws-sdk-auditmanager|aws-sdk-mwaa|aws-sdk-greengrassv2|aws-sdk-amplifybackend|aws-sdk-wellarchitected|aws-sdk-iotdeviceadvisor|aws-sdk-iotfleethub|aws-kclrb|aws-sdk-fis|aws-sdk-mgn|aws-sdk-nimblestudio|aws-sdk-finspacedata|aws-sdk-finspace|aws-sdk-ssmcontacts|aws-sdk-ssmincidents|aws-sdk-applicationcostprofiler|aws-sdk-apprunner|aws-flow|aws-healthcheck|aws-sdk-proton|aws_ro|aws-sdk-route53recoverycontrolconfig|aws-sdk-route53recoveryreadiness|aws-sdk-route53recoverycluster|aws_data|aws-sdk-snowdevicemanagement|aws-xray-sdk|aws-sdk-kafkaconnect|aws-sdk-account|aws-sessionstore-dynamodb|aws-sdk-panorama|aws-sdk-resiliencehub|aws-sdk-migrationhubstrategyrecommendations|aws-sdk-appconfigdata|aws-sdk-drs|aws-sdk-sts|aws-sdk-migrationhubrefactorspaces|aws-sdk-cloudwatchrum|aws-sdk-inspector2|aws-es-transport|aws-sdk-backupgateway|aws-sdk-iottwinmaker|aws-sdk-amplifyuibuilder|aws-ssm-env|aws_agcod|aws-logs|aws-flow-core|aws-sdb|aws-mfa|aws_recon|right_aws|aws-pricing|aws-mfa-secure|aws_info|aws-ec2|carrierwave-aws|aws-cleaner|aws-eni|aws_pocketknife|aws_memfix|aws-rds|aws-swf|aws_helper|aws-rikanjo|aws_client|aws_assume_role|aws_runas|aws-must|aws_lambda_ric|aws_pipes|aws-ip|aws_ssh|aws_deploy|aws_csshx|aws-ami|aws_cloud_search|train-aws|aws-spec-generator|aws-ext|aws-controller|aws-lambda-runner|aws-instmd|aws-pws|aws-crt|aws-liam|aws_sdk|aws_auditor|aws-session-credentials|aws-auth|aws-url|aws-inventory|awsecrets|aws-ie|aws_sns_subscription|aws_tools|aws-ssh|aws-edges|aws_su|aws-data|aws-s3-instructure|aws-cfn-yats|aws-tools|aws_cron|aws-google|miasma-aws|aws-creds|em_aws|aws-asg-fleet|aws-sdk-code-generator|aws_sms|aws-lex-conversation|aws_status|aws-s3crets|aws_cred_vault|aws_dump|aws-dynamodb-query|aws-reporting|aws-rotate|aws-must-templates|aws_public_ips|aws-keys|aws_sns_kit|aws-s3-deploy|aws-elasticsearch|aws_sdb_bare|aws-watcher|aws_sqs_moniter|aws_keychain|aws-mason|aws-vpccreate|aws_as_code|aws-base|eventq_aws|aws_iot_device|aws_log_cleaner|aws-ec2-instance_types|aws_role_creds|aws-ses-rails31|aws-ssm-console|aws_cloud_map|aws-ses-v4|aws_account_number|aws-s3-cse|aws_secrets_loader|aws_s3_export|aws-insight|aws_keys|aws-tasks|aws_upload|aws-clean|aws_sam_yarn_builder|aws-rds-instance_types|aws_ec2_dns_name|aws-role|simple_aws|aws-architect|faraday_middleware-aws-sigv4|aws-signature-v4|aws-cft-tools|aws_provisioner|aws-sesocio-secrets|aws_instance_list|aws_session_token|aws_interactive_cli|awscosts|aws-whitepaper-downloader|aws-sdk-enhanced|aws-cli|aws-s3-akhtaboot|aws_student_accounts|aws-metadata-export|aws-rails-provisioner|aws-sts|aws-embedded-metrics-customink|aws_site_monitor|aws_cli_wrapper|aws-sdk-euca|aws-sdk-elb-tagging|aws-rsync|appoxy-aws|aws_xregion_sync|aws-rotate-keys|aws-cognito-srp|awsraw|hiera-aws|serverkit-aws|aws_agcod_2|aws-s3-multi-region|aws_beanstalk_tunkki|aws-ses-mailer|chef-provisioning-aws|aws-record-generator|awskeyring|hackerdude-aws|fluent-plugin-aws-elasticsearch-service|aboisvert_aws|aws_elb_health_check|aws-ec2-dns-name|aws_ses_newsletters|aws_cloudformation_helper|faraday_middleware-aws-signers-v4|awsm|awsec|aws-study-guide|middleman-aws|easy_aws|aws_access_key_scan|aws-iam-authenticator-rb|aws_ssh_key|cmeiklejohn-aws|aws-codedeploy-session-helper|bosh_cli_plugin_aws|aws_blue_green_deploy|aws-transcoder-rails|aws_stack_builder|jellyfish-aws|thor-aws|aws3upload|barnyard_aws|awslanes|awsquery|crossing).*"
+    tags:

rules/sinks/third_parties/sdk/amplitude/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Amplitude
+    name: Amplitude
+    domains:
+      - "amplitude.com"
+    patterns:
+      - "(?i)(amplitude-api|amplitude-rb|fluent-plugin-amplitude).*"
+    tags:

rules/sinks/third_parties/sdk/appnexus/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Appnexus
+    name: Appnexus
+    domains:
+      - "appnexus.com"
+    patterns:
+      - "(?i)(appnexusapi).*"
+    tags:

rules/sinks/third_parties/sdk/atlassian/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Atlassian
+    name: Atlassian
+    domains:
+      - "atlassian.com"
+    patterns:
+      - "(?i)(stash_api|atlassian-jwt|omniauth-atlassian-oauth2|atlassian_upm|atlassian_ui|atlassian_plugin_installer|atlassian_app_versions|atlassian-stash-avisi|atlassian-jwt-authentication|omniauth_crowd|jira-ruby|stash-client|authlogic_crowd|bamboo-client|crowd|confluence4r|bamboo-cli|crowd_rest|crowd-auth|jira-ruby-dmg|simplecov-clover|stash_pull_request_commenter|atl_config|usvn-crowd-sync|bpescatore-stash|face_control|fisheye-crucible|gojira|bamboo_api|faction|bamboo-console|simplecov-bamboo|nippocf|simple_crowd|crowd_rails|omnibucket|rubocop-junit-formatter|stash_notifier|sclemmer-jira-ruby|jira-ruby-added-transitions|zk-jira-ruby|jira_cli|ticketmaster-jira|knife-stash|aui_flash|kraut|jira_scan|taskmapper-jira|lita-stash-commit|danger-jira|jira|omniauth-jira|jira-cli|lita-jira|jira_report|jira_client|jira_tracker|jira-wsdl|jira-api|cb_jira_validator|jira_issues|jira_command|jira_api|jira-rest|jira-issues|jira_export|jira-script|jira_cmd|jira-remotelinker|capistrano-jira|jira_release|jira_cache|jira-worklog|jira_exception_collector|jira_cards|better_jira|danger-jira_sync|embulk-input-jira|git-jira|mongo-jira|brpm_module_jira|jira_dependency_visualizer|ruboty-jira|cafe-jira|fastlane-plugin-jira_versions|speedflow-plugin-jira|lita-jira-issues|jira4r|fastlane-plugin-jira_transition|cucumber-jira|errbit_jira_plugin|devise-jira-authenticable|active_jira|fastlane-plugin-jira_release_notes|ruby-jira-cli|jiralicious|fastlane-plugin-jira_issue_link|omniauth-jira-oauth2|fastlane-plugin-jira_issue_details|lita-onewheel-jira|fastlane-plugin-jira_transitions|jiragit|fastlane-plugin-jira_set_fix_version|jiraa|fastlane-plugin-jira_link|jiraby|jira4r-straightjacket|jirarest2|fastlane-plugin-set_jira_fix_version|fastlane-plugin-jira_ticket|jirawatch|xfel-timew-jira|jira4r-19|jirack|fastlane-plugin-jira_build_number|jirasync).*"
+    tags:

rules/sinks/third_parties/sdk/bing/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Bing
+    name: Bing
+    domains:
+      - "bing.com"
+    patterns:
+      - "(?i)(RuBing|bing_translator|bing|bing-search|bing_translate_yaml|bing-ads|bing-helper|bing_images|soapy_bing|bing-location|bing-ads-reporting|bing-content-api|bing-ads-api|simple_bing|bing_ads_ruby_sdk|bing_ads_api|bing_translator_fix|bing_search_client|bing_ads_api_v9|binger|binged|voice_recognition_bing|bingImageSearch|bingo|cognitivebing|badabing|periplus|microsoft_ngram|rbing|gnib-ads-api|autotolk|gnib|middleman-sitemap-ping|mikedemers-rbing|keyword_ranking|searchbing|search_cli|rankstar|newsbing|plagiarism2|linkto|ffi-hiredis_vip-core|multi-analytics-turbolinks|search_terms|sitemap_notifier|bingodisk|bingoint|bingo_game).*"
+    tags:

rules/sinks/third_parties/sdk/chatwork/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Chatwork
+    name: Chatwork
+    domains:
+      - "chatwork.com"
+    patterns:
+      - "(?i)(chatwork|chatwork_to|omniauth-chatwork|goodbye_chatwork|capistrano-chatwork|chatwork_bridge|activeresource-chatwork|ruboty-chatwork|lita-chatwork|fluent-plugin-chatwork|capistrano-around_chatwork|chatwork_webhook_verify|danger-chatwork|ruboty-chatwork_webhook|sensu-plugins-chatwork|rundock-plugin-hook-chatwork|cwbot|cha|bo_gitcw|shutwork|chatworkify|chatwork_to_slack).*"
+    tags:

rules/sinks/third_parties/sdk/coinbase/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Coinbase
+    name: Coinbase
+    domains:
+      - "coinbase.com"
+    patterns:
+      - "(?i)(coinbase|coinbase-exchange|omniauth-coinbase|coinbase_commerce|coinbase_exchange|coinbase-pro|better-coinbase|spree_coinbase|mxvp-coinbase|coinbase-ruby|spree_coinbase_bitcoin_payment|coinbasepro-api|cbx|orderbook|rtcbx|rcbp|gdax).*"
+    tags:

rules/sinks/third_parties/sdk/databricks/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Databricks
+    name: Databricks
+    domains:
+      - "databricks.com"
+    patterns:
+      - "(?i)(databricks).*"
+    tags:

rules/sinks/third_parties/sdk/dropbox/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Dropbox
+    name: Dropbox
+    domains:
+      - "dropbox.com"
+    patterns:
+      - "(?i)(dropbox|dropbox_api|dropbox-sdk|dropbox-api|paperclip-dropbox|dropbox-sdk-v2|dropbox-deployment|omniauth-dropbox|fastlane-plugin-dropbox|carrierwave-dropbox|dropbox-dotfiles|git-dropbox|omniauth-dropbox-oauth2|dropbox-archive|dropbox-explorer|dropbox-aliix|dragonfly-dropbox_data_store|dropbox-sync|dropbox-folder-sync|activestorage-dropbox|sf-dropbox-ext|dropbox_api_v2|dropbox-invite|dropbox-api-petems|gmail-to-dropbox|dropbox_server_backup|dropbox-api-kilgore5|dropbox-api-alt|dropbox-sdk-sv|dropbox_content_hasher|omniauth-dropbox-oauth2-sv|fastlane-plugin-dropbox_upload|fastlane-plugin-publish_dropbox|omniauth-dropbox-business-api2|dropbox-sdk-forked_v2|get_dropbox_access_token).*"
+    tags:

rules/sinks/third_parties/sdk/dwolla/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Dwolla
+    name: Dwolla
+    domains:
+      - "dwolla.com"
+    patterns:
+      - "(?i)(dwolla_v2|dwolla|dwolla-ruby|dwolla_swagger|spree_dwolla|omniauth-dwolla|fake_dwolla|money_mover).*"
+    tags:

rules/sinks/third_parties/sdk/facebook/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Facebook
+    name: Facebook
+    domains:
+      - "facebook.com"
+    patterns:
+      - "(?i)(facebookbusiness|facebook_ads|facebookads|adparlor-facebook|jquery-facebook|facebook_sig_validator|facebook_js|koala|fb-channel-file|devise_facebook_open_graph|open_graph|joelind-koala|cotweet_koala|palidanx-koala|tyler_koala|ongair_ruby|whatsapp|whatsapp_bot|whatzapper|gupshup_whatsapp|xip-twilio|WhatsappBot|whathor|apiwha|omnichannel).*"
+    tags:

rules/sinks/third_parties/sdk/flurry/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Flurry
+    name: Flurry
+    domains:
+      - "flurry.com"
+    patterns:
+      - "(?i)(flurry).*"
+    tags:

rules/sinks/third_parties/sdk/freshdesk/ruby.yaml

@@ -0,0 +1,13 @@
+
+#  Sink rule for ThirdParty SDK
+#  The id follows a format : "ThirdParties.SDK.<THIRD_PARTY_ORGANISATION>.<SUB_ORGANISATION_IF_APPLICABLE>"
+
+sinks:
+
+  - id: ThirdParties.SDK.Freshdesk
+    name: Freshdesk
+    domains:
+      - "freshdesk.com"
+    patterns:
+      - "(?i)(freshdesk|freshdesk-rest|freshdesk-ruby|freshdesk_api|freshdesk_apiclient|freshdesk-rails|galetahub-freshdesk|freshdesk-api-client|freshdesk-api-v2-rails|rottendesk|rubydesk|fci|freshly).*"
+    tags: