[INS-341] Added Shippo detector

[MuneebUllahKhan222]

Description:

This PR adds the Shippo API Token Detector for TruffleHog. It scans for both live and test API tokens used by the Shippo shipping platform and supports live verification against the Shippo API.

API Token Regex: \b(shippo_(live|test)_[a-f0-9]{40})\b

Verification:

Verification is performed by sending a GET request to the /v1/shippo-accounts endpoint. The detected token is passed in the Authorization header using the ShippoToken scheme.

Corpora Test:

The detector does not appear in the list.

Checklist:

• Tests passing (make test-community)?
• Lint passing (make lint this requires golangci-lint)?

---

Note

Medium Risk
Adds a new detector and verification HTTP call to an external Shippo endpoint and extends the shared DetectorType protobuf enum, which can affect compatibility and runtime behavior if the API surface or enum mapping changes.

Overview
Adds a new shippo secret detector that finds shippo_(live|test)_... API tokens, redacts them in results, and can optionally verify validity via an authenticated GET to Shippo’s API.

Registers the detector in the default detector set and extends the DetectorType protobuf enum with Shippo, plus adds unit, integration, and benchmark coverage for matching and verification error handling.

^{Written by Cursor Bugbot for commit c93bfcd. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}