Documentation
¶
Index ¶
- Constants
- func ParseLevel(levelStr string) (zerolog.Level, error)
- func RegisterHitSink(sink HitSink) func()
- func RegisterStatusHook(hook ShortcutStatusFN)
- func SetGlobalHitWriter(writer *HitLevelWriter)
- func SetLogLevel(verbose bool)
- func ShortcutListeners(status ShortcutStatusFN)
- type HitEvent
- type HitLevelWriter
- type HitRecord
- type HitSink
- type SecretType
- type ShortcutStatusFN
Constants ¶
const HitLevel zerolog.Level = zerolog.WarnLevel
HitLevel defines a custom log level for security finding hits. Implemented as WarnLevel but transformed to "hit" in output.
Variables ¶
This section is empty.
Functions ¶
func ParseLevel ¶
ParseLevel extends zerolog's ParseLevel to support "hit" level.
func RegisterHitSink ¶ added in v1.3.0
func RegisterHitSink(sink HitSink) func()
func RegisterStatusHook ¶
func RegisterStatusHook(hook ShortcutStatusFN)
func SetGlobalHitWriter ¶
func SetGlobalHitWriter(writer *HitLevelWriter)
SetGlobalHitWriter sets the global HitLevelWriter (for testing only).
func SetLogLevel ¶
func SetLogLevel(verbose bool)
func ShortcutListeners ¶
func ShortcutListeners(status ShortcutStatusFN)
Types ¶
type HitEvent ¶
type HitEvent struct {
// contains filtered or unexported fields
}
func Hit ¶
func Hit() *HitEvent
Hit creates a hit-level log event for security findings. Always emitted regardless of global log level. Example: logging.Hit().Str("rule", "secret-key").Msg("HIT")
type HitLevelWriter ¶
type HitLevelWriter struct {
// contains filtered or unexported fields
}
HitLevelWriter wraps an io.Writer to transform logs with "level":"warn" to "level":"hit".
func NewHitLevelWriter ¶
func NewHitLevelWriter(out io.Writer) *HitLevelWriter
NewHitLevelWriter creates a new HitLevelWriter wrapping the given io.Writer.
func (*HitLevelWriter) SetOutput ¶
func (w *HitLevelWriter) SetOutput(out io.Writer)
type HitRecord ¶ added in v1.3.0
type HitRecord struct {
Time time.Time
Type string
Confidence string
RuleName string
Value string
Fields map[string]interface{}
}
HitEvent wraps a zerolog.Event for hit-level logging with "level":"hit" output.
type SecretType ¶
type SecretType string
SecretType defines the source type of a detected secret.
const ( // SecretTypeLog indicates a secret found in CI/CD logs. SecretTypeLog SecretType = "log" // SecretTypeArchive indicates a secret found in an archive/artifact. SecretTypeArchive SecretType = "archive" // NestedArchive indicates a secret found in a nested archive. SecretTypeNestedArchive SecretType = "nested-archive" // SecretTypeDotenv indicates a secret found in a dotenv file. SecretTypeDotenv SecretType = "dotenv" )
type ShortcutStatusFN ¶
func GetStatusHook ¶
func GetStatusHook() ShortcutStatusFN