sensitiveinputs

package

v0.87.0 Latest Latest Go to latest Published: Oct 20, 2026 License: MIT Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/GoCodeAlone/workflow

Links

Open Source Insights

Documentation ¶

Overview ¶

Package sensitiveinputs validates provider-declared sensitive Config leaves.

Index ¶

func DiagnosticRedactor(config map[string]any, paths []string) (func(string) string, error)
func Expand(config map[string]any, paths []string) ([]string, error)
func ValidatePaths(paths []string) error
func ValidateReferences(config map[string]any, paths []string) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func DiagnosticRedactor ¶

func DiagnosticRedactor(config map[string]any, paths []string) (func(string) string, error)

DiagnosticRedactor masks only declared resolved inputs in control-plane diagnostics. It must not be applied to provider outputs or consumer payloads.

func Expand ¶

func Expand(config map[string]any, paths []string) ([]string, error)

Expand returns deterministic unique concrete leaf pointers. Missing optional fields have no match; present containers or scalar traversal are errors.

func ValidatePaths ¶

func ValidatePaths(paths []string) error

ValidatePaths requires non-root canonical RFC 6901 pointers. Escapes are validated by re-encoding the parser's decoded tokens; malformed '~' escapes must not alias an otherwise valid key.

func ValidateReferences ¶

func ValidateReferences(config map[string]any, paths []string) error

ValidateReferences rejects literal sensitive values without including them in diagnostics. It validates declarative inputs, never consumer artifacts.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL