tripwire

package

v0.5.0 Latest Latest Go to latest Published: Oct 16, 2026 License: Apache-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/abm9111/tailkeeper

Links

Open Source Insights

Documentation ¶

Overview ¶

Package tripwire is the backstop of spec §7.6. Serialized results and audit lines are scanned for credential shapes, and a hit fails closed. The typed output allowlist is the control; the tripwire catches what slips past it.

Constants ¶

View Source

const Redacted = "[credential-shaped text removed]"

Redacted replaces a credential shape inside text that tailnet members choose.

Variables ¶

This section is empty.

Functions ¶

func Check ¶

func Check(b []byte) error

Check returns an output_withheld error naming the kind of match, never the matched text, when b contains a credential shape.

func Redact ¶

func Redact(s string) string

Redact replaces every credential shape in s with Redacted. It is for fields that tailnet members write (device names, descriptions): such a field can neither leak a key nor, by holding a key shape, withhold the whole result it is in.

Types ¶

This section is empty.

Source Files ¶

View all Source files

tripwire.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL