redact

package
v4.0.0-beta.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 6, 2026 License: MIT Imports: 9 Imported by: 0

Documentation

Overview

Package redact provides functions for determining values to redact.

Index

Constants

View Source
const LengthMin = 6

LengthMin is the shortest string length that will be considered a potential secret by the environment redactor. e.g. if the redactor is configured to filter out environment variables matching *_TOKEN, and API_TOKEN is set to "none", this minimum length will prevent the word "none" from being redacted from useful log output.

Variables

This section is empty.

Functions

func MatchAny

func MatchAny(patterns []string, name string) (matched bool, err error)

MatchAny reports if the name matches any of the patterns.

func NeedlesFromEnv

func NeedlesFromEnv(patterns []string) (values, short []string, err error)

NeedlesFromEnv matches the patterns against os.Environ. It returns values to redact and the names of env vars with "short" values.

func New

func New(dst io.Writer, needles []string) *replacer.Replacer

New returns a replacer configured to write to dst, and redact all needles.

func Redacted

func Redacted([]byte) []byte

Redacted ignores its input and returns "[REDACTED]".

func String

func String(input string, needles []string) string

String is a convenience wrapper for redacting small strings. This is fine to call repeatedly with many separate strings, but avoid using this to redact large streams - it requires buffering the whole input and output.

func Vars

func Vars(patterns []string, environment []env.Pair) (matched []env.Pair, short []string, err error)

Vars returns the variable names and values to be redacted, given a redaction config string and an environment map. It also returned variables whose names match the redacted-vars config, but whose values were too short.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL