Documentation
¶
Overview ¶
Package sensitive centralizes defense-in-depth recognition and redaction of credential-shaped keys before values reach diagnostics or persistent logs.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Key ¶
Key reports whether a label conventionally carries credential material. Separators are canonicalized so human-readable process output such as "Unseal Key" receives the same protection as UNSEAL_KEY configuration.
func RedactText ¶
RedactText removes values from sensitive key/value lines while retaining the label and delimiter for useful diagnostics. It operates on arbitrary text so stdout/stderr forwarded through the logging layer receives the same guarantee as structured fields.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.