GO-2026-5063: Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind in github.com/entireio/cli

redact

package

v0.4.6 Latest Latest Go to latest Published: Feb 24, 2026 License: MIT Imports: 9 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/entireio/cli

Links

Documentation ¶

Index ¶

func Bytes(b []byte) []byte
func JSONLBytes(b []byte) ([]byte, error)
func JSONLContent(content string) (string, error)
func String(s string) string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Bytes ¶

func Bytes(b []byte) []byte

Bytes is a convenience wrapper around String for []byte content.

func JSONLBytes ¶

func JSONLBytes(b []byte) ([]byte, error)

JSONLBytes is a convenience wrapper around JSONLContent for []byte content.

func JSONLContent ¶

func JSONLContent(content string) (string, error)

JSONLContent parses each line as JSON to determine which string values need redaction, then performs targeted replacements on the raw JSON bytes. Lines with no secrets are returned unchanged, preserving original formatting.

func String ¶

func String(s string) string

String replaces secrets in s with "REDACTED" using layered detection: 1. Entropy-based: high-entropy alphanumeric sequences (threshold 4.5) 2. Pattern-based: gitleaks regex rules (180+ known secret formats) A string is redacted if EITHER method flags it.

Types ¶

This section is empty.

Source Files ¶

View all Source files

redact.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL