redact

type Redactor ¶

type Redactor struct {
	// contains filtered or unexported fields
}

Redactor replaces known secret values with a fixed placeholder.

Callers must funnel any string through Redact before it reaches a log sink; the redactor cannot intercept logs it never sees. Typical wiring is to construct one Redactor per run from secrets.Resolver.AllValues() and use it as the single log-formatting choke point.

func New(secrets []string) *Redactor

func (r *Redactor) Redact(s string) string