Documentation
¶
Overview ¶
Package secretscan holds the credential-shaped string patterns that every outbound artifact is checked against before it is written.
It lives on its own because more than one surface produces something a user may hand to someone else — a snapshot database, a team config file — and those surfaces have nothing else in common. Whichever one had owned the patterns would have become an accidental dependency of the others.
The Atlassian and Linear token patterns must not disagree with scripts/scan-internal.sh, which guards the repository itself.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Match ¶
Match reports the name of the first credential-shaped pattern found in s, or "" when none match. Callers report the name and never the value: a diagnostic that quotes the secret has published it a second time.
Email addresses are deliberately not a pattern here. A mirror legitimately carries assignee emails, and treating them as secrets would refuse every real snapshot.
Types ¶
This section is empty.
Source Files