internal/

Package config loads Redactyl configuration from local and global YAML files with precedence rules.

Package engine contains the core scanning logic for Redactyl.

Package files contains small utilities for file operations used across the codebase, keeping IO details out of higher-level packages.

Package git provides helpers for reading diffs, staged changes, and commit history used by the scanning engine for different scan modes.

Package ignore provides path matching helpers for Redactyl based on gitignore-style patterns (from a .redactylignore file and built-in defaults).

Package redact includes helpers to redact or transform sensitive content in files, used by fix/remediation commands in the CLI.

Package report provides rendering and export utilities for Redactyl findings, including human-readable tables and SARIF 2.1.0 output.

Package update provides lightweight online update checks with a 24-hour cache, used by the CLI to suggest newer versions without interrupting scans.