Rusty Raven 5f767d671a fix(redact): cover credential formats that leaked unredacted (#5274) ...

The GitHub-token rule only matched classic tokens (ghp_/gho_/ghu_/ghs_/ghr_),
even though its comment claims to cover fine-grained tokens. Add coverage for
GitHub fine-grained PATs (github_pat_), Slack app-level (xapp-) / config (xoxe-),
Google API keys (AIza...), and Stripe live secret/restricted keys (sk_live_/rk_live_).
Publishable Stripe keys (pk_live_) are intentionally NOT redacted (public).

Adds regression tests for every new shape, including a positive test that
pk_live_ stays unredacted.

2026-07-13 11:59:28 +08:00

..

redact_test.go

fix(redact): cover credential formats that leaked unredacted (#5274)

2026-07-13 11:59:28 +08:00

redact.go

fix(redact): cover credential formats that leaked unredacted (#5274)

2026-07-13 11:59:28 +08:00