Commit 83592de
Move crawl_n_mask to regexp based logic
We're moving crawl_n_mask to regexp based logic which is able
to mask any type of file (json, yaml, txt, log).
Regexps search for exact words for avoiding false positives (We don't
want to maske SecretName when searching for Secret keyword. This is
the reason of increase PROTECT_KEYS impacts positive in the performance.
New version also capable to mask two secrets in the same log line.
Avoiding masking Ansible headers such Task and Play.
Added multiprocessing support for parallel file masking.
Added file masking integration tests, with temporary files.
AI-Assisted: This change was developed with assistance from Claude
(Anthropic's AI assistant) for code refactoring, test development,
and PEP 8 compliance."
Signed-off-by: Enrique Vallespi Gil <evallesp@redhat.com>1 parent 53981f3 commit 83592de
File tree
3 files changed
+541
-148
lines changed- plugins/modules
- roles/artifacts/tasks
- tests/unit/modules
3 files changed
+541
-148
lines changed
0 commit comments