redact

Documentation

Overview

Package redact scrubs credential-shaped substrings from external command output before it is surfaced in an error, and caps the size so a misbehaving tool can't flood logs. It is deliberately conservative: it masks the well-known secret shapes (URL userinfo, GitHub/GitLab tokens, bearer and password fields) and leaves the rest of the diagnostic intact, so a failing `git pull` / `gh` / `glab` invocation still reports something actionable.

Index

• func Output(b []byte) string

Functions

func Output

func Output(b []byte) string

Output masks credential-shaped substrings in b and caps the result length. It trims surrounding whitespace, so callers need not TrimSpace first.