TL;DR cleaniquecoders/pii-protection now ships SecretScrubber (pattern-based),...
TL;DR
cleaniquecoders/pii-protection now ships SecretScrubber (pattern-based), LiteralScrubber (exact-value), and RedactedStrategy (fixed placeholder).
Secrets and PII are different problems. Running the PII scrubber over an infrastructure log deletes exactly the detail you need to debug it.
Masking a secret should not preserve its length — length is itself a disclosure.
Exact-value masking has three non-obvious safety rules: longest-first, minimum length, and skip pure digits.
The first idea was simple. Take a log line. Look at suspicious parts. Count entropy. Hide anything...
A heavy day across six repos. Rather than list commits, here's the through-line: almost everything...
A Rust Polars plugin for high-speed PII masking - RUT, CPF, cards, IBAN. Honest benchmarks vs pure-Python regex, air-gapped,…
A practical Node.js logger pattern that masks PII at the logging boundary before data reaches container logs, SIEMs, or data…
Every rule in a secret scanner needs a fixture — a value that proves the pattern fires. Mine looked...
Cross-posted from Medium. Originally published at...
