ubon
Version:
Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.
14 lines • 688 B
TypeScript
/**
* Centralized redaction for secret-like values that may appear in match
* snippets, log lines, or rendered output.
*
* The goal is _defense in depth_: a finding that says "we found a Stripe key
* here" should never include the actual key in JSON / SARIF / Markdown output
* a CI system might forward to Slack, GitHub Actions logs, or PR comments.
*
* Detection list is intentionally conservative; we only mask values whose
* structure is unambiguous. Generic "looks high-entropy" strings are left as
* the rule's `match` so reviewers still have actionable evidence.
*/
export declare function redact(value?: string): string | undefined;
//# sourceMappingURL=redact.d.ts.map