Skip to content

Commit b06b7b5

Browse files
authored
feat(history): filter out various environment variables containing potential secrets (#2174)
1 parent 1273889 commit b06b7b5

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

crates/atuin-client/src/secrets.rs

+20
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,26 @@ pub static SECRET_PATTERNS: &[(&str, &str, &str)] = &[
77
"AKIA[0-9A-Z]{16}",
88
"AKIAIOSFODNN7EXAMPLE",
99
),
10+
(
11+
"AWS secret access key env var",
12+
"AWS_ACCESS_KEY_ID",
13+
"export AWS_ACCESS_KEY_ID=KEYDATA",
14+
),
15+
(
16+
"AWS secret access key env var",
17+
"AWS_ACCESS_KEY_ID",
18+
"export AWS_ACCESS_KEY_ID=KEYDATA",
19+
),
20+
(
21+
"Microsoft Azure secret access key env var",
22+
"AZURE_.*_KEY",
23+
"export AZURE_STORAGE_ACCOUNT_KEY=KEYDATA",
24+
),
25+
(
26+
"Google cloud platform key env var",
27+
"GOOGLE_SERVICE_ACCOUNT_KEY",
28+
"export GOOGLE_SERVICE_ACCOUNT_KEY=KEYDATA",
29+
),
1030
(
1131
"Atuin login",
1232
r"atuin\s+login",

0 commit comments

Comments
 (0)