Struct Redaction 

pub struct Redaction {
    pub credential_findings: Vec<CredentialFinding>,
    pub redacted_payload: Option<String>,
}

Optional credential-redaction artefacts produced by a credential-scanner pass.

Populated when an enforcement layer ran the CredentialScanner and produced at least one finding. Both fields default to empty / None, matching the legacy code path that constructs audit entries without scanner output. Redaction::default() carries no findings, so consumers can treat it as “scan was clean / not run” without special-casing.

Security invariant

Neither field stores the raw secret value. credential_findings holds only the CredentialKind, byte offset, and the [REDACTED:<kind>] label (CredentialFinding’s end field is #[serde(skip)]). redacted_payload holds the sanitised payload returned by ScanResult::redact where every match has been replaced with its [REDACTED:<kind>] label.

Fields

credential_findings: Vec<CredentialFinding>

All credential / PII findings detected by the scanner. Empty when the scanner found nothing.

redacted_payload: Option<String>

The redacted version of the action payload (raw secret bytes replaced with [REDACTED:<kind>] labels). None when no findings were produced.

Trait Implementations

impl Clone for Redaction

fn clone(&self) -> Redaction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Redaction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Redaction

fn default() -> Redaction

Returns the “default value” for a type.

impl Eq for Redaction

impl PartialEq for Redaction

fn eq(&self, other: &Redaction) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Redaction