Struct CredentialFinding 

pub struct CredentialFinding {
    pub kind: CredentialKind,
    pub offset: usize,
    pub matched: String,
    /* private fields */
}

A single detected credential finding.

offset is the byte offset in the original text where the pattern was found. matched is the redacted label, e.g. [REDACTED:AwsAccessKey]. The raw secret is never stored.

The end field is intentionally private; it is used by ScanResult::redact to splice the original match without exposing raw length arithmetic to callers.

Fields

kind: CredentialKind

Category of the detected credential.

offset: usize

Byte offset in the original text where the pattern begins.

matched: String

Redacted label replacing the secret, e.g. [REDACTED:AwsAccessKey].

Implementations

impl CredentialFinding

pub fn from_regex_match(offset: usize, end: usize) -> Self

Construct a finding for a match produced by a policy-defined regex pattern.

Used by aa-gateway when custom data.sensitive_patterns regexes match. The offset and end are byte positions returned by the regex engine.

Trait Implementations

impl Clone for CredentialFinding

fn clone(&self) -> CredentialFinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialFinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CredentialFinding

impl PartialEq for CredentialFinding

fn eq(&self, other: &CredentialFinding) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CredentialFinding