cribra 0.3.0

Privacy-first Rust core for detecting, querying, and safely transforming secrets and sensitive data
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

//! Build share-safe transformed sources from scan results.
//!
//! Run with:
//!
//! ```text
//! cargo run --example share_safe
//! ```

use cribra::{
    Rule, Scanner, Severity,
    transform::{ShareBundle, ShareMode},
};

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let scanner = Scanner::builder()
        .rule(Rule::prefix(
            "acme.api-key",
            "acme_live_",
            Severity::Critical,
        ))
        .rule(Rule::literal(
            "internal.marker",
            "PRIVATE_VALUE",
            Severity::High,
        ))
        .build()?;

    let sources = ["ACME_API_KEY=acme_live_7f3a91\n", "marker=PRIVATE_VALUE\n"];

    let results = scanner.scan([("config.env", sources[0]), ("settings.env", sources[1])]);

    let bundle = ShareBundle::builder()
        .mode(ShareMode::Redact)
        .build(&results, sources)?;

    println!("{}", bundle.manifest());

    for source in &bundle {
        println!("--- {} ---", source.key());
        print!("{}", source.content());
    }

    Ok(())
}