rust-sanitize 0.11.0

Deterministic one-way data sanitization engine
Documentation
# /etc/fstab — mount table credential options and remote server addresses
# Sources: gitlab-scrubber fstab.go (fstabCredentialsRe + fstabExtractServer)

# CIFS/SMB mount options: password=, username=, domain=, credentials=
# Options field is comma-separated: "username=alice,password=secret,domain=corp"
- kind: regex
  pattern: '(?i)\bpassword=([^,\s"]+)'
  category: custom:password
  label: fstab_mount_password

- kind: regex
  pattern: '(?i)\busername=([^,\s"]+)'
  category: name
  label: fstab_mount_username

- kind: regex
  pattern: '(?i)\bdomain=([^,\s"]+)'
  category: hostname
  label: fstab_mount_domain

- kind: regex
  pattern: '(?i)\bcredentials=([^,\s"]+)'
  category: hostname
  label: fstab_mount_credentials_path

# CIFS/SMB server: //host/share → host (IPv4, IPv6, or hostname)
- kind: regex
  pattern: '^//([^/\s]+)/'
  category: hostname
  label: fstab_cifs_server

# NFS server: host:/export/path → host
- kind: regex
  pattern: '^([a-zA-Z0-9][a-zA-Z0-9.\-]*):/[^\s]'
  category: hostname
  label: fstab_nfs_server

# iSCSI / NBD / other network device: any IPv4 in first column
- kind: regex
  pattern: '^(\d{1,3}(?:\.\d{1,3}){3})[:/\s]'
  category: ipv4
  label: fstab_device_ip

- kind: allow
  values:
    - "defaults"
    - "noatime"
    - "nofail"
    - "auto"
    - "noauto"
    - "ro"
    - "rw"
    - "user"
    - "nouser"
    - "exec"
    - "noexec"
    - "suid"
    - "nosuid"
    - "proc"
    - "tmpfs"
    - "ext4"
    - "ext3"
    - "xfs"
    - "btrfs"
    - "vfat"
    - "ntfs"
    - "nfs"
    - "nfs4"
    - "cifs"
    - "smbfs"
    - "swap"
    - "none"
    - "127.0.0.1"
    - "localhost"
    - "true"
    - "false"
    - "yes"
    - "no"
    - "null"
    - "nil"
    - "0"
    - "1"
    - "0.0.0.0"
    - "::1"
    - "changeme"
    - "example"
    - "sample"
    - "placeholder"
    - "${*}"
    - "{{*}}"
    - "example.com"
    - "example.org"