Struct CredentialShape 

pub struct CredentialShape {
    pub exact_length: Option<usize>,
    pub prefix: Option<String>,
    pub body_min_length: Option<usize>,
    pub body_max_length: Option<usize>,
}

Per-detector credential SHAPE constraint ([detector.credential_shape]), OWNED HERE per the architecture law (was a centralized rules/detector-credential-shapes.toml [[shape]] list keyed by detector id, a per-detector property in a second file). A candidate whose byte length / prefix / post-prefix body length does not fit the declared shape is suppressed by the scanner’s shape gate (CredentialShapeRule::allows). Only a couple of fixed-format vendor detectors declare it: aws-access-key is exactly 20 bytes; anthropic-api-key is sk-ant-api03- + an 80..=120 body.

Fields

exact_length: Option<usize>

Exact total credential byte length, for a fixed-length format.

prefix: Option<String>

Literal prefix. The body-length bounds below apply ONLY to a candidate that starts with this prefix (a differently-shaped credential is not owned by this rule and passes untouched).

body_min_length: Option<usize>

Minimum body byte length AFTER prefix (requires prefix).

body_max_length: Option<usize>

Maximum body byte length AFTER prefix (requires prefix).

Implementations

impl CredentialShape

pub fn validate(&self, detector_id: &str) -> Result<(), String>

Validate the internal consistency of a declared shape (the single owner of these rules, was credential_shapes::validate_shape_entries). detector_id is only used to build a precise error message. Fails closed so a malformed per-detector shape is caught at load/build, never silently ignored.

Trait Implementations

impl Clone for CredentialShape

fn clone(&self) -> CredentialShape

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialShape

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CredentialShape

fn default() -> CredentialShape

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CredentialShape

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CredentialShape

impl PartialEq for CredentialShape

fn eq(&self, other: &CredentialShape) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CredentialShape

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CredentialShape