Module io_boundary 

Structs

ScannedRead

Result of a file read with secret scanning applied.

Enums

BoundaryMode

Functions

boundary_mode_effective

check_secret_path_for_tool

ensure_ignore_gitignore_allowed

is_secret_like

jail_and_check_path

read_file_lossy

Reads a file as lossy UTF-8, rejecting binary files. Uses O_NOFOLLOW on Unix to prevent TOCTOU symlink attacks.

read_file_nofollow

Reads a file without following symlinks (TOCTOU protection). Falls back to regular read on non-Unix platforms.

read_file_scanned

Reads a file and applies secret detection/redaction per config.