pub const ALLOWED_FIELDS: &[&str];Expand description
The field names this sink emits verbatim. Everything else is replaced with
REDACTION.
Read this before adding a name. A field on this list still passes
through redact, so adding one does not switch redaction off — but it
does mean the field’s value reaches the scrubber instead of being discarded,
and the scrubber only recognises shapes it was taught. Add a name only when
the value is structurally incapable of carrying a credential: an
identifier, an enumerated state, a count, a duration. Never add a name whose
value is free text supplied by GitHub or by a workflow.
Kept sorted, and a test enforces that, so an addition is one line in a diff rather than a name buried in the middle of a list.