Skip to main content

tirith_core/rules/
shared.rs

1//! Shared constants and helpers used by multiple rule modules.
2
3/// Environment variable names that carry sensitive credentials.
4/// Used by both `command.rs` (SensitiveEnvExport detection) and
5/// `credential.rs` (dedup suppression).
6pub const SENSITIVE_KEY_VARS: &[&str] = &[
7    "AWS_ACCESS_KEY_ID",
8    "AWS_SECRET_ACCESS_KEY",
9    "AWS_SESSION_TOKEN",
10    "OPENAI_API_KEY",
11    "ANTHROPIC_API_KEY",
12    "GITHUB_TOKEN",
13];