Under the hood
Useful2 Signal0
Secret-scrubbing rules live in one shared list so more paths can strip credentials consistently.
What's wrong with this entry?
Anonymous. No account, no email.
What
The credential-scrubbing regex table was split into two reusable arrays so more than one code path can apply the same rules.
Details
- One array covers Bearer, Basic, sk-ant, sk-, AKIA and ASIA forms.
- The other covers gh_ tokens, xox- tokens and JWTs.
- The existing transcript redactor splices both lists in.
- A new standalone helper applies all of them to any string, and is what the SDK error paths use for file paths.
Evidence
/\bey[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
Strings lifted out of the shipped bundle, so the claim above can be checked against them.