You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Secret RedactionArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
The redactor that masks secrets before they leave your machine now detects PEM private key blocks by scanning for matching BEGIN and END lines with at least 64 characters between them, replacing the whole block with [REDACTED], and loops so several keys in one text are all caught. High-confidence rules now require a non-word character on both sides, so they no longer trigger inside a longer identifier.
Details
The private key detector is added to the rule list as its own rule and reports as "Private Key".
Candidates that look like a shell fragment or a path/URL are now left alone instead of being masked.
