Private key blocks are now reliably redacted instead of occasionally being skipped.
What's wrong with this entry?
The patterns that find PEM private key blocks and replace them with [REDACTED] were shared across calls and carried a search position between them, which could skip a block or mark the wrong boundaries. They are now built fresh on each scan.
/-----BEGIN[ A-Z0-9_-]{0,100}?PRIVATE KEY(?: BLOCK)?-----/gi
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.248
Wider secret redaction
Both mention redaction
-
v2.1.234
Secret redaction covers more Slack tokens and any length of private key
Both mention redaction
-
v2.1.234
Secret scanner detects Anthropic OAuth tokens
Both mention redaction