Great idea/project! I am getting really sick of rotating multiple keys per day thanks to Clod Code, so I was excited to find this.
I'd like to request glob support in the blocked files lists for when blocked files follow named templates. My example is WireGuard configs as generated by the linuxserver WireGuard Docker image. While custom rules can redact the private and preshared keys from the conf, there are a few files that shouldn't be touched as they contain nothing but the secret information:
./config/peer*/privatekey-peer*./config/peer*/presharedkey-peer*./config/peer*/peer*.png
So for example if the peer is phone you'd have peer_phone/peer_phone.png, presharedkey-peer_phone, privatekey-peer_phone.
Because the current matcher only supports literal substring, basename, and endswith matches, I have to manually add all three files per peer rather than simply excluding everything with a glob.
Thanks!
Great idea/project! I am getting really sick of rotating multiple keys per day thanks to Clod Code, so I was excited to find this.
I'd like to request glob support in the blocked files lists for when blocked files follow named templates. My example is WireGuard configs as generated by the linuxserver WireGuard Docker image. While custom rules can redact the private and preshared keys from the conf, there are a few files that shouldn't be touched as they contain nothing but the secret information:
./config/peer*/privatekey-peer*./config/peer*/presharedkey-peer*./config/peer*/peer*.pngSo for example if the peer is
phoneyou'd havepeer_phone/peer_phone.png,presharedkey-peer_phone,privatekey-peer_phone.Because the current matcher only supports literal substring, basename, and endswith matches, I have to manually add all three files per peer rather than simply excluding everything with a glob.
Thanks!