feat(history): filter out various environment variables containing po…

…tential secrets (#2174)
atuinsh · Jun 20, 2024 · b06b7b5 · b06b7b5
1 parent 1273889
commit b06b7b5
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/crates/atuin-client/src/secrets.rs b/crates/atuin-client/src/secrets.rs
@@ -7,6 +7,26 @@ pub static SECRET_PATTERNS: &[(&str, &str, &str)] = &[
         "AKIA[0-9A-Z]{16}",
         "AKIAIOSFODNN7EXAMPLE",
     ),
+    (
+        "AWS secret access key env var",
+        "AWS_ACCESS_KEY_ID",
+        "export AWS_ACCESS_KEY_ID=KEYDATA",
+    ),
+    (
+        "AWS secret access key env var",
+        "AWS_ACCESS_KEY_ID",
+        "export AWS_ACCESS_KEY_ID=KEYDATA",
+    ),
+    (
+        "Microsoft Azure secret access key env var",
+        "AZURE_.*_KEY",
+        "export AZURE_STORAGE_ACCOUNT_KEY=KEYDATA",
+    ),
+    (
+        "Google cloud platform key env var",
+        "GOOGLE_SERVICE_ACCOUNT_KEY",
+        "export GOOGLE_SERVICE_ACCOUNT_KEY=KEYDATA",
+    ),
     (
         "Atuin login",
         r"atuin\s+login",