redact value only

CALeDNA · Dec 7, 2023 · c0c4a95 · c0c4a95
1 parent 934f47c
commit c0c4a95
Showing 1 changed file with 8 additions and 8 deletions.
diff --git a/scheduler/supabase/supabase_ben.py b/scheduler/supabase/supabase_ben.py
@@ -5,18 +5,18 @@
 from configparser import ConfigParser
 
 sensitive_patterns = [
-    r'AWS_ACCESS_KEY_ID=[\w-]+',
-    r'AWS_SECRET_ACCESS_KEY=[\w-]+',
-    r'AWS_DEFAULT_REGION=[\w-]+',
-    r'AWS_S3_ACCESS_KEY_ID=[\w-]+',
-    r'AWS_S3_SECRET_ACCESS_KEY=[\w-]+',
-    r'AWS_S3_DEFAULT_REGION=[\w-]+',
-    r'AWS_S3_BUCKET=[\w-]+'
+    r'(AWS_ACCESS_KEY_ID=)([^\s]+)',
+    r'(AWS_SECRET_ACCESS_KEY=)([^\s]+)',
+    r'(AWS_DEFAULT_REGION=)([^\s]+)',
+    r'(AWS_S3_ACCESS_KEY_ID=)([^\s]+)',
+    r'(AWS_S3_SECRET_ACCESS_KEY=)([^\s]+)',
+    r'(AWS_S3_DEFAULT_REGION=)([^\s]+)',
+    r'(AWS_S3_BUCKET=)([^\s]+)'
 ]
 
 def scrub_command(command, sensitive_patterns):
     for pattern in sensitive_patterns:
-        command = re.sub(pattern, "REDACTED", command)
+        command = re.sub(pattern, r'\1REDACTED', command)
     return command
 
 def config(filename='database.ini', section='postgresql'):