censored the refresh token in result

trufflesecurity · Oct 28, 2024 · 8088855 · 8088855
1 parent c2ff0f2
commit 8088855
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/detectors/gcpapplicationdefaultcredentials/gcpapplicationdefaultcredentials.go b/pkg/detectors/gcpapplicationdefaultcredentials/gcpapplicationdefaultcredentials.go
@@ -80,7 +80,7 @@ func (s Scanner) FromData(ctx context.Context, verify bool, data []byte) (result
 			DetectorType: detectorspb.DetectorType_GCPApplicationDefaultCredentials,
 			Raw:          []byte(detectedClientID),
 			RawV2:        []byte(detectedClientID + creds.RefreshToken),
-			Redacted:     creds.RefreshToken,
+			Redacted:     creds.RefreshToken[:3] + "..." + creds.RefreshToken[min(len(creds.RefreshToken)-1, 47):], // censor the refresh token
 		}
 
 		if verify {