@eagleoutice/flowr - v2.17.4
    Preparing search index...

    Interface SecretExfiltrationConfig

    interface SecretExfiltrationConfig {
        controlledInputs: readonly InputType[];
        credentialNamePattern: string;
        credentialValuePattern: string;
        declassifiers: readonly Identifier[];
        fileTrust: FileTrust;
        optIn: readonly SecretLeak[];
        secretFiles: string;
        sinks: readonly SecretSink[];
        sources: readonly Identifier[];
        trustedFiles: string;
        [key: string]: unknown;
    }

    Hierarchy (View Summary)

    Indexable

    • [key: string]: unknown
    Index
    controlledInputs credentialNamePattern credentialValuePattern declassifiers fileTrust optIn secretFiles sinks sources trustedFiles
    controlledInputs: readonly InputType[]

    input types that make a destination untrusted, including files (see fileTrust for what they hold)

    credentialNamePattern: string

    environment variable names that hold credentials (case-insensitive)

    credentialValuePattern: string

    literals that are credentials, as in no-leaked-credentials

    declassifiers: readonly Identifier[]

    extra functions whose result is never secret

    fileTrust: FileTrust

    how far the content of files is trusted not to hold secrets; untrusted content gives uncertain results

    optIn: readonly SecretLeak[]

    low-severity leaks to report

    secretFiles: string

    paths of files holding secrets, in addition to credential files like .Renviron

    sinks: readonly SecretSink[]

    where secrets leave the process

    sources: readonly Identifier[]

    extra functions returning secrets

    trustedFiles: string

    paths of files trusted to hold no secrets, an empty pattern trusts none

    Settings
    Member Visibility

    On This Page
    Properties