Concourse Filter

Redacts Stdout text that contain text from env variables

Compile

$ go build

Usage

$ export PASSWORD=password
$ ./test.sh |& ./concourse-filter

Sample output

Without the filter

➜  concourse-filter git:(master) ✗ ./test.sh
start test
password
dpasswordd
ls: password: No such file or directory
./test.sh: line 7: ech: command not found
stop test password

With the filter

➜  concourse-filter git:(master) ✗ ./test.sh |& ./concourse-filter
start test
[redacted]
d[redacted]d
ls: [redacted]: No such file or directory
./test.sh: line 7: ech: command not found
stop test [redacted]

Testing

go get ./...
ginkgo

Limitations

• Cannot handle filtering of multi-token environment variable values (ex. SECRET='MULTI WORD SECRET'
• The stderr based filtering only works on bash 4.x