example.py

"""Check the install: find and redact secrets in four sample texts.

    python example.py

Every value below is invented: random characters in the shapes real services use. None is a working credential.
"""
from cbx_secrets import SecretDetector

SAMPLES = [
    "DATABASE_URL=postgres://app_user:Vq7mR2xL9pTz@db.internal.example:5432/orders\n"
    "STRIPE_SECRET_KEY=sk_live_4eC39HqLyjWDarjtT1zdp7dcQw8vXk2Z\n"
    "LOG_LEVEL=info\n",
    'import boto3\n\n'
    's3 = boto3.client("s3", aws_access_key_id="AKIAQ3W7RNA2FDX5KZPM",\n'
    '                  aws_secret_access_key="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")\n',
    'Hey, the deploy is failing again. I used `curl -H "Authorization: Bearer ghp_8xK2mQ9vL4nR7tY1wZ3pB6cF0hJ5sD2gA9eU"`\n'
    "and got a 401. The commit is 3f9a1c2e7b4d8f6a0e5c9b2d1a7f4e8c6b3d0a9f if that helps.",
    'jwt_secret: "Zr8!kP2qW9xM4vT7nL1sB6yH3cF0gJ5d"\n'
    "session_cookie_name: app_session\n"
    'api_key: "${API_KEY}"   # read from the environment\n',
]

det = SecretDetector()
print(f"model loaded on {det.device}\n")
for text in SAMPLES:
    spans, ms = det.timed_extract(text)
    print(text)
    for s in spans:
        print(f"   {s['label']:20} {s['text']!r}  [{s['start']}:{s['end']}]")
    print(f"   redacted: {det.redact(text)!r}")
    print(f"   ({ms:.0f} ms)\n")