9eab1adb9d
for #2543 BREAKING CHANGE: semantic-release is now ESM-only. since it is used through its own executable, the impact on consuming projects should be minimal BREAKING CHANGE: references to plugin files in configs need to include the file extension because of executing in an ESM context
21 lines
776 B
JavaScript
21 lines
776 B
JavaScript
import {escapeRegExp, isString, size} from 'lodash-es';
|
|
import {SECRET_MIN_SIZE, SECRET_REPLACEMENT} from './definitions/constants.js';
|
|
|
|
export default (env) => {
|
|
const toReplace = Object.keys(env).filter((envVar) => {
|
|
// https://github.com/semantic-release/semantic-release/issues/1558
|
|
if (envVar === 'GOPRIVATE') {
|
|
return false;
|
|
}
|
|
|
|
return /token|password|credential|secret|private/i.test(envVar) && size(env[envVar].trim()) >= SECRET_MIN_SIZE;
|
|
});
|
|
|
|
const regexp = new RegExp(
|
|
toReplace.map((envVar) => `${escapeRegExp(env[envVar])}|${escapeRegExp(encodeURI(env[envVar]))}`).join('|'),
|
|
'g'
|
|
);
|
|
return (output) =>
|
|
output && isString(output) && toReplace.length > 0 ? output.toString().replace(regexp, SECRET_REPLACEMENT) : output;
|
|
}
|