feat: expose envsitter match and scan tools

Adds safe matching/scanning endpoints so workflows can validate secrets without reading .env files.
This commit is contained in:
David Ibia
2026-01-12 19:28:58 +01:00
parent 6020518fc7
commit b21d63cb7c
5 changed files with 456 additions and 30 deletions

14
CHANGELOG.md Normal file
View File

@@ -0,0 +1,14 @@
# Changelog
## Unreleased
### Added
- `envsitter_match`: safe boolean matching for `.env` keys (single key, bulk keys, or all keys) with support for the EnvSitter match operators.
- `envsitter_match_by_key`: safe candidates-by-key matching (returns booleans only).
- `envsitter_scan`: safe shape scanning (`jwt`, `url`, `base64`) without returning values.
- `envsitter_keys.filterRegex`: optional regex filter for key listing.
### Changed
- Bumped `envsitter` dependency to `^0.0.2`.