@checkly/playwright-core 1.51.16-beta.0 → 1.51.17-beta.0

package/lib/checkly/secretsFilter.js

@@ -10,41 +10,21 @@ function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e
 */
 
 const IdentityFunction = s => s;
+const secretPlaceholder = '*********';
 const secretsFilter = () => {
   const disabled = process.env['CHECKLY_INTERNAL_ENABLE_PATCHED_TRACING'] !== 'true';
   if (disabled) return IdentityFunction;
-
-  // Cache for regex to avoid recompiling on every call
-  let cachedRegex = null;
-  let cachedKeys = '';
-
-  // Regex to filter out console markers
-  const consoleMarkerRegex = /\[CHECKLY_RUNTIME_SECRET\].*?\[\/CHECKLY_RUNTIME_SECRET\]/g;
+  const keys = process.env['CHECKLY_INTERNAL_REPLACE_TRACE_KEYS'] || '[]';
+  const gitLeaksKeys = process.env['CHECKLY_GITLEAKS_RULES'] || '[]';
+  const keylist = JSON.parse(keys);
+  const gitLeaksKeyList = JSON.parse(gitLeaksKeys).map(rule => new RegExp(rule, 'gi'));
+  const escapedList = keylist.map(_escapeRegExp.default);
+  const regex = new RegExp(escapedList.join('|'), 'g');
   return s => {
-    const keys = process.env['CHECKLY_INTERNAL_REPLACE_TRACE_KEYS'] || '[]';
-
-    // Only recompile regex if keys have changed (handles runtime CHECKLY_SECRET_ variables)
-    if (keys !== cachedKeys) {
-      try {
-        const keylist = JSON.parse(keys);
-        if (keylist.length === 0) {
-          cachedRegex = null;
-        } else {
-          const escapedList = keylist.map(_escapeRegExp.default);
-          cachedRegex = new RegExp(escapedList.join('|'), 'g');
-        }
-        cachedKeys = keys;
-      } catch (e) {
-        // If parsing fails, we keep using the previous cached regex
-      }
-    }
-
-    // First filter out console markers entirely
-    let filtered = s.replace(consoleMarkerRegex, '');
-
-    // Scrub secrets
-    if (cachedRegex) filtered = filtered.replaceAll(cachedRegex, '*********');
-    return filtered;
+    // Replace with GitLeaks secrets and Checkly secrets
+    return gitLeaksKeyList.reduce((memo, gitLeaksRule) => {
+      return memo.replaceAll(gitLeaksRule, secretPlaceholder);
+    }, s.replaceAll(regex, secretPlaceholder));
   };
 };
 exports.secretsFilter = secretsFilter;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkly/playwright-core",
-  "version": "1.51.16-beta.0",
+  "version": "1.51.17-beta.0",
   "description": "A high-level API to automate web browsers",
   "repository": {
     "type": "git",