fix bug where regex redaction is run even when there isn't a match

bricks-cloud · May 9, 2024 · 281ef2d · 281ef2d
1 parent 9de7e3e
commit 281ef2d
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/internal/policy/policy.go b/internal/policy/policy.go
@@ -744,11 +744,13 @@ func (p *Policy) scan(input []string, scanner Scanner, cd CustomPolicyDetector,
 						continue
 					}
 
-					if sr.Action != Block && sr.Action != AllowButWarn {
-						sr.Action = AllowButRedact
-					}
+					if regex.MatchString(text) {
+						replaced = regex.ReplaceAllString(text, "***")
 
-					replaced = regex.ReplaceAllString(text, "***")
+						if sr.Action != Block && sr.Action != AllowButWarn {
+							sr.Action = AllowButRedact
+						}
+					}
 				}
 			}