Reject placeholder OpenBao drill evidence

This commit is contained in:
tegwick 2026-06-02 02:02:09 +02:00
parent 606a5f3e1e
commit 18c1b86498
4 changed files with 37 additions and 4 deletions

View file

@ -95,6 +95,16 @@ for marker in secret_markers:
if marker in encoded:
errors.append(f"secret-looking marker present: {marker}")
placeholder_markers = [
"YYYY-MM-DD",
"example",
"Do not record",
"<",
]
for marker in placeholder_markers:
if marker in encoded:
errors.append(f"template placeholder present: {marker}")
if errors:
for error in errors:
print(f"[FAIL] {error}", file=sys.stderr)