{
  "version": "1",
  "rules": [
    {
      "description": "Redact any field ending in 'password' (e.g., password, storePassword, certificatePfxPassword)",
      "trigger": "password",
      "caseSensitive": false,
      "search": "(\\b\\w*password[ \\t]*[:=][ \\t]*).+",
      "replace": "$1[REDACTED]"
    },
    {
      "description": "Redact any field ending in 'secret' (e.g., secret, clientSecret)",
      "trigger": "secret",
      "caseSensitive": false,
      "search": "(\\b\\w*secret[ \\t]*[:=][ \\t]*).+",
      "replace": "$1[REDACTED]"
    },
    {
      "description": "Redact any field ending in 'key' (e.g., secretKey, accessKey)",
      "trigger": "key",
      "caseSensitive": false,
      "search": "(\\b\\w*key[ \\t]*[:=][ \\t]*).+",
      "replace": "$1[REDACTED]"
    },
    {
      "description": "Redact any field containing 'token' (e.g., authToken)",
      "trigger": "token",
      "caseSensitive": false,
      "search": "(\\b\\w*token[ \\t]*[:=][ \\t]*).+",
      "replace": "$1[REDACTED]"
    }
  ]
}
