Function TestSpec_PublicAPI_SanitizeErrorMessage

pkg/stringutil/spec_test.go:580–604

TestSpec_PublicAPI_SanitizeErrorMessage validates the documented behavior of SanitizeErrorMessage as described in the package README.md. Specification: "Redacts potential secret key names from error messages. Matches uppercase SNAKE_CASE identifiers (e.g. MY_SECRET_KEY, API_TOKEN) and PascalCase id

(t *testing.T)

//	stringutil.SanitizeErrorMessage("Error: MY_SECRET_TOKEN is invalid")
//	// → "Error: [REDACTED] is invalid"
func TestSpec_PublicAPI_SanitizeErrorMessage(t *testing.T) {
	t.Run("redacts SNAKE_CASE secret (documented example)", func(t *testing.T) {
		result := SanitizeErrorMessage("Error: MY_SECRET_TOKEN is invalid")
		assert.Equal(t, "Error: [REDACTED] is invalid", result,
			"SanitizeErrorMessage should redact SNAKE_CASE secret identifiers")
	})

	// Specification: PascalCase identifiers ending with security-related suffixes
	// (e.g. GitHubToken, ApiKey) are redacted.
	t.Run("redacts PascalCase identifier ending with security suffix", func(t *testing.T) {
		result := SanitizeErrorMessage("error: ApiKey not found")
		assert.Contains(t, result, "[REDACTED]",
			"SanitizeErrorMessage should redact PascalCase identifiers ending with security suffixes")
	})

	// Specification: "Common GitHub Actions workflow keywords (GITHUB, RUNNER,
	// WORKFLOW, etc.) are excluded from redaction."
	// Standalone keywords like "GITHUB" don't match the compound pattern which
	// requires underscores, so they pass through unchanged.
	t.Run("does not redact standalone GITHUB keyword", func(t *testing.T) {
		result := SanitizeErrorMessage("Error: GITHUB is not responding")
		assert.NotContains(t, result, "[REDACTED]",
			"SanitizeErrorMessage should not redact standalone GITHUB keyword")
	})
}

// TestSpec_Constants_PATType validates the documented PATType constant values
// as described in the package README.md.