Add PROFILE_SECRETS_FORBIDDEN diagnostic and enhanced profile validation to prevent accidental publication of credentials in profile YAML files. Changes: - Add DiagCode::ProfileSecretsForbidden to diagnostics catalog - Create pdftract-core/src/profiles/ module with loader.rs - Implement separator-tolerant key matching (api_key/apiKey/api-key/api.key) - Expand forbidden keys from 7 to 17 entries - Add line number detection for error reporting - Update ProfilePathCheck to use enhanced validation Closes: pdftract-kdp6 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| pdftract-cer-diff | ||
| pdftract-cli | ||
| pdftract-core | ||
| pdftract-libpdftract | ||
| pdftract-py | ||