Add PROFILE_SECRETS_FORBIDDEN diagnostic and enhanced profile validation to prevent accidental publication of credentials in profile YAML files. Changes: - Add DiagCode::ProfileSecretsForbidden to diagnostics catalog - Create pdftract-core/src/profiles/ module with loader.rs - Implement separator-tolerant key matching (api_key/apiKey/api-key/api.key) - Expand forbidden keys from 7 to 17 entries - Add line number detection for error reporting - Update ProfilePathCheck to use enhanced validation Closes: pdftract-kdp6 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| src | ||
| tests | ||
| build.rs | ||
| Cargo.toml | ||
| pdftract-cli.cdx.json | ||