LogShield – Deterministic CLI tool to sanitize secrets from logs

Show HN: LogShield – Deterministic CLI tool to sanitize secrets from logs

Operating in show hn launch, LogShield – Deterministic CLI tool to sanitize secrets from logs operates.

Profile

Hi HN,I built LogShield as an experiment in deterministic log sanitization. I wanted to see whether a purely rule-based approach could reliably remove secrets from logs without breaking structure or causing false positives.LogShield is a small open-source CLI designed to work as a drop-in filter in pipelines:- Reads from stdin, writes sanitized logs to stdout- Explicit, inspectable rules (no probabilistic or ML-based masking)- Same input → same output, every time- Focused on avoiding false positives that break debuggingTypical use cases I had in mind:- Sharing logs in issues, Slack, or support tickets- CI/CD pipelines before uploading artifacts- Log shipping to third-party servicesExample:ca

Its activity falls under show hn launch; the profile below is assembled from public directory data.

Directory data places it at the Show HN launch stage.

Website: www.logshield.dev