/**
 * Centralized redaction for secret-like values that may appear in match
 * snippets, log lines, or rendered output.
 *
 * The goal is _defense in depth_: a finding that says "we found a Stripe key
 * here" should never include the actual key in JSON / SARIF / Markdown output
 * a CI system might forward to Slack, GitHub Actions logs, or PR comments.
 *
 * Detection list is intentionally conservative; we only mask values whose
 * structure is unambiguous. Generic "looks high-entropy" strings are left as
 * the rule's `match` so reviewers still have actionable evidence.
 */
export declare function redact(value?: string): string | undefined;
//# sourceMappingURL=redact.d.ts.map