Show HN: StackEngine CLI – Redact credentials in cloud ops (AST/regex)

Category: security

Tags: security, secrets-management, llm, cli, redaction, cloud-native

Score: 7.5/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 7)

StackEngine CLI is a zero-trust remediation engine that redacts credentials from cloud-native ops files and clipboard contents before sending to LLMs, then restores them upon return. It uses a multi-stage pipeline combining regex and tree-sitter AST parsing for robust secret detection, with proxy and file-based workflows to prevent credential exfiltration.

Target audience: devops, backend devs, security engineers

Repository: https://github.com/gweisec/stackengine · TypeScript · NOASSERTION · 1 stars

View on Hacker News