Dontopedia

check_sensitive_data

From Dontopedia, the open, paraconsistent wiki. (Last updated 2026-06-08.)

check_sensitive_data has 83 facts recorded in Dontopedia across 6 references, with 14 live disagreements.

83 facts·50 predicates·6 sources·14 in dispute

Mostly:has sequential steps(7), rdf:type(5), returns(5)

Maturity scale raw canonical shape-checked rule-derived certified

Inbound mentions (43)

Other subjects in dontopedia point AT this entity as a value. These are inverse relationships — e.g. "X motherOf this subject" — and answer questions the forward facts can't. Grouped by predicate.

usedInUsed in(8)

usedByUsed by(4)

containsContains(3)

demonstratesDemonstrates(3)

inverseOfInverse of(3)

performedByPerformed by(3)

performsPerforms(2)

accessedByAccessed by(1)

appliedToApplied to(1)

argumentArgument(1)

callsFunctionCalls Function(1)

checkedByChecked by(1)

containsFunctionContains Function(1)

containsPythonCodeContains Python Code(1)

createdByCreated by(1)

definedInDefined in(1)

exhibitedByExhibited by(1)

governsGoverns(1)

illustratesIllustrates(1)

importedByImported by(1)

instantiatedInInstantiated in(1)

isUsedInIs Used in(1)

parameterOfParameter of(1)

verifiedByVerified by(1)

Other facts (80)

The long tail: predicates that appear too rarely to warrant their own section. Filter or scroll to find a specific one. Each row links to its source.

80 facts
PredicateValueRef
Has Sequential Stepsdefine-regex[5]
Has Sequential Stepssearch-config[5]
Has Sequential Stepscheck-matches[5]
Has Sequential Stepscreate-client[5]
Has Sequential Stepsiterate-matches[5]
Has Sequential Stepsread-secret[5]
Has Sequential Stepshandle-exception[5]
Rdf:typePython Function[1]
Rdf:typePython Function[2]
Rdf:typeFunction[3]
Rdf:typeFunction[5]
Rdf:typeSecurity Function[6]
Returnsstring[1]
ReturnsSecurity issues found in config[4]
ReturnsConfig is secure[4]
ReturnsSensitive Data Found Message[6]
ReturnsConfig Secure Message[6]
Has Return StatementReturn Sensitive Data Secure[3]
Has Return StatementReturn Sensitive Data Insecure[3]
Has Return StatementReturn Sensitive Data Uncheked[3]
Has Return StatementReturn Config Secure[3]
Has Parameterconfig[1]
Has Parameterconfig[3]
Has Parameterconfig[5]
TargetsVariable Definitions[1]
TargetsResource Properties[1]
TargetsEnvironment Variables[1]
Searches inconfig[1]
Searches inConfig[5]
ChecksTerraform Config[2]
ChecksFail Status[4]
Combinesruntime vault check[3]
Combinesstatic code analysis[3]
Has Return PathSecurity Issues Found[4]
Has Return PathConfig Secure[4]
DemonstratesSecurity Scanning Workflow[4]
DemonstratesSecurity Anti Patterns[6]
Uses Subprocess Parameterscapture_output=True[4]
Uses Subprocess Parameterstext=True[4]
Uses LibraryHvac Library[5]
Uses LibraryRe Library[5]
Returns MessageSensitive data found but stored securely in Vault[5]
Returns MessageSensitive data found and not stored securely: {error message}[5]
ImportsHvac Library[5]
ImportsRe Library[5]
Uses Regex PatternRegex Pattern[1]
Finds Matches Usingre.findall[1]
Stores Matches inmatches[1]
Returns on ErrorSensitive data found in config[1]
Returns on SuccessConfig is secure[1]
Is Designed forTerraform Config[1]
Is Called WithTerraform Config[2]
Has Namecheck_sensitive_data[3]
Returns Stringtrue[3]
Has Conditional LogicIf Secret Assignment[3]
Has Else BranchReturn Config Secure[3]
Implementssecurity validation pattern[3]
Employsdual-security-approach[3]
Takes Parameterconfig[4]
Writes toTemp Config File[4]
RunsTfsec Tool[4]
Has PurposeDetect Security Issues[4]
ProcessesCommand Output[4]
Creates Temporary FileTemp Config File[4]
UsesCommand Line Interface[4]
Checks Stdout forFAIL[4]
Is Defined Withdef keyword[4]
Uses Triple QuotesMultiline String[4]
Written inPython[5]
Reads Secret FromVault Url[5]
Accesses Kv StoreVault Url[5]
Handles Exceptionhvac.exceptions.VaultError[5]
Iterates OverMatches Variable[5]
Has Return Values2[5]
Has Function Bodytrue[5]
Function Body Lines24[5]
ParameterConfig Parameter[6]
Checks forVault Reference[6]
Validatesvault integration status[6]
Design Patternvalidation function[6]

Timeline

Timeline axis is valid_time — when each source says the fact was true in the world, not when Dontopedia learned about it. Retracted rows are kept for provenance; coloured stripes indicate the context kind.

typebeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:PythonFunction
labelbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
check_sensitive_data
hasParameterbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
config
returnsbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
string
usesRegexPatternbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:regex-pattern
searchesInbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
config
findsMatchesUsingbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
re.findall
storesMatchesInbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
matches
returnsOnErrorbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
Sensitive data found in config
returnsOnSuccessbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
Config is secure
isDesignedForbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:terraform-config
targetsbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:variable-definitions
targetsbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:resource-properties
targetsbeam/c0738f21-b557-4dd4-8a0a-55b7ace87278
ex:environment-variables
typebeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:PythonFunction
isCalledWithbeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:terraform-config
checksbeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:terraform-config
typebeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:Function
hasNamebeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
check_sensitive_data
hasParameterbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
config
returnsStringbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
true
hasReturnStatementbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:return-sensitive-data-secure
hasReturnStatementbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:return-sensitive-data-insecure
hasReturnStatementbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:return-sensitive-data-uncheked
hasReturnStatementbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:return-config-secure
hasConditionalLogicbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:if-secret-assignment
hasElseBranchbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
ex:return-config-secure
implementsbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
security validation pattern
combinesbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
runtime vault check
combinesbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
static code analysis
employsbeam/73b04b8b-4c25-44c4-a54d-c672bd66951f
dual-security-approach
takesParameterbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
config
writesTobeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:temp-config-file
runsbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:tfsec-tool
checksbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:fail-status
returnsbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
Security issues found in config
returnsbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
Config is secure
hasPurposebeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:detect-security-issues
processesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:command-output
hasReturnPathbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:security-issues-found
hasReturnPathbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:config-secure
createsTemporaryFilebeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:temp-config-file
demonstratesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:security-scanning-workflow
usesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:command-line-interface
usesSubprocessParametersbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
capture_output=True
usesSubprocessParametersbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
text=True
checksStdoutForbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
FAIL
isDefinedWithbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
def keyword
usesTripleQuotesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:multiline-string
typebeam/db461b26-f45c-4218-97df-a484f573892e
ex:Function
labelbeam/db461b26-f45c-4218-97df-a484f573892e
check_sensitive_data
hasParameterbeam/db461b26-f45c-4218-97df-a484f573892e
config
writtenInbeam/db461b26-f45c-4218-97df-a484f573892e
ex:python
usesLibrarybeam/db461b26-f45c-4218-97df-a484f573892e
ex:hvac-library
usesLibrarybeam/db461b26-f45c-4218-97df-a484f573892e
ex:re-library
searchesInbeam/db461b26-f45c-4218-97df-a484f573892e
ex:config
readsSecretFrombeam/db461b26-f45c-4218-97df-a484f573892e
ex:vault-url
accessesKVStorebeam/db461b26-f45c-4218-97df-a484f573892e
ex:vault-url
handlesExceptionbeam/db461b26-f45c-4218-97df-a484f573892e
hvac.exceptions.VaultError
returnsMessagebeam/db461b26-f45c-4218-97df-a484f573892e
Sensitive data found but stored securely in Vault
returnsMessagebeam/db461b26-f45c-4218-97df-a484f573892e
Sensitive data found and not stored securely: {error message}
iteratesOverbeam/db461b26-f45c-4218-97df-a484f573892e
ex:matches-variable
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
define-regex
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
search-config
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
check-matches
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
create-client
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
iterate-matches
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
read-secret
hasSequentialStepsbeam/db461b26-f45c-4218-97df-a484f573892e
handle-exception
hasReturnValuesbeam/db461b26-f45c-4218-97df-a484f573892e
2
importsbeam/db461b26-f45c-4218-97df-a484f573892e
ex:hvac-library
importsbeam/db461b26-f45c-4218-97df-a484f573892e
ex:re-library
hasFunctionBodybeam/db461b26-f45c-4218-97df-a484f573892e
true
functionBodyLinesbeam/db461b26-f45c-4218-97df-a484f573892e
24
typebeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:SecurityFunction
labelbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
check_sensitive_data
parameterbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:config-parameter
returnsbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:sensitive-data-found-message
returnsbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:config-secure-message
checksForbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:vault-reference
demonstratesbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:security-anti-patterns
validatesbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
vault integration status
designPatternbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
validation function

References (6)

6 references
  1. ctx:claims/beam/c0738f21-b557-4dd4-8a0a-55b7ace87278
    • full textbeam-chunk
      text/plain1 KBdoc:beam/c0738f21-b557-4dd4-8a0a-55b7ace87278
      Show excerpt
      # Define a regex pattern to match sensitive data pattern = r"(?i)\b(password|api_key|secret|token|key|auth|credentials|access_key|private_key|encryption_key|oauth_token|bearer_token)\b" # Search for matches in the config ma
  2. ctx:claims/beam/a6fa1f54-9364-4eed-820f-4787ae18beae
    • full textbeam-chunk
      text/plain1 KBdoc:beam/a6fa1f54-9364-4eed-820f-4787ae18beae
      Show excerpt
      } resource "aws_s3_bucket" "example" { bucket = "my-bucket" } """ print(check_sensitive_data(config)) ``` ### Conclusion By enhancing your regex patterns, performing contextual analysis, integrating with secrets management tools, and
  3. ctx:claims/beam/73b04b8b-4c25-44c4-a54d-c672bd66951f
  4. ctx:claims/beam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
    • full textbeam-chunk
      text/plain1 KBdoc:beam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
      Show excerpt
      variable "password" { default = "mysecretpassword" } resource "aws_s3_bucket" "example" { bucket = "my-bucket" } """ print(check_sensitive_data(config)) ``` ### 3. **Static Code Analysis Tools** Use static code analysis tools specifi
  5. ctx:claims/beam/db461b26-f45c-4218-97df-a484f573892e
  6. ctx:claims/beam/c792cb9f-fe51-4c08-8dd5-84025719f449
    • full textbeam-chunk
      text/plain1 KBdoc:beam/c792cb9f-fe51-4c08-8dd5-84025719f449
      Show excerpt
      return "Sensitive data found but not checked in Vault" else: return "Config is secure" # Example usage config = """ variable "password" { default = "mysecretpassword" } resource "aws_s3_bucket" "example" { bucket =

See also

Keep researching

Missing something or suspicious of what's here? Kick off a research session — a Claude agent will investigate, cite its sources, and file new facts into a dedicated context you can review before accepting into the shared view.