feat: mask sensitive data in logs (#4630)

lib/codecept.js

@@ -92,6 +92,9 @@ class Codecept {
 
       // debug mode
       global.debugMode = false;
+
+      // mask sensitive data
+      global.maskSensitiveData = this.config.maskSensitiveData || false;
     }
   }
 

lib/output.js

@@ -1,5 +1,6 @@
 const colors = require('chalk');
 const figures = require('figures');
+const { maskSensitiveData } = require('invisi-data')
 
 const styles = {
   error: colors.bgRed.white.bold,
@@ -57,8 +58,9 @@ module.exports = {
    * @param {string} msg
    */
   debug(msg) {
+    const _msg = isMaskedData() ? maskSensitiveData(msg) : msg
     if (outputLevel >= 2) {
-      print(' '.repeat(this.stepShift), styles.debug(`${figures.pointerSmall} ${msg}`));
+      print(' '.repeat(this.stepShift), styles.debug(`${figures.pointerSmall} ${_msg}`));
     }
   },
 
@@ -67,8 +69,9 @@ module.exports = {
    * @param {string} msg
    */
   log(msg) {
+    const _msg = isMaskedData() ? maskSensitiveData(msg) : msg
     if (outputLevel >= 3) {
-      print(' '.repeat(this.stepShift), styles.log(truncate(`   ${msg}`, this.spaceShift)));
+      print(' '.repeat(this.stepShift), styles.log(truncate(`   ${_msg}`, this.spaceShift)));
     }
   },
 
@@ -120,7 +123,8 @@ module.exports = {
       stepLine += colors.grey(step.comment.split('\n').join('\n' + ' '.repeat(4)));
     }
 
-    print(' '.repeat(this.stepShift), truncate(stepLine, this.spaceShift));
+    const _stepLine = isMaskedData() ? maskSensitiveData(stepLine) : stepLine
+    print(' '.repeat(this.stepShift), truncate(_stepLine, this.spaceShift));
   },
 
   /** @namespace */
@@ -167,7 +171,7 @@ module.exports = {
   scenario: {
     /**
      * @param {Mocha.Test} test
-    */
+     */
 
     started(test) {},
 
@@ -254,3 +258,7 @@ function truncate(msg, gap = 0) {
   }
   return msg;
 }
+
+function isMaskedData() {
+  return global.maskSensitiveData === true || false
+}

package.json

@@ -147,6 +147,7 @@
     "graphql": "16.9.0",
     "husky": "9.1.7",
     "inquirer-test": "2.0.1",
+    "invisi-data": "^1.0.0",
     "jsdoc": "4.0.4",
     "jsdoc-typeof-plugin": "1.0.0",
     "json-server": "0.17.4",

typings/index.d.ts

@@ -114,6 +114,14 @@ declare namespace CodeceptJS {
      * ```
      */
     emptyOutputFolder?: boolean;
+    /**
+     * mask sensitive data in output logs
+     *
+     * ```js
+     * maskSensitiveData: true
+     * ```
+     */
+    maskSensitiveData?: boolean;
     /**
      * Pattern to filter tests by name.
      * This option is useful if you plan to use multiple configs for different environments.