Pipe 'heroku config' output through this script to redact credentials

redact.rb

#!/usr/bin/env ruby

require 'uri'

ARGF.each_line do |line|
  key, value = line.split(':', 2)
  
  if !value
    $stdout.puts key
    next
  else
    spaces = value.length - value.strip!.length
  end
  
  begin
    uri = URI.parse value
    uri.password = "REDACTED" if uri.password
    value = uri.to_s
  rescue
    # Not a URL - skipping
  end

  if key.downcase.scan(/_(key|secret|token|password|pass)$/).size > 0
    value = "REDACTED"
  end

  $stdout.puts key+": "+(" "*spaces)+value
end