pii-shield/pii-shield: Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️ (opens in new tab)  🔐Cryptography  Content type: Code

The first idea was simple. Take a log line. Look at suspicious parts. Count entropy. Hide anything that looks like a random secret. PII means personally identifiable information. It includes emails, phone numbers, addresses, passport numbers, card numbers, access tokens, and other values that should not move freely through logs. At first, entropy looked like a good signal. Many tokens, keys, and session values really look like noise: x9VdQp2Mz_La77kPq0 sk_live_51Nx... eyJhbGciOiJIUzI1NiIsInR5...