From a1cf06624ec816dd0c7b150b35c5d1749256fff7 Mon Sep 17 00:00:00 2001
From: Rootiest <chris@rootiest.com>
Date: Wed, 9 Sep 2026 20:49:16 -0400
Subject: [PATCH] fix(security): return full variable name in
 sponge_filter_secrets

---
 functions/sponge_filter_secrets.fish | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/functions/sponge_filter_secrets.fish b/functions/sponge_filter_secrets.fish
index da7d374..fb192aa 100644
--- a/functions/sponge_filter_secrets.fish
+++ b/functions/sponge_filter_secrets.fish
@@ -33,7 +33,7 @@
 #   set -U -a sponge_filters sponge_filter_secrets
 function sponge_filter_secrets --argument-names command
     # Find all exported variables with security-sensitive names
-    set -l sensitive_vars (set --names --export | string match --regex -- \
+    set -l sensitive_vars (set --names --export | string match --entire --regex -- \
         '(?i)(?:TOKEN|PASSWORD|PASSWD|SECRET|API[_-]KEY|PRIVATE[_-]KEY|ACCESS[_-]KEY|AUTH[_-]KEY|CREDENTIAL|KOPIA_PASSWORD)')
 
     for var in $sensitive_vars