isCredentialFilePath function

bool isCredentialFilePath(String path)

True when path points at a credential file: its basename is one of _credentialBasenames (with config.json only counting under a .docker directory), or it is a .env.* variant.

Implementation

bool isCredentialFilePath(String path) {
  final normalized = path.replaceFirst('^~/', '/').toLowerCase();
  final segments = normalized.split('/');
  final basename = segments.last;
  if (basename == '.env' || basename.startsWith('.env.')) return true;
  if (_credentialBasenames.contains(basename)) {
    // `config.json` is only a credential under `.docker/`; `credentials`
    // only under `.aws/` (or as an explicit name on its own).
    if (basename == 'config.json') {
      return segments.length >= 2 && segments[segments.length - 2] == '.docker';
    }
    if (basename == 'credentials') {
      return segments.length >= 2 && segments[segments.length - 2] == '.aws';
    }
    return true;
  }
  if (basename.endsWith('.pem') || basename.endsWith('.key')) return true;
  return false;
}