`vulkro-sf masking-rules`

Generates one masking rule per sensitive custom field, with a recommended masking strategy, from your field metadata.

vulkro-sf masking-rules . > masking-rules.json
vulkro-sf masking-rules . --format yaml > masking-rules.yaml

It reads every objects/<Obj>/fields/*.field-meta.xml file and classifies each custom field with the same sensitivity catalog the sensitive-field-no-data-mask check uses: PHI, PCI, GDPR special category, financial, government ID, and PII. The output is a proposal for a Data Mask configuration or masking policy that a pipeline can read and apply.

It is advisory: it reports no findings and never blocks. No org connection is needed.

Flag	What it does
`[PATH]`	SFDX project or retrieved metadata. Default `.`.
`--format <json\|yaml>`	Output format. Default `json`.

Exit codes

Code	Meaning
`0`	Ruleset generated (it can be empty when no sensitive field was found).
`2`	Error (unreadable path, unknown `--format`).

Exit codes​

Exit codes