[Prototype] Standalone utility/tool for redacting binlogs

[JanKrivanek]

Motivation

Scoping and redefining #8400 to frontload smaller deliverable - let's approach option of post-processing a log file - a binlog to start with.
The prototype might in the future version incorporate external library for classifying string tokens based on well known tokens characteristics. However to start with we'll use user specified input on commandline.

Sample envisioned usage:

dotnet redact-binlog msbuild.binlog -p:pwd1 -p:"multi word \" pwd"

Expected outputs

• Prototype of redacting tool
• Prototype it's build and packaging
• Proper separation of tokens classification module - so that more sophisticated library can be pluged in
• Perf measurements on binlog produced by OrchardCore build and sample internal infra build binlog
• (Optional) prototype plugging in into our infra

[JanKrivanek]

A simple dotnet tool produced - https://www.nuget.org/packages/JanK.BinlogRedactor/17.8.0-dev-alpha-05, built from https://github.com/JanKrivanek/msbuild/tree/proto/blog-redactor/src/tools/Microsoft.Build.BinlogRedactor.
It redacts given tokens from a binlogs. E.g.:

> dotnet redact-binlog -p password1 -p token1 -p token2 -f
info: Microsoft.Build.BinlogRedactor.Commands.RedactBinlogCommandHandler[0] Redacting binlog .\msbuild.binlog to .\msbuild.binlog (18248 KB)
info: Microsoft.Build.BinlogRedactor.Commands.RedactBinlogCommandHandler[0] Redacting done. Duration: 00:00:06.2420493

Current options:

> dotnet redact-binlog -h
Description:
  Provides ability to redact sensitive data from MSBuild binlogs (https://aka.ms/binlog-redactor).

Usage:
  redact-binlog [options]

Options:
  -p, --password <password> (REQUIRED)  Password or other sensitive data to be redacted from
                                        binlog. Multiple options are supported.
  -i, --input <input>                   Input binary log file name. If not specified a single
                                        *.binlog from current directory is assumed. Errors out if
                                        there are multiple binlogs.
  -o, --output <output>                 Output binary log file name. If not specified, replaces
                                        the input file in place - overwrite option needs to be
                                        specified in such case.
  -f, --overwrite                       Replace the output file if it already exists. Replace the
                                        input file if the output file is not specified.
  --dryrun                              Performs the operation in-memory and outputs what would be
                                        performed.
  --logsecrets                          Logs what secrets have been detected and replaced. This
                                        should be used only for test/troubleshooting purposes!
  -v, --verbosity <LEVEL>               Sets the verbosity level. Allowed values are q[uiet],
                                        m[inimal], n[ormal], and diag[nostic]. [default: normal]
  -?, -h, --help                        Show help and usage information
  --version                             Show version information

The tool is not yet ofical part of any repo/pipeline, it's not optimized, arcade piloted (nor tested), and does not have the automatic detection of common token patterns.