Integrate indexed sensitivity propagation

internal/engine/secret.go

@@ -79,28 +79,7 @@ func classifySecretPaths(schema *schemaDescriptor, predicate func(Path) bool, me
 			secret[pointer] = true
 		}
 	}
-	for {
-		changed := false
-		for _, dependency := range dependencies {
-			if secretIntersectsPath(paths, secret, dependency.dependency) && !secret[dependency.target.String()] {
-				secret[dependency.target.String()] = true
-				changed = true
-			}
-		}
-		for _, link := range inherited {
-			if pathIsSecret(secret, link.dependency) && !secret[link.target.String()] {
-				secret[link.target.String()] = true
-				changed = true
-			}
-			if pathIsSecret(secret, link.target) && !secret[link.dependency.String()] {
-				secret[link.dependency.String()] = true
-				changed = true
-			}
-		}
-		if !changed {
-			return secret
-		}
-	}
+	return closeSecretDependencies(paths, secret, dependencies, inherited)
 }
 
 func addSecretPath(paths map[string]Path, pointer string) {
@@ -109,19 +88,6 @@ func addSecretPath(paths map[string]Path, pointer string) {
 	}
 }
 
-func secretIntersectsPath(paths map[string]Path, secret map[string]bool, candidate Path) bool {
-	for pointer := range secret {
-		classified, ok := paths[pointer]
-		if !ok {
-			continue
-		}
-		if pathContains(classified, candidate) || pathContains(candidate, classified) {
-			return true
-		}
-	}
-	return false
-}
-
 func schemaSecretRoot(schema *schemaDescriptor, path Path) (Path, bool) {
 	if schema == nil || schema.root == nil || !path.valid() {
 		return Path{}, false