env-secrets-manager

To scan .env files for secret leaks, run the env_auditor.py script on your repository. It flags sensitive patterns in environment variables and outputs results in JSON format suitable for CI pipeline checks.

Env-var hygiene involves preventing credential drift and leakage across local and production environments. It matters for CI pipelines because misconfigurations lead to exposed secrets, which this Skill detects by flagging sensitive patterns during deployment checks.

Yes, you can integrate secret rotation readiness checks into CI workflows. The Skill outputs JSON results from scanning env files, allowing pipelines to enforce rotation readiness and provide containment pointers for incident response.

Yes, this approach detects secrets in both local development and production configurations. It audits working trees and deployment configurations by scanning env files, ensuring drift awareness and flagging sensitive patterns across all workflows.

The best way to ensure .env files are ignored is by auditing .env hygiene and applying proper gitignore recommendations. The Skill scans repository working trees to flag sensitive patterns and prevent accidental secret leakage into version control.

When remediating secret drift, the Skill provides rotation readiness guidance and containment pointers rather than automated remediation. It focuses on auditing and flagging sensitive patterns in env files, leaving actual credential rotation to incident response procedures.