Check environment files
Compare .env with .env.example for missing, extra, duplicate and empty required values.
Secrets & environment hygiene
Catch the secret. Keep the code.
A small Python CLI for checking environment files and finding likely credentials in a source tree.
envguardPROJECT OVERVIEW
01Install from source
02Scan your project
03Review findings
Illustrated workflow · not a live application session
01 / Inside the project
Built around the work.
Start with the implemented workflow, then follow the source to understand how it works.
Scan the source
Pattern and entropy checks produce file-and-line findings with severity filters.
Use the result
Human-readable or JSON scan output; documented exit codes for automation.
02 / Explore the workflow
Three steps to understand it.
Check environment files
Compare .env with .env.example for missing, extra, duplicate and empty required values.
Full setup and implementation ↗03 / Run it yourself
Start from the source.
Python 3.9 or later. No third-party runtime dependencies.
Clone the repository and run these commands from its root. Review the README before connecting external services.
Open repository ↗SOURCE CHECKOUT
git clone https://github.com/honeyamn10-source/envguard.git
cd envguard
python -m pip install .
envguard scan . --severity critical,high
envguard check . --strict04 / Know the scope
Clear expectations.
Detection is heuristic. Review findings and rotate any exposed credential. The CLI supports human and JSON scan output; SARIF, JUnit, standalone binaries and Docker images are not supplied here.
Check the latest results in GitHub Actions. A passing automated check covers its tested paths, not every real-world integration.