Description
The .env file or environment example file (.env.example) contains placeholder API keys/secrets that were committed to the repository. If real secrets were ever in this file, they are exposed in git history.
Suggested Fix
- Ensure
.env is in .gitignore
- Rotate any secrets that may have been committed
- Use
.env.example with placeholder values only
Description
The
.envfile or environment example file (.env.example) contains placeholder API keys/secrets that were committed to the repository. If real secrets were ever in this file, they are exposed in git history.Suggested Fix
.envis in.gitignore.env.examplewith placeholder values only