Skip to main content

Bundles/environment-security

Environment Security Audit

environment-security · v1.1.0 · paid

Deep inspection of environment variable handling, secrets storage patterns, and runtime configuration security.

Secrets Management

secrets-management · weight 0.35

.env files in .gitignore with no git history
ab-001257
critical
No hardcoded secrets in source code
ab-001258
critical
CI/CD secrets masked from logs
ab-001259
high
Production secrets in dedicated secrets manager
ab-001260
high
API keys scoped to minimum permissions
ab-001261
high
Separate environment configs for dev/staging/prod
ab-001262
high
Staging uses separate database with test data
ab-001263
medium
Production credentials restricted with MFA and audit
ab-001264
medium
Secrets rotation policy documented with evidence
ab-001265
medium

Environment Isolation

environment-isolation · weight 0.3

Feature flags are environment-specific
ab-001266
medium
No default or weak passwords in config/docs
ab-001267
low

Configuration Security

configuration-security · weight 0.2

App validates required env vars at startup
ab-001268
low
IaC files have no hardcoded secrets
ab-001269
low
Configuration drift detection mechanism
ab-001270
low
Backup credentials stored separately
ab-001271
low

Access & Audit

access-audit · weight 0.15

Secrets manager access logged with audit trail
ab-001272
info
Database credentials rotated per policy
ab-001273
info
API keys and service account credentials rotated
ab-001274
info