Environment Security Audit
environment-security · v1.1.1 · paid
Deep inspection of environment variable handling, secrets storage patterns, and runtime configuration security.
Secrets Management
secrets-management · weight 0.35
- critical.env files in .gitignore with no git historyab-001257
- criticalNo hardcoded secrets in source codeab-001258
- highCI/CD secrets masked from logsab-001259
- highProduction secrets in dedicated secrets managerab-001260
- highAPI keys scoped to minimum permissionsab-001261
- highSeparate environment configs for dev/staging/prodab-001262
- mediumStaging uses separate database with test dataab-001263
- mediumProduction credentials restricted with MFA and auditab-001264
- mediumSecrets rotation policy documented with evidenceab-001265
Environment Isolation
environment-isolation · weight 0.3
Configuration Security
configuration-security · weight 0.2
Access & Audit
access-audit · weight 0.15