Security Tool

env-guard-cli

Catch exposed .env files before they reach GitHub. Scan your project, check every .gitignore, and know exactly what is protected.

View on GitHub See Usage

terminal

$ pip install env-guard-cli

Why use it

What it covers

🔍

Recursive Scan

Walks your entire project tree, skipping .git, node_modules, and .venv automatically.

🛡️

Pattern Matching

Supports exact names, prefix wildcards like .env*, suffix wildcards, and relative paths.

⚙️

CI Ready

Use --strict to exit with code 1 on any exposed file. Drop it into any GitHub Actions workflow.

📦

Zero Dependencies

Pure Python standard library. No third-party packages required.

How to use it

Example output

$ env-guard /path/to/project 🔍 Scanning: /path/to/project ✅ Protected (1): /path/to/project/.env ⚠️ EXPOSED (1) — not in any .gitignore: /path/to/project/.env.local Add these to your .gitignore to prevent accidental commits.