Development

Development Environment Files

Dotenv-style files commonly contain application secrets, API keys, and connection strings.

Metadata

  • id: development.env-files
  • category: development
  • sensitivity: high
  • artifact types: environment, configuration, credential
  • tags: dotenv, development

Path Matchers

PathKindPlatforms
**/.envglobwindows, linux, macos
**/.env.*globwindows, linux, macos

Content Indicators

Regular expressions:

  • (?i)(api[_-]?key|secret|token|password)\s*=

Credential Types

  • api-key
  • password
  • access-token

Impact

  • credential_access
  • discovery

References

On this page