Secrets Scan
Checklist
- No
.envcommitted. .env.examplecontains placeholders only.- No API keys, tokens, private keys, cookies, or production credentials in code/docs/prompts.
- No logs exposing secrets or personal data.
- CI/CD secrets are referenced by environment name, not literal value.