env-secrets-manager

原文涵盖的主题

• Env & Secrets Manager
• Overview
• Core Capabilities
• When to Use
• Quick Start
• Recommended Workflow
• Reference Docs
• Common Pitfalls

Tier: POWERFUL Category: Engineering Domain: Security / DevOps / Configuration Management -- Manage environment-variable hygiene and secrets safety across local development and production workflows. This skill focuses on practical auditing, drift awareness, and rotation readiness. .env and .env.example lifecycle guidance Secret leak detection for repository working trees Severity-based findings for likely credentials Operational pointers for rotation and containment Integration-ready outputs for CI checks -- Before pushing commits that touched env/config files During security audits and incident triage When onboarding contributors who need safe env conventions When validating that no obvious secrets are hardcoded -- -- 1. Run scripts/envauditor.py on the repository root. 2. Prioritize critical and high findings first. 3. Rotate real credentials and remove exposed values. 4. Update .env.example and .gitignore as needed. 5. Add or tighten pre-commit/CI secret scanning gates. -- references/validation-detection-rotation.md references/secret-patterns.md -- Committing real values in .env.example Rotating one system but missing downstream consumers Logging secrets during debugging or inci

这里只展示节选，请以完整原文和当前要求为准。