Scan rule · RSC-SEC-082
Env file was in the repository and got removed
SecuritySeverity: MediumCWE-540OWASP A07-2021
Reports environment files present in the checked history but missing from the current tree — the old values stay retrievable.
Scan tier
Repo access (deep scan)
How to fix it
Rotate every key that was ever in that file.