Env file was in the repository and got removed
Scan rule · RSC-SEC-082
- Security
- Severity: Medium
- CWE-540
- OWASP A07-2021
Reports environment files present in the checked history but missing from the current tree — the old values stay retrievable.
Scan tier
- Repo access (deep scan)
How to fix it
Rotate every key that was ever in that file.