SEV-1: blocks launch

Your .env file is committed

What goes wrong

Every secret in that file is now in your git history, including every fork and clone of it.

How to fix it

Add .env to .gitignore, run git rm --cached on the file, and rotate every value it contained. Deleting the file later does not remove it from history.

Check your app

npx sigship

Run it in your project. It reports this check as env-file-committed, along with 16 others. Nothing leaves your machine.

See every check