git-ward 0.1.1 → 0.1.3

package/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ward"
-version = "0.1.1"
+version = "0.1.3"
 edition = "2021"
 authors = ["awixor"]
 description = "Local-First Git Guard for preventing secret leaks"

package/README.md

@@ -10,6 +10,7 @@
   - **Ethereum Private Keys**
   - **BIP-39 Mnemonics**
   - **Generic API Keys**
+  - **.env Files** (Blocks `.env`, `.env.local`, etc. Allows `.example`/`.sample`)
   - **High Entropy Strings** (with false positive filtering)
 - **Configurable:** Ignore specific files via `.wardignore` or `ward.toml`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-ward",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Local-First Git Guard for preventing secret leaks",
   "bin": {
     "ward": "./bin/ward.js"

package/src/scanner.rs

@@ -68,6 +68,25 @@ impl Scanner {
 
         let mut violations = vec![];
 
+        // 0. File Name Check
+        if let Some(filename) = path.file_name().and_then(|s| s.to_str()) {
+            // Block .env and .env.* (e.g. .env.local, .env.production)
+            // But allow .env.example, .env.sample (common safe patterns)
+            if filename.starts_with(".env") {
+                let is_safe_example = filename.ends_with(".example") || filename.ends_with(".sample");
+                
+                if !is_safe_example {
+                     violations.push(Violation {
+                        file: path.to_path_buf(),
+                        line: 1,
+                        rule: format!("Critical: {} detected", filename),
+                        snippet: "Do not commit .env files. Use .env.example instead.".to_string(),
+                    });
+                    return Ok(violations);
+                }
+            }
+        }
+
         for (i, line) in content.lines().enumerate() {
             let line_idx = i + 1;