git-ward 0.1.1 → 0.1.4

package/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ward"
-version = "0.1.1"
+version = "0.1.4"
 edition = "2021"
 authors = ["awixor"]
 description = "Local-First Git Guard for preventing secret leaks"

package/README.md

@@ -10,6 +10,7 @@
   - **Ethereum Private Keys**
   - **BIP-39 Mnemonics**
   - **Generic API Keys**
+  - **.env Files** (Blocks `.env`, `.env.local`, etc. Allows `.example`/`.sample`)
   - **High Entropy Strings** (with false positive filtering)
 - **Configurable:** Ignore specific files via `.wardignore` or `ward.toml`.
 
@@ -61,6 +62,28 @@ You can also run a scan manually without committing:
 ward scan
 ```
 
+## 🗑 Uninstallation
+
+To remove the Git hook:
+
+```bash
+# Run this in your repo root
+rm .git/hooks/pre-commit
+# Or if you have other hooks, edit .git/hooks/pre-commit and manually remove the ward lines
+```
+
+## 🤖 CI/CD Integration
+
+You can run Ward in your CI pipeline to prevent secrets from being merged.
+
+### GitHub Actions
+
+```yaml
+steps:
+  - uses: actions/checkout@v3
+  - run: npx git-ward scan
+```
+
 ## ⚙️ Configuration (`ward.toml`)
 
 Create a `ward.toml` in your project root to customize behavior:
@@ -86,6 +109,10 @@ generated/
 *.log
 ```
 
+## 🤝 Contributing
+
+Contributions are welcome! Please open an issue or submit a PR on GitHub.
+
 ## License
 
 MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-ward",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "Local-First Git Guard for preventing secret leaks",
   "bin": {
     "ward": "./bin/ward.js"

package/src/scanner.rs

@@ -68,6 +68,25 @@ impl Scanner {
 
         let mut violations = vec![];
 
+        // 0. File Name Check
+        if let Some(filename) = path.file_name().and_then(|s| s.to_str()) {
+            // Block .env and .env.* (e.g. .env.local, .env.production)
+            // But allow .env.example, .env.sample (common safe patterns)
+            if filename.starts_with(".env") {
+                let is_safe_example = filename.ends_with(".example") || filename.ends_with(".sample");
+                
+                if !is_safe_example {
+                     violations.push(Violation {
+                        file: path.to_path_buf(),
+                        line: 1,
+                        rule: format!("Critical: {} detected", filename),
+                        snippet: "Do not commit .env files. Use .env.example instead.".to_string(),
+                    });
+                    return Ok(violations);
+                }
+            }
+        }
+
         for (i, line) in content.lines().enumerate() {
             let line_idx = i + 1;