storeenv scan

Run the secret scanner without pushing.

zsh

$ cd ~/code/my-app
$ storeenv scan
  Scanned 2 env files, 6 keys.
  [ok]   No problems found.

$ storeenv scan

Good to know

The same checks push runs first: malformed lines and unclosed quotes (errors), values that look like live provider keys, duplicate keys, and env files tracked by Git or missing from .gitignore (warnings), plus hints such as empty values and placeholders. It reads files on this machine only.

`--project <value>`	Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes).
`--env <value>`	Environment name.
`--json`	Machine readable output.
`--yes, -y`	Skip confirmations.
`--color`	Coloured output (--no-color to turn off). Default: true.
`--verbose`	Show debug details.
`--api <value>`	API base URL of a self-hosted StoreEnv.
`--trust-writer <value>`	Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX.
`--allow-unsigned`	pull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy.