DevSecOps Integrations

envcheck goes beyond basic .env linting to verify environment variable consistency across your entire infrastructure stack.

Supported Integrations

IntegrationCommandWhat it checks
Kubernetesenvcheck k8s-syncSecretKeyRef/ConfigMapKeyRef vs .env
Terraformenvcheck terraformTF_VAR_* variable usage
Ansibleenvcheck ansiblelookup('env', 'VAR') calls
GitHub Actionsenvcheck actionsenv: blocks in workflows
Helmenvcheck helmSCREAMING_SNAKE_CASE in values.yaml
ArgoCDenvcheck argoplugin.env and kustomize.commonEnv

Why DevSecOps Integration?

Environment variables often drift across different parts of your infrastructure:

  • Development.env, .env.local
  • CI/CD → GitHub Actions env: blocks
  • Kubernetes → Secrets, ConfigMaps
  • IaC → Terraform TF_VAR_*, Ansible lookups
  • GitOps → ArgoCD, Helm values

envcheck ensures all these stay in sync, catching mismatches before they cause production issues.