Protect your commits

Block plaintext .env secrets from being staged in Git.

Block accidental plaintext secrets from entering your commits. Run once:

$ dotenvx protect
⛉ protection: full (.env*, .env.keys*)

Dotenvx checks env files before Git stages them. Encrypted files pass through; unencrypted secrets are blocked, even with git add -f.

Protection applies to existing and future repositories for your Git user on this machine.