DEV Community

Hosaina Yirgalem
Hosaina Yirgalem

Posted on

I built a CLI that scans, validates and audits your .env files and it works with any stack

#devops #go #security #opensource

Every dev team has lost hours to .env problems.

A missing variable breaks a deploy.
An API key gets committed to Git.
A new teammate spends half a day figuring out which variables they need.
Nobody documented anything.

I built Razify to make all of that stop happening.

What is Razify?

Razify is a single binary CLI tool for .env file management.
It diffs, scans, validates, documents, and audits your environment
variables β€” all from your terminal.

  • No cloud account
  • No tracking
  • No Go installation required

Works with Node.js, Python, Ruby, Laravel, Rails β€” anything that uses .env files.

What it does

πŸ” Secret scanning 

   razify scan .env
Enter fullscreen mode Exit fullscreen mode

Detects leaked secrets using 80+ regex patterns combined with
Shannon entropy analysis to catch what pattern matching alone would miss.

   ✘  [CRITICAL] Line 6: DB_PASSWORD β€” weak or default value
   ⚠  [HIGH]     Line 5: AWS_ACCESS_KEY β€” cloud provider credential

   Summary: 1 CRITICAL  4 HIGH  1 MEDIUM
Enter fullscreen mode Exit fullscreen mode

βœ… Pre-deploy validation 

   razify validate .env .env.example
Enter fullscreen mode Exit fullscreen mode

Catches missing required variables before you deploy.
Returns exit code 1 β€” plugs straight into CI/CD.

   - name: Validate environment
     run: razify validate .env .env.example --json
Enter fullscreen mode Exit fullscreen mode

πŸ›‘οΈ Git commit protection 

   razify guard install
Enter fullscreen mode Exit fullscreen mode

Installs a pre-commit hook that blocks any commit
containing exposed secrets. Set it once, forget about it.

πŸ“Š Health score 

   razify audit .env .env.example
Enter fullscreen mode Exit fullscreen mode

Runs scan + validate + diff together.
Gives you a score out of 100 with actionable recommendations.

πŸ“„ Auto-generated docs 

   razify docs .env.example -o ENV_DOCS.md
Enter fullscreen mode Exit fullscreen mode

Generates a markdown table from your inline comments.
No more "what does this variable do?"

Installation 

   # macOS / Linux
   brew tap Hossiy21/tap && brew install razify

   # Windows
   scoop install razify

   # Go users
   go install github.com/Hossiy21/razify@latest
Enter fullscreen mode Exit fullscreen mode

Open source

MIT licensed. PRs very welcome β€” especially for new secret
patterns or improving the scoring algorithm.

⭐ github.com/Hossiy21/razify
🎬 Demo: https://github.com/Hossiy21/razify/raw/master/razify-demo.gif

Would love your feedback β€” especially on the entropy detection
and health scoring. What would make this useful for your workflow?

Top comments (0)