add .env file to suspicious files list (#269)

tomoyamachi · hilariocoelho · web-flow · commit e75a27f68b4e · 2025-01-06T11:43:50.000+09:00
Co-authored-by: Hilário Coelho &lt;hilario.coelho@securityside.com&gt;
diff --git a/pkg/assessor/credential/credential.go b/pkg/assessor/credential/credential.go
@@ -89,7 +89,7 @@ func (a CredentialAssessor) RequiredFiles() []string {
 		"settings.py",
 		"database.yml",
 		"credentials.xml",
-		//".env",
+		".env",
 	}, suspiciousFiles...)
 }
 

Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,7 @@ func (a CredentialAssessor) RequiredFiles() []string {`
`89`	`89`	`"settings.py",`
`90`	`90`	`"database.yml",`
`91`	`91`	`"credentials.xml",`
`92`		`- //".env",`
	`92`	`+ ".env",`
`93`	`93`	`}, suspiciousFiles...)`
`94`	`94`	`}`
`95`	`95`