EnvGuard v0.9.0 — Compliance, Configuration Assurance & Historical Audit Reporting

EnvGuard v0.9.0 — Compliance, Configuration Assurance & Historical Audit Reporting

EnvGuard v0.9.0 advances the platform from catch → fix → prove. While v0.7.0 catches secrets earlier in developer workflows and v0.8.0 remediates them safely, v0.9.0 provides deep configuration assurance, compliance context, and audit evidence for security and engineering teams.

Everything runs 100% locally — zero network requests, no accounts, and no cloud dependencies.

---

What's New in v0.9.0

1. Configuration Assurance Linter (envguard lint-config)

Ensure your security policies are active, valid, and free of contradictions before commits or scans execute.

• Unified Schema Validation: Validates field types, allowed severities, and structure against load_config().
• Typo & Unknown Key Detection: Flags misspelled or unexpected keys across top-level, scan, rules, ci, and advanced_detection sections.
• Rule ID Catalog Check: Validates disabled rules and severity overrides against the 25 built-in patterns in patterns.json.
• Conflict Analysis: Catches contradictory configurations (e.g. marking a rule simultaneously as disabled and overridden with a severity).
• Organization Policy Guardrails: Enforces security floors from .envguard-org.yml to prevent local configurations from loosening required rules or block thresholds.
• Git Repository Risk Checks: Verifies .env Git index tracking and .gitignore status to eliminate accidental credential exposure paths.

# Lint repository configuration and git exposure safety
envguard lint-config

# Machine-readable JSON output
envguard lint-config --format json --output lint-report.json