ssakshamsai26/environment-drift-detectivev0.3.3Public
Environment drift detective
Catch repository configuration contradictions before they become fresh-clone, CI, or deployment failures.
Read the full description
This is a static contract audit, not a deployment test: it cross-checks environment-variable names and parsing types across bounded application source, .env.example/.env.sample, Dockerfile, Compose, README, package metadata, and every bounded GitHub Actions workflow. It also compares Node runtime signals, documented/Compose ports, source and CI-only configuration names, and source parsing inconsistencies. Every finding states its severity, the evidence boundary, the two sources that disagree where available, and a concrete remediation order. report=all additionally emits a value-free coverage and contract matrix so absence findings can be reviewed. It never reads environment values, executes project code, changes files, follows symlinks, contacts services, or treats runtime-injected settings as proven absent.
Before you run it1 local tool
Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.
- ○python3local tool
Must be on your PATH when used. minimum version undeclared.
Inputs6, 1 required
rote asks for these before running and shows the defaults it will use.
- Root
rootAbsolute repository directory to audit. Symlinks, files over the safe size limit, dependency directories, and environment values are skipped. The path is never included in the report.
requiredstringcustom value allowed - Max source files
max_source_filesMaximum source files to inspect, from 50 to 2000. Lower values run faster but may make absence findings PARTIAL; higher values do not inspect dependency/vendor directories.
optionalstringdefault600custom value allowed - Max file bytes
max_file_bytesMaximum bytes read from any one text file, from 10000 to 500000. Larger files are skipped rather than partially interpreted. Lowering this cap can make source absence findings PARTIAL.
optionalstringdefault160000custom value allowed - Include ci
include_ciWhether to inspect up to 30 GitHub Actions YAML files under .github/workflows. false keeps the audit local to repository source/docs/container signals and labels CI comparisons NOT ASSESSED.
optionalstringdefaulttruecustom value allowed - Include docs
include_docsWhether to compare README localhost ports and runtime instructions. false avoids documentation-based findings while keeping source/config comparisons.
optionalstringdefaulttruecustom value allowed - Report
reportfindings prints actionable contradictions only. all also prints the bounded source/CI coverage used for absence claims. Neither mode reveals environment values.
optionalstringdefaultfindingscustom value allowed
What it changes
No write operations are declared in this version's manifest.
Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.
Runtime details
- rote CLIversion 0.62.0 or newer
- Servicesnone declared
- Digest
sha256:158028f0deb96cb478ff56e1f605009cfeec879ca05a4e0b5c703f1a222e665d - Archive size5931 bytes
- Published2026-09-04T13:53:12.280379+00:00
- Published withrote 0.77.0
Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.
A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.