I built a CLI to stop myself from committing API keys (and broken .env files)

A developer created a CLI to prevent two recurring issues: production crashes and API key leaks. One incident involved a deploy that passed CI but failed in production due to a missing REDIS_URL in the .env.production file. Another incident occurred when a Stripe test key was committed to a repository that later became public. This required rotating the key, scrubbing the history, and writing a postmortem to resolve the security breach and operational failure.