Vibe Coding — Security Review

Scan for vulnerabilities before shipping. CRITICAL or HIGH findings block deployment.

Scanning Process

Run all 10 checks. For each: grep for patterns, collect file:line findings, classify severity, note exact fix.

Skip: .env, .env.local, .env.*, node_modules/, *.test.*

Run checks sequentially. Jump directly to each ## Check N section — do not read all checks upfront. Report CRITICAL findings immediately without waiting for remaining checks to complete.

Check 1 — Hardcoded Secrets (CRITICAL)

Scan for env var patterns even if .env file is absent — look for process.env.*, os.environ*, VITE_* patterns in code. Do not block scanning if .env is absent.