Please do not put secrets in public issues. Report a suspected vulnerability privately using GitHub's security advisory feature. envcontract is designed to inspect local metadata and never sends repository contents to a service.