SH010: Sensitive file in Laravel public directory¶

Severity: high · Category: security · Applies to: laravel

Why it matters¶

Everything inside public/ is served by the web server, including backups and dumps.

Move the file out of public/ and delete any copy that was already deployed.

Skip it everywhere in devshield.yml:

ignore:
  - SH010

Or skip one line with a comment on that line or the line above:

devshield-ignore: SH010