Skip to content

SH302: Required environment variable missing

Severity: medium · Category: configuration · Applies to: all projects

Why it matters

Every key listed in .env.example is expected by the application. A missing key causes failures at runtime or silently falls back to an insecure default.

How to fix

Add the missing keys to .env or remove them from .env.example if unused.

Ignoring this rule

Skip it everywhere in devshield.yml:

ignore:
  - SH302

Or skip one line with a comment on that line or the line above:

devshield-ignore: SH302