Platform
dotenv files
Never allowed. A dotenv target reads an arbitrary file path from the manifest, so it must never get a platform rule.
On a single user, an arbitrary path could point at the collector process’s own environment, with every workflow secret in it. No environment allowlist can help once that file is read.
Pre-flight refuses any dotenv target outright, before the platform-rule check.
More platforms
All platforms →- 01
CapRover
Collected. Compares a CapRover app’s environment with its 1Password source, pinned to one captain domain and app name.
- 02
Vercel
Collected. Compares a Vercel project’s environment variables, with one project-scoped token per service.
- 03
Render
Known to env-sync, but has no platform rule here, so pre-flight drops any service with a Render target.