Read-only inventory of every project's .env keys — never the values — with rotation age. DUCT keeps no plaintext.
0
Secrets managed
0
Rotation due >90d
0
Exposed in logs
0
Projects
No secrets inventoried yet. Run python manage.py scan_secrets (reads key
names over SSH, never values) to populate the vault, then schedule it to keep rotation age current.