deploydrift

Your deploy is missing an env var.
Find out before prod does.

npx deploydrift

Real Production Failures

500 on deploy: Added STRIPE_WEBHOOK_SECRET to .env, forgot to set it in Vercel production. Customers saw errors for 2 hours.
Preview works, prod broken: DATABASE_URL set in Vercel preview environment but missing from production. Deploy passed, users got a white screen.
CI failing mysteriously: GitHub Actions secret renamed from SENTRY_TOKEN to SENTRY_AUTH_TOKEN. Workflow still referenced the old name. Deploys blocked for a day.

What deploydrift checks

Code (JS/TS/Python/Go)
.env files
.env.example
docker-compose.yml
GitHub Actions
Vercel (live)
Netlify (live)
GitHub secrets
Privacy guarantee: deploydrift never reads, stores, prints, or transmits secret values. It only compares variable names. Provider APIs are called with list-names endpoints only. No telemetry.

How it compares

Tool Code scan .env files Live providers CI checks
deploydrift ✓ ✓ ✓ ✓
dotenv-linter ✗ ✓ ✗ ✗
envcheck ✓ ✓ ✗ ✓
Doppler ✗ ✗ ✓ Requires migration

Use in CI

- name: Check env drift
run: npx deploydrift --ci
env:
VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
DRIFTCHECK_LICENSE: ${{ secrets.DRIFTCHECK_LICENSE }}

Pricing

Free

$0

1 project

All features

No time limit

No subscription. No accounts. No SaaS.

FAQ

How does the license work?

Offline license keys. No phone-home. Works in CI with DRIFTCHECK_LICENSE env var. Keys are signed, delivered via email on purchase.

What frameworks are supported?

Any Node/TypeScript project. Works with Next.js, Vite, Express, Remix, etc. Also scans Python and Go code for env vars.

Do I need to connect my providers?

No. The tool works without provider access (static checks only). For live provider checks, supply tokens via env vars. Your tokens never leave your machine.

Refund policy?

14-day money-back guarantee, no questions asked. Contact via GitHub issues.

What about v2, v3, etc?

The $29 license covers all v1.x updates (bug fixes, new providers, new checks). Major versions (v2+) would require a separate purchase, but v1 will be supported long-term.