/**
 * Environment Secrets Scanner
 *
 * Finds .env files that AI agents can access and scans them for
 * exposed secrets. Claude Code, Cursor, and other agents automatically
 * load .env files into context — .claudeignore doesn't reliably block this.
 *
 * Reuses the credential-leak detection from Layer 6.
 */
import type { ScannerResult } from './types.js';
/**
 * Run the environment secrets scanner.
 */
export declare function scanEnvFiles(): ScannerResult;
