The command exposes credentials from environment variables if the call is invalid

[psg2]

If you call the command with an invalid value for the argument ignore for instance, it will show you the help message exposing the default values from environment variables.

Validating <file>
Error: flag needs an argument: 'i' in -i
time="2020-09-16T12:56:58Z" level=fatal msg="flag needs an argument: 'i' in -i"
Usage:
  codeowners-verifier verify path [flags]
Flags:
  -h, --help             help for verify
  -i, --ignore strings   Comma separated list of entries to ignore when validating a path E.g: @user1,@group1,@user2
Global Flags:
      --base-url string     BaseURL to connect to the provider (Defaults to CODEOWNER_PROVIDER_URL env var) (default "EXPOSED_URL")
      --codeowners string   Path to the CODEOWNERS file (Defaults to CODEOWNER_PATH env var) (default ".gitlab/CODEOWNERS")
      --token string        Token to be used to authenticate with the provider.(Defaults to CODEOWNER_PROVIDER_TOKEN env var) (default "EXPOSED_CREDENTIAL")