.env.example

# AWS (uses default boto3 chain: env vars, ~/.aws/credentials, instance role)
# AWS_PROFILE=default
# AWS_DEFAULT_REGION=us-east-1

# Azure AD / Entra ID
# AZURE_TENANT_ID=your-tenant-id
# AZURE_SUBSCRIPTION_ID=your-subscription-id

# GCP (uses application default credentials: gcloud auth application-default login)
# GCP_PROJECT=your-project-id
# GOOGLE_CLOUD_PROJECT=your-project-id  # alternative

# GitHub
# GITHUB_TOKEN=ghp_your_token_here
# GITHUB_ORG=your-org
# GITHUB_BASE_URL=  # for GitHub Enterprise

# Kubernetes (uses current kubeconfig context by default)
# KUBECONFIG=~/.kube/config
# KUBE_CONTEXT=prod-cluster
# KUBE_NAMESPACE=  # empty = all namespaces

# LLM explanations (optional)
# OPENAI_API_KEY=sk-your-key-here

# Risk thresholds
# NHINSIGHT_STALE_DAYS=90
# NHINSIGHT_ROTATION_MAX_DAYS=365