One diff, three places
$ diffkeel diff prod
rendered prod from 3 files in 41 ms
✓api.yamltimeout 30s to 5s
✓worker.yamlqueue.concurrency 8 to 16
✓prod.envDB_PASSWORD changed, value masked
3 changes, 1 secret, 0 reviews
$ diffkeel check --env prod --require-review
3 changes in prod need a review
✓api.yamltimeout 30s to 5s
✓worker.yamlqueue.concurrency 8 to 16
✓prod.envDB_PASSWORD changed, value masked
exit 1: deploy stopped
# diffkeel.toml
[env.prod]
files = ["base.yaml", "prod.yaml", "prod.env"]
live = "./scripts/read-live-config.sh prod"
mask = ["DB_PASSWORD", "API_TOKEN"]
review = "required"