pub fn check_project(project: &Value, vault_names: &[String]) -> Vec<Finding>Expand description
Run every rule over one project. vault_names are the vault’s entry names
(provider, and provider_keyid) so a ${…} reference to a real entry is not
reported; pass an empty slice to skip nothing and report every non-env_file ref.