Exposed .git, .env and Backup Files: 6 Safe Checks, and What a Clean Result Doesn't Prove

How to check your own site for exposed repository data, environment files and forgotten backups without causing harm, and how to respond if you find one.