$ sshconfig-lint
Back to the checker
ENDEFRES

sshconfig-lint / workflow

Lint SSH configs in CI and before commits

Keep shared dotfiles and infrastructure configs reviewable. The same stable rule codes run on a laptop, in a commit hook, and on every pull request.

GitHub Action

- uses: actions/checkout@v4
- uses: Noah4ever/sshconfig-lint@v0.5.0
  with:
    paths: |
      .ssh/config
      infrastructure/ssh_config
    strict: true

Pre-Commit

repos:
  - repo: https://github.com/Noah4ever/sshconfig-lint
    rev: v0.5.0
    hooks:
      - id: sshconfig-lint-strict

SARIF for Code Scanning

sshconfig-lint .ssh/config --format sarif > sshconfig-lint.sarif
  1. Inline annotations point to the exact file and line.
  2. Release binaries are pinned and verified with SHA256.
  3. Strict mode can make warnings block a change.

Everything runs inside your workflow. Config contents are not sent to sshconfig-lint.