sshconfig-lint

SSH config linter rules and fixes

Every SSH config diagnostic has a focused explanation, a marked example, and a practical fix.

INVALID_VALUE

Invalid directive value

Browser DUP_HOST

Duplicate Host blocks

Browser MISSING_IDENTITY

Missing IdentityFile

CLI WILDCARD_ORDER

Wildcard Host ordering

Browser WEAK_ALGO

Weak or deprecated algorithm

Browser DUP_DIRECTIVE

Duplicate directive

Browser INSECURE_OPT

Insecure SSH option

Browser UNSAFE_CTRL_PATH

Unsafe ControlPath

Browser INCLUDE_CYCLE

Include cycle

CLI INCLUDE_DEPTH

Include nesting too deep

CLI INCLUDE_READ

Include cannot be read

CLI INCLUDE_GLOB

Invalid Include pattern

CLI INCLUDE_NO_MATCH

Include matches no files

CLI NEGATED_HOST

Host has only negated patterns

Browser PROXY_CONFLICT

ProxyCommand and ProxyJump conflict

Browser REVOKED_HOST_KEYS_UNREADABLE

RevokedHostKeys file is unreadable

CLI MISSING_CERTIFICATE

CertificateFile not found

CLI LOCAL_COMMAND_DISABLED

LocalCommand is not enabled

Browser INVALID_TOKEN

Invalid percent token

Browser INVALID_SYNTAX

Invalid SSH config syntax

Browser UNKNOWN_DIRECTIVE

Unknown SSH directive

Browser DEPRECATED_OPTION

Deprecated or obsolete option

Browser CONTROL_PERSIST_UNUSED

ControlPersist without ControlMaster

Browser UPDATE_HOSTKEYS_ASK_PERSIST

UpdateHostKeys ask with ControlPersist

Browser INVALID_MATCH

Invalid Match condition