Config and env validators
Catch broken CI YAML, duplicate env keys, and obvious secrets before they hit a pipeline. These are shallow linters: GitHub/GitLab structure, not actionlint; .env lines, not a full dotenv parser.
Docker Compose and Kubernetes checks look at YAML shape, not cluster admission. nginx.conf and .htaccess tools are bracket/section heuristics. CSP Analyzer belongs with HTTP security; it is listed here because it is a header-as-config paste tool. Prefer one .env page — Env File Validator is the canonical API.
CI/CD(1)
Env files & secrets(3)
Env File ValidatorValidate .env file syntax: KEY=value, comments (#), duplicate keys, invalid key names..env Syntax CheckerCheck .env file line syntax: KEY=value, comments (#), invalid key names. Same API as Env File Validator.Secrets ScannerScan text for potential secrets: passwords, API keys, tokens. Get line numbers and pattern names.
Infra configs(5)
Docker Compose Structure LintYAML-parse compose files and check services object shape and top-level keys.Kubernetes Manifest Quick LintYAML-parse K8s objects: apiVersion, kind, metadata hints for single docs or lists.nginx.conf Bracket LintBrace balance for nginx configs with # comments and quotes skipped heuristically.Apache .htaccess LintMatch IfModule/Directory-style section open/close tags on trimmed lines.Content-Security-Policy AnalyzerBreak down CSP directives and flag common weak sources (unsafe-inline, unsafe-eval, frame-ancestors *).
App manifests & lockfiles(6)
TOML ValidatorParse TOML for syntax errors in the browser (configs, manifests).INI & Properties LintLint INI sections and Java .properties: keys, duplicates, continuation lines.EditorConfig CheckerValidate .editorconfig sections and standard indent/EOL/charset keys.package.json ConsistencyShallow package.json lint: JSON shape, engines, dependency value types, and common fields.Lockfile Change SummarizerCompare two npm lockfile JSON pastes: package entry counts (v2) or dependencies (v1).Semver Range InterpreterInterpret caret/tilde/npm ranges: valid range, min version, sample satisfies, and sample max.
FAQ
- Why did my GitHub workflow pass but fail in Actions?
- This linter checks YAML plus a few required keys (on, jobs, runs-on/steps). It does not evaluate expressions, reusable workflows, or marketplace actions. Run actionlint or the GitHub UI for the rest.
- Env File vs .env Syntax Checker?
- They call the same API. Use Env File Validator; the syntax page is a duplicate listing.