Super-linter is a ready-to-run collection of linters and code analyzers, to help validate and fix your source code.
The goal of super-linter is to help you establish best practices and consistent formatting across multiple programming languages, and ensure developers are adhering to those conventions.
Super-linter analyzes source code files using several tools, and reports the issues that those tools find as console output, and as GitHub Actions status checks. You can also run super-linter outside GitHub Actions.
Super-linter can also help you fix linting and formatting issues.
Super-linter is licensed under an MIT License.
Here are some notable Super-linter features:
v6
, Super-linter parallelizes running all the included linters, leading to scanning massive code repositories in seconds.Super-linter supports the following tools:
Language Linters Formatters Ansible ansible-lint See YAML and Python formatters Amazon States Language ASL Validator See JSON formatters AWS CloudFormation templates AWS CloudFormation Linter (cfn-lint), Checkov, Trivy See YAML formatters Azure Resource Manager (ARM) Azure Resource Manager Template Toolkit (arm-ttk), Checkov, Trivy See JSON formatters C, C++ cpp-lint clang-format C# See Dotnet solutions dotnet format whitespace command CSS, SCSS, Sass stylelint Prettier Clojure clj-kondo CoffeeScript coffeelint Commit messages commitlint Copy/paste detection jscpd N/A Dart dart analyze command Dockerfile Haskell Dockerfile Linter (Hadolint), Checkov, Trivy Dotnet (.NET) solutions (sln) dotnet format command: analyzers, style subcommands. dotnet format command: whitespace subcommand. EditorConfig editorconfig-checker .env dotenv-linter Git merge conflict markers Git conflict markers presence in files N/A GitHub Actions actionlint See YAML formatters Go golangci-lint GoReleaser GoReleaser See YAML formatters GraphQL Prettier Groovy npm-groovy-lint Helm charts Checkov See YAML formatters HTML HTMLHint Prettier Java checkstyle google-java-format JavaScript ESLint Prettier JSON eslint-plugin-jsonc (configured for JSON) (default), eslint-plugin-json Prettier JSONC, JSON5 eslint-plugin-jsonc Prettier JSX, TSX eslint-plugin-jsx-a11y, eslint-plugin-react Prettier Jupyter Notebook nbqa nbqa Kubernetes Checkov, Trivy See YAML formatters Kotlin ktlint LaTeX ChkTex Licenses Trivy N/A Lua luacheck Markdown markdownlint Prettier Natural language textlint N/A OpenAPI spectral See YAML formatters Perl perlcritic PHP PHP built-in linter, PHP CodeSniffer, PHPStan, Psalm PowerShell PSScriptAnalyzer Protocol Buffers (Protobuf) protolint Python3 pylint, flake8, isort, ruff black R lintr Renovate renovate-config-validator See JSON formatters Ruby RuboCop Rust Clippy Rustfmt Scala scalafmt Software bill of materials (SBOM) Trivy N/A Secrets GitLeaks, Trivy N/A Shell ShellCheck,executable bit check
shfmt Snakemake snakemake --lint snakefmt SQL sqlfluff Terraform tflint , terrascan, Checkov, Trivy terraform fmt Terragrunt terragrunt N/A TypeScript ESLint Prettier Vue eslint-plugin-vue Prettier Vulnerabilities Trivy N/A XML LibXML YAML YamlLint Prettier
More in-depth tutorial available
To run super-linter as a GitHub Action, you do the following:
Create a new GitHub Actions workflow in your repository with the following content:
--- name: Lint on: # yamllint disable-line rule:truthy push: null pull_request: null permissions: {} jobs: build: name: Lint runs-on: ubuntu-latest permissions: contents: read packages: read # To report GitHub Actions status checks statuses: write steps: - name: Checkout code uses: actions/checkout@v4 with: # super-linter needs the full git history to get the # list of files that changed across commits fetch-depth: 0 - name: Super-linter uses: super-linter/super-linter@v8.0.0 # x-release-please-version env: # To report GitHub Actions status checks GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Commit that file to a new branch.
Push the new commit to the remote repository.
Create a new pull request to observe the results.
For more information about upgrading super-linter to a new major version, see the upgrade guide.
Add Super-Linter badge in your repository readmeYou can show Super-Linter status with a badge in your repository readme:
Example:
[](https://github.com/marketplace/actions/super-linter)
For more information, see Adding a workflow status badge.
Super-Linter provides several variants:
standard
: super-linter/super-linter@[VERSION]
: includes all supported linters.slim
: super-linter/super-linter/slim@[VERSION]
: includes all supported linters except:
dotnet
(.NET) commands and subcommandsYou can configure Super-linter using the following environment variables:
Environment variable Default Value Description ANSIBLE_CONFIG_FILE.ansible-lint.yml
Filename for Ansible-lint configuration (ex: .ansible-lint
, .ansible-lint.yml
) ANSIBLE_DIRECTORY /ansible
Flag to set the root directory for Ansible file location(s), relative to DEFAULT_WORKSPACE
. Set to .
to use the top-level of the DEFAULT_WORKSPACE
. BASH_EXEC_IGNORE_LIBRARIES false
If set to true
, shell files with a file extension and no shebang line are ignored when checking if the executable bit is set. BASH_FILE_NAME .shellcheckrc
Filename for Shellcheck BASH_SEVERITY Shellcheck default severity Specify the minimum severity of errors to consider in shellcheck. Valid values in order of severity are error, warning, info and style. CHECKOV_FILE_NAME .checkov.yaml
Configuration filename for Checkov. CLANG_FORMAT_FILE_NAME .clang-format
Configuration filename for clang-format. CREATE_LOG_FILE false
If set to true
, it creates the log file. You can set the log filename using the LOG_FILE
environment variable. This overrides any existing log files. CSS_FILE_NAME .stylelintrc.json
Filename for Stylelint configuration (ex: .stylelintrc.yml
, .stylelintrc.yaml
) DEFAULT_BRANCH Default repository branch when running on GitHub Actions, master
otherwise The name of the repository default branch. There's no need to configure this variable when running on GitHub Actions DEFAULT_WORKSPACE /tmp/lint
The location containing files to lint if you are running locally. Defaults to GITHUB_WORKSPACE
when running in GitHub Actions. There's no need to configure this variable when running on GitHub Actions. DISABLE_ERRORS false
Flag to have the linter complete with exit code 0 even if errors were detected. DOCKERFILE_HADOLINT_FILE_NAME .hadolint.yaml
Filename for hadolint configuration (ex: .hadolintlintrc.yaml
) EDITORCONFIG_FILE_NAME .editorconfig-checker.json
Filename for editorconfig-checker configuration ENABLE_COMMITLINT_EDIT_MODE false
If set to true
checks the commit message that is currently being edited with Commitlint. This is useful to run Super-linter in a commit-msg
hook. ENABLE_COMMITLINT_STRICT_MODE false
If set to true
, enables commitlint strict mode. ENABLE_GITHUB_ACTIONS_GROUP_TITLE false
if RUN_LOCAL=true
, true
otherwise Flag to enable GitHub Actions log grouping. ENABLE_GITHUB_ACTIONS_STEP_SUMMARY false
if RUN_LOCAL=true
, true
otherwise Flag to enable GitHub Actions job summary for the Super-linter action. For more information, see Summary outputs. ENFORCE_COMMITLINT_CONFIGURATION_CHECK false
If set to true
and VALIDATE_GIT_COMMITLINT
is set to true
, Super-linter exits with an error if there's no commitlint configuration file. Otherwise, Super-linter emits a warning and forcefully sets VALIDATE_GIT_COMMITLINT
to false
. FAIL_ON_CONFLICTING_TOOLS_ENABLED false
If set to true
, Super-linter will exit with an error if potentially conflicting linters or formatters are enabled. FILTER_REGEX_EXCLUDE not set Regular expression defining which files will be excluded from linting (ex: .*src/test.*
). Not setting this variable means to process all files. Jscpd, Checkov, and Trivy ignore this variable. Use their include and ignore features to select or ignore the files to lint. FILTER_REGEX_INCLUDE not set Regular expression defining which files will be processed by linters (ex: .*src/.*
). Not setting this variable means to process all files. FILTER_REGEX_INCLUDE
is evaluated before FILTER_REGEX_EXCLUDE
. Jscpd, Checkov, and Trivy ignore this variable. Use their include and ignore features to select or ignore the files to lint. FIX_ANSIBLE false
Option to enable fix mode for ANSIBLE
. FIX_CLANG_FORMAT false
Option to enable fix mode for CLANG_FORMAT
. FIX_CSHARP false
Option to enable fix mode for CSHARP
. FIX_CSS_PRETTIER false
Flag to enable or disable the formatting of CSS, Sass, and SCSS files with Prettier. FIX_CSS false
Option to enable fix mode for CSS
. FIX_DOTNET_SLN_FORMAT_ANALYZERS false
Option to enable or disable fix mode for Dotnet solutions. FIX_DOTNET_SLN_FORMAT_STYLE false
Option to enable or disable fix mode for Dotnet solutions. FIX_DOTNET_SLN_FORMAT_WHITESPACE false
Option to enable or disable fix mode for Dotnet solutions. FIX_ENV false
Option to enable fix mode for ENV
. FIX_GO_MODULES false
Option to enable fix mode for GO_MODULES
. FIX_GO false
Option to enable fix mode for GO
. FIX_GOOGLE_JAVA_FORMAT false
Option to enable fix mode for GOOGLE_JAVA_FORMAT
. FIX_GRAPHQL_PRETTIER false
Flag to enable or disable the formatting of GraphQL files with Prettier. FIX_GROOVY false
Option to enable fix mode for GROOVY
. FIX_HTML_PRETTIER false
Flag to enable or disable the formatting of HTML files with Prettier. FIX_JAVASCRIPT_ES false
Option to enable fix mode for JAVASCRIPT_ES
. FIX_JAVASCRIPT_PRETTIER false
Flag to enable or disable the formatting of JavaScript files with Prettier. FIX_JSON_PRETTIER false
Flag to enable or disable the formatting of JSON files with Prettier. FIX_JSON false
Option to enable fix mode for JSON
. FIX_JSONC false
Option to enable fix mode for JSONC
. FIX_JSONC_PRETTIER false
Option to enable fix mode for JSONC and JSON5 files with Prettier. FIX_JSX_PRETTIER false
Option to enable fix mode for JSX files with Prettier. FIX_JSX false
Option to enable fix mode for JSX
. FIX_JUPYTER_NBQA_BLACK false
Option to enable fix mode for NBQA_BLACK
. FIX_JUPYTER_NBQA_ISORT false
Option to enable fix mode for NBQA_ISORT
. FIX_JUPYTER_NBQA_RUFF false
Option to enable fix mode for NBQA_RUFF
. FIX_KOTLIN false
Option to enable fix mode for KOTLIN
. FIX_MARKDOWN_PRETTIER false
Option to enable fix mode for Markdown files with Prettier. FIX_MARKDOWN false
Option to enable fix mode for MARKDOWN
. FIX_NATURAL_LANGUAGE false
Option to enable fix mode for NATURAL_LANGUAGE
. FIX_POWERSHELL false
Option to enable fix mode for POWERSHELL
. FIX_PROTOBUF false
Option to enable fix mode for PROTOBUF
. FIX_PYTHON_BLACK false
Option to enable fix mode for PYTHON_BLACK
. FIX_PYTHON_ISORT false
Option to enable fix mode for PYTHON_ISORT
. FIX_PYTHON_RUFF false
Option to enable fix mode for PYTHON_RUFF
. FIX_RUBY false
Option to enable fix mode for RUBY
. FIX_RUST_2015 false
Option to enable fix mode for RUST_2015
. FIX_RUST_2018 false
Option to enable fix mode for RUST_2018
. FIX_RUST_2021 false
Option to enable fix mode for RUST_2021
. FIX_RUST_CLIPPY false
Option to enable fix mode for RUST_CLIPPY
. When FIX_RUST_CLIPPY
is true
, Clippy is allowed to fix issues in the workspace even if there are unstaged and staged changes in the workspace. FIX_SCALAFMT false
Option to enable fix mode for SCALAFMT
. FIX_SHELL_SHFMT false
Option to enable fix mode for SHELL_SHFMT
. FIX_SNAKEMAKE_SNAKEFMT false
Option to enable fix mode for SNAKEMAKE_SNAKEFMT
. FIX_SQLFLUFF false
Option to enable fix mode for SQLFLUFF
. FIX_TERRAFORM_FMT false
Option to enable fix mode for TERRAFORM_FMT
. FIX_TSX false
Option to enable fix mode for TSX
. FIX_TYPESCRIPT_ES false
Option to enable fix mode for TYPESCRIPT_ES
. FIX_TYPESCRIPT_PRETTIER false
Flag to enable or disable the formatting of TypeScript files with Prettier. FIX_VUE false
Option to enable fix mode for VUE. FIX_VUE_PRETTIER false
Flag to enable or disable the formatting of Vue files with Prettier. FIX_YAML_PRETTIER false
Flag to enable or disable the formatting of YAML files with Prettier. GITHUB_ACTIONS_CONFIG_FILE actionlint.yml
Filename for Actionlint configuration (ex: actionlint.yml
) GITHUB_ACTIONS_COMMAND_ARGS null
Additional arguments passed to actionlint
command. Useful to ignore some errors GITHUB_CUSTOM_API_URL https://api.${GITHUB_DOMAIN}
Specify a custom GitHub API URL in case GitHub Enterprise is used: e.g. https://github.myenterprise.com/api/v3
GITHUB_CUSTOM_SERVER_URL https://${GITHUB_DOMAIN}"
Specify a custom GitHub server URL. Useful for GitHub Enterprise instances. GITHUB_DOMAIN github.com
Specify a custom GitHub domain in case GitHub Enterprise is used: e.g. github.myenterprise.com
. GITHUB_DOMAIN
is a convenience configuration variable to automatically build GITHUB_CUSTOM_API_URL
and GITHUB_CUSTOM_SERVER_URL
. GITLEAKS_COMMAND_OPTIONS not set Additional options and arguments to pass to the command when running Gitleaks GITLEAKS_CONFIG_FILE .gitleaks.toml
Filename for GitLeaks configuration (ex: .gitleaks.toml
) GITLEAKS_LOG_LEVEL Gitleaks default log level Gitleaks log level. Defaults to the Gitleaks default log level. GO_CONFIG_FILE .golangci.yml
Filename for golangci-lint configuration (ex: .golangci.toml
) GROOVY_FAILON_LEVEL warning
npm-groovy-lint failon level. GROOVY_LOG_LEVEL info
npm-groovy-lint log level. IGNORE_GENERATED_FILES false
If set to true
, super-linter will ignore all the files with @generated
marker but without @not-generated
marker. Jscpd, Checkov, and Trivy ignore this variable. Use their include and ignore features to select or ignore the files to lint. IGNORE_GITIGNORED_FILES false
If set to true
, super-linter will ignore all the files that are ignored by Git. Jscpd, Checkov, and Trivy ignore this variable. Use their include and ignore features to select or ignore the files to lint. JAVA_COMMAND_ARGS not set Additional command options to pass to Checkstyle. For more information about the available options, see checkstyle command line usage. JAVA_JVM_COMMAND_ARGS not set Additional command options to pass to the Java Virtual Machine (JVM) when running Checkstyle. For example, can be used to specify additional configuration parameters via Java properties, such as Suppression Filter files, for example: -Dorg.checkstyle.sun.suppressionfilter.config=path/to/suppressions.xml
JAVA_FILE_NAME sun_checks.xml
Filename for Checkstyle configuration. Checkstyle embeds several configuration files, such as sun_checks.xml
, google_checks.xml
that you can use without providing your own configuration file. JAVASCRIPT_ES_CONFIG_FILE eslint.config.mjs
Filename for ESLint configuration JSCPD_CONFIG_FILE .jscpd.json
Filename for JSCPD configuration LINTER_RULES_PATH .github/linters
Directory for all linter configuration rules. LOG_FILE super-linter.log
The filename for outputting logs. Super-linter saves the log file to ${DEFAULT_WORKSPACE}/${LOG_FILE}
. LOG_LEVEL INFO
How much output the script will generate to the console. One of ERROR
, WARN
, NOTICE
, INFO
, or DEBUG
. MARKDOWN_CONFIG_FILE .markdown-lint.yml
Filename for Markdownlint configuration (ex: .markdown-lint.yml
, .markdownlint.json
, .markdownlint.yaml
) MARKDOWN_CUSTOM_RULE_GLOBS not set Comma-separated list of file globs matching custom Markdownlint rule files. MULTI_STATUS true
A status API is made for each language that is linted to make visual parsing easier. NATURAL_LANGUAGE_CONFIG_FILE .textlintrc
Filename for textlint configuration (ex: .textlintrc
) OS_PACKAGES_CONFIG_FILE_NAME os-packages.json
Name of the file that holds the list of operating system (OS) packages to install, in JSON format. Relative to LINTER_RULES_PATH
. For more information, see Install additional dependencies. PERL_PERLCRITIC_OPTIONS null
Additional arguments to pass to the command-line when running perlcritic (Example: --theme community) POWERSHELL_CONFIG_FILE .powershell-psscriptanalyzer.psd1
Filename for PSScriptAnalyzer configuration PHP_CONFIG_FILE php.ini
Filename for PHP Configuration (ex: php.ini
) PHP_PHPCS_FILE_NAME phpcs.xml
Filename for PHP CodeSniffer (ex: .phpcs.xml
, .phpcs.xml.dist
) PHP_PHPSTAN_CONFIG_FILE phpstan.neon
Filename for PHPStan Configuration (ex: phpstan.neon
) PRETTIER_COMMAND_OPTIONS not set Additional options and arguments to add to the command when running Prettier. These options will be added to all Prettier invocations, regardless of the LANGUAGE. PROTOBUF_CONFIG_FILE .protolintrc.yml
Filename for protolint configuration (ex: .protolintrc.yml
) PYTHON_BLACK_CONFIG_FILE .python-black
Filename for black configuration (ex: .isort.cfg
, pyproject.toml
) PYTHON_FLAKE8_CONFIG_FILE .flake8
Filename for flake8 configuration (ex: .flake8
, tox.ini
) PYTHON_ISORT_CONFIG_FILE .isort.cfg
Filename for isort configuration (ex: .isort.cfg
, pyproject.toml
) PYTHON_MYPY_CONFIG_FILE .mypy.ini
Filename for mypy configuration (ex: .mypy.ini
, setup.config
) PYTHON_PYLINT_CONFIG_FILE .python-lint
Filename for pylint configuration (ex: .python-lint
, .pylintrc
) PYTHON_RUFF_CONFIG_FILE .ruff.toml
Filename for ruff configuration RENOVATE_SHAREABLE_CONFIG_PRESET_FILE_NAMES not set Comma-separated filenames for renovate shareable config preset (ex: default.json
) REMOVE_ANSI_COLOR_CODES_FROM_OUTPUT false
If set to true
, Super-linter removes ANSI color codes from linters stdout and stderr files, and from the Super-linter log file. RUBY_CONFIG_FILE .ruby-lint.yml
Filename for rubocop configuration (ex: .ruby-lint.yml
, .rubocop.yml
) RUN_LOCAL false
Set this to true
when running outside GitHub Actions or when you want to disable getting environment information from the GitHub Actions environment. For more information about running Super-linter outside GitHub Actions, see Run Super-Linter outside GitHub Actions. RUST_CLIPPY_COMMAND_OPTIONS not set Additional options and arguments to add to the command when running Clippy. SAVE_SUPER_LINTER_OUTPUT false
If set to true
, Super-linter will save its output in the workspace. For more information, see Super-linter outputs. SAVE_SUPER_LINTER_SUMMARY false
If set to true
, Super-linter will save a summary. For more information, see Summary outputs. SCALAFMT_CONFIG_FILE .scalafmt.conf
Filename for scalafmt configuration (ex: .scalafmt.conf
) SNAKEMAKE_SNAKEFMT_CONFIG_FILE .snakefmt.toml
Filename for Snakemake configuration (ex: pyproject.toml
, .snakefmt.toml
) SSL_CERT_SECRET none
SSL cert to add to the Super-Linter trust store. This is needed for users on self-hosted
runners or need to inject the cert for security standards (ex. ${{ secrets.SSL_CERT }}) SSH_KEY none
SSH key that has access to your private repositories SSH_SETUP_GITHUB false
If set to true
, adds the github.com
SSH key to known_hosts
. This is ignored if SSH_KEY
is provided - i.e. the github.com
SSH key is always added if SSH_KEY
is provided SSH_INSECURE_NO_VERIFY_GITHUB_KEY false
INSECURE - If set to true
, does not verify the fingerprint of the github.com SSH key before adding this. This is not recommended! SQLFLUFF_CONFIG_FILE /.sqlfluff
Filename for SQLFLUFF configuration (ex: /.sqlfluff
, pyproject.toml
) SUPER_LINTER_OUTPUT_DIRECTORY_NAME super-linter-output
Name of the directory where super-linter saves its output. SUPER_LINTER_SUMMARY_FILE_NAME super-linter-summary.md
Name of the file where to save the summary output. For more information, see Summary outputs. SUPPRESS_FILE_TYPE_WARN false
If set to true
, will hide warning messages about files without their proper extensions. Default is false
SUPPRESS_POSSUM false
If set to true
, will hide the ASCII possum at top of log output. Default is false
TERRAFORM_TERRASCAN_CONFIG_FILE terrascan.toml
Filename for terrascan configuration (ex: terrascan.toml
) TERRAFORM_TFLINT_CONFIG_FILE .tflint.hcl
Filename for tfLint configuration (ex: .tflint.hcl
) TRIVY_CONFIG_FILE trivy.yaml
Filename for Trivy TYPESCRIPT_ES_CONFIG_FILE eslint.config.mjs
Filename for ESLint configuration USE_FIND_ALGORITHM false
By default, we use git diff
to find all files in the workspace and what has been updated, this would enable the Linux find
method instead to find all files to lint VALIDATE_ALL_CODEBASE true
Will parse the entire repository and find all files to validate across all types. NOTE: When set tofalse
, only new or edited files will be parsed for validation. VALIDATE_ANSIBLE true
Flag to enable or disable the linting process of the Ansible language. VALIDATE_ARM true
Flag to enable or disable the linting process of the ARM language. VALIDATE_BASH true
Flag to enable or disable the linting process of the Bash language. VALIDATE_BASH_EXEC true
Flag to enable or disable the linting process of the Bash language to validate if file is stored as executable. VALIDATE_CPP true
Flag to enable or disable the linting process of the C++ language. VALIDATE_CHECKOV true
Flag to enable or disable the linting process with Checkov VALIDATE_CLANG_FORMAT true
Flag to enable or disable the linting process of the C++/C language with clang-format. VALIDATE_CLOJURE true
Flag to enable or disable the linting process of the Clojure language. VALIDATE_CLOUDFORMATION true
Flag to enable or disable the linting process of the AWS Cloud Formation language. VALIDATE_COFFEESCRIPT true
Flag to enable or disable the linting process of the CoffeeScript language. VALIDATE_CSHARP true
Flag to enable or disable the linting process of the C# language. VALIDATE_CSS true
Flag to enable or disable the linting process of the CSS, Sass, and SCSS files. VALIDATE_CSS_PRETTIER true
Flag to enable or disable checking the formatting of CSS, Sass, and SCSS files with Prettier. VALIDATE_DART true
Flag to enable or disable the linting process of the Dart language. VALIDATE_DOCKERFILE_HADOLINT true
Flag to enable or disable the linting process of the Docker language. VALIDATE_DOTNET_SLN_FORMAT_ANALYZERS true
Option to enable or disable the linting process of Dotnet solutions. VALIDATE_DOTNET_SLN_FORMAT_STYLE true
Option to enable or disable the linting process of Dotnet solutions. VALIDATE_DOTNET_SLN_FORMAT_WHITESPACE true
Option to enable or disable the linting process of Dotnet solutions. VALIDATE_EDITORCONFIG true
Flag to enable or disable the linting process with the EditorConfig. VALIDATE_ENV true
Flag to enable or disable the linting process of the ENV language. VALIDATE_GIT_COMMITLINT true
Option to enable or disable the linting process of Git commits with commitlint. commitlint needs a configuration file to work. Also, see the ENFORCE_COMMITLINT_CONFIGURATION_CHECK
and the ENABLE_COMMITLINT_STRICT_MODE
variables. VALIDATE_GIT_MERGE_CONFLICT_MARKERS true
Option to enable or disable checking if files contain Git merge conflict markers. VALIDATE_GITHUB_ACTIONS true
Flag to enable or disable the linting process of the GitHub Actions. VALIDATE_GITLEAKS true
Flag to enable or disable the linting process of the secrets. VALIDATE_GO true
Flag to enable or disable the linting process of the individual Go files. Set this to false
if you want to lint Go modules. See the VALIDATE_GO_MODULES
variable. VALIDATE_GO_MODULES true
Flag to enable or disable the linting process of Go modules. Super-linter considers a directory to be a Go module if it contains a file namedgo.mod
. VALIDATE_GO_RELEASER true
Flag to enable or disable the linting process of the GoReleaser config file. VALIDATE_GRAPHQL_PRETTIER true
Flag to enable or disable checking the formatting of GraphQL files with Prettier. VALIDATE_GOOGLE_JAVA_FORMAT true
Flag to enable or disable the linting process of the Java language. (Utilizing: google-java-format) VALIDATE_GROOVY true
Flag to enable or disable the linting process of the language. VALIDATE_HTML true
Flag to enable or disable the linting process of the HTML language. VALIDATE_HTML_PRETTIER true
Flag to enable or disable checking the formatting of HTML files with Prettier. VALIDATE_JAVA true
Flag to enable or disable the linting process of the Java language. (Utilizing: checkstyle) VALIDATE_JAVASCRIPT_ES true
Flag to enable or disable the linting process of the JavaScript language. (Utilizing: ESLint) VALIDATE_JAVASCRIPT_PRETTIER true
Flag to enable or disable checking the formatting of JavaScript files with Prettier. VALIDATE_JSCPD true
Flag to enable or disable JSCPD. VALIDATE_JSON true
Flag to enable or disable the linting process of the JSON language. VALIDATE_JSON_PRETTIER true
Flag to enable or disable checking the formatting of JSON files with Prettier. VALIDATE_JSONC true
Flag to enable or disable the linting process of the JSONC and JSON5 languages. VALIDATE_JSONC_PRETTIER true
Flag to enable or disable checking the formatting of JSONC and JSON5 files with Prettier. VALIDATE_JSX true
Flag to enable or disable the linting process for jsx files (Utilizing: ESLint) VALIDATE_JSX_PRETTIER true
Flag to enable or disable checking the formatting of JSX files with Prettier. VALIDATE_JUPYTER_NBQA_BLACK true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa black) VALIDATE_JUPYTER_NBQA_FLAKE8 true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa flake8) VALIDATE_JUPYTER_NBQA_ISORT true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa isort) VALIDATE_JUPYTER_NBQA_MYPY true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa mypy) VALIDATE_JUPYTER_NBQA_PYLINT true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa pylint) VALIDATE_JUPYTER_NBQA_RUFF true
Flag to enable or disable the linting process of Jupyter Notebooks. (Utilizing: nbqa ruff) VALIDATE_KOTLIN true
Flag to enable or disable the linting process of the Kotlin language. VALIDATE_LATEX true
Flag to enable or disable the linting process of the LaTeX language. VALIDATE_LUA true
Flag to enable or disable the linting process of the language. VALIDATE_MARKDOWN true
Flag to enable or disable the linting process of the Markdown language. VALIDATE_MARKDOWN_PRETTIER true
Flag to enable or disable checking the formatting of Markdown files with Prettier. VALIDATE_NATURAL_LANGUAGE true
Flag to enable or disable the linting process of the natural language. VALIDATE_OPENAPI true
Flag to enable or disable the linting process of the OpenAPI language. VALIDATE_PERL true
Flag to enable or disable the linting process of the Perl language. VALIDATE_PHP true
Flag to enable or disable the linting process of the PHP language. (Utilizing: PHP built-in linter) (keep for backward compatibility) VALIDATE_PHP_BUILTIN true
Flag to enable or disable the linting process of the PHP language. (Utilizing: PHP built-in linter) VALIDATE_PHP_PHPCS true
Flag to enable or disable the linting process of the PHP language. (Utilizing: PHP CodeSniffer) VALIDATE_PHP_PHPSTAN true
Flag to enable or disable the linting process of the PHP language. (Utilizing: PHPStan) VALIDATE_PHP_PSALM true
Flag to enable or disable the linting process of the PHP language. (Utilizing: PSalm) VALIDATE_POWERSHELL true
Flag to enable or disable the linting process of the PowerShell language. VALIDATE_PROTOBUF true
Flag to enable or disable the linting process of the Protobuf language. VALIDATE_PYTHON true
Flag to enable or disable the linting process of the Python language. (Utilizing: pylint) (keep for backward compatibility) VALIDATE_PYTHON_BLACK true
Flag to enable or disable the linting process of the Python language. (Utilizing: black) VALIDATE_PYTHON_FLAKE8 true
Flag to enable or disable the linting process of the Python language. (Utilizing: flake8) VALIDATE_PYTHON_ISORT true
Flag to enable or disable the linting process of the Python language. (Utilizing: isort) VALIDATE_PYTHON_MYPY true
Flag to enable or disable the linting process of the Python language. (Utilizing: mypy) VALIDATE_PYTHON_PYLINT true
Flag to enable or disable the linting process of the Python language. (Utilizing: pylint) VALIDATE_PYTHON_RUFF true
Flag to enable or disable the linting process of the Python language. (Utilizing: ruff) VALIDATE_R true
Flag to enable or disable the linting process of the R language. VALIDATE_RENOVATE true
Flag to enable or disable the linting process of the Renovate configuration files. VALIDATE_RUBY true
Flag to enable or disable the linting process of the Ruby language. VALIDATE_RUST_2015 true
Flag to enable or disable the linting process of the Rust language. (edition: 2015) VALIDATE_RUST_2018 true
Flag to enable or disable the linting process of Rust language. (edition: 2018) VALIDATE_RUST_2021 true
Flag to enable or disable the linting process of Rust language. (edition: 2021) VALIDATE_RUST_CLIPPY true
Flag to enable or disable the clippy linting process of Rust language. VALIDATE_SCALAFMT true
Flag to enable or disable the linting process of Scala language. (Utilizing: scalafmt --test) VALIDATE_SHELL_SHFMT true
Flag to enable or disable the linting process of Shell scripts. (Utilizing: shfmt) VALIDATE_SNAKEMAKE_LINT true
Flag to enable or disable the linting process of Snakefiles. (Utilizing: snakemake --lint) VALIDATE_SNAKEMAKE_SNAKEFMT true
Flag to enable or disable the linting process of Snakefiles. (Utilizing: snakefmt) VALIDATE_STATES true
Flag to enable or disable the linting process for AWS States Language. VALIDATE_SQLFLUFF true
Flag to enable or disable the linting process of the SQL language. (Utilizing: sqlfuff) VALIDATE_TERRAFORM_FMT true
Flag to enable or disable checking the formatting process of the Terraform files. VALIDATE_TERRAFORM_TERRASCAN true
Flag to enable or disable the linting process of the Terraform language for security related issues. VALIDATE_TERRAFORM_TFLINT true
Flag to enable or disable the linting process of the Terraform language. (Utilizing tflint) VALIDATE_TERRAGRUNT true
Flag to enable or disable the linting process for Terragrunt files. VALIDATE_TRIVY true
Flag to enable or disable running Trivy. VALIDATE_TSX true
Flag to enable or disable the linting process for tsx files (Utilizing: ESLint) VALIDATE_TYPESCRIPT_ES true
Flag to enable or disable the linting process of the TypeScript language. (Utilizing: ESLint) VALIDATE_TYPESCRIPT_PRETTIER true
Flag to enable or disable checking the formatting of TypeScript files with Prettier. VALIDATE_VUE true
Flag to enable or disable the linting process of the vue files. (Utilizing: ESLint). VALIDATE_VUE_PRETTIER true
Flag to enable or disable checking the formatting of Vue files with Prettier. VALIDATE_XML true
Flag to enable or disable the linting process of the XML language. VALIDATE_YAML true
Flag to enable or disable the linting process of the YAML language. VALIDATE_YAML_PRETTIER true
Flag to enable or disable checking the formatting of YAML files with Prettier. YAML_CONFIG_FILE .yaml-lint.yml
Filename for Yamllint configuration (ex:.yaml-lint.yml
, .yamllint.yml
) YAML_ERROR_ON_WARNING false
Flag to enable or disable the error on warning for Yamllint.
The VALIDATE_[LANGUAGE]
variables work as follows:
VALIDATE_[LANGUAGE]
variables to true
, super-linter defaults to leaving any unset variable to false (only validate those languages).VALIDATE_[LANGUAGE]
variables to false
, super-linter defaults to leaving any unset variable to true (only exclude those languages).VALIDATE_[LANGUAGE]
variables to both true
and false
, super-linter fails reporting an error.For more information about reusing Super-linter configuration across environments, see Share Environment variables between environments.
Fix linting and formatting issuesAll the linters and formatters that Super-linter runs report errors if they detect linting or formatting issues without modifying your source code (check only mode). Check only mode is the default for all linters and formatters that Super-linter runs.
Certain linters and formatters support automatically fixing issues in your code (fix mode). You can enable fix mode for a particular linter or formatter by setting the relevant FIX_<language name>
variable to true
. To know which linters and formatters support fix mode, refer to the Configure Super-linter section.
Setting a FIX_<language name>
variable to true
implies setting the corresponding VALIDATE_<language name>
to true
. Setting a FIX_<language name>
variable to true
and the corresponding VALIDATE_<language name>
to false
is a configuration error. Super-linter reports that as a fatal error.
Super-linter supports the following locations to deliver fixes:
ansible-lint requires that the yaml
rule is enabled to for the ansible-lint fix mode to work. The default ansible-lint configuration that Super-linter ships disables the yaml
rule because it might not be compatible with yamllint. If you need to enable the ansible-lint fix mode, provide an ansible-lint configuration that doesn't ignore the yaml
rule.
When fix mode is enabled, some linters and formatters don't maintain the original file or directory ownership, and use the user that Super-linter uses to run the linter or formatter.
Fix mode examples and workflowsYou can configure Super-linter to automatically deliver linting and formatting fixes. For example, you can configure a workflow that automatically commits the fixes, and pushes them to a branch.
To ensure that Super-linter analyzes your codebase as expected, we recommend that you configure your fix mode workflows in addition to your existing Super-linter workflows.
GitHub Actions workflow example: pull requestThe following example shows a GitHub Actions workflow that uses Super-linter to automatically fix linting and formatting issues, commit changes in the current branch, and push commits to the remote branch tracking the current branch whenever a pull request is created or updated:
--- name: Lint on: # yamllint disable-line rule:truthy push: null pull_request: null permissions: contents: read jobs: lint: # Super-linter workflow running in check only mode # See https://github.com/super-linter/super-linter#get-started fix-lint-issues: permissions: # To write linting fixes contents: write # To write Super-linter status checks statuses: write runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 with: fetch-depth: 0 - name: Super-Linter uses: super-linter/super-linter@v8.0.0 # x-release-please-version env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Set your fix mode variables to true FIX_SHELL_SHFMT: true FIX_YAML_PRETTIER: true # To reuse the same Super-linter configuration that you use in the # lint job without duplicating it, see # https://github.com/super-linter/super-linter/blob/main/docs/run-linter-locally.md#share-environment-variables-between-environments - name: Commit and push linting fixes # Run only on: # - Pull requests # - Not on the default branch if: > github.event_name == 'pull_request' && github.ref_name != github.event.repository.default_branch uses: stefanzweifel/git-auto-commit-action@v5 with: branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }} commit_message: "chore: fix linting issues" commit_user_name: super-linter commit_user_email: super-linter@super-linter.dev
This example uses GitHub Actions automatic token authentication that automatically greates a unique GITHUB_TOKEN
secret for the workflow. GitHub Actions imposes the following limitations on workflows:
.github/workflows
).To work around these limitations, you do the following:
Grant the authentication token the repo
and workflow
permissions.
Use the authentication token in the actions/checkout
step:
- uses: actions/checkout@v4 with: fetch-depth: 0 token: ${{ secrets.SUPER_LINTER_TOKEN }}
This example assumes that you saved the authentication token in a secret called SUPER_LINTER_TOKEN
, but you can choose whatever name you prefer for the secret.
Super-linter provides default configurations for some linters in the TEMPLATES
directory. You can customize the configuration for the linters that support this by placing your own configuration files in the LINTER_RULES_PATH
directory. LINTER_RULES_PATH
is relative to the DEFAULT_WORKSPACE
directory.
Super-linter supports customizing the name of these configuration files. For more information, refer to Configure super-linter.
For example, you can configure super-linter to load configuration files from the config/lint
directory in your repository:
env: LINTER_RULES_PATH: config/lint
In order to facilitate migrations from using standalone linters to super-linter, the following linters don't follow the convention described above in this section, but rather they use their own mechanism to discover and load configuration files. To configure these linters, see:
Some of the linters that super-linter provides can be configured to disable certain rules or checks, and to ignore certain files or part of them.
For more information about how to configure each linter, review their own documentation.
Include or exclude files from checksIf you need to include or exclude directories from being checked, you can use two environment variables: FILTER_REGEX_INCLUDE
and FILTER_REGEX_EXCLUDE
.
For example:
src
folder in the root of the repository: FILTER_REGEX_INCLUDE: ^src/
src
folders in the repository: FILTER_REGEX_INCLUDE: (^|/)src/
test
folder in the root of the repository: FILTER_REGEX_EXCLUDE: ^test/
test
folders in the repository: FILTER_REGEX_EXCLUDE: (^|/)test/
test
folder in the root of the repository: FILTER_REGEX_EXCLUDE: ^test/[^/]+\.js$
test
folder in the root of the repository (recursively): FILTER_REGEX_EXCLUDE: ^test/.+\.js$
gradlew
and JavaScript files inside a specific directory: FILTER_REGEX_EXCLUDE: ((^|/)gradlew|^specific/directory/[^/]+\.js)$
Additionally, if you set IGNORE_GENERATED_FILES
to true
, super-linter ignores any file with @generated
string in it, unless the file also has @not-generated
marker. For example, super-linter considers a file with the following contents as generated:
#!/bin/sh echo "@generated"
while considers this file as not generated:
#!/bin/sh echo "@generated" # @not-generated
Finally, you can set IGNORE_GITIGNORED_FILES
to true
to ignore a file if Git ignores it too.
You don't need GitHub Actions to run super-linter. It supports several runtime environments.
Run using a container runtime engineYou can run super-linter outside GitHub Actions. For example, you can run super-linter from a shell:
docker run \ -e LOG_LEVEL=DEBUG \ -e RUN_LOCAL=true \ -v /path/to/local/codebase:/tmp/lint \ ghcr.io/super-linter/super-linter:latest
For more information, see Run super-linter outside GitHub Actions.
Use your own SSH key and certificateIf you need to use your own SSH key to authenticate against private repositories, you can use the SSH_KEY
environment variable. The value of that environment variable is expected to be the private key of an SSH keypair that has access to your private repositories.
For example, you can configure this private key as an Encrypted Secret and access it with the secrets
parameter from your GitHub Actions workflow:
env: SSH_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
If you need to inject a SSL certificate into the trust store, you can use the SSL_CERT_SECRET
variable. The value of that variable is expected to be the path to the files that contains a CA that can be used to validate the certificate:
env: SSL_CERT_SECRET: ${{ secrets.ROOT_CA }}
Super-linter supports generating several outputs, and also supports exposing the output of individual linters.
Super-linter writes a summary of all the checks:
SAVE_SUPER_LINTER_SUMMARY
is set to true
, Super-linter writes a summary to ${DEFAULT_WORKSPACE}/${SUPER_LINTER_OUTPUT_DIRECTORY_NAME}/${SUPER_LINTER_SUMMARY_FILE_NAME}
.ENABLE_GITHUB_ACTIONS_STEP_SUMMARY
is set to true
, Super-linter writes a GitHub Actions job summary. Setting ENABLE_GITHUB_ACTIONS_STEP_SUMMARY
to true
, implies setting SAVE_SUPER_LINTER_SUMMARY
to true
.The summary is in Markdown format. Super-linter supports the following formats:
The summary output of previous Super-linter runs is not preserved.
If you set SAVE_SUPER_LINTER_OUTPUT
to true
, Super-linter saves its output to ${DEFAULT_WORKSPACE}/${SUPER_LINTER_OUTPUT_DIRECTORY_NAME}/super-linter
, so you can further process it, if needed.
Most outputs are in JSON format.
The output of previous Super-linter runs is not preserved.
Linter reports and outputsSome linters support configuring the format of their outputs for further processing. To get access to that output, enable it using the respective linter configuration file. If a linter requires a path for the output directory, you can use the value of the ${DEFAULT_WORKSPACE}
variable.
If a linter doesn't support setting an arbitrary output path as described in the previous paragraph, but only supports emitting results to standard output or standard error streams, you can enable Super-linter outputs and parse them.
Ignore output that Super-linter generatesSuper-linter generates output reports and logs. To avoid that these outputs end up in your repository, we recommend that you add the following lines to your .gitignore
file:
# Super-linter outputs
super-linter-output
super-linter.log
# GitHub Actions leftovers
github_conf
Install additional dependencies
Super-linter supports installing dependencies at runtime, on each Super-linter run. For more information about installing additional dependencies when running Super-linter, see Install additional dependencies.
If you would like to help contribute to super-linter, see CONTRIBUTING.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4