Eliminate environment configuration drift.
envcheck is a modern, fast Rust CLI that treats .env files as first-class citizens in your DevSecOps stack. It doesn't just lint—it syncs, verifies, and validates across your entire infrastructure.
| Repo | Purpose |
|---|---|
| envcheck | The Core CLI. Rust-based, ultra-fast. Lints .env, compares against .env.example, and validates logic. |
| action-envcheck | GitHub Action. Runs envcheck in your CI/CD pipeline. SARIF output for Security tab integration. |
| envcheck-npm | NPM Wrapper. npx envcheck for JavaScript/TypeScript projects. |
- Kubernetes Sync: Detects missing keys in K8s manifests (
ConfigMap,Secret). - Terraform Integration: Validates
.tfvariable defaults against.env. - Ansible Vault: Checks encrypted vault files for key consistency.
- Pre-commit: Local hooks for preventing bad commits.
- Documentation: envcheck.github.io
- Maintainer: @skew202 (Stefan Wiest)
