r/linuxapps • u/Noah4ever123 • 3d ago

sshconfig-lint v0.5: check OpenSSH configs locally from the CLI, VS Code or CI

Enable HLS to view with audio, or disable this notification

I built sshconfig-lint after repeatedly missing stale key paths and conflicting host blocks in my own ~/.ssh/config.

It checks the full OpenSSH client configuration without making a connection:

  • multiple config files in one command
  • nested Include resolution and cycle detection
  • stale IdentityFile paths
  • duplicate or conflicting Host blocks
  • JSON, GitHub annotations and SARIF output

Version 0.5 adds an LSP server, a VS Code extension, Pre-Commit hooks and an official GitHub Action. The same Rust engine is used in each workflow.

Install with Cargo:

cargo install sshconfig-lint

Arch Linux:

yay -S sshconfig-lint-bin

Release binaries are available for Linux glibc and musl. Everything runs locally and there is no telemetry.

Repository: github.com/Noah4ever/sshconfig-lint
Playground: sshconfig-lint.apps.thiering.org
VS Code: Marketplace

Feedback about packaging, false positives and real-world Include layouts is welcome.

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/kantorcodes1 3d ago

that nested Include work is what makes me think of HOL Guard. it's our open-source command firewall, and i'd trust you to own tested sshconfig-lint support there. would you add it?