envcheck

A fast, modern Rust CLI for linting .env files and ensuring environment synchronization across your entire DevSecOps stack.

• Lint - Detects duplicate keys, invalid syntax, empty values, trailing whitespace, unsorted keys
• Compare - Identifies missing keys across multiple environment files
• Fix - Auto-fix issues with --commit and --pr flags for CI integration
• TUI - Interactive terminal UI for comparing and merging .env files

• Text - Colored terminal output (default)
• JSON - Machine-readable for pipelines
• GitHub - Native GitHub Actions annotations
• SARIF - GitHub Security tab integration
• PR Comment - Markdown for PR/MR comments

cargo install envcheck

npm install -g @envcheck/cli
# or use without installing
npx @envcheck/cli lint .env

brew tap envcheck/tap
brew install envcheck

Download pre-built binaries from GitHub Releases.

envcheck lint .env
envcheck lint .env .env.local .env.prod
envcheck lint .env --format json
envcheck lint .env --format sarif > results.sarif

envcheck compare .env.example .env.prod

envcheck fix .env                    # Sort keys, remove whitespace
envcheck fix .env --commit           # Auto-commit changes
envcheck fix .env --pr               # Create a PR with fixes

envcheck tui .env.example .env .env.prod

envcheck k8s-sync k8s/*.yaml --env .env.example

envcheck terraform infra/ --env .env

envcheck ansible playbooks/ --env .env

envcheck actions .github/workflows --env .env

envcheck helm charts/myapp --env .env

envcheck argo argocd/apps --env .env

envcheck completions bash > /etc/bash_completion.d/envcheck
envcheck completions zsh > ~/.zsh/completions/_envcheck
envcheck completions fish > ~/.config/fish/completions/envcheck.fish

Create .envcheckrc.yaml or .envcheckrc.toml in your project root:

# .envcheckrc.yaml
rules:
  disable:
    - W003  # Don't warn about unsorted keys
  warnings_as_errors: false

ignore:
  - "*.local"
  - ".env.development"

format: text

files:
  - .env
  - .env.example

# Ignore patterns (like .gitignore)
*.local
.env.development
tests/fixtures/**

JSON Schema for IDE autocompletion: https://envcheck.github.io/schema/envcheckrc.json

- uses: envcheck/action-envcheck@v1
  with:
    command: lint
    args: .env.example .env
    format: github

repos:
  - repo: https://github.com/envcheck/envcheck
    rev: v0.1.0
    hooks:
      - id: envcheck-lint
        args: [".env.example", ".env"]
      - id: envcheck-k8s
        args: ["k8s/*.yaml", "--env", ".env.example"]

envcheck:
  image: rust:latest
  script:
    - cargo install envcheck
    - envcheck lint .env --format json > envcheck-report.json
  artifacts:
    reports:
      codequality: envcheck-report.json

envcheck/
├── envcheck/           # Core Rust CLI (this repo)
├── envcheck-npm/       # npm wrapper package
├── action-envcheck/    # GitHub Action
└── envcheck.github.io/ # Documentation website

• Parallel processing with Rayon
• Zero-copy parsing with Cow<str> for reduced allocations
• Benchmarks available via cargo bench

parse_env_file:  ~3.3 µs
lint_rules:      ~2.3 µs

• envcheck-npm - npm wrapper
• action-envcheck - GitHub Action
• envcheck.github.io - Documentation

MIT