cli icon indicating copy to clipboard operation
cli copied to clipboard

subcommand to validate `dependabot.yml` file

Open jlosito opened this issue 2 years ago • 3 comments

There used to be a way in order to check syntax of a dependabot config file. Would it be possible to add that functionality apart of this tool? If so, would it be possible to address the concerns brought up in the issue below under this cli tool and even possibly moving that issue under this repository?

  • https://github.com/dependabot/dependabot-core/issues/4605

From my use perspective, it would be awesome if I could run a dependabot lint -f /path/to/dependabot.yml.

jlosito avatar Feb 03 '23 16:02 jlosito

Interesting idea, but we'd probably need this first:

  • https://github.com/dependabot/dependabot-core/issues/1927

There is some additional dynamic validation we do that can't be expressed in a JSON Schema, but it'd at least be a step in the right direction.

Although if we publish a JSON Schema, there's plenty of existing tooling available for using that to lint, so we'd only want to add it to CLI here if we were sure the ongoing maintenance would be minimal.

jeffwidman avatar Feb 06 '23 19:02 jeffwidman

To clarify, @jlosito you're requesting syntax validation here, not linting, right? They're not quite the same thing.

jeffwidman avatar Mar 22 '23 06:03 jeffwidman

Correct. Sorry for the confusion.

jlosito avatar Mar 22 '23 11:03 jlosito