action-envcheck

GitHub Action for envcheck - a fast, modern Rust CLI for linting .env files and DevSecOps integrations.

Features

• 🔍 Lint .env files for errors and warnings
• 🔄 Compare multiple .env files for missing keys
• ☸️ K8s Sync - Verify K8s manifests against .env
• 🏗️ Terraform - Check TF_VAR_* variables
• 📦 Ansible - Detect lookup('env', ...) usage
• 🤖 GitHub Actions - Scan workflow env: blocks
• ⎈ Helm - Lint values.yaml for env patterns
• 🐙 ArgoCD - Check Application plugin env vars

Usage

Basic Linting

steps:
  - uses: actions/checkout@v4
  - uses: envcheck/action-envcheck@v1

Compare .env Files

steps:
  - uses: actions/checkout@v4
  - uses: envcheck/action-envcheck@v1
    with:
      command: compare
      args: ".env.example .env"

DevSecOps Checks

steps:
  - uses: actions/checkout@v4
  
  # Check Terraform variables
  - uses: envcheck/action-envcheck@v1
    with:
      command: terraform
      env_file: ".env"

  # Check GitHub Actions workflows
  - uses: envcheck/action-envcheck@v1
    with:
      command: actions
      env_file: ".env"

  # Check Helm values
  - uses: envcheck/action-envcheck@v1
    with:
      command: helm
      env_file: ".env"

  # Check ArgoCD Applications
  - uses: envcheck/action-envcheck@v1
    with:
      command: argo
      env_file: ".env"

  # Check Ansible playbooks
  - uses: envcheck/action-envcheck@v1
    with:
      command: ansible
      env_file: ".env"

K8s Sync

steps:
  - uses: actions/checkout@v4
  - uses: envcheck/action-envcheck@v1
    with:
      command: k8s-sync
      args: "k8s/*.yaml"
      env_file: ".env"

Inputs

Input	Description	Default
command	Command to run (lint, compare, k8s-sync, terraform, ansible, actions, helm, argo, fix, doctor)	lint
args	Additional arguments	""
version	Version of envcheck	latest
env_file	Path to .env file	.env

License

MIT