eslint-plugin-secretlint

eslint-plugin-secretlint runs Secretlint from ESLint and adds Secretlint-specific config authoring rules.

Installation

npm install --save-dev eslint-plugin-secretlint eslint secretlint

Compatibility

• Supported ESLint versions: 9.x and 10.x
• Config system: Flat Config only
• Node.js runtime: >=22.0.0
• Oxlint: Not compatible as a complete plugin with Oxlint 1.80.0 because its raw-text bridge requires a custom parser for .env, .ini, .toml, .txt, and .xml files, and Oxlint JavaScript plugins do not support custom formats; use ESLint for this plugin.

Quick start

import secretlint from "eslint-plugin-secretlint";

export default [...secretlint.configs.recommended];

Presets

Array presets such as recommended, secretlintOnly, and all should be spread into flat config arrays.

Preset	Purpose
secretlint.configs.recommended	Enable the Secretlint bridge plus config authoring guidance.
secretlint.configs.secretlintOnly	Enable only the Secretlint bridge workflow.
secretlint.configs.configuration	Enable only Secretlint config authoring rules.
secretlint.configs.all	Enable every rule shipped by the plugin.

Aliases remain available:

• secretlint.configs.text -> secretlint.configs.secretlintOnly
• secretlint.configs.configs -> secretlint.configs.configuration

Rules

Fix legend:

• 🔧 = autofixable
• — = report only

Preset key legend:

• 🟡 — secretlint.configs.recommended
• 🧪 — secretlint.configs.secretlintOnly
• 🔧 — secretlint.configs.configuration
• 🟣 — secretlint.configs.all

Rule	Fix	Preset key
disallow-secretlint-duplicate-rules	—	🟡 🔧 🟣
disallow-secretlint-empty-rule-id	—	🟡 🔧 🟣
disallow-secretlint-relative-rule-paths	—	🟡 🔧 🟣
disallow-secretlint-unknown-rule-properties	—	🔧 🟣
prefer-secretlint-allow-message-ids-array	—	🔧 🟣
prefer-secretlint-nested-rules-array	—	🔧 🟣
require-secretlint-config-file-naming-convention	—	🟡 🔧 🟣
require-secretlint-rule-id	—	🟡 🔧 🟣
require-secretlint-rules-array	—	🟡 🔧 🟣
require-secretlint-rules-packages-installed	—	🔧 🟣
secretlint	—	🟡 🧪 🟣