Configuration¶

Create fleetlint.toml in your repo root, or run flint init to generate one interactively. Both spellings are read — fleetlint.toml and the hidden .fleetlint.toml — with the visible one winning in the same directory.

Full example¶

[rules]
disabled = ["secret-hygiene"]        # Rules to skip entirely
warn = ["interval-validation"]       # Downgrade from error to warning

[thresholds]
min_interval = 60                    # Minimum query interval (seconds)
max_interval = 86400                 # Maximum query interval (24h)
max_query_length = 10000             # Maximum query length (characters)
warn_select_star = true              # Warn on SELECT *
warn_trailing_semicolon = true       # Warn on trailing semicolons

[files]
# `include` unset means "everything not excluded" — the usual case.
# If you narrow scope, list DIRECTORIES, not extensions:
#   include = ["default.yml", "fleets/**", "labels/**", "platforms/**"]
# A non-empty include is authoritative and also scopes the cross-file rules
# (orphaned-file, duplicate-content, case-collision), which report on
# scripts and profiles — so an extension glob like "**/*.yml" would silently
# switch those off for every non-YAML file.
exclude = ["node_modules", "target", "dist"]

[schema]
validate = true                      # Enable schema validation
allow_unknown_fields = false         # Allow keys not in schema

[deprecations]
fleet_version = "latest"             # Target Fleet version for deprecation checks
future_names = false                 # Opt-in to new naming (reports, settings, fleets)

[fleet]
url = ""                             # Fleet server URL (optional)
token = ""                           # API token (supports $ENV_VAR and op://)
fleetctl = "fleetctl"                # Path to fleetctl binary
gitops_validation = false            # Run fleetctl --dry-run on save (LSP only)
live_completions = false             # Fetch labels/queries from Fleet (LSP only)

Sections¶

`[rules]`¶

disabled — list of rule names to skip entirely
warn — list of rule names to downgrade from error to warning

`[deprecations]`¶

fleet_version — target version for deprecation phase calculation. Set to your Fleet server version (e.g., "4.85.0") to get appropriate deprecation warnings.
future_names — when true, promotes dormant deprecations to warnings even before deprecated_in version. Useful for early adoption of new naming.

`[fleet]`¶

Optional Fleet server connection for LSP features:

gitops_validation — runs fleetctl gitops apply --dry-run on save
live_completions — fetches labels, fleets, and reports from Fleet server for autocomplete

Credentials support environment variables ($FLEET_API_TOKEN) and 1Password references (op://vault/item/field).

File patterns¶

Flint activates for YAML files matching Fleet GitOps layouts:

default.yml              fleets/*.yml           platforms/**/*.yml
labels/**/*.yml          teams/*.yml (legacy)   lib/**/*.yml (legacy)

Both v4.83 (platforms/) and legacy (lib/) layouts are supported.