An extensible command line tool or library to format yaml files.
An extensible command line tool or library to format yaml files.
yamlfmt is an extensible command line tool or library to format yaml files.
This tool is not yet officially supported by Google. It is currently maintained solely by @braydonk, and unless something changes primarily in spare time.
I'm going to use these links to GitHub Discussions as a blog of sorts, until I can set up something more proper:
To download the yamlfmt command, you can download the desired binary from releases or install the module directly:
go install github.com/google/yamlfmt/cmd/yamlfmt@latestThis currently requires Go version 1.21 or greater.
NOTE: Recommended setup if this is your first time installing Go would be in this DigitalOcean blog post.
You can also download the binary you want from releases. The binary is self-sufficient with no dependencies, and can simply be put somewhere on your PATH and run with the command yamlfmt. Read more about verifying the authenticity of released artifacts here.
You can also install the command as a pre-commit hook. See the pre-commit hook docs for instructions.
See Command Usage for in-depth information and available flags.
To run the tool with all default settings, run the command with a path argument:
yamlfmt x.yaml y.yaml <...>You can specify as many paths as you want. You can also specify a directory which will be searched recursively for any files with the extension .yaml or .yml.
yamlfmt .You can also use an alternate mode that will search paths with doublestar globs by supplying the -dstar flag.
yamlfmt -dstar **/*.{yaml,yml}See the doublestar package for more information on this format.
Yamlfmt can also be used in ci/cd pipelines which supports running containers. The following snippet shows an example job for GitLab CI:
yamllint:
image: ghcr.io/google/yamlfmt:latest
script:
- yamlfmt -lint .The Docker image can also be used to run yamlfmt without installing it on your system. Just mount the directory you want to format as a volume (/project is used by default):
docker run -v "$(pwd):/project" ghcr.io/google/yamlfmt:latest <yamlfmt args>The yamlfmt command can be configured through a yaml file called .yamlfmt. This file can live in your working directory, a path specified through a CLI flag, or in the standard global config path on your system (see docs for specifics).
For in-depth configuration documentation see Config.
NOTE: Support for verifying with cosign is present from v0.14.0 onward.
In case you get the yamlfmt binary directly from a release, you may want to verify its authenticity. Checksums are applied to all released artifacts, and the resulting checksum file is signed using cosign.
Steps to verify (replace A.B.C in the commands listed below with the version you want):
Download the following files from the release:
curl -sfLO https://github.com/google/yamlfmt/releases/download/vA.B.C/checksums.txt
curl -sfLO https://github.com/google/yamlfmt/releases/download/vA.B.C/checksums.txt.pem
curl -sfLO https://github.com/google/yamlfmt/releases/download/vA.B.C/checksums.txt.sigVerify the signature:
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp 'https://github\.com/google/yamlfmt/\.github/workflows/.+' \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"Download the compressed archive you want, and validate its checksum:
curl -sfLO https://github.com/google/yamlfmt/releases/download/vA.B.C/yamlfmt_A.B.C_Linux_x86_64.tar.gz
sha256sum --ignore-missing -c checksums.txtIf checksum validation goes through, uncompress the archive:
tar -xzf yamlfmt_A.B.C_Linux_x86_64.tar.gz
./yamlfmtNo open issues yet, or sync has not completed.