Version 0.5.0 of the trooth command-line tool parses the files it lints, reports what it could not read, and exits with code 4 when a file cannot be parsed.
What changed
Version 0.5.0 of the trooth command-line interface (CLI) replaces the pattern matching in `trooth lint` with parsers for Terraform, Terraform plans in JavaScript Object Notation (JSON), Kubernetes manifests, and container files. A file it cannot parse is reported as not read, never as clean, and the run exits with code 4 unless you pass `--allow-incomplete`. Encryption is now reported in five states: declared, declared off, not declared, unresolved, and unsupported. A setting written as a variable Trooth cannot resolve is unresolved, not encrypted. `trooth check` now states that it sends the domain you name, stops after 15 seconds, refuses answers over 1 MiB, and exits with code 5 when a company is listed but not witnessed. The report schema is trooth-lint/2 and keeps `digest` as an alias of the new `facts_digest`. The GitHub Action installs 0.5.0 by default and writes each run to its own temporary directory. The Visual Studio Code extension 0.1.2 removes its API key, host, and framework settings; it never needed a key. The old preflight action is retired with a migration notice.
Why it changed
Pattern matching counted text that looked like a setting, and a file the tool could not read could come back looking clean.
Who is affected
- Affected: Anyone running trooth lint or trooth check in a terminal or in continuous integration, and users of the GitHub Action and the Visual Studio Code extension.
- Availability: npm and GitHub. No account.
- Release stage: Available.
- Areas: CLI.
What to do
Action required. A pipeline running trooth lint can now fail with exit code 4 when a file cannot be parsed. Fix the file, or pass --allow-incomplete to keep the run passing. Compare counts only between runs of the same version.
Versions and migration
- trooth:
0.5.0 - Lint report schema:
trooth-lint/2 - Visual Studio Code extension:
0.1.2
Before:
npx trooth@0.4.4 lint .After:
npx trooth@0.5.0 lint . --allow-incompleteDates
- Announced: September 26, 2026, the day this entry was written. Entries are never backdated.
- Released to npm and GitHub: September 26, 2026.
What this does not fix
Counts from 0.5.0 differ from 0.4.4 on the same files: 0.4.4 counted matches, 0.5.0 counts parsed resources. Compare runs made with the same version. The CLI does not check signatures; its report says `signature_checked: false`.