It would be nice to have a check that raise an error if unencrypted ansible-vault files are present.
In my applications I use the file naming convention *vault.yml or *vault.yaml to mark ansible-vault files. The test could be that the first line in file must contain the string '$ANSIBLE_VAULT;'. Is it possible to get such linting functionality implemented? file: test-vault.yml $ANSIBLE_VAULT;1.1;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 -- You received this message because you are subscribed to the Google Groups "Ansible Development" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-devel/a93c1281-8b15-42bb-a576-cc64f9d8ae39%40googlegroups.com.