Download Config File Validator 2.2.0

This is a big one. v2.2.0 brings project-level configuration, smarter file detection, and a bunch of quality-of-life improvements we've been wanting to ship for a while.
Project configuration with .cfv.toml
You can now drop a .cfv.toml file in your project root and stop repeating CLI flags. The validator auto-discovers it by walking up from the current directory, so monorepos and nested projects just work. Every flag has a config equivalent — exclude dirs, file types, schema mappings, reporter settings, all of it. The config file itself is validated against an embedded schema, so typos get caught immediately instead of silently ignored.
Justfile validation
We added syntax validation for Justfiles (.just, justfile, .justfile) using an embedded Go parser. Unlike Makefiles, Justfiles have a real grammar, which means we can actually give you useful error messages.
--gitignore support
Pass --gitignore and the validator will skip anything your .gitignore covers — including nested .gitignore files, .git/info/exclude, and your global git config. No more noise from node_modules/, dist/, or vendored files showing up in your results. Works as a CLI flag, env var (CFV_GITIGNORE), or in .cfv.toml.
Smarter file detection
The validator now recognizes ~90 common config filenames automatically, sourced from GitHub Linguist. Files like .babelrc, tsconfig.json, Pipfile, pom.xml, and .gitconfig are detected and validated without any configuration. This also means tsconfig.json is correctly treated as JSONC (not strict JSON), and SchemaStore lookups work for extensionless files like .clangd.
JSONC as a first-class type
JSONC (JSON with comments and trailing commas) is now its own file type with full syntax and schema validation. JSON and JSONC are treated as a family — --file-types=json includes both, and --exclude-file-types=json excludes both.
SchemaStore, no clone required
--schemastore now fetches schemas over HTTPS using an embedded catalog — no local clone needed. Schemas are cached locally with a 24-hour TTL. For air-gapped setups, --schemastore-path still works with a local clone.
Stdin support
You can now pipe content directly into the validator: echo '{}' | validator --file-types=json -. Handy for quick checks or integrating with other tools.
Other improvements
- Pre-commit hooks are available — config-file-validator for changed files, config-file-validator-full for CI
- Exit codes are now granular: 0 for success, 1 for validation errors, 2 for config/runtime errors
- .tf and .tfvars are recognized as HCL
- Internal refactor moved package-level globals into the CLI struct for better concurrency safety
Breaking change
--schemastore is now a boolean flag for remote lookup. If you were passing a path to it, use --schemastore-path instead.