getreadystack/cert-lifetime-lint repository overview

⁠Cert Lifetime Lint - TLS validity caps 200/100/47

Finds the renewal settings in your repo that outlive the public TLS cap: 200 days since 15 March 2026, 100 days from 15 March 2027, 47 days from 15 March 2029.

⁠Run

docker run --rm -v "$PWD":/work readystack/cert-lifetime-lint /work/file

The same 16 rules as the VS Code extension, in a container. Mount a folder on /work.

⁠Free

• Checks the file you have open against all 16 rules and shows every over-cap line with the line that replaces it - no key, no limit, no watermark.
• --rules lists every rule

⁠With a licence ($29 once)

• Scans every file in the repository instead of one, writes a dated CSV/JSON/HTML evidence report, and prints machine-readable output so CI fails the build before an over-cap certificate ships.

docker run --rm -e READYSTACK_LICENSE=<key> -v "$PWD":/work readystack/cert-lifetime-lint --dir /work --ci

Hosted certificate-expiry monitoring is $25-29 a month.

Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence⁠