getreadystack/cert-lifetime-lint-47day repository overview

⁠Cert Lifetime Lint - 200/100/47-Day TLS Audit

Finds the 365-day and 90-day certificate assumptions left in your cert-manager, Terraform, ACME and monitoring config. The public TLS maximum is 200 days now, 100 on 2027-03-15, 47 on 2029-03-15.

⁠Run

docker run --rm -v "$PWD":/work readystack/cert-lifetime-lint-47day /work/file

The same 24 rules as the VS Code extension, in a container. Mount a folder on /work.

⁠Free

• Check the open file against all 24 rules - every finding, with line number, severity and the date the limit changes; Reopen the last report without re-running the check; List every rule that ships inside, so you can see what is and is not covered
• --rules lists every rule

⁠With a licence ($29 once)

• Every file in the repository in one pass; A CI gate that fails the build; An exported audit file; Rewrite the offending durations in place

docker run --rm -e READYSTACK_LICENSE=<key> -v "$PWD":/work readystack/cert-lifetime-lint-47day --dir /work --ci

Hosted certificate monitors bill $17-19 every month - Better Stack Starter is $204/year for 20 domains and TrackSSL Starter is $19/month - and they watch a certificate after it has been issued, not the config that issues it.

7-day refund, no questions. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence⁠