Skip to main content

Validate Co-authored-by trailers in commit messages.

Project description

coauthorcheck logo

coauthorcheck

Lightweight command-line validation for Co-authored-by commit trailers.

CI PyPI version Supported Python versions License

Table of Contents

Usage

coauthorcheck works in any Git repository, regardless of the project's language or build system. You can use coauthorcheck in one of these three ways:

  • as a pre-commit commit-msg hook for immediate local feedback
  • in GitHub Actions to validate branch or pull request commits before merge
  • directly from CLI

pre-commit

Add this to .pre-commit-config.yaml:

repos:
  - repo: https://github.com/simoncraf/coauthorcheck
    rev: v0.4.0
    hooks:
      - id: coauthorcheck
        stages: [commit-msg]

Then install the hook:

pre-commit install --hook-type commit-msg

This is required because coauthorcheck validates the final commit message file, and commit-msg is the Git hook that receives that file.

GitHub Actions

Validate commits introduced by branch pushes:

name: Validate Co-authored-by trailers

on:
  push:
    branches:
      - "feature/**"
      - "feat/**"

jobs:
  validate-commits:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-python@v5
        with:
          python-version: "3.13"

      - name: Install coauthorcheck
        run: pip install coauthorcheck==0.4.0

      - name: Validate branch commits
        run: coauthorcheck "origin/main..HEAD"

Validate commits introduced by a pull request:

name: Validate Co-authored-by trailers on PR

on:
  pull_request:
    branches:
      - main

jobs:
  validate-commits:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-python@v5
        with:
          python-version: "3.13"

      - name: Install coauthorcheck
        run: pip install coauthorcheck==0.4.0

      - name: Validate PR commits
        run: coauthorcheck "origin/${{ github.base_ref }}..HEAD"

See docs/integrations.md for local hooks, JSON output, PR comments, and more workflow examples.

When validation fails, coauthorcheck also prints a suggested corrected trailer line. If multiple issues affect the same trailer, they are merged into one canonical fix suggestion.

CLI

coauthorcheck .git/COMMIT_EDITMSG
coauthorcheck HEAD
coauthorcheck HEAD~5..HEAD
coauthorcheck main..HEAD
coauthorcheck origin/main..HEAD

coauthorcheck --file .git/COMMIT_EDITMSG
coauthorcheck --commit HEAD
coauthorcheck --range HEAD~5..HEAD

Positional input is auto-detected in this order:

  • values containing .. or ... are treated as commit ranges
  • existing paths are treated as commit message files
  • everything else is treated as a commit ref

Use the explicit flags when you want fully unambiguous scripting.

Check the installed CLI:

coauthorcheck --help

Installation

Install from PyPI:

pip install coauthorcheck

Or with uv:

uv tool install coauthorcheck

Or with pipx:

pipx install coauthorcheck

After installation, run:

coauthorcheck --help

Common CLI Workflows

Validate the commit message currently being edited:

coauthorcheck .git/COMMIT_EDITMSG

Validate only the commits introduced by your current branch compared with main:

coauthorcheck main..HEAD

Validate only the commits introduced by your branch compared with the remote default branch:

coauthorcheck origin/main..HEAD

Validate the last few commits on the current branch:

coauthorcheck HEAD~3..HEAD

Configuration

coauthorcheck supports repository-local configuration from either:

  • pyproject.toml under [tool.coauthorcheck]
  • .coauthorcheck.toml

Configuration is resolved in this order:

  1. --config <path>
  2. nearest .coauthorcheck.toml
  3. nearest pyproject.toml with [tool.coauthorcheck]
  4. built-in defaults

When config files are auto-discovered, coauthorcheck searches upward from the current working directory. This means running the tool from a nested folder in the repo still finds the repo-level config.

Example using pyproject.toml:

[tool.coauthorcheck.rules]
single_word_name = false
github_handle = true
incorrect_casing = true
invalid_format = true
malformed_email = true
missing_email = true
missing_name = true

Example using .coauthorcheck.toml:

[rules]
single_word_name = false
github_handle = false
incorrect_casing = true
invalid_format = true
malformed_email = true
missing_email = true
missing_name = true

Use an explicit config file with:

coauthorcheck --config .coauthorcheck.toml main..HEAD

Unknown rule names or non-boolean values are treated as configuration errors.

See docs/rules.md for a detailed explanation of each rule. See docs/integrations.md for pre-commit, GitHub Actions, JSON output, and PR comment examples. Use coauthorcheck --format json ... for machine-readable output in CI and automation. JSON issue objects also include a suggestion field when a corrected trailer can be proposed.

Development

Set up the local environment:

uv sync

Run the CLI from the project environment:

uv run coauthorcheck --help

Run the tool from another repository by changing into that repository first and then invoking the executable from this project:

cd /path/to/other-repo
/path/to/coauthorcheck/.venv/Scripts/coauthorcheck.exe main..HEAD

In Git Bash, use /c/... style paths:

/path/to/coauthorcheck/.venv/Scripts/coauthorcheck.exe main..HEAD

Run the test suite:

uv run pytest

Run the linter:

uv run ruff check .

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

coauthorcheck-0.4.0.tar.gz (17.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

coauthorcheck-0.4.0-py3-none-any.whl (13.2 kB view details)

Uploaded Python 3

File details

Details for the file coauthorcheck-0.4.0.tar.gz.

File metadata

  • Download URL: coauthorcheck-0.4.0.tar.gz
  • Upload date:
  • Size: 17.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for coauthorcheck-0.4.0.tar.gz
Algorithm Hash digest
SHA256 152baec8941fcdfcbc8b0a320fb7beba9a51e534a5a43125d91c256b56678c83
MD5 29bbbe6492880177430b43a3f17fc00f
BLAKE2b-256 b238e7bf0ba72ba37ef9d5bd758196b1617881b9cbde360f594477f0061310fc

See more details on using hashes here.

Provenance

The following attestation bundles were made for coauthorcheck-0.4.0.tar.gz:

Publisher: release.yml on simoncraf/coauthorcheck

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file coauthorcheck-0.4.0-py3-none-any.whl.

File metadata

  • Download URL: coauthorcheck-0.4.0-py3-none-any.whl
  • Upload date:
  • Size: 13.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for coauthorcheck-0.4.0-py3-none-any.whl
Algorithm Hash digest
SHA256 de19e196a729febf01476b327ecd4cc736f0a334e29f71d9c3c1895a63a15caa
MD5 b7c0767e8e90e7974e1caa4136f54fbe
BLAKE2b-256 95c06f227f22f6255e7b84ace77d429c7fa56a481856b97eaa87bac90d7effff

See more details on using hashes here.

Provenance

The following attestation bundles were made for coauthorcheck-0.4.0-py3-none-any.whl:

Publisher: release.yml on simoncraf/coauthorcheck

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page