Commitlint Config Generator
Generate Commitlint config for Conventional Commits, commit types, scopes, rules, Git hooks, Husky, Commitizen, Gitmoji, and local testing.
What is this tool?
Commitlint Config Generator is a visual tool that generates configuration files to enforce the Conventional Commits specification. By validating commit messages (e.g., `feat: added login page`) before they are saved via Git hooks, you unlock the ability to completely automate your semantic versioning (SemVer) bumps and changelog generation.
How to Use This Tool
- Select your preferred config format (JS, CJS, MJS, TS, JSON, YAML) or embed it directly in `package.json`.
- Customize the standard commit prefixes (feat, fix, docs, chore, etc.) or add your own (like `wip:`).
- Define allowed scopes to restrict commits to specific packages or areas of your codebase.
- Review the generated `commitlint.config.js` output in the editor panel.
- Copy the config and follow the instructions to set up the Husky `commit-msg` hook.
What This Tool Generates
commitlint.config.js,.cjs,.mjs, or.tsdepending on your preference.package.jsondependency installation commands.- Husky
.husky/commit-msghook setup script. - Notes on integrating with tools like Commitizen.
Enterprise Best Practices
- Enforce Scopes in Monorepos: If you use Nx or Turborepo, restrict scopes exactly to package folder names to prevent typos like `feat(u-i)` which would break automated release notes.
- Pair with Husky: Commitlint is useless without a Git hook to enforce it. Always set up the `.husky/commit-msg` hook to run `npx --no -- commitlint --edit $1`.
- Generate Changelogs: Once Commitlint is strictly enforced, use tools like `semantic-release` to parse the `feat` and `fix` commits and auto-publish npm packages.
Common Mistakes
- Using `commitlint` on the `pre-commit` hook instead of the `commit-msg` hook. The message is not available yet during pre-commit.
- Typing "commitlint command not found". This usually means you need to use `npx commitlint` or install it globally/locally.
Security Notes
- Commitlint plugins execute local Node.js code. Only install trusted plugins.
- When running Commitlint locally, be aware that you can still bypass it using `git commit --no-verify` in an emergency. However, CI pipelines should always validate the commits rigidly.
Related Tools
How We Keep Your Configs Safe & Valid
Built-in Error Checking
Every file is checked against official rules. We catch missing fields and bad syntax. YAML indentation errors are flagged right away. Kubernetes, Terraform, and Docker specs are all covered. API versions and labels are verified too. You get valid output every time you generate.
100% Private & Local
All tools run in your browser only. Your API keys never leave your machine. We do not use any tracking scripts. No data is sent to any server. Passwords and secrets stay on your device. Crypto operations use the Web Crypto API. Your privacy is fully protected at all times.
Secure Settings by Default
Configs use safe defaults out of the box. Containers run as non-root users. Root filesystems are set to read-only. Dangerous Linux capabilities are dropped. Network policies limit pod-to-pod traffic. TLS 1.3 is enabled for web servers. Security headers are added where needed.
Ready for CI/CD & Git
Output files are ready for your Git repo. Use them with ArgoCD, Flux, or GitHub Actions. Files use clear formatting and comments. Code review is easy for your team. Indentation and key order are consistent. Test in staging before going to production. Every file is clean and well-structured.
Infrastructure as Code
Store configs in Git alongside your code. Terraform modules include typed variables. Backend configs support remote state locking. Outputs work across multiple modules. Ansible playbooks use clear task steps. Chef and Puppet configs are also supported. Every file works with version control tools.
Monitoring & Tracing
Set up Prometheus with auto-discovery rules. Create Grafana dashboards with template variables. Add alerting rules with severity labels. Use OpenTelemetry for trace collection. Forward logs to Loki or Elasticsearch. Connect to Jaeger or Tempo for tracing. Monitor metrics, logs, and traces together.
Container & Docker Safety
Dockerfiles use multi-stage builds for small images. Base images are pinned to exact versions. Dev files are excluded from final images. Health checks are added for orchestrator use. Containers switch to non-root users. Docker Compose uses named volumes and networks. Resource limits are set in deploy configs.
Multiple Output Formats
Export as YAML, JSON, HCL, or TOML. Kubernetes uses YAML with proper separators. Terraform uses HCL with correct escaping. JSON output has consistent indentation. Copy to clipboard with one click. Preview output with syntax highlighting. Line numbers help you review quickly.