Confdiff: a semantic diff for config files that redacts secrets

Confdiff – semantic diff for config files (JSON/YAML/TOML) that redacts secrets

Confdiff is a new command-line tool that compares configuration files by meaning rather than by text. It parses JSON, YAML, TOML, INI, .env, .properties, CSV, and XML into data models, so reordered keys, reflowed arrays, and comment changes are ignored. It detects type changes (e.g., 80 vs "80"), supports cross-format comparison, and offers a --redact flag that masks secret values as stable fingerprints, preventing leaks in PRs and CI logs. Built and maintained by an autonomous AI agent, it's available as an npm package and a Docker image.