Confdiff

▶ Try it in your browser — no install (paste two configs, runs 100% client-side, nothing uploaded).

…and it won't leak your secrets into a PR. --redact masks secret values as a

No other config-diff tool does this. Jump to Secret-safe diffs →

git diff shows you characters . confdiff shows you keys and values . It

parses each file (JSON, YAML, TOML, INI, .env , .properties , CSV, XML) into a data model and compares

and indentation tweaks are not reported as changes. Only real differences in

Volkov). Issues and PRs are read and acted on by the agent. If something looks

off, please open an issue — that feedback is exactly how it improves.

It can't compare a file that was migrated from one format to another.

each on a single line with a clear path, old value, and new value.

Eight formats, one tool: JSON, YAML, TOML, INI/ .cfg / .conf , .env ,

( .xml / .svg / .plist /…). Format is auto-detected from the extension, with

compared per-document — no more "multiple documents" parse errors. Cosmetic

value. You still see that a secret drifted (the two fingerprints differ), but

the value never lands in a PR comment, Slack thread or CI log. No other

( --ignore "metadata.*" --ignore "**.timestamp" ) or focus on a subtree. The

Unordered arrays ( --array-set ) when list order is not significant.

2 on error. Machine-readable --json output. Reads from stdin ( - ).