bazel_utils

Starlark helpers for Bazel workspaces. Each language is a separate Bazel module. Depend only on the modules you use. Tools (linters, scanners, Buf CLI) are pinned inside those modules; the consumer does not declare them again.

bazel_utils_core is pulled in transitively. The root module bazel_utils in this repository is an aggregator for development, not a consumer dependency.

Current module version: 0.2.10. See CHANGELOG.md for release notes.

Module	Load	Public API
`bazel_utils_bazel`	`@bazel_utils_bazel//:bazel.bzl`	`buildifier_test`, `buildifier_format`
`bazel_utils_buf`	`@bazel_utils_buf//:buf.bzl`	`buf_deps`, `buf_module`, `buf_generate`, `buf_lint_test`, `buf_format`, `buf_plugin`
`bazel_utils_protoc`	`@bazel_utils_protoc//:extensions.bzl`	prebuilt `protoc-gen-*` (`protoc.plugin`)
`bazel_utils_go`	`@bazel_utils_go//:go.bzl`	`golangci_test`, `govulncheck_test`
`bazel_utils_python`	`@bazel_utils_python//:python.bzl`	`ruff_test`, `ruff_format`, `pip_audit_test`
`bazel_utils_rust`	`@bazel_utils_rust//:rust.bzl`	`cargo_audit_test`
`bazel_utils_md`	`@bazel_utils_md//:markdown.bzl`	`markdownlint_test`

Workspace-cd tests (*_test macros that cd to the consumer repo) default local = True and tags external, no-cache, no-sandbox. Networked tests also add requires-network. Config files stay in the consumer (go.mod, pyproject.toml, buf.yaml, .golangci.yaml, …).

Pass buildifier / golangci / govulncheck / buf / ruff / pip_audit / cargo_audit / markdownlint only to replace this module's binary.

Modules live in subdirectories of amsokol/bazel_utils. Pin each language module with git_override at tag v0.2.10 and strip_prefix matching that directory. Language modules depend on bazel_utils_core (no public macros, not on the Bazel Central Registry), so add this once:

bazel_dep(name = "bazel_utils_core", version = "0.2.10")

git_override(
    module_name = "bazel_utils_core",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "core",
    tag = "v0.2.10",
)

bazel_utils_bazel

Prebuilt buildifier (GitHub release, selected by exec OS/CPU). Recurses with -r . from the consumer workspace root. The binary has no -exclude; pass exclude_patterns (find -path globs such as "./.venv/*") to skip trees.

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_bazel", version = "0.2.10")

git_override(
    module_name = "bazel_utils_bazel",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "bazel",
    tag = "v0.2.10",
)

# bazel/BUILD.bazel
load("@bazel_utils_bazel//:bazel.bzl", "buildifier_format", "buildifier_test")

`buildifier_test`

bazel test: check Starlark files (-mode=check -lint=warn by default).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`.
`flags`	`string_list`	no	`["-mode=check", "-lint=warn"]`	buildifier argv.
`exclude_patterns`	`string_list`	no	`[]`	`find -path` globs to skip (e.g. `"./.venv/*"`). Empty uses `-r .`.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`buildifier`	`label`	no	this module's binary	Override the pinned buildifier.
`size`	`string`	no	Bazel test default	Bazel test size.

buildifier_test(
    name = "lint",
    exclude_patterns = [
        "./.venv/*",
        "./.bazel/*",
    ],
)

`buildifier_format`

bazel run: format Starlark files (-mode=fix by default).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`flags`	`string_list`	no	`["-mode=fix"]`	buildifier argv.
`exclude_patterns`	`string_list`	no	`[]`	`find -path` globs to skip (e.g. `"./.venv/*"`). Empty uses `-r .`.
`buildifier`	`label`	no	this module's binary	Override the pinned buildifier.

buildifier_format(
    name = "format",
    exclude_patterns = [
        "./.venv/*",
        "./.bazel/*",
    ],
)

bazel_utils_buf

Hermetic Buf CLI (GitHub release via buf.toolchains), generate/lint/format, and buf_plugin for consumer-built plugins. Prebuilt protoc-gen-* binaries live in bazel_utils_protoc. The root module's protoc.plugin tags are on PATH for every buf_generate; this module also re-exports them at @bazel_utils_buf//protoc/plugins/… for an explicit plugins override.

The generate/lint template (buf.gen.yaml) and buf.yaml deps are the source of truth. buf_generate passes the template to buf generate --template as-is (out, include_imports, include_wkt, inputs).

remote: plugins and BSR proto modules need network. Put BUF_TOKEN in the environment and in the consumer .bazelrc:

build --action_env=BUF_TOKEN
test --test_env=BUF_TOKEN

The action sandbox does not inherit the user shell. Without this, buf runs anonymously and hits BSR rate limits.

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_buf", version = "0.2.10")

git_override(
    module_name = "bazel_utils_buf",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "buf",
    tag = "v0.2.10",
)

buf = use_extension("@bazel_utils_buf//:extensions.bzl", "buf")
buf.toolchains(version = "v1.73.0")
use_repo(buf, "buf")

buf.toolchains(version) is required (CLI tag must exist in this module's registry.bzl). Prebuilt plugins are selected with protoc.plugin in bazel_utils_protoc; those tags are on PATH for buf_generate. Wrap a consumer-built binary with buf_plugin and pass it in plugins.

# api/v1/BUILD.bazel
load("@bazel_utils_buf//:buf.bzl", "buf_deps", "buf_format", "buf_generate", "buf_lint_test", "buf_module", "buf_plugin")

`buf.toolchains`

Module-extension tag. At most one per module; the root module's tag wins.

Name	Type	Required	Default	Description
`version`	`string`	yes	—	Buf CLI release tag (must exist in this module's `registry.bzl`).

`buf_deps`

Import-only proto tree with one include root. Subfolders under that root stay, so files can import each other. Pass the target to buf_module deps. Not formatted.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`srcs`	`label_list` (`.proto`)	yes	—	Protobuf sources in this or another repository (file, filegroup, or glob).
`strip_import_prefix`	`string`	no	`""`	Repository-relative include root to drop (`proto` and `/proto` are the same). Empty keeps the path inside that repository.
`visibility`	`string_list`	no	package default	Target visibility.

`buf_module`

Stages protos plus the consumer buf.yaml into a directory TreeArtifact. Workspace srcs keep their checkout-relative paths. buf_generate and buf_lint_test run Buf on that copy. buf_format rewrites workspace srcs only.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`srcs`	`label_list` (`.proto`)	yes	—	Protobuf sources; workspace-relative paths are preserved.
`deps`	`label_list` (`buf_deps`)	no	`[]`	Import-only trees staged at their import paths. Not formatted. Distinct from `buf.yaml` `deps` (BSR modules).
`config`	`label`	no	`"//:buf.yaml"`	Consumer `buf.yaml`.
`visibility`	`string_list`	no	package default	Target visibility.

buf.yaml includes must cover both srcs and the staged deps import roots. Example: import "markdown/options.proto" from serde_markdown's proto/markdown/options.proto:

# serde_markdown proto/markdown/BUILD.bazel
buf_deps(
    name = "imports",
    srcs = ["options.proto"],
    strip_import_prefix = "/proto",
    visibility = ["//visibility:public"],
)

# consumer
filegroup(
    name = "protos",
    srcs = glob(["*.proto"]),
)

buf_module(
    name = "module",
    srcs = [":protos"],
    deps = ["@serde_markdown//proto/markdown:imports"],
)

`buf_generate`

buf generate over a buf_module. The root module's protoc.plugin tags are on PATH automatically. Extra plugins (buf_plugin or other executables) are merged; the same PATH name prefers the explicit target. Target name is the PATH name (local: in the template). Returns a directory TreeArtifact of the files buf wrote (for write_source_files). Those files must share one directory; use a separate buf_generate per template when out paths are unrelated. On Windows, buf.exe looks up plugins with PATHEXT (.exe, .bat); buf_generate copies each plugin as name.exe so native LookPath succeeds.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`module`	`label` (`buf_module`)	yes	—	Module to generate from.
`template`	`label`	yes	—	`buf.gen.yaml` passed to `buf generate --template`.
`plugins`	`label_list` (executable)	no	`[]`	Extra local plugins (`buf_plugin` or any executable). Merged with root `protoc.plugin` tags. Target name is the PATH name (`local:` in the template).
`buf`	`label`	no	`@buf//:buf`	Override the pinned Buf CLI.
`visibility`	`string_list`	no	package default	Target visibility.

buf_generate(
    name = "go",
    module = ":module",
    template = "//:buf.gen.go.yaml",
)

Prebuilt plugins

GitHub-release binaries from bazel_utils_protoc. Tag them with protoc.plugin in the root module; buf_generate puts those on PATH. Do not also list them in plugins unless you need an extra binary or an override. This module re-exports the same binaries at @bazel_utils_buf//protoc/plugins/…. The target name is the PATH name (local: in the template). Do not wrap them with buf_plugin.

Label	Upstream	Catalog versions	Platforms
`@bazel_utils_buf//protoc/plugins/protoc-gen-buffa`	anthropics/buffa `protoc-gen-buffa`	v0.9.2	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_buf//protoc/plugins/protoc-gen-buffa-packaging`	anthropics/buffa `protoc-gen-buffa-packaging`	v0.9.2	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_buf//protoc/plugins/protoc-gen-connect-go`	connectrpc/connect-go `protoc-gen-connect-go`	v1.21.0	linux/darwin/windows amd64+arm64
`@bazel_utils_buf//protoc/plugins/protoc-gen-connect-rust`	connectrpc/connect-rust `protoc-gen-connect-rust`	v0.9.0	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_buf//protoc/plugins/protoc-gen-go`	protocolbuffers/protobuf-go `protoc-gen-go`	v1.36.12	linux/darwin/windows amd64+arm64
`@bazel_utils_buf//protoc/plugins/protoc-gen-grpc-gateway`	grpc-ecosystem/grpc-gateway `protoc-gen-grpc-gateway`	v2.30.0	linux/darwin/windows amd64+arm64
`@bazel_utils_buf//protoc/plugins/protoc-gen-openapiv2`	grpc-ecosystem/grpc-gateway `protoc-gen-openapiv2`	v2.30.0	linux/darwin/windows amd64+arm64
`@bazel_utils_buf//protoc/plugins/protoc-gen-protovalidate-buffa`	mathematic-inc/protovalidate-buffa	v0.10.0	linux/darwin/windows amd64+arm64

load("@bazel_utils_buf//:buf.bzl", "buf_generate")

buf_generate(
    name = "rust",
    module = ":module",
    template = "//:buf.gen.rust.yaml",
)

`buf_plugin`

Wraps an executable so the target name is the PATH name buf looks up. Use it for a custom or locally built plugin when the binary Bazel built is not already named like protoc-gen-… (crate_universe often emits *_bin). Pass the target to buf_generate(plugins = …). Root-module protoc.plugin tags are already on PATH; keep buf_plugin for consumer-built extras.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	PATH name buf looks up; must match `local:` in the template.
`actual`	`label` (executable)	yes	—	Binary to wrap.

buf_plugin(
    name = "protoc-gen-my-thing",
    actual = ":my_codegen_bin",
)

buf_generate(
    name = "rust",
    module = ":module",
    template = "//:buf.gen.rust.yaml",
    plugins = [":protoc-gen-my-thing"],
)

# buf.gen.rust.yaml
plugins:
  - local: protoc-gen-my-thing
    out: rust/api/gen/my_thing

`buf_lint_test`

bazel test: buf lint on a staged buf_module. Fetches buf.yaml deps from the BSR.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`module`	`label` (`buf_module`)	yes	—	Staged module to lint.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`, `requires-network`.
`paths`	`string_list`	no	`[]`	Repeated `buf lint --path`. Empty = whole module.
`size`	`string`	no	Bazel test default	Bazel test size.
`buf`	`label`	no	`@buf//:buf`	Override the pinned Buf CLI.

buf_lint_test(
    name = "lint",
    size = "small",
    module = ":module",
)

`buf_format`

bazel run: cd to the consumer workspace, then buf format -w for the proto files in module (--path each, --config from that module's buf.yaml). Writes the checkout; does not format the staged copy.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`module`	`label` (`buf_module`)	yes	—	Module whose proto files are formatted in the checkout.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`flags`	`string_list`	no	`[]`	Extra argv after `format -w --config --path …`.
`buf`	`label`	no	`@buf//:buf`	Override the pinned Buf CLI.

buf_format(
    name = "format",
    module = ":module",
)

bazel_utils_protoc

Prebuilt protoc-gen-* codegen plugins from GitHub releases. These are ordinary protoc plugins (Buf, protoc, Connect, …). protoc.plugin(name, version) selects the release tag (catalog in plugins/<name>/registry.bzl); the root module's tag wins per plugin name. Omit a plugin to use this module's fallback. Root-module protoc.plugin tags are also the set buf_generate puts on PATH (catalog fallbacks are not).

Canonical labels: @bazel_utils_protoc//plugins/…. bazel_utils_buf re-exports the same binaries at @bazel_utils_buf//protoc/plugins/….

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_protoc", version = "0.2.10")

git_override(
    module_name = "bazel_utils_protoc",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "protoc",
    tag = "v0.2.10",
)

protoc = use_extension("@bazel_utils_protoc//:extensions.bzl", "protoc")
protoc.plugin(
    name = "protoc-gen-buffa",
    version = "v0.9.2",
)
protoc.plugin(
    name = "protoc-gen-buffa-packaging",
    version = "v0.9.2",
)
protoc.plugin(
    name = "protoc-gen-connect-go",
    version = "v1.21.0",
)
protoc.plugin(
    name = "protoc-gen-connect-rust",
    version = "v0.9.0",
)
protoc.plugin(
    name = "protoc-gen-go",
    version = "v1.36.12",
)
protoc.plugin(
    name = "protoc-gen-grpc-gateway",
    version = "v2.30.0",
)
protoc.plugin(
    name = "protoc-gen-openapiv2",
    version = "v2.30.0",
)
protoc.plugin(
    name = "protoc-gen-protovalidate-buffa",
    version = "v0.10.0",
)

bazel_utils_buf already depends on this module, so a Buf-only consumer can skip the bazel_dep and still use the re-export labels at fallback versions. Pinning a different tag requires this extension (and a direct bazel_dep).

`protoc.plugin`

Module-extension tag. One per plugin name per module; the root module's tag wins for that name.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	PATH name (`protoc-gen-buffa`, `protoc-gen-buffa-packaging`, `protoc-gen-connect-go`, `protoc-gen-connect-rust`, `protoc-gen-go`, `protoc-gen-grpc-gateway`, `protoc-gen-openapiv2`, `protoc-gen-protovalidate-buffa`).
`version`	`string`	yes	—	GitHub release tag (must exist in this module's `plugins/<name>/registry.bzl`).

Label	Upstream	Catalog versions	Platforms
`@bazel_utils_protoc//plugins/protoc-gen-buffa`	anthropics/buffa `protoc-gen-buffa`	v0.9.2	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_protoc//plugins/protoc-gen-buffa-packaging`	anthropics/buffa `protoc-gen-buffa-packaging`	v0.9.2	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_protoc//plugins/protoc-gen-connect-go`	connectrpc/connect-go `protoc-gen-connect-go`	v1.21.0	linux/darwin/windows amd64+arm64
`@bazel_utils_protoc//plugins/protoc-gen-connect-rust`	connectrpc/connect-rust `protoc-gen-connect-rust`	v0.9.0	linux/darwin amd64+arm64, windows amd64 (no windows-arm64 asset)
`@bazel_utils_protoc//plugins/protoc-gen-go`	protocolbuffers/protobuf-go `protoc-gen-go`	v1.36.12	linux/darwin/windows amd64+arm64
`@bazel_utils_protoc//plugins/protoc-gen-grpc-gateway`	grpc-ecosystem/grpc-gateway `protoc-gen-grpc-gateway`	v2.30.0	linux/darwin/windows amd64+arm64
`@bazel_utils_protoc//plugins/protoc-gen-openapiv2`	grpc-ecosystem/grpc-gateway `protoc-gen-openapiv2`	v2.30.0	linux/darwin/windows amd64+arm64
`@bazel_utils_protoc//plugins/protoc-gen-protovalidate-buffa`	mathematic-inc/protovalidate-buffa	v0.10.0	linux/darwin/windows amd64+arm64

bazel_utils_go

Prebuilt golangci-lint (GitHub release) and govulncheck (pinned in this module's go.mod). go list still uses the consumer's rules_go SDK.

dirs are Bazel paths from the repo root ("//go" → <root>/go/...).

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_go", version = "0.2.10")

git_override(
    module_name = "bazel_utils_go",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "go",
    tag = "v0.2.10",
)

# go/BUILD.bazel
load("@bazel_utils_go//:go.bzl", "golangci_test", "govulncheck_test")

`golangci_test`

bazel test: golangci-lint --config <config> run <flags> <dirs>. Needs the consumer .golangci.yaml. Defaults include requires-network (GOPROXY=off in the sandbox).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`manifest`	`label`	no	`"//:go.mod"`	Consumer `go.mod`.
`config`	`label`	no	`"//:.golangci.yaml"`	Consumer `.golangci.yaml`.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`, `requires-network`.
`dirs`	`string_list`	no	`[]`	Bazel paths from the repo root (`"//go"` → `<root>/go/...`).
`flags`	`string_list`	no	`[]`	Extra argv after `golangci-lint run`.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`golangci`	`label`	no	this module's binary	Override the pinned golangci-lint.
`size`	`string`	no	Bazel test default	Bazel test size.

golangci_test(
    name = "lint",
    dirs = ["//go"],
)

`govulncheck_test`

bazel test: govulncheck <flags> <dirs>. Needs vuln.go.dev (requires-network).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`manifest`	`label`	no	`"//:go.mod"`	Consumer `go.mod`.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`, `requires-network`.
`dirs`	`string_list`	no	`[]`	Bazel paths from the repo root (`"//go"` → `<root>/go/...`).
`flags`	`string_list`	no	`[]`	Extra govulncheck argv.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`govulncheck`	`label`	no	this module's binary	Override the pinned govulncheck.
`size`	`string`	no	Bazel test default	Bazel test size.

govulncheck_test(
    name = "vuln",
    dirs = ["//go"],
)

bazel_utils_python

Prebuilt ruff (GitHub release) and pip-audit (pinned in this module's uv.lock). Ruff config is the consumer pyproject.toml ([tool.ruff]).

dirs are Bazel paths from the repo root ("//python" → python).

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_python", version = "0.2.10")

git_override(
    module_name = "bazel_utils_python",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "python",
    tag = "v0.2.10",
)

# python/BUILD.bazel
load("@bazel_utils_python//:python.bzl", "pip_audit_test", "ruff_format", "ruff_test")

`ruff_test`

bazel test: ruff --config <manifest> check <flags> <dirs> then ruff --config <manifest> format --check <dirs> (both run; non-zero if either fails).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`manifest`	`label`	no	`"//:pyproject.toml"`	Consumer `pyproject.toml` (`[tool.ruff]`).
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`.
`dirs`	`string_list`	no	`[]`	Bazel paths from the repo root (`"//python"` → `python`).
`flags`	`string_list`	no	`[]`	Extra `ruff check` flags.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`ruff`	`label`	no	this module's binary	Override the pinned ruff.
`size`	`string`	no	Bazel test default	Bazel test size.

ruff_test(
    name = "lint",
    dirs = ["//python"],
)

`ruff_format`

bazel run: ruff --config <manifest> format <flags> <dirs>.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`manifest`	`label`	no	`"//:pyproject.toml"`	Consumer `pyproject.toml` (`[tool.ruff]`).
`dirs`	`string_list`	no	`[]`	Bazel paths from the repo root (`"//python"` → `python`).
`flags`	`string_list`	no	`[]`	Extra `ruff format` flags.
`ruff`	`label`	no	this module's binary	Override the pinned ruff.

ruff_format(
    name = "format",
    dirs = ["//python"],
)

`pip_audit_test`

bazel test: uv export --frozen --all-groups from the consumer lock, then pip-audit -r … --disable-pip. Needs OSV (requires-network).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`lock`	`label`	no	`"//:uv.lock"`	Consumer `uv.lock` (`uv export --frozen --all-groups`).
`manifest`	`label`	no	`"//:pyproject.toml"`	Consumer `pyproject.toml`.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`, `requires-network`.
`flags`	`string_list`	no	`[]`	Extra pip-audit argv.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`pip_audit`	`label`	no	this module's binary	Override the pinned pip-audit.
`size`	`string`	no	Bazel test default	Bazel test size.

pip_audit_test(
    name = "vuln",
)

bazel_utils_rust

Prebuilt cargo-audit. RustSec GitHub releases cover Unix and Windows AMD64; Windows ARM64 uses the cargo-quickinstall build of the same version. cargo -V still uses the consumer's rules_rust toolchain.

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_rust", version = "0.2.10")

git_override(
    module_name = "bazel_utils_rust",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "rust",
    tag = "v0.2.10",
)

# rust/BUILD.bazel
load("@bazel_utils_rust//:rust.bzl", "cargo_audit_test")

`cargo_audit_test`

bazel test: cargo-audit audit --file <lock>. Needs the rustsec advisory DB (requires-network).

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`lock`	`label`	no	`"//:Cargo.lock"`	Consumer `Cargo.lock`.
`manifest`	`label`	no	`"//:Cargo.toml"`	Consumer `Cargo.toml`.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`, `requires-network`.
`flags`	`string_list`	no	`[]`	Extra cargo-audit argv.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`cargo_audit`	`label`	no	this module's binary	Override the pinned cargo-audit.
`size`	`string`	no	Bazel test default	Bazel test size.

cargo_audit_test(
    name = "vuln",
)

bazel_utils_md

markdownlint-cli2 pinned in this module's pnpm catalog. Config and globs come from the consumer .markdownlint-cli2.yaml.

Add to a Bazel project

# MODULE.bazel
bazel_dep(name = "bazel_utils_md", version = "0.2.10")

git_override(
    module_name = "bazel_utils_md",
    remote = "https://github.com/amsokol/bazel_utils.git",
    strip_prefix = "markdown",
    tag = "v0.2.10",
)

# bazel/BUILD.bazel
load("@bazel_utils_md//:markdown.bzl", "markdownlint_test")

`markdownlint_test`

bazel test: markdownlint-cli2 after cd to the consumer workspace.

Name	Type	Required	Default	Description
`name`	`string`	yes	—	Target name.
`workspace`	`label`	no	`"//:MODULE.bazel"`	Repo-root marker when `BUILD_WORKSPACE_DIRECTORY` is unset.
`config`	`label`	no	`"//:.markdownlint-cli2.yaml"`	Consumer markdownlint config and globs.
`tags`	`string_list`	no	`[]`	Extra tags; merged with `external`, `no-cache`, `no-sandbox`.
`local`	`bool`	no	`True`	Bazel `local` test attribute.
`flags`	`string_list`	no	`[]`	Extra markdownlint-cli2 argv.
`markdownlint`	`label`	no	this module's binary	Override the pinned markdownlint-cli2.
`size`	`string`	no	Bazel test default	Bazel test size.

markdownlint_test(
    name = "markdown",
)

Navigation Menu

Repository files navigation

bazel_utils

bazel_utils_bazel

Add to a Bazel project

`buildifier_test`

`buildifier_format`

bazel_utils_buf

Add to a Bazel project

`buf.toolchains`

`buf_deps`

`buf_module`

`buf_generate`

Prebuilt plugins

`buf_plugin`

`buf_lint_test`

`buf_format`

bazel_utils_protoc

Add to a Bazel project

`protoc.plugin`

bazel_utils_go

Add to a Bazel project

`golangci_test`

`govulncheck_test`

bazel_utils_python

Add to a Bazel project

`ruff_test`

`ruff_format`

`pip_audit_test`

bazel_utils_rust

Add to a Bazel project

`cargo_audit_test`

bazel_utils_md

Add to a Bazel project

`markdownlint_test`

About

Releases

Packages

Contributors

Languages

Name		Name	Last commit message	Last commit date
.cursor/skills/versioning		.cursor/skills/versioning
.github/workflows		.github/workflows
bazel		bazel
buf		buf
core		core
go		go
markdown		markdown
protoc		protoc
python		python
rust		rust
.bazelignore		.bazelignore
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.gitignore		.gitignore
.markdownlint-cli2.yaml		.markdownlint-cli2.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
LICENSE		LICENSE
MODULE.bazel		MODULE.bazel
MODULE.bazel.lock		MODULE.bazel.lock
README.md		README.md
root_plugins.bzl		root_plugins.bzl

Latest commit

History

Folders and files

Repository files navigation

bazel_utils

bazel_utils_bazel

Add to a Bazel project

buildifier_test

buildifier_format

bazel_utils_buf

Add to a Bazel project

buf.toolchains

buf_deps

buf_module

buf_generate

Prebuilt plugins

buf_plugin

buf_lint_test

buf_format

bazel_utils_protoc

Add to a Bazel project

protoc.plugin

bazel_utils_go

Add to a Bazel project

golangci_test

govulncheck_test

bazel_utils_python

Add to a Bazel project

ruff_test

ruff_format

pip_audit_test

bazel_utils_rust

Add to a Bazel project

cargo_audit_test

bazel_utils_md

Add to a Bazel project

markdownlint_test

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

`buildifier_test`

`buildifier_format`

`buf.toolchains`

`buf_deps`

`buf_module`

`buf_generate`

`buf_plugin`

`buf_lint_test`

`buf_format`

`protoc.plugin`

`golangci_test`

`govulncheck_test`

`ruff_test`

`ruff_format`

`pip_audit_test`

`cargo_audit_test`

`markdownlint_test`