From a7db5585e2d401de799fd022ccba51b8e0227f97 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Alet?= <jerome.alet@opt.nc>
Date: Fri, 1 Jul 2022 10:51:13 +1100
Subject: [PATCH] Now automatically ignore ansible vaults.

---
 tests/test_linter.py | 4 ++++
 yamllint/linter.py   | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/tests/test_linter.py b/tests/test_linter.py
index 686068b..a6a2151 100644
--- a/tests/test_linter.py
+++ b/tests/test_linter.py
@@ -55,6 +55,10 @@ class LinterTestCase(unittest.TestCase):
         linter.run(s, self.fake_config())
         linter.run(s.encode('utf-8'), self.fake_config())
 
+    def test_run_on_ansible_vault(self):
+        linter.run('$ANSIBLE_VAULT;1.1;AES256\n1643039736532396535663733313\n',
+                   self.fake_config())
+
     def test_linter_problem_repr_without_rule(self):
         problem = linter.LintProblem(1, 2, 'problem')
 
diff --git a/yamllint/linter.py b/yamllint/linter.py
index 3984970..ae35588 100644
--- a/yamllint/linter.py
+++ b/yamllint/linter.py
@@ -188,6 +188,9 @@ def _run(buffer, conf, filepath):
     first_line = next(parser.line_generator(buffer)).content
     if re.match(r'^#\s*yamllint disable-file\s*$', first_line):
         return
+    elif first_line.startswith('$ANSIBLE_VAULT;'):
+        # We ignore Ansible vaults.
+        return
 
     # If the document contains a syntax error, save it and yield it at the
     # right line