From c691d7e07ad3f07924bccc9ef01dd5af16bce38c Mon Sep 17 00:00:00 2001
From: Robert Rose <robert.rose@mailbox.org>
Date: Wed, 11 Jun 2025 15:38:33 +0200
Subject: [PATCH] Follow top-level directory symlinks when finding resources

`filepath.Walk` doesn't follow symbolic links, so kubeconform reported
zero found files when pointed to a directory symlink. This adds support
to follow top-level links, nested links will still not be followed.
---
 pkg/resource/files.go | 53 ++++++++++++++++++++++++++++++++-----------
 1 file changed, 40 insertions(+), 13 deletions(-)

diff --git a/pkg/resource/files.go b/pkg/resource/files.go
index 37330d1..0bce53f 100644
--- a/pkg/resource/files.go
+++ b/pkg/resource/files.go
@@ -40,6 +40,24 @@ func isIgnored(path string, ignoreFilePatterns []string) (bool, error) {
 	return false, nil
 }
 
+func checkFile(path string, info os.FileInfo, files chan<- string, ignoreFilePatterns []string) error {
+	if !isYAMLFile(info) && !isJSONFile(info) {
+		return nil
+	}
+
+	ignored, err := isIgnored(path, ignoreFilePatterns)
+	if err != nil {
+		return err
+	}
+	if ignored {
+		return nil
+	}
+
+	files <- path
+
+	return nil
+}
+
 func findFilesInFolders(ctx context.Context, paths []string, ignoreFilePatterns []string) (chan string, chan error) {
 	files := make(chan string)
 	errors := make(chan error)
@@ -59,21 +77,30 @@ func findFilesInFolders(ctx context.Context, paths []string, ignoreFilePatterns
 					return err
 				}
 
-				if !isYAMLFile(i) && !isJSONFile(i) {
-					return nil
+				// follow top-level directory symlinks
+				if i.Mode()&os.ModeSymlink != 0 {
+					linkInfo, err := os.Stat(path)
+					if err != nil {
+						return err
+					}
+
+					if linkInfo.IsDir() {
+						evalPath, err := filepath.EvalSymlinks(path)
+						if err != nil {
+							return err
+						}
+
+						filepath.Walk(evalPath, func(p string, i os.FileInfo, err error) error {
+							if err != nil {
+								return err
+							}
+
+							return checkFile(p, i, files, ignoreFilePatterns)
+						})
+					}
 				}
 
-				ignored, err := isIgnored(p, ignoreFilePatterns)
-				if err != nil {
-					return err
-				}
-				if ignored {
-					return nil
-				}
-
-				files <- p
-
-				return nil
+				return checkFile(p, i, files, ignoreFilePatterns)
 			})
 
 			if err != nil && err != io.EOF {