-
Notifications
You must be signed in to change notification settings - Fork 1
TEST: Some test to check CLI v2 upload #8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
machadoit
wants to merge
16
commits into
main
Choose a base branch
from
test-cli-upload-v2
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
Show all changes
16 commits
Select commit
Hold shift + click to select a range
9d4cfb7
test cli v2
heliocodacy ca5d231
downloading correct version
heliocodacy 4d83ecb
add config file
heliocodacy 5dcb443
upload report
heliocodacy 9baa2b0
fix token parameter
heliocodacy 451e77b
update branch for gh action
heliocodacy 62c2a54
test api token
heliocodacy 0614719
update gh action branch
heliocodacy 089a658
Update codacy.yml
heliocodacy eb2f47f
Update codacy.yml
heliocodacy 7c5db3b
Update codacy.yml
heliocodacy 0b4640f
Update codacy.yml
heliocodacy 1950730
Update codacy.yml
heliocodacy 3c6d7fa
Merge branch 'main' into test-cli-v2
heliocodacy 082094c
move to eslint9
heliocodacy 746ed23
Some test
machadoit File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,10 +1,4 @@ | ||
| runtimes: | ||
| - node@22.2.0 | ||
| - python@3.11.11 | ||
| - dart@3.7.2 | ||
| tools: | ||
| - eslint@9.3.0 | ||
| - trivy@0.59.1 | ||
| - pylint@3.3.6 | ||
| - pmd@6.55.0 | ||
| - dartanalyzer@3.7.2 | ||
| - eslint@9.3.0 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| export default [ | ||
| { | ||
| rules: { | ||
| } | ||
| } | ||
| ]; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🚫 Codacy found a high Security issue: An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
The issue identified by the Semgrep linter is that the GitHub Action
codacy/codacy-cli-v2-action@mainis being referenced using a branch name (main). This practice can lead to unpredictability, as the action may change if new commits are pushed to the branch. Instead, it's recommended to pin the action to a specific commit SHA to ensure that the action remains immutable and consistent across builds.To fix this issue, you should replace
mainwith the full-length commit SHA of the specific version of the action you want to use. You can find the commit SHA from the repository's commit history on GitHub.Here’s the code suggestion to implement this change:
Make sure to replace
<full-length-commit-SHA>with the actual SHA you want to pin to.This comment was generated by an experimental AI tool.