Retrofit 5.11.2 + Git update #1433

nvuillam · 2022-04-23T15:30:53Z

No description provided.

* fixe issue #1060 * fix hadolint error DL3059

* [automation] Auto-update linters version, help and documentation * Increase trivy timeout

Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com>

Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com>

* fix(cspell): Create config dirs if missing If a cspell config is located in some directory we need to create the same tree under the `report` dir * docs(CHANGELOG): added fix note Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com>

* Bump actions/setup-python from 3.1.1 to 3.1.2 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3.1.1 to 3.1.2. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v3.1.1...v3.1.2) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Manage FAIL_IF_UPDATED_SOURCES option * [MegaLinter] Apply linters fixes * Bump actions/checkout from 3.0.0 to 3.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.0 to 3.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3.0.0...v3.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Fix git issue Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com>

* Try fix Git CVE issue * Try again fix git issue

As we are supposed to trust the machine and repo we use MegaLinter on

* Dynamic add git safe.directory quick build * Test auto-update too * [automation] Auto-update linters version, help and documentation

* Bump pascalgn/automerge-action from 0.14.3 to 0.15.2 Bumps [pascalgn/automerge-action](https://github.com/pascalgn/automerge-action) from 0.14.3 to 0.15.2. - [Release notes](https://github.com/pascalgn/automerge-action/releases) - [Commits](pascalgn/automerge-action@v0.14.3...v0.15.2) --- updated-dependencies: - dependency-name: pascalgn/automerge-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Bump peter-evans/create-pull-request from 3 to 4.0.1 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 4.0.1. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@v3...v4.0.1) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Bump terraform-linters/tflint from v0.34.1 to v0.35.0 Bumps terraform-linters/tflint from v0.34.1 to v0.35.0. --- updated-dependencies: - dependency-name: terraform-linters/tflint dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * Bump actions/setup-node from 2.5.1 to 3.1.1 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.5.1 to 3.1.1. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v2.5.1...v3.1.1) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * upgrade tflint Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [automation] Auto-update linters version, help and documentation * Update .trivyignore

nvuillam · 2022-04-23T16:23:37Z

MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ BASH	bash-exec	7		0	0.02s
✅ BASH	shellcheck	7		0	0.22s
✅ BASH	shfmt	7	1	0	0.26s
✅ COPYPASTE	jscpd	yes		no	1.51s
✅ DOCKERFILE	hadolint	102		0	12.23s
✅ JSON	eslint-plugin-jsonc	21	0	0	2.08s
✅ JSON	jsonlint	19		0	6.53s
✅ JSON	v8r	21		0	12.6s
✅ MARKDOWN	markdownlint	276	4	0	4.59s
✅ MARKDOWN	markdown-link-check	276		0	3.9s
✅ MARKDOWN	markdown-table-formatter	276	4	0	5.78s
✅ OPENAPI	spectral	1		0	1.23s
⚠️ PYTHON	bandit	162		45	2.08s
✅ PYTHON	black	162	9	0	4.41s
✅ PYTHON	flake8	162		0	2.25s
✅ PYTHON	isort	162	11	0	0.61s
✅ PYTHON	mypy	162		0	69.78s
✅ PYTHON	pylint	162		0	14.53s
✅ REPOSITORY	git_diff	yes		no	0.27s
✅ REPOSITORY	secretlint	yes		no	11.12s
⚠️ REPOSITORY	semgrep	yes	yes	1	80.5s
✅ REPOSITORY	trivy	yes		no	14.65s
✅ SPELL	cspell	855		0	17.5s
✅ SPELL	misspell	689	16	0	0.65s
✅ XML	xmllint	3		0	0.0s
✅ YAML	prettier	76	7	0	2.7s
✅ YAML	v8r	18		0	18.03s
✅ YAML	yamllint	77		0	1.85s

See errors details in artifact MegaLinter reports on CI Job page

* [automation] Auto-update linters version, help and documentation * Disable Github Status reporter * Breaking change: GITHUB_STATUS_REPORTER disabled by default * Breaking change: set PRINT_ALL_FILES default to false * Deploy V6 image (#1035) * QuickFix CI job * New flavor Security (#1036) * Java PMD v0 * Java Pmd v0.01 * Working Java + pmd :) * changelog + doc * Genedate doc + manage offline mode * changelog * Bring back referring linters * Fix build * Automate update of changelog when new release (v0) * Do not create commit & tag with npm version * Move markdown formatting * .md * PMD install commands * More pmd descriptor infos + build * Fix megalinter errors * Fix PMD install commands + build * [MegaLinter] Apply linters fixes * Hardcode some licenses * [MegaLinter] Apply linters fixes * Add gitleaks * Build with gitleaks * Gitleaks fixes * changelog * New descriptor: repository TODO: deprecate git and credentials * New descriptor "repository" * Add Goodcheck Goodcheck updates * Fix PMD * Fix PMD * [MegaLinter] Apply linters fixes * Fix pmd installation * Typo * wget --quiet * Add trivy * Build v6-alpha flavors * Remove git & credentials descriptors + upgrade python base image * Upgrade python * New flavor Security v0 * Fix ansible-lint install * Deploy v6-alpha documentation * Fix test class quick build * Disable java pmd * Downgrade python version * SARIF v0 * Update descriptor JSON schema + retries for sgerrand url * Add SARIF output for checkov * Add SARIF output for eslint * [automation] Auto-update linters version, help and documentation (#1038) * Fix gitleaks * Build * Do not skip build if failed * Do not test SARIF when SARIF is not active on a linter * Update ansible install * Fix goodcheck tests * Fix markdown-table-formatter * Fix trivy command * Fix checkov test case + manage default sarif output file * use MegaLinter beta for now * Update CI for new default report folder + Manage {{REPORT_FOLDER}} in CLI variables * Exit code 1 for trivy * Fix replace_vars definition * Do not run test mega-linter-runner when docker build failed * Fix replace_vars * Downgrade v8r version * Fix arm test case * build * Fix again arm test case * Fix makedirs for report folder * Rename default report folder into megalinter-reports * Fix gitleaks * Try again gitleaks * Fix last errors * Fix internal lint errors Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * v6-alpha for github action * Adapt CI for v6-alpha. (#1062) * Fix own MegaLinter errors (#1063) * Fix own MegaLinter errors * Do not use secretlint on report folder * Fix gitleaks own config * Use regexes in gitleaks toml config file * grmblmblm * try with paths * Regex to gather gitleaks errors * Make gitleaks non blocking * Update gitleaks descriptor * Debug gitleaks (#1068) * Debug gitleaks * Remove LinkedIn ID gitleaks check * Ignore .gitleaks.toml files * Update security flavor + toml gitleaks update to use regexes * Try again... * Fix gitleaks config (use regexes in paths) * Update default .gitleaks.toml files * Clean dev variables * Build * Retrofit latest v5 updates into v6 (#1070) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> * SARIF for gitleaks (#1069) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * Generate security flavor * SARIF support for trivy (#1071) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * SARIF support for trivy * Accelerate and fix internal tests * Fix SARIF files * Fix trivy sarif args * [automation] Auto-update linters version, help and documentation (#1072) * Fix SarifReporter * Better handling of SARIF error management * Fix SARIF default file name use quick build * Fix sarif reporter exception management * Variabilize default release * Improve runtime perfs when FLAVOR_SUGGESTIONS: false (#1073) * Improve runtime perfs when FLAVOR_SUGGESTIONS: false * [MegaLinter] Apply linters fixes * Fix how to get MEGALINTER_FLAVOR * Fix ignore flavor suggestion test class Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * Build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * V6/popularity - Display github stars in all linters documentation (#1075) * Add popularity * Update descriptors to add linter_repo when missing * FLAVOR_SUGGESTIONS:false to improve perfs * Build * Enhance documentation (#1078) * Popularity column in all tables * More badges in linters list doc * cspell * Fix sarif test case (#1079) * Fix sarif test case * Fix hardcoded reporter folder name in test case * Remove dockerfilelint (#1080) * Remove dockerfilelint * changelog * Upgrade to AWS cfn-lint (#1085) * Upgrade to AWS cfn-lint * Build * Add SARIF management for cfn-lint * Add cfn-lint example SARIF output file * SARIF management for Hadolint (#1089) * SARIF management for Hadolint * Update .gitleaks.toml to ignore .mypy_cache folder * Catch SARIF error * Upgrade hadolint to 2.8.0-alpine * SARIF for checkstyle (#1093) * SARIF for ktlint (#1095) * SARIF for all eslint uses (#1094) * SARIF management for go revive (#1092) * SARIF management for go revive * fix descriptor quick build * SARIF Management for PHP PSALM (#1096) * Build doc * More SARIF examples * V6/docker standalone linters (#1099) * Build unique linters dockerfiles * Dockerfiles for unique linters + Improve perfs * CI to build standalone images * Fix CI * Matrix jobs: do not fail other jobs if one fails * Manage docker build --squash * Add test cases to "only" docker images * No codecov call when not running all tests * Create output sarif folder when SARIF is from stdout * Remove useless python packages for ML runtime * Remove pytest-cov pytest-timeout from runtime image * Optimize Until dotenv linter * gcc in all dockerfiles + go for actionlint * Add libffi-dev in all Docker images * Add make * add bash * add musl-dev * Fix linters install * gnugpg for php * Automate node & ruby-dev installation if packages are used in install * Fix dotnet install * More preset variables on single-linter docker images * typo * typo2 * Add ruby-bundler for gem packages * Remove PHP_BUILTIN as it has been replaced by PHP_PHPLINT * Fix descriptors and test class * Improve CI perfs for only-linters build * More fixes * Fix kotlin install * Fix raku install * Fix R * Fix scala * Fix TSX * Fix Vb .NET * Build * Linters page * rollback raku * Fix terraform_fmt & rollback raku * Try fix rakudo * Fix duplicate ARG and FROM in dockerfile * Fix python lint err * Disable lint_all_other_linters_files=true if in SINGLE_LINTER mode * lint fix * Reduce docker layers * Reduce again the list of docker build steps * Do not keep text logs if not wanted + linter delete SARIF files * Fix CI * Fix SARIF test case * Disable deprecated test case * Terrascan SARIF management (#1103) * Terrascan SARIF management * tflint SARIF management * Fix terrascan args * cspell * MegaLinter server (#1106) * PHP version switch (#1083) * fixe issue #1060 * fix hadolint error DL3059 * [automation] Auto-update linters version, help and documentation (#1088) * [automation] Auto-update linters version, help and documentation * Increase trivy timeout * [automation] Auto-update linters version, help and documentation (#1091) * Release MegaLinter v5.3.0 * [automation] Auto-update linters version, help and documentation (#1097) * Fix CHANGELOG * [automation] Auto-update linters version, help and documentation (#1098) * [automation] Auto-update linters version, help and documentation (#1100) * [automation] Auto-update linters version, help and documentation (#1101) * [automation] Auto-update linters version, help and documentation (#1104) * KEEP_ALIVE_MEGALINTER v0 * openssh * Build standalone linters only for linters managing SARIF * Entrypoint * Entrypoint: exit when test cases called * Add openrc * Try another way https://github.com/danielguerra69/alpine-sshd * Startup lines at the end * Test simple case with password * rhaaaa * Remove ssh stuff as we loose env variables * Server v0 * Server v0 * Add workspace argument * Expose on port 80 * Manage running processes * try debug flask * debug mode for server * v0 ? * Fix server for report file name * SARIF in http response * [automation] Auto-update linters version, help and documentation (#1107) * [automation] Auto-update linters version, help and documentation (#1109) * [automation] Auto-update linters version, help and documentation (#1113) * Bring back ssh * Set env variables for all users * [automation] Auto-update linters version, help and documentation (#1114) * [automation] Auto-update linters version, help and documentation (#1116) * [automation] Auto-update linters version, help and documentation (#1117) * new SSH way with tmux * Build * Allow PWD auth for testing * [automation] Auto-update linters version, help and documentation (#1118) * [automation] Auto-update linters version, help and documentation (#1121) * Release MegaLinter v5.4.0 * [automation] Auto-update linters version, help and documentation (#1122) * [automation] Auto-update linters version, help and documentation (#1123) * [automation] Auto-update linters version, help and documentation (#1124) * [automation] Auto-update linters version, help and documentation (#1129) * [clj-kondo] update docs and version to 2021.12.19 (#1126) Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * fix "MegaLinter vs Super-Linter" link in README (#1130) Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Move ssh management to entrypoint * QuickFix * try again * Stop docker container if entrypoint fails * Sh in container * alias for megalinger when running in server mode (#1133) makes running megalinter in server mode easier * aliases * Build * tmux_exec * Build ! * [automation] Auto-update linters version, help and documentation (#1131) * gha * motd * build * -input and -output v0 * Use argparse * Use parse_known_args * config.set * [automation] Auto-update linters version, help and documentation (#1135) * DOCKER_DEFAULT_WORKSPACE_DIR & absolue path for --input argument * introduce shell script to convenience running from ssh (#1137) * Create megalinter_tmux * Update build.py * Build Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * Use --input * Fix --input + CI * CI for Inbar (create branch named v6_inbar ) * [automation] Auto-update linters version, help and documentation (#1138) * [automation] Auto-update linters version, help and documentation (#1141) * [automation] Auto-update linters version, help and documentation (#1142) * Release MegaLinter v5.5.0 * V6 inbar (#1143) * capture std is optional capture std is optional * improve megalinter_tmux script add verbosity as an optional flag, improve some messages, add comments, fix script name in examples * Bash file as executable * Fix shellcheck issue https://github.com/koalaman/shellcheck/wiki/SC2124 * Python & Dockerfiles lint errors * cspell * Build * Ignore tmux_exec for bash controlling * pylint err * cspell Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: John Practicalli <250870+practicalli-john@users.noreply.github.com> Co-authored-by: Adam Ralph <adam@adamralph.com> Co-authored-by: Inbar <5904674+InbarRose@users.noreply.github.com> * V6 semgrep (#1147) * Add semgrep * Manage cli_config_default_value * Manage case when SARIF output is only the last sdout line * Add python test files for semgrep * semgrep --error * use regex to extract json * Use find / rfind instead of regex * fix * fix crash * reverse does not have a return value * Fix sarif_default_output_file process * Check SARIF consistency in test classes * Fix position to extract JSON from stdout * position again * Remove SARIF file from previous runs * Stupid typo + remove aggregate SARIF if pre-existing ^^ * changelog * Fix lint errors + descriptor json schema * Build doc * Automatically select security rulesets for semgrep (#1148) * Automatically select security rulesets for semgrep * Test classes for semgrep security rulesets * Do not overwrite test class if already existing * semgrep check failure * Any v6- and v6_ branch generates standalone linters * lint fixes * document additional megalinter semgrep config vars * build * SARIF enhancements (and trivy failed attempts) (#1150) * More general info in sarif * Fix trivy install for SARIF * Build * Force sarif template path + upgrade trivy version * fix wget call * try chmod on sarif template * typo * trivy * Add devskim (#1152) * devskim v0 * devskim bad example * Fix number of errors count * fix & Build doc * changelog * cspell * Fix CI * cspell * Fix trivy ? * fix trivy ? (2) * Try fix gitleaks (#1157) * Try fix gitleaks * trivy * Workaround until next version of trivy * build * Revert "Try fix gitleaks" This reverts commit e7c1be65c9dadc585cdea4c1302d75146d3acf8e. * Remove default gitleaks use + --no-git * --no-git back * SARIF for npm-groovy-lint (#1158) * SARIF for npm-groovy-lint * Fix GroovyLinter custom class * Factorize * Manage dynamic --no-git presence for gitleaks (#1162) * Manage dynamic --no-git presence for gitleaks * lint fix * Retrofit v5 into v6 (#1189) * PHP version switch (#1083) * fixe issue #1060 * fix hadolint error DL3059 * [automation] Auto-update linters version, help and documentation (#1088) * [automation] Auto-update linters version, help and documentation * Increase trivy timeout * [automation] Auto-update linters version, help and documentation (#1091) * Release MegaLinter v5.3.0 * [automation] Auto-update linters version, help and documentation (#1097) * Fix CHANGELOG * [automation] Auto-update linters version, help and documentation (#1098) * [automation] Auto-update linters version, help and documentation (#1100) * [automation] Auto-update linters version, help and documentation (#1101) * [automation] Auto-update linters version, help and documentation (#1104) * [automation] Auto-update linters version, help and documentation (#1107) * [automation] Auto-update linters version, help and documentation (#1109) * [automation] Auto-update linters version, help and documentation (#1113) * [automation] Auto-update linters version, help and documentation (#1114) * [automation] Auto-update linters version, help and documentation (#1116) * [automation] Auto-update linters version, help and documentation (#1117) * [automation] Auto-update linters version, help and documentation (#1118) * [automation] Auto-update linters version, help and documentation (#1121) * Release MegaLinter v5.4.0 * [automation] Auto-update linters version, help and documentation (#1122) * [automation] Auto-update linters version, help and documentation (#1123) * [automation] Auto-update linters version, help and documentation (#1124) * [automation] Auto-update linters version, help and documentation (#1129) * [clj-kondo] update docs and version to 2021.12.19 (#1126) Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * fix "MegaLinter vs Super-Linter" link in README (#1130) Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * [automation] Auto-update linters version, help and documentation (#1131) * [automation] Auto-update linters version, help and documentation (#1135) * [automation] Auto-update linters version, help and documentation (#1138) * [automation] Auto-update linters version, help and documentation (#1141) * [automation] Auto-update linters version, help and documentation (#1142) * Release MegaLinter v5.5.0 * Increase node.js --max-old-space-size to 8192 (#1149) * Increase node.js --max-old-space-size to 8192 * Build * [automation] Auto-update linters version, help and documentation (#1144) * trivy * [automation] Auto-update linters version, help and documentation (#1151) * [automation] Auto-update linters version, help and documentation * cspell * [automation] Auto-update linters version, help and documentation (#1155) * [automation] Auto-update linters version, help and documentation (#1156) * [automation] Auto-update linters version, help and documentation * trivy * [automation] Auto-update linters version, help and documentation (#1159) * [automation] Auto-update linters version, help and documentation (#1161) * Upgrade clj-kondo (#1165) * [automation] Auto-update linters version, help and documentation (#1164) * [automation] Auto-update linters version, help and documentation (#1167) * [automation] Auto-update linters version, help and documentation (#1170) * Retrieve licenses for documentation + fix config file + env issue (#1168) * [automation] Auto-update linters version, help and documentation * Disable Github Status reporter * Breaking change: GITHUB_STATUS_REPORTER disabled by default * Breaking change: set PRINT_ALL_FILES default to false * Deploy V6 image (#1035) * QuickFix CI job * New flavor Security (#1036) * Java PMD v0 * Java Pmd v0.01 * Working Java + pmd :) * changelog + doc * Genedate doc + manage offline mode * changelog * Bring back referring linters * Fix build * Automate update of changelog when new release (v0) * Do not create commit & tag with npm version * Move markdown formatting * .md * PMD install commands * More pmd descriptor infos + build * Fix megalinter errors * Fix PMD install commands + build * [MegaLinter] Apply linters fixes * Hardcode some licenses * [MegaLinter] Apply linters fixes * Add gitleaks * Build with gitleaks * Gitleaks fixes * changelog * New descriptor: repository TODO: deprecate git and credentials * New descriptor "repository" * Add Goodcheck Goodcheck updates * Fix PMD * Fix PMD * [MegaLinter] Apply linters fixes * Fix pmd installation * Typo * wget --quiet * Add trivy * Build v6-alpha flavors * Remove git & credentials descriptors + upgrade python base image * Upgrade python * New flavor Security v0 * Fix ansible-lint install * Deploy v6-alpha documentation * Fix test class quick build * Disable java pmd * Downgrade python version * SARIF v0 * Update descriptor JSON schema + retries for sgerrand url * Add SARIF output for checkov * Add SARIF output for eslint * [automation] Auto-update linters version, help and documentation (#1038) * Fix gitleaks * Build * Do not skip build if failed * Do not test SARIF when SARIF is not active on a linter * Update ansible install * Fix goodcheck tests * Fix markdown-table-formatter * Fix trivy command * Fix checkov test case + manage default sarif output file * use MegaLinter beta for now * Update CI for new default report folder + Manage {{REPORT_FOLDER}} in CLI variables * Exit code 1 for trivy * Fix replace_vars definition * Do not run test mega-linter-runner when docker build failed * Fix replace_vars * Downgrade v8r version * Fix arm test case * build * Fix again arm test case * Fix makedirs for report folder * Rename default report folder into megalinter-reports * Fix gitleaks * Try again gitleaks * Fix last errors * Fix internal lint errors Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * v6-alpha for github action * Adapt CI for v6-alpha. (#1062) * Fix own MegaLinter errors (#1063) * Fix own MegaLinter errors * Do not use secretlint on report folder * Fix gitleaks own config * Use regexes in gitleaks toml config file * grmblmblm * try with paths * Regex to gather gitleaks errors * Make gitleaks non blocking * Update gitleaks descriptor * Debug gitleaks (#1068) * Debug gitleaks * Remove LinkedIn ID gitleaks check * Ignore .gitleaks.toml files * Update security flavor + toml gitleaks update to use regexes * Try again... * Fix gitleaks config (use regexes in paths) * Update default .gitleaks.toml files * Clean dev variables * Build * Retrofit latest v5 updates into v6 (#1070) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> * SARIF for gitleaks (#1069) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * Generate security flavor * SARIF support for trivy (#1071) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * SARIF support for trivy * Accelerate and fix internal tests * Fix SARIF files * Fix trivy sarif args * [automation] Auto-update linters version, help and documentation (#1072) * Fix SarifReporter * Better handling of SARIF error management * Fix SARIF default file name use quick build * Fix sarif reporter exception management * Variabilize default release * Improve runtime perfs when FLAVOR_SUGGESTIONS: false (#1073) * Improve runtime perfs when FLAVOR_SUGGESTIONS: false * [MegaLinter] Apply linters fixes * Fix how to get MEGALINTER_FLAVOR * Fix ignore flavor suggestion test class Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * Build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * V6/popularity - Display github stars in all linters documentation (#1075) * Add popularity * Update descriptors to add linter_repo when missing * FLAVOR_SUGGESTIONS:false to improve perfs * Build * Enhance documentation (#1078) * Popularity column in all tables * More badges in linters list doc * cspell * Fix sarif test case (#1079) * Fix sarif test case * Fix hardcoded reporter folder name in test case * Remove dockerfilelint (#1080) * Remove dockerfilelint * changelog * Upgrade to AWS cfn-lint (#1085) * Upgrade to AWS cfn-lint * Build * Add SARIF management for cfn-lint * Add cfn-lint example SARIF output file * SARIF management for Hadolint (#1089) * SARIF management for Hadolint * Update .gitleaks.toml to ignore .mypy_cache folder * Catch SARIF error * Upgrade hadolint to 2.8.0-alpine * SARIF for checkstyle (#1093) * SARIF for ktlint (#1095) * SARIF for all eslint uses (#1094) * SARIF management for go revive (#1092) * SARIF management for go revive * fix descriptor quick build * SARIF Management for PHP PSALM (#1096) * Build doc * More SARIF examples * V6/docker standalone linters (#1099) * Build unique linters dockerfiles * Dockerfiles for unique linters + Improve perfs * CI to build standalone images * Fix CI * Matrix jobs: do not fail other jobs if one fails * Manage docker build --squash * Add test cases to "only" docker images * No codecov call when not running all tests * Create output sarif folder when SARIF is from stdout * Remove useless python packages for ML runtime * Remove pytest-cov pytest-timeout from runtime image * Optimize Until dotenv linter * gcc in all dockerfiles + go for actionlint * Add libffi-dev in all Docker images * Add make * add bash * add musl-dev * Fix linters install * gnugpg for php * Automate node & ruby-dev installation if packages are used in install * Fix dotnet install * More preset variables on single-linter docker images * typo * typo2 * Add ruby-bundler for gem packages * Remove PHP_BUILTIN as it has been replaced by PHP_PHPLINT * Fix descriptors and test class * Improve CI perfs for only-linters build * More fixes * Fix kotlin install * Fix raku install * Fix R * Fix scala * Fix TSX * Fix Vb .NET * Build * Linters page * rollback raku * Fix terraform_fmt & rollback raku * Try fix rakudo * Fix duplicate ARG and FROM in dockerfile * Fix python lint err * Disable lint_all_other_linters_files=true if in SINGLE_LINTER mode * lint fix * Reduce docker layers * Reduce again the list of docker build steps * Do not keep text logs if not wanted + linter delete SARIF files * Fix CI * Fix SARIF test case * Disable deprecated test case * Terrascan SARIF management (#1103) * Terrascan SARIF management * tflint SARIF management * Fix terrascan args * cspell * MegaLinter server (#1106) * PHP version switch (#1083) * fixe issue #1060 * fix hadolint error DL3059 * [automation] Auto-update linters version, help and documentation (#1088) * [automation] Auto-update linters version, help and documentation * Increase trivy timeout * [automation] Auto-update linters version, help and documentation (#1091) * Release MegaLinter v5.3.0 * [automation] Auto-update linters version, help and documentation (#1097) * Fix CHANGELOG * [automation] Auto-update linters version, help and documentation (#1098) * [automation] Auto-update linters version, help and documentation (#1100) * [automation] Auto-update linters version, help and documentation (#1101) * [automation] Auto-update linters version, help and documentation (#1104) * KEEP_ALIVE_MEGALINTER v0 * openssh * Build standalone linters only for linters managing SARIF * Entrypoint * Entrypoint: exit when test cases called * Add openrc * Try another way https://github.com/danielguerra69/alpine-sshd * Startup lines at the end * Test simple case with password * rhaaaa * Remove ssh stuff as we loose env variables * Server v0 * Server v0 * Add workspace argument * Expose on port 80 * Manage running processes * try debug flask * debug mode for server * v0 ? * Fix server for report file name * SARIF in http response * [automation] Auto-update linters version, help and documentation (#1107) * [automation] Auto-update linters version, help and documentation (#1109) * [automation] Auto-update linters version, help and documentation (#1113) * Bring back ssh * Set env variables for all users * [automation] Auto-update linters version, help and documentation (#1114) * [automation] Auto-update linters version, help and documentation (#1116) * [automation] Auto-update linters version, help and documentation (#1117) * new SSH way with tmux * Build * Allow PWD auth for testing * [automation] Auto-update linters version, help and documentation (#1118) * [automation] Auto-update linters version, help and documentation (#1121) * Release MegaLinter v5.4.0 * [automation] Auto-update linters version, help and documentation (#1122) * [automation] Auto-update linters version, help and documentation (#1123) * [automation] Auto-update linters version, help and documentation (#1124) * [automation] Auto-update linters version, help and documentation (#1129) * [clj-kondo] update docs and version to 2021.12.19 (#1126) Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * fix "MegaLinter vs Super-Linter" link in README (#1130) Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Move ssh management to entrypoint * QuickFix * try again * Stop docker container if entrypoint fails * Sh in container * alias for megalinger when running in server mode (#1133) makes running megalinter in server mode easier * aliases * Build * tmux_exec * Build ! * [automation] Auto-update linters version, help and documentation (#1131) * gha * motd * build * -input and -output v0 * Use argparse * Use parse_known_args * config.set * [automation] Auto-update linters version, help and documentation (#1135) * DOCKER_DEFAULT_WORKSPACE_DIR & absolue path for --input argument * introduce shell script to convenience running from ssh (#1137) * Create megalinter_tmux * Update build.py * Build Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * Use --input * Fix --input + CI * CI for Inbar (create branch named v6_inbar ) * [automation] Auto-update linters version, help and documentation (#1138) * [automation] Auto-update linters version, help and documentation (#1141) * [automation] Auto-update linters version, help and documentation (#1142) * Release MegaLinter v5.5.0 * V6 inbar (#1143) * capture std is optional capture std is optional * improve megalinter_tmux script add verbosity as an optional flag, improve some messages, add comments, fix script name in examples * Bash file as executable * Fix shellcheck issue https://github.com/koalaman/shellcheck/wiki/SC2124 * Python & Dockerfiles lint errors * cspell * Build * Ignore tmux_exec for bash controlling * pylint err * cspell Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: John Practicalli <250870+practicalli-john@users.noreply.github.com> Co-authored-by: Adam Ralph <adam@adamralph.com> Co-authored-by: Inbar <5904674+InbarRose@users.noreply.github.com> * V6 semgrep (#1147) * Add semgrep * Manage cli_config_default_value * Manage case when SARIF output is only the last sdout line * Add python test files for semgrep * semgrep --error * use regex to extract json * Use find / rfind instead of regex * fix * fix crash * reverse does not have a return value * Fix sarif_default_output_file process * Check SARIF consistency in test classes * Fix position to extract JSON from stdout * position again * Remove SARIF file from previous runs * Stupid typo + remove aggregate SARIF if pre-existing ^^ * changelog * Fix lint errors + descriptor json schema * Build doc * Automatically select security rulesets for semgrep (#1148) * Automatically select security rulesets for semgrep * Test classes for semgrep security rulesets * Do not overwrite test class if already existing * semgrep check failure * Any v6- and v6_ branch generates standalone linters * lint fixes * document additional megalinter semgrep config vars * build * SARIF enhancements (and trivy failed attempts) (#1150) * More general info in sarif * Fix trivy install for SARIF * Build * Force sarif template path + upgrade trivy version * fix wget call * try chmod on sarif template * typo * trivy * Add devskim (#1152) * devskim v0 * devskim bad example * Fix number of errors count * fix & Build doc * changelog * cspell * Fix CI * cspell * Fix trivy ? * fix trivy ? (2) * Try fix gitleaks (#1157) * Try fix gitleaks * trivy * Workaround until next version of trivy * build * Revert "Try fix gitleaks" This reverts commit e7c1be65c9dadc585cdea4c1302d75146d3acf8e. * Remove default gitleaks use + --no-git * --no-git back * SARIF for npm-groovy-lint (#1158) * SARIF for npm-groovy-lint * Fix GroovyLinter custom class * Factorize * Manage dynamic --no-git presence for gitleaks (#1162) * Manage dynamic --no-git presence for gitleaks * lint fix * Test upload SARIF to github * Retrieve licenses * Fix mixed config file + env variables config * Link to licenses * Update links to licenses * Fixes * fix lint err * [MegaLinter] Apply linters fixes Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: John Practicalli <250870+practicalli-john@users.noreply.github.com> Co-authored-by: Adam Ralph <adam@adamralph.com> Co-authored-by: Inbar <5904674+InbarRose@users.noreply.github.com> * [automation] Auto-update linters version, help and documentation (#1171) * [automation] Auto-update linters version, help and documentation * [MegaLinter] Apply linters fixes Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * [automation] Auto-update linters version, help and documentation (#1174) * Fix call to npm-groovy-lint (#1177) * Fix npm-groovy-lint call https://github.com/megalinter/megalinter/issues/1176 * [MegaLinter] Apply linters fixes Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * lint fix * lint fix (2) * Make python linters play nice with each other (#1182) * Make Flake8 play nice with Black * Change black comment example * Make pylint play nice with Black * Make flake8 pass Co-authored-by: Sam Chorlton <> * Upgrade clj-kondo (#1181) * Bump cljkondo/clj-kondo from 2022.01.13-alpine to 2022.01.15-alpine Bumps cljkondo/clj-kondo from 2022.01.13-alpine to 2022.01.15-alpine. --- updated-dependencies: - dependency-name: cljkondo/clj-kondo dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * [automation] Auto-update linters version, help and documentation * upgrade clj-kondo Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix wrong status in reports when DISABLE_ERRORS is used (#1184) * Bump peter-evans/create-pull-request from 3.11.0 to 3.12.0 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.11.0 to 3.12.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v3.11.0...v3.12.0) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Bump actions/setup-node from 2.4.1 to 2.5.1 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.4.1 to 2.5.1. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v2.4.1...v2.5.1) --- updated-dependencies: - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Bump shelljs from 0.8.4 to 0.8.5 in /mega-linter-runner Bumps [shelljs](https://github.com/shelljs/shelljs) from 0.8.4 to 0.8.5. - [Release notes](https://github.com/shelljs/shelljs/releases) - [Changelog](https://github.com/shelljs/shelljs/blob/master/CHANGELOG.md) - [Commits](https://github.com/shelljs/shelljs/compare/v0.8.4...v0.8.5) --- updated-dependencies: - dependency-name: shelljs dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Fix wrong status in reports when DISABLE_ERRORS is used * [automation] Auto-update linters version, help and documentation * Fix wrong status in reports when DISABLE_ERRORS is used * Test cases fixes * fix test class * [MegaLinter] Apply linters fixes quick build * Fix test class quick build * Fix test class quick build * Update checkov & kics tests quick build Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * CHANGELOG * Release MegaLinter v5.6.0 * Build * fix lint * Fix dockerfile + build * fix changelog Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: John Practicalli <250870+practicalli-john@users.noreply.github.com> Co-authored-by: Adam Ralph <adam@adamralph.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> Co-authored-by: Inbar <5904674+InbarRose@users.noreply.github.com> Co-authored-by: Sam Chorlton <10245822+schorlton@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Call terrascan in project mode, not file by file (#1191) * Call terrascan in project mode, not file by file * verbose results * Several files for test case folders * add path in args * hack terrascan success test * Add syft to MegaLinter + sarif archi updates (#1221) * Syft V0 * Fix SyftLinter * syft call * cspell + debug * change syft call * More debug * Do not test failure * changelog & typos * Fix json parsing * Fix output SARIF format * improve ssh server experience (#1259) * improve ssh server experience remove tmux and replace with env variable export/import +build Dockerfile * Format MD tables + upgrade build * typo Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * Manage unique docker image name (#1262) * Manage unique docker image name * Fix condition * typo * fix * Invert build order * ALWAYS_BUILD argument * fix * fix * Apply unique image name to v6_alpha * Make unique tag name for all images (#1264) * Make unique tag name for all images * lint fix * Apply to v6_alpha images * Make unique tag name more visible (#1267) * Make unique tag name more visible * fix action * New linter: Dustilock , detecting dependency injection (#1270) * Dustilock v0 * Fixes * Fix CI * Manually build SARIF from output * cspell * Test case with python * Factorize sarif schema & version * Fix * changelog * ByPass failure test case * Build with doc * Update mkdocs config * Retrofit v5 updates to v6-dev (#1306) * Merge branch 'main' into v6_upgrade * changelog conflicts merge * Build * Get upgraded versions file * Build * Add "python-gitlab" in setup.py * Build * Use openjdk11 * Fix typo * gitleaks test case * Fix tflint standalone linter (#1334) * Fix tflint standalone linter * lint fixes * ox installer (#1348) * Add Ox ascii art (#1361) * Add Ox ascii art * cspell * SARIF for secretlint * Retrofit downgrade of tflint * trivy * test secretlint * Fix gitleaks class (#1376) * Improve gitleaks (#1383) * Retrofit 5.11.2 + Git update (#1433) * PHP version switch (#1083) * fixe issue #1060 * fix hadolint error DL3059 * [automation] Auto-update linters version, help and documentation (#1088) * [automation] Auto-update linters version, help and documentation * Increase trivy timeout * [automation] Auto-update linters version, help and documentation (#1091) * Release MegaLinter v5.3.0 * [automation] Auto-update linters version, help and documentation (#1097) * Fix CHANGELOG * [automation] Auto-update linters version, help and documentation (#1098) * [automation] Auto-update linters version, help and documentation (#1100) * [automation] Auto-update linters version, help and documentation (#1101) * [automation] Auto-update linters version, help and documentation (#1104) * [automation] Auto-update linters version, help and documentation (#1107) * [automation] Auto-update linters version, help and documentation (#1109) * [automation] Auto-update linters version, help and documentation (#1113) * [automation] Auto-update linters version, help and documentation (#1114) * [automation] Auto-update linters version, help and documentation (#1116) * [automation] Auto-update linters version, help and documentation (#1117) * [automation] Auto-update linters version, help and documentation (#1118) * [automation] Auto-update linters version, help and documentation (#1121) * Release MegaLinter v5.4.0 * [automation] Auto-update linters version, help and documentation (#1122) * [automation] Auto-update linters version, help and documentation (#1123) * [automation] Auto-update linters version, help and documentation (#1124) * [automation] Auto-update linters version, help and documentation (#1129) * [clj-kondo] update docs and version to 2021.12.19 (#1126) Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * fix "MegaLinter vs Super-Linter" link in README (#1130) Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * [automation] Auto-update linters version, help and documentation (#1131) * [automation] Auto-update linters version, help and documentation (#1135) * [automation] Auto-update linters version, help and documentation (#1138) * [automation] Auto-update linters version, help and documentation (#1141) * [automation] Auto-update linters version, help and documentation (#1142) * Release MegaLinter v5.5.0 * Increase node.js --max-old-space-size to 8192 (#1149) * Increase node.js --max-old-space-size to 8192 * Build * [automation] Auto-update linters version, help and documentation (#1144) * trivy * [automation] Auto-update linters version, help and documentation (#1151) * [automation] Auto-update linters version, help and documentation * cspell * [automation] Auto-update linters version, help and documentation (#1155) * [automation] Auto-update linters version, help and documentation (#1156) * [automation] Auto-update linters version, help and documentation * trivy * [automation] Auto-update linters version, help and documentation (#1159) * [automation] Auto-update linters version, help and documentation (#1161) * Upgrade clj-kondo (#1165) * [automation] Auto-update linters version, help and documentation (#1164) * [automation] Auto-update linters version, help and documentation (#1167) * [automation] Auto-update linters version, help and documentation (#1170) * Retrieve licenses for documentation + fix config file + env issue (#1168) * [automation] Auto-update linters version, help and documentation * Disable Github Status reporter * Breaking change: GITHUB_STATUS_REPORTER disabled by default * Breaking change: set PRINT_ALL_FILES default to false * Deploy V6 image (#1035) * QuickFix CI job * New flavor Security (#1036) * Java PMD v0 * Java Pmd v0.01 * Working Java + pmd :) * changelog + doc * Genedate doc + manage offline mode * changelog * Bring back referring linters * Fix build * Automate update of changelog when new release (v0) * Do not create commit & tag with npm version * Move markdown formatting * .md * PMD install commands * More pmd descriptor infos + build * Fix megalinter errors * Fix PMD install commands + build * [MegaLinter] Apply linters fixes * Hardcode some licenses * [MegaLinter] Apply linters fixes * Add gitleaks * Build with gitleaks * Gitleaks fixes * changelog * New descriptor: repository TODO: deprecate git and credentials * New descriptor "repository" * Add Goodcheck Goodcheck updates * Fix PMD * Fix PMD * [MegaLinter] Apply linters fixes * Fix pmd installation * Typo * wget --quiet * Add trivy * Build v6-alpha flavors * Remove git & credentials descriptors + upgrade python base image * Upgrade python * New flavor Security v0 * Fix ansible-lint install * Deploy v6-alpha documentation * Fix test class quick build * Disable java pmd * Downgrade python version * SARIF v0 * Update descriptor JSON schema + retries for sgerrand url * Add SARIF output for checkov * Add SARIF output for eslint * [automation] Auto-update linters version, help and documentation (#1038) * Fix gitleaks * Build * Do not skip build if failed * Do not test SARIF when SARIF is not active on a linter * Update ansible install * Fix goodcheck tests * Fix markdown-table-formatter * Fix trivy command * Fix checkov test case + manage default sarif output file * use MegaLinter beta for now * Update CI for new default report folder + Manage {{REPORT_FOLDER}} in CLI variables * Exit code 1 for trivy * Fix replace_vars definition * Do not run test mega-linter-runner when docker build failed * Fix replace_vars * Downgrade v8r version * Fix arm test case * build * Fix again arm test case * Fix makedirs for report folder * Rename default report folder into megalinter-reports * Fix gitleaks * Try again gitleaks * Fix last errors * Fix internal lint errors Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * v6-alpha for github action * Adapt CI for v6-alpha. (#1062) * Fix own MegaLinter errors (#1063) * Fix own MegaLinter errors * Do not use secretlint on report folder * Fix gitleaks own config * Use regexes in gitleaks toml config file * grmblmblm * try with paths * Regex to gather gitleaks errors * Make gitleaks non blocking * Update gitleaks descriptor * Debug gitleaks (#1068) * Debug gitleaks * Remove LinkedIn ID gitleaks check * Ignore .gitleaks.toml files * Update security flavor + toml gitleaks update to use regexes * Try again... * Fix gitleaks config (use regexes in paths) * Update default .gitleaks.toml files * Clean dev variables * Build * Retrofit latest v5 updates into v6 (#1070) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> * SARIF for gitleaks (#1069) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * Generate security flavor * SARIF support for trivy (#1071) * [automation] Auto-update linters version, help and documentation (#1038) * Implement new linter PHPLint (#1037) * add new phplint linter (see #1031) * use composer global install for overture/phplint * update changelog * fix feature #1043 (#1044) * Add @babel/eslint-parser as dependency for eslint (#1045) * [automation] Auto-update linters version, help and documentation (#1046) * [automation] Auto-update linters version, help and documentation + @babel-core * Add @babel-core dependency * Use node.js LTS and not nodejs-current * Downgrade v8r version * Fix arm test case * Fix again arm test case * [automation] Auto-update linters version, help and documentation * Build * [automation] Auto-update linters version, help and documentation (#1050) * [automation] Auto-update linters version, help and documentation (#1052) * [automation] Auto-update linters version, help and documentation * Update doc for gitlab MegaLinter config * Bandit default config file (#1051) * remove default parameters * add default bandit configfile built with bandit-config-generator command * update changelog * update bandit doc page Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Try again ktlint auto-upgrade (#976) * [automation] Auto-update linters version, help and documentation (#1055) * [automation] Auto-update linters version, help and documentation (#1056) * Docs & links (#1058) * Update stale config * Fix getting linter version of npm plugin. (#804) * [automation] Auto-update linters version, help and documentation (#1059) * Fix doc * [automation] Auto-update linters version, help and documentation (#1065) * [automation] Auto-update linters version, help and documentation (#1067) * SARIF for gitleaks * Sarif python test class v0 * Lint fix + changelog * SARIF support for trivy * Accelerate and fix internal tests * Fix SARIF files * Fix trivy sarif args * [automation] Auto-update linters version, help and documentation (#1072) * Fix SarifReporter * Better handling of SARIF error management * Fix SARIF default file name use quick build * Fix sarif reporter exception management * Variabilize default release * Improve runtime perfs when FLAVOR_SUGGESTIONS: false (#1073) * Improve runtime perfs when FLAVOR_SUGGESTIONS: false * [MegaLinter] Apply linters fixes * Fix how to get MEGALINTER_FLAVOR * Fix ignore flavor suggestion test class Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * Build Co-authored-by: Laurent Laville <laurent.laville@gmail.com> Co-authored-by: nvuillam <nvuillam@users.noreply.github.com> * V6/popularity - Display github stars in all linters documentation (#1075) * Add popularity * Update descriptors to add linter_repo when missing * FLAVOR_SUGGESTIONS:false to improve perfs * Build * Enhance documentation (#1078) * Popularity column in all tables * More badges in linters list doc * cspell * Fix sarif test case (#1079) * Fix sarif test case * Fix hardcoded reporter folder name in test case * Remove dockerfilelint (#1080) * Remove dockerfilelint * changelog * Upgrade to AWS cfn-lint (#1085) * Upgrade to AWS cfn-lint * Build * Add SARIF management for cfn-lint * Add cfn-lint example SARIF output file * SARIF management for Hadolint (#1089) * SARIF management for Hadolint * Update .gitleaks.toml to ignore .mypy_cache folder * Catch SARIF error * Upgrade hadolint to 2.8.0-alpine * SARIF for checkstyle (#1093) * SARIF for ktlint (#1095) * SARIF for all eslint uses (#1094) * SARIF management for go revive (#1092) * SARIF management for go revive * fix descriptor quick build * SARIF Management for PHP PSALM (#1096) * Build doc * More SARIF examples * V6/docker standalone linters (#1099) * Build unique linters dockerfiles * Dockerfiles for unique linters + Improve perfs * CI to build standalone images * Fix CI * Matrix jobs: do not fail other jobs if one fails * Manage docker build --squash * Add test cases to "only" docker images * No codecov call when not running all tests * Create output sarif folder when SARIF is from stdout * Remove useless python packages for ML runtime * Remove pytest-cov pytest-timeout from runtime image * Optimize Until dotenv linter * gcc in all dockerfiles + go for actionlint * Add libffi-dev in all Docker images * Add make * add bash * add musl-dev * Fix linters install * gnugpg for php * Automate node & ruby-dev installation if packages are used in install * Fix dotnet install * More preset variables on single-linter docker images * typo * typo2 * Add ruby-bundler for gem packages * Remove PHP_BUILTIN as it has been replaced by PHP_PHPLINT * Fix descriptors and test class * Improve CI perfs for only-linters build * More fixes * Fix kotlin install * Fix raku install * Fix R * Fix scala * Fix TSX * Fix Vb .NET * Build * Linters page * rollback raku * Fix terraform_fmt & rollback raku * Try fix rakudo * Fix duplicate ARG and FROM in dockerfile * Fix python lint err * Disable lint_all_other_linters_files=true if in SINGLE_LINTER mode * lint fix * Reduce docker layers * Reduce again the list of docker build steps * Do not keep text logs if not wanted + linter delete SARIF files * Fix CI * Fix SARIF test case * Disable deprecated test case * Terrascan SARIF management (#1103) * Terrascan SARIF management * tflint SARIF management * Fix terrascan args * cspell * MegaLinter server (#1106) * PHP version switch (#1083) * fixe issue #1060 * fix hadolint error DL3059 * [automation] Auto-update linters version, help and documentation (#1088) * [automation] Auto-update linters version, help and documentation * Increase trivy timeout * [automation] Auto-update linters version, help and documentation (#1091) * Release MegaLinter v5.3.0 * [automation] Auto-update linters version, help and documentation (#1097) * Fix CHANGELOG * [automation] Auto-update linters version, help and documentation (#1098) * [automation] Auto-update linters version, help and documentation (#1100) * [automation] Auto-update linters version, help and documentation (#1101) * [automation] Auto-update linters version, help and documentation (#1104) * KEEP_ALIVE_MEGALINTER v0 * openssh * Build standalone linters only for linters managing SARIF * Entrypoint * Entrypoint: exit when test cases called * Add openrc * Try another way https://github.com/danielguerra69/alpine-sshd * Startup lines at the end * Test simple case with password * rhaaaa * Remove ssh stuff as we loose env variables * Server v0 * Server v0 * Add workspace argument * Expose on port 80 * Manage running processes * try debug flask * debug mode for server * v0 ? * Fix server for report file name * SARIF in http response * [automation] Auto-update linters version, help and documentation (#1107) * [automation] Auto-update linters version, help and documentation (#1109) * [automation] Auto-update linters version, help and documentation (#1113) * Bring back ssh * Set env variables for all users * [automation] Auto-update linters version, help and documentation (#1114) * [automation] Auto-update linters version, help and documentation (#1116) * [automation] Auto-update linters version, help and documentation (#1117) * new SSH way with tmux * Build * Allow PWD auth for testing * [automation] Auto-update linters version, help and documentation (#1118) * [automation] Auto-update linters version, help and documentation (#1121) * Release MegaLinter v5.4.0 * [automation] Auto-update linters version, help and documentation (#1122) * [automation] Auto-update linters version, help and documentation (#1123) * [automation] Auto-update linters version, help and documentation (#1124) * [automation] Auto-update linters version, help and documentation (#1129) * [clj-kondo] update docs and version to 2021.12.19 (#1126) Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * fix "MegaLinter vs Super-Linter" link in README (#1130) Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com> * Move ssh management to entrypoint * QuickFix * try again * Stop docker container if entrypoint fails * Sh in container * alias for megalinger when running in server mode (#1133) makes running megalinter in server mode easier * aliases * Build * tmux_exec * Build ! * [automation] Auto-update linters version, help and documentation (#1131) * gha * motd * build * -input and -output v0 * Use argparse * Use parse_known_args * config.set * [automation] Auto-update linters version, help and documentation (#1135) * DOCKER_DEFAULT_WORKSPACE_DIR & absolue path for --input argument * introduce shell script to convenience running from ssh (#1137) * Create megalinter_tmux * Update build.py * Build Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com> * Use --input * Fix --input + CI * CI for Inbar (create branch named v6_inbar ) * [automation] Auto-update linters version, help and documentation (#1138) * [automation] Auto-update linters version, help and documentation (#1141) * [automation] Auto-update linters version, help and documentation (#1142) * Release MegaLinter v5.5.0 * V6 inbar (#1143) * capture std is optional capture std is optional * improve megalinter_tmux script add verbosity as an optional flag, improve some messages, add comments, fix script name in examples * Bash file as executable * Fix shellcheck issue https://github.com/koalaman/shellcheck/wiki/SC2124 * Python & Dockerfiles lint errors * cspell * Build * Ignore tmux_exec for bash controlling * pylint…

llaville and others added 30 commits December 7, 2021 19:39

PHP version switch (#1083)

7f4e809

* fixe issue #1060 * fix hadolint error DL3059

[automation] Auto-update linters version, help and documentation (#1088)

dbd6aba

* [automation] Auto-update linters version, help and documentation * Increase trivy timeout

[automation] Auto-update linters version, help and documentation (#1091)

bda189c

Release MegaLinter v5.3.0

3971670

[automation] Auto-update linters version, help and documentation (#1097)

229e257

Fix CHANGELOG

ce0acef

[automation] Auto-update linters version, help and documentation (#1098)

3e063c7

[automation] Auto-update linters version, help and documentation (#1100)

68c95fd

[automation] Auto-update linters version, help and documentation (#1101)

3050e4c

[automation] Auto-update linters version, help and documentation (#1104)

9baa228

[automation] Auto-update linters version, help and documentation (#1107)

06e8042

[automation] Auto-update linters version, help and documentation (#1109)

118661a

[automation] Auto-update linters version, help and documentation (#1113)

021ab02

[automation] Auto-update linters version, help and documentation (#1114)

760fef2

[automation] Auto-update linters version, help and documentation (#1116)

258a371

[automation] Auto-update linters version, help and documentation (#1117)

880b45d

[automation] Auto-update linters version, help and documentation (#1118)

5c190a0

[automation] Auto-update linters version, help and documentation (#1121)

344999e

Release MegaLinter v5.4.0

26c3d12

[automation] Auto-update linters version, help and documentation (#1122)

c845109

[automation] Auto-update linters version, help and documentation (#1123)

1b296b0

[automation] Auto-update linters version, help and documentation (#1124)

cec036a

[automation] Auto-update linters version, help and documentation (#1129)

5d8de18

[clj-kondo] update docs and version to 2021.12.19 (#1126)

209a814

Co-authored-by: nvuillam <nicolas.vuillamy@gmail.com>

fix "MegaLinter vs Super-Linter" link in README (#1130)

30f05cd

Co-authored-by: Nicolas Vuillamy <nicolas.vuillamy@gmail.com>

[automation] Auto-update linters version, help and documentation (#1131)

51291c4

[automation] Auto-update linters version, help and documentation (#1135)

48415a5

[automation] Auto-update linters version, help and documentation (#1138)

f7aee84

[automation] Auto-update linters version, help and documentation (#1141)

0a9cca5

[automation] Auto-update linters version, help and documentation (#1142)

030da86

andrewasheridan and others added 22 commits April 10, 2022 18:52

[automation] Auto-update linters version, help and documentation (#1401)

dd8097a

Release MegaLinter v5.11.0

5f28a06

[automation] Auto-update linters version, help and documentation (#1405)

5cc0765

QuickFix

6598383

Try fix Git CVE issue for own linting (#1415)

ef3201f

* Try fix Git CVE issue * Try again fix git issue

Fix CI

f467c9a

Allow git generic safe directory

0317053

As we are supposed to trust the machine and repo we use MegaLinter on

Dynamic add git safe.directory (#1417)

2f17a6b

* Dynamic add git safe.directory quick build * Test auto-update too * [automation] Auto-update linters version, help and documentation

Quickfix json schema FAIL_IF_UPDATED_SOURCES

92e8050

[automation] Auto-update linters version, help and documentation (#1424)

07c082c

[automation] Auto-update linters version, help and documentation (#1429)

76d427f

* [automation] Auto-update linters version, help and documentation * Update .trivyignore

[automation] Auto-update linters version, help and documentation (#1431)

0141ece

[automation] Auto-update linters version, help and documentation (#1432)

eec0b7d

Release MegaLinter v5.12.0

10b62f8

First merge commit

4a05c5a

Fixes

c68febd

fixes

3ecd14a

git safe.directory in ox called SH

558cf2b

test cases

ff689b0

Fix JS

9d6c422

nvuillam force-pushed the v6_retrofit5.12.0 branch from a7248d6 to 9d6c422 Compare April 23, 2022 16:24

Fixes

1b1ce2a

nvuillam force-pushed the v6_retrofit5.12.0 branch from 70bca13 to 1b1ce2a Compare April 23, 2022 16:54

nvuillam merged commit 4230e89 into v6_dev Apr 23, 2022

nvuillam deleted the v6_retrofit5.12.0 branch April 23, 2022 17:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Retrofit 5.11.2 + Git update #1433

Retrofit 5.11.2 + Git update #1433

nvuillam commented Apr 23, 2022

nvuillam commented Apr 23, 2022 •

edited

Loading

Retrofit 5.11.2 + Git update #1433

Retrofit 5.11.2 + Git update #1433

Conversation

nvuillam commented Apr 23, 2022

nvuillam commented Apr 23, 2022 • edited Loading

MegaLinter status: ⚠️ WARNING

nvuillam commented Apr 23, 2022 •

edited

Loading