Zizmor fixes on MegaLinter repo by nvuillam · Pull Request #7664 · oxsecurity/megalinter

nvuillam · 2026-05-01T18:58:40Z

No description provided.

github-actions · 2026-05-01T19:03:43Z

✅⚠️MegaLinter analysis: Success with warnings

⚠️ PYTHON / bandit - 83 errors

124:4
123	    )
124	    assert os.path.isdir(config.get(request_id, "DEFAULT_WORKSPACE")), (
125	        "DEFAULT_WORKSPACE "
126	        + config.get(request_id, "DEFAULT_WORKSPACE")
127	        + " is not a valid folder"
128	    )
129	

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:172:4
171	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
172	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
173	    linter_name = linter.linter_name

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:238:4
237	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
238	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
239	    if os.path.isfile(workspace + os.path.sep + "no_test_failure"):

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:487:4
486	    )
487	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
488	    expected_file_name = ""

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:587:4
586	        workspace += os.path.sep + "bad"
587	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
588	    # Call linter

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:676:4
675	        workspace = workspace + os.path.sep + "fix"
676	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
677	

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:782:12
781	            ]
782	            assert (len(list(diffs))) > 0, f"No changes in the {file} file"
783	

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:81:42
80	    if item.fileUploadId:
81	        uploaded_file_path = os.path.join("/tmp/server-files", item.fileUploadId)
82	        if not os.path.isdir(uploaded_file_path):

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:103:38
102	    file_upload_id = "FILE_" + str(uuid1())
103	    uploaded_file_path = os.path.join("/tmp/server-files", file_upload_id)
104	    os.makedirs(uploaded_file_path)

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server_worker.py:98:34
97	        temp_dir = self.create_temp_dir()
98	        upload_dir = os.path.join("/tmp/server-files", file_upload_id)
99	        if os.path.exists(upload_dir):

--------------------------------------------------

Code scanned:
	Total lines of code: 18115
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 50
		Medium: 24
		High: 9
	Total issues (by confidence):
		Undefined: 0
		Low: 16
		Medium: 20
		High: 47
Files skipped (0):

(Truncated to last 5714 characters out of 59007)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.3)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable

⚠️ REPOSITORY / grype - 15 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME       INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS          RISK   
minimatch  3.0.4      3.0.5     npm     GHSA-f8q6-p94x-37v3  High      0.5% (65th)   0.4    
minimatch  3.0.4      3.1.3     npm     GHSA-3ppc-4f35-3m26  High      < 0.1% (7th)  < 0.1  
minimatch  3.1.2      3.1.3     npm     GHSA-3ppc-4f35-3m26  High      < 0.1% (7th)  < 0.1  
minimatch  5.1.6      5.1.7     npm     GHSA-3ppc-4f35-3m26  High      < 0.1% (7th)  < 0.1  
minimatch  9.0.5      9.0.6     npm     GHSA-3ppc-4f35-3m26  High      < 0.1% (7th)  < 0.1  
minimatch  3.0.4      3.1.3     npm     GHSA-7r86-cg39-jmmj  High      < 0.1% (7th)  < 0.1  
minimatch  3.1.2      3.1.3     npm     GHSA-7r86-cg39-jmmj  High      < 0.1% (7th)  < 0.1  
minimatch  5.1.6      5.1.8     npm     GHSA-7r86-cg39-jmmj  High      < 0.1% (7th)  < 0.1  
minimatch  9.0.5      9.0.7     npm     GHSA-7r86-cg39-jmmj  High      < 0.1% (7th)  < 0.1  
minimatch  3.0.4      3.1.4     npm     GHSA-23c5-xmqv-rm74  High      < 0.1% (6th)  < 0.1  
minimatch  3.1.2      3.1.4     npm     GHSA-23c5-xmqv-rm74  High      < 0.1% (6th)  < 0.1  
minimatch  5.1.6      5.1.8     npm     GHSA-23c5-xmqv-rm74  High      < 0.1% (6th)  < 0.1  
minimatch  9.0.5      9.0.7     npm     GHSA-23c5-xmqv-rm74  High      < 0.1% (6th)  < 0.1  
gitpython  3.1.46     3.1.47    python  GHSA-rpm5-65cw-6hj4  High      N/A           N/A    
gitpython  3.1.46     3.1.47    python  GHSA-x2qx-6953-8485  High      N/A           N/A
[0070] ERROR discovered vulnerabilities at or above the severity threshold

⚠️ SPELL / lychee - 1 error

[ERROR] Error while loading config: Cannot load configuration file `.github/linters/lychee.toml`: Failed to parse configuration file

Caused by:
    TOML parse error at line 59, column 1
       |
    59 | exclude_mail = true
       | ^^^^^^^^^^^^
    unknown field `exclude_mail`, expected one of `files_from`, `verbose`, `no_progress`, `host_stats`, `extensions`, `default_extension`, `cache`, `max_cache_age`, `cache_exclude_status`, `dump`, `dump_inputs`, `archive`, `suggest`, `max_redirects`, `max_retries`, `min_tls`, `max_concurrency`, `host_concurrency`, `host_request_interval`, `threads`, `user_agent`, `insecure`, `scheme`, `offline`, `include`, `exclude`, `exclude_file`, `exclude_path`, `exclude_all_private`, `exclude_private`, `exclude_link_local`, `exclude_loopback`, `include_mail`, `remap`, `fallback_extensions`, `index_files`, `header`, `accept`, `include_fragments`, `timeout`, `retry_wait_time`, `method`, `base_url`, `root_dir`, `basic_auth`, `github_token`, `skip_missing`, `no_ignore`, `hidden`, `include_verbatim`, `glob_ignore_case`, `output`, `mode`, `format`, `generate`, `require_https`, `cookie_jar`, `include_wikilinks`, `preprocess`, `hosts`
    
See: https://github.com/lycheeverse/lychee/blob/lychee-v0.23.0/lychee.example.toml

⚠️ MARKDOWN / markdownlint - 335 errors

ngle-h1 Multiple top-level headings in the same document [Context: "IDE Configuration Reporter"]
docs/reporters/ConsoleReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Console Reporter"]
docs/reporters/EmailReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "E-mail Reporter"]
docs/reporters/FileIoReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "File.io Reporter"]
docs/reporters/GitHubCommentReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "GitHub Comment Reporter"]
docs/reporters/GitHubCommentReporter.md:27:196 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:27:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:174 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:196 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:28:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:160 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:29:48 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:143 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:30:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:152 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubStatusReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "GitHub Status Reporter"]
docs/reporters/GitlabCommentReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Gitlab Comment Reporter"]
docs/reporters/JsonReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "JSON Reporter"]
docs/reporters/MarkdownSummaryReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Markdown Summary Reporter"]
docs/reporters/SarifReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "SARIF Reporter (beta)"]
docs/reporters/TapReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "TAP Reporter"]
docs/reporters/TextReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Text Reporter"]
docs/reporters/UpdatedSourcesReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Updated Sources Reporter"]
docs/special-thanks.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Special thanks"]
docs/special-thanks.md:23:3 error MD045/no-alt-text Images should have alternate text (alt text)
docs/sponsor.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Sponsoring"]
docs/supported-linters.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Supported Linters"]
mega-linter-runner/generators/mega-linter-custom-flavor/templates/README.md:63 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "How to use the custom flavor"]
mega-linter-runner/README.md:27:274 error MD051/link-fragments Link fragments should be valid [Context: "[**apply formatting and auto-fixes**](#apply-fixes)"]
mega-linter-runner/README.md:27:217 error MD051/link-fragments Link fragments should be valid [Context: "[**reports in several formats**](#reports)"]
README.md:190:127 error MD051/link-fragments Link fragments should be valid [Context: "[many additional features](#mega-linter-vs-super-linter)"]
README.md:1847:3 error MD045/no-alt-text Images should have alternate text (alt text)

(Truncated to last 5714 characters out of 43944)

⚠️ YAML / prettier - 6 errors

hanged)
mega-linter-runner/.eslintrc.yml 2ms (unchanged)
mega-linter-runner/.mega-linter.yml 6ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/action.yml 3ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml 11ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml 21ms (unchanged)
[error] mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml: SyntaxError: Implicit map keys need to be followed by map values (6:1)
[error]   4 | label: <%= CUSTOM_FLAVOR_LABEL %>
[error]   5 | linters:
[error] > 6 | <%= CUSTOM_FLAVOR_LINTERS %>
[error]     | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[error]   7 |
mega-linter-runner/generators/mega-linter/templates/.drone.yml 2ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/.gitlab-ci.yml 6ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/azure-pipelines.yml 10ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/bitbucket-pipelines.yml 2ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/concourse-task.yml 2ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/mega-linter.yml 25ms (unchanged)
megalinter/descriptors/action.megalinter-descriptor.yml 13ms (unchanged)
megalinter/descriptors/ansible.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/api.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/arm.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/bash.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/bicep.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/c.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/clojure.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/cloudformation.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/coffee.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/copypaste.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/cpp.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/csharp.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/css.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/dart.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/dockerfile.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/editorconfig.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/env.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/gherkin.megalinter-descriptor.yml 5ms (unchanged)
megalinter/descriptors/go.megalinter-descriptor.yml 16ms (unchanged)
megalinter/descriptors/graphql.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/groovy.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/html.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/java.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/javascript.megalinter-descriptor.yml 37ms (unchanged)
megalinter/descriptors/json.megalinter-descriptor.yml 61ms (unchanged)
megalinter/descriptors/jsx.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/kotlin.megalinter-descriptor.yml 5ms (unchanged)
megalinter/descriptors/kubernetes.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/latex.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/lua.megalinter-descriptor.yml 17ms (unchanged)
megalinter/descriptors/makefile.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/markdown.megalinter-descriptor.yml 19ms (unchanged)
megalinter/descriptors/perl.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/php.megalinter-descriptor.yml 30ms (unchanged)
megalinter/descriptors/powershell.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/protobuf.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/puppet.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/python.megalinter-descriptor.yml 75ms (unchanged)
megalinter/descriptors/r.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/raku.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/repository.megalinter-descriptor.yml 88ms (unchanged)
megalinter/descriptors/robotframework.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/rst.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/ruby.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/rust.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/salesforce.megalinter-descriptor.yml 35ms (unchanged)
megalinter/descriptors/scala.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/snakemake.megalinter-descriptor.yml 5ms (unchanged)
megalinter/descriptors/spell.megalinter-descriptor.yml 31ms (unchanged)
megalinter/descriptors/sql.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/swift.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/tekton.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/terraform.megalinter-descriptor.yml 24ms (unchanged)
megalinter/descriptors/tsx.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/typescript.megalinter-descriptor.yml 22ms (unchanged)
megalinter/descriptors/vbdotnet.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/xml.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/yaml.megalinter-descriptor.yml 21ms (unchanged)
server/docker-compose-dev.yml 3ms (unchanged)
server/docker-compose.yml 6ms (unchanged)
trivy-secret.yaml 1ms (unchanged)
zizmor.yml 2ms (unchanged)

(Truncated to last 5714 characters out of 11528)

⚠️ YAML / yamllint - 34 errors

mega-linter-runner/.eslintrc.yml
  11:9      warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml
  48:15     warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml
  7:1       error    syntax error: could not find expected ':' (syntax)

mega-linter-runner/generators/mega-linter/templates/mega-linter.yml
  38:15     warning  too few spaces inside empty braces  (braces)

megalinter/descriptors/copypaste.megalinter-descriptor.yml
  18:301    warning  line too long (313 > 300 characters)  (line-length)

megalinter/descriptors/javascript.megalinter-descriptor.yml
  234:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/markdown.megalinter-descriptor.yml
  74:301    warning  line too long (366 > 300 characters)  (line-length)

megalinter/descriptors/perl.megalinter-descriptor.yml
  26:301    warning  line too long (310 > 300 characters)  (line-length)

megalinter/descriptors/php.megalinter-descriptor.yml
  149:301   warning  line too long (389 > 300 characters)  (line-length)
  163:301   warning  line too long (302 > 300 characters)  (line-length)

megalinter/descriptors/repository.megalinter-descriptor.yml
  155:301   warning  line too long (408 > 300 characters)  (line-length)
  271:301   warning  line too long (306 > 300 characters)  (line-length)
  276:301   warning  line too long (321 > 300 characters)  (line-length)
  455:301   warning  line too long (338 > 300 characters)  (line-length)
  523:301   warning  line too long (306 > 300 characters)  (line-length)
  635:301   warning  line too long (316 > 300 characters)  (line-length)
  887:301   warning  line too long (1263 > 300 characters)  (line-length)
  954:301   warning  line too long (879 > 300 characters)  (line-length)
  968:301   warning  line too long (358 > 300 characters)  (line-length)
  1024:301  warning  line too long (346 > 300 characters)  (line-length)
  1031:301  warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/salesforce.megalinter-descriptor.yml
  51:301    warning  line too long (359 > 300 characters)  (line-length)
  310:301   warning  line too long (359 > 300 characters)  (line-length)

megalinter/descriptors/spell.megalinter-descriptor.yml
  149:301   warning  line too long (315 > 300 characters)  (line-length)

megalinter/descriptors/sql.megalinter-descriptor.yml
  64:301    warning  line too long (319 > 300 characters)  (line-length)

megalinter/descriptors/terraform.megalinter-descriptor.yml
  27:301    warning  line too long (330 > 300 characters)  (line-length)
  86:301    warning  line too long (391 > 300 characters)  (line-length)
  142:301   warning  line too long (346 > 300 characters)  (line-length)
  199:301   warning  line too long (328 > 300 characters)  (line-length)

megalinter/descriptors/typescript.megalinter-descriptor.yml
  225:301   warning  line too long (314 > 300 characters)  (line-length)

mkdocs.yml
  8:301     warning  line too long (552 > 300 characters)  (line-length)
  66:5      warning  wrong indentation: expected 6 but found 4  (indentation)
  78:5      warning  wrong indentation: expected 6 but found 4  (indentation)

zizmor.yml
  1:1       warning  missing document start "---"  (document-start)

✅ Linters with no issues

actionlint, black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, osv-scanner, pylint, ruff, secretlint, shellcheck, shfmt, syft, trufflehog, v8r, v8r, xmllint, zizmor

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

nvuillam · 2026-05-02T08:15:55Z

@copilot why is ACTION_ZIZMOR skipped (not run) in MegaLinter job https://github.com/oxsecurity/megalinter/actions/runs/25247361712/job/74033791120?pr=7664 ?

When have pleinty of Github workflows !

…obal FILTER_REGEX_EXCLUDE Agent-Logs-Url: https://github.com/oxsecurity/megalinter/sessions/36fb3d87-2838-4fb8-8922-c442fe6f25d8 Co-authored-by: nvuillam <17500430+nvuillam@users.noreply.github.com>

Copilot · 2026-05-02T08:19:01Z

@copilot why is ACTION_ZIZMOR skipped (not run) in MegaLinter job https://github.com/oxsecurity/megalinter/actions/runs/25247361712/job/74033791120?pr=7664 ?

When have pleinty of Github workflows !

The issue was that .github/workflows was included in the global FILTER_REGEX_EXCLUDE, which caused all workflow files to be excluded at the MegaLinter level before being passed to any linter — including ACTION_ZIZMOR. Since ACTION_ZIZMOR uses files_sub_directory: .github/workflows, it received 0 files and was marked inactive (skipped).

Fixed in commit 9c994ea:

Removed \.github/workflows from the global FILTER_REGEX_EXCLUDE so workflow files are no longer globally excluded
Added \.github/workflows to the per-linter exclusions for YAML_YAMLLINT, YAML_PRETTIER, and YAML_V8R so those YAML linters don't process workflow files (only ACTION_ZIZMOR should lint them)

…eactions

nvuillam · 2026-05-02T15:13:53Z

@copilot why zizmor finds these errors whereas they are supposed to be ignored thanks to zizmot.yml configuration ?

https://github.com/oxsecurity/megalinter/actions/runs/25254584377/job/74051805749?pr=7664

…hs don't work) Agent-Logs-Url: https://github.com/oxsecurity/megalinter/sessions/3216b652-29e7-4f33-889f-c8712a9c8a09 Co-authored-by: nvuillam <17500430+nvuillam@users.noreply.github.com>

Copilot · 2026-05-02T15:26:24Z

@copilot why zizmor finds these errors whereas they are supposed to be ignored thanks to zizmot.yml configuration ?

https://github.com/oxsecurity/megalinter/actions/runs/25254584377/job/74051805749...

The zizmor.yml ignore list was using full paths (.github/workflows/build-command.yml) but zizmor's rule ignore field expects just the filename (build-command.yml). Because the paths didn't match, the 3 artipacked findings weren't being suppressed — they showed as active errors, and MegaLinter's count regex ([0-9]+) findings? picked up the total count (86) rather than 0.

Fixed in commit 711132a: changed the ignore entries to filename-only format. Zizmor now reports No findings to report. Good job! (7 ignored, 79 suppressed).

Zizmor fixes on MegaLinter repo

961214d

nvuillam requested review from Kurt-von-Laven, bdovaz and echoix as code owners May 1, 2026 18:58

nvuillam temporarily deployed to dev May 1, 2026 18:58 — with GitHub Actions Inactive

nvuillam added 2 commits May 2, 2026 08:30

Merge branch 'main' into zizmor-fixes

d6bb809

ZIZMOR ml config

a4d56f0

nvuillam temporarily deployed to dev May 2, 2026 06:32 — with GitHub Actions Inactive

nvuillam and others added 2 commits May 2, 2026 06:38

[MegaLinter] Apply linters fixes

3d9e3cc

Warning message when missing GITHUB_TOKEN

811d96c

nvuillam temporarily deployed to dev May 2, 2026 07:48 — with GitHub Actions Inactive

push

0030848

nvuillam temporarily deployed to dev May 2, 2026 07:56 — with GitHub Actions Inactive

Copilot started work on behalf of nvuillam May 2, 2026 08:16 View session

Fix ACTION_ZIZMOR being skipped by removing .github/workflows from gl…

9c994ea

…obal FILTER_REGEX_EXCLUDE Agent-Logs-Url: https://github.com/oxsecurity/megalinter/sessions/36fb3d87-2838-4fb8-8922-c442fe6f25d8 Co-authored-by: nvuillam <17500430+nvuillam@users.noreply.github.com>

Copilot finished work on behalf of nvuillam May 2, 2026 08:19

Merge remote-tracking branch 'origin/main' into zizmor-fixes

eed6064

nvuillam temporarily deployed to dev May 2, 2026 11:18 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev May 2, 2026 11:18 — with GitHub Actions Failure

nvuillam temporarily deployed to dev May 2, 2026 11:18 — with GitHub Actions Inactive

feat: update workflows to use GitHub CLI for comment management and r…

d0ae8a9

…eactions

nvuillam had a problem deploying to dev May 2, 2026 11:52 — with GitHub Actions Failure

nvuillam temporarily deployed to dev May 2, 2026 11:52 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev May 2, 2026 11:52 — with GitHub Actions Failure

nvuillam temporarily deployed to dev May 2, 2026 11:52 — with GitHub Actions Inactive

fix

de8eb3a

nvuillam had a problem deploying to dev May 2, 2026 14:51 — with GitHub Actions Failure

nvuillam temporarily deployed to dev May 2, 2026 14:51 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev May 2, 2026 14:51 — with GitHub Actions Failure

Copilot started work on behalf of nvuillam May 2, 2026 15:14 View session

Fix zizmor.yml: use filename-only in artipacked ignore list (full pat…

711132a

…hs don't work) Agent-Logs-Url: https://github.com/oxsecurity/megalinter/sessions/3216b652-29e7-4f33-889f-c8712a9c8a09 Co-authored-by: nvuillam <17500430+nvuillam@users.noreply.github.com>

Copilot finished work on behalf of nvuillam May 2, 2026 15:27

Copilot AI had a problem deploying to dev May 2, 2026 15:34 Error

Merge branch 'main' into zizmor-fixes

e3357e0

nvuillam temporarily deployed to dev May 2, 2026 15:35 — with GitHub Actions Inactive

nvuillam merged commit 9e9d746 into main May 2, 2026
135 of 136 checks passed

nvuillam deleted the zizmor-fixes branch May 2, 2026 15:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Zizmor fixes on MegaLinter repo - #7664

Zizmor fixes on MegaLinter repo#7664
nvuillam merged 15 commits into
mainfrom
zizmor-fixes

nvuillam commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026 •

edited

Loading

Uh oh!

nvuillam commented May 2, 2026

Uh oh!

Copilot AI commented May 2, 2026

Uh oh!

nvuillam commented May 2, 2026

Uh oh!

Copilot AI commented May 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

nvuillam commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅⚠️MegaLinter analysis: Success with warnings

✅ Linters with no issues

Uh oh!

nvuillam commented May 2, 2026

Uh oh!

Copilot AI commented May 2, 2026

Uh oh!

nvuillam commented May 2, 2026

Uh oh!

Copilot AI commented May 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented May 1, 2026 •

edited

Loading