Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: Cupcake #16

Merged
merged 4 commits into from
Nov 1, 2023
Merged

build: Cupcake #16

merged 4 commits into from
Nov 1, 2023

Conversation

vorburger
Copy link
Contributor

No description provided.

Signed-off-by: Michael Vorburger ⛑️ <mike@vorburger.ch>
@vorburger vorburger enabled auto-merge (rebase) October 31, 2023 23:26
Copy link

github-actions bot commented Oct 31, 2023

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 1 0 0.03s
✅ COPYPASTE jscpd yes no 1.62s
✅ EDITORCONFIG editorconfig-checker 1 0 0.01s
✅ REPOSITORY checkov yes no 13.91s
✅ REPOSITORY gitleaks yes no 0.15s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 15.57s
✅ REPOSITORY kics yes no 34.29s
✅ REPOSITORY secretlint yes no 0.69s
✅ REPOSITORY trivy yes no 5.38s
✅ REPOSITORY trivy-sbom yes no 1.23s
✅ REPOSITORY trufflehog yes no 3.83s
✅ YAML prettier 1 0 0 0.59s
✅ YAML v8r 1 0 1.91s
✅ YAML yamllint 1 0 0.36s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

# You can override MegaLinter flavor used to have faster performances
# More info at https://megalinter.io/flavors/
uses: oxsecurity/megalinter@b48455a119cc28045eee8f1e9d0a542a85e71f4f # v7.5.0
uses: oxsecurity/megalinter/flavors/cupcake@v7.5.0
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How does one find the SHA? I can see https://ghcr.io/oxsecurity/megalinter but there's nothing at https://ghcr.io/oxsecurity/megalinter/flavors/cupcake ... @echoix would you happen to know this? (I could contrib an improvement to your docs.)

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here, in GitHub workflows, the uses: refers to an action, not a docker image. Not all Actions use docker images. So I expect that the sha you are looking for is the commit sha of the tagged release. The flavor is an action file that is in a subdirectory of the repo (as opposed to the one in the root of the repo)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, je vois! Qu'est ce que j'suis bête... là j'ai compris. Merci bcp, j'apprécie la réponse/clarification - TIL!

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pas de problème!

* main:
  build(deps): bump ossf/scorecard-action from 2.0.6 to 2.3.1
  Bump actions/checkout from 3.6.0 to 4.1.1
  build: Fix Lint problems
  build: bin/pre-commit
  build: Skip lychee link checking for *.yaml
  build: Be!
auto-merge was automatically disabled November 1, 2023 21:10

Rebase failed

@vorburger vorburger merged commit aa5f39d into main Nov 1, 2023
4 checks passed
@vorburger vorburger deleted the vorburger-cupcake branch November 1, 2023 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants