Luke O'Malley
Luke O'Malley
With #65 landing I think this issue is largely resolved. Let's close this ticket out for now and re-open if the frustration continues.
We are still getting feedback on this issue. A proposal to resolve the problem is to output `bento check` results to a temp file on all runs and to output...
@underyx I thought we packaged semgrep now as a binary to side-step a dependency on Docker for the GitHub Action?
@nbrahms @DrewDennison What's the roadmap for deprecating semgrep-lint Action and/or merging it + Bento Action?
We plan to address #209 before this issue is considered.
Bumping this issue. From user feedback today: > detected Python but not JavaScript during "init" I think @nbrahms this may be a vote for using git-lang to detect relevant languages...
@arashd Supportive of doing less work and being transparent about Bento's behavior / functionality. If we receive more requests, we can find a longer term solution.
Other candidates from @clintgibler IaC slides ([here](https://docs.google.com/presentation/d/1lfEvXtw5RTj3JmXwSQDXy8or87_BHrFbo1ZtQQlHbq0/edit#slide=id.g7e6ece6e14_0_235)): 1. [liamg/tfsec](https://github.com/liamg/tfsec) 2. [bridgecrewio/checkov](https://github.com/bridgecrewio/checkov) 3. [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) 4. [wayfair/terrafirma](https://github.com/wayfair/terrafirma) 5. [rubelw/terraform-validator](https://github.com/rubelw/terraform-validator)
User comment: > * There were some things that would be nice to fix, but would be a pain to go through and manually fix them. Ex: == vs ===....
Addressed for the time being on an experimental release. Based on usage we'll decide whether or not to merge into baseline Bento.