Vidar Holen
Vidar Holen
You're right, this is a false positive. Here's POSIX: > .2. The words that are not variable assignments or redirections shall be expanded. If any fields remain following their expansion,...
Nothing appears to have changed since 2019, so I'm still very skeptical about this. Are there any SARIF consumers outside of the Microsoft sphere? GitHub and VSC already have third...
There is currently no way to do this directly (but easy to jq/grep from the json/gcc output formats). This is definitely a feature that will be added soon, since it...
Here's an example that only shows SC2086 quoting warnings in a file: ``` shellcheck -f json myfile.sh | jq '.[] | select(.code == 2086)' ```
Out of curiosity, did this come up in real code?
I would argue that it *should* warn. `${@:1:1}` is not a single element. It's between 0 and 1 elements, inclusive. `${*:1:1}`, meanwhile, is exactly 1 element. If the parameter is...
All of these are now added. Phew!
Busybox Ash support was added by @grische in #2868. Thanks!
This change risks breaking CI and requires workarounds for anyone who's not checking world-readable files. Are there any Docker guidelines or conventions that recommend this approach?
I definitely see the problem, though it seems overly specialized to add a feature that assumes that `/bin/sh` is a specific shell when the point of `/bin/sh` is to refer...