SynapseML
SynapseML copied to clipboard
build: Add megalinter securty scan
Summary
Adding Codacy Scanner
MegaLinter status: ❌ ERROR
| Descriptor | Linter | Files | Fixed | Errors | Elapsed time |
|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 1 | 0 | 0.02s | |
| ❌ COPYPASTE | jscpd | yes | 322 | 21.82s | |
| ✅ CREDENTIALS | secretlint | yes | no | 4.42s | |
| ✅ GIT | git_diff | yes | no | 0.09s | |
| ❌ SPELL | cspell | 1 | 1 | 2.02s | |
| ✅ SPELL | misspell | 1 | 0 | 0 | 0.15s |
| ✅ YAML | prettier | 1 | 0 | 0 | 1.31s |
| ✅ YAML | v8r | 1 | 0 | 1.72s | |
| ✅ YAML | yamllint | 1 | 0 | 0.19s |
See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff
@mhamilton723 if there are too many, you can just remove copy-paste detector, or update .jscpd.json at the root of the repo to ignore some paths :)
https://megalinter.github.io/latest/descriptors/copypaste_jscpd/
You can also set GITHUB_STATUS_REPORTER: false , because it's kind of doubling with Github Comment reporter :)
@mhamilton723 there is now a tuto for install, if it can help :)
https://nicolas.vuillamy.fr/improve-uniformize-and-secure-your-code-base-with-megalinter-62ebab422c1