SynapseML icon indicating copy to clipboard operation
SynapseML copied to clipboard

build: Add megalinter securty scan

Open mhamilton723 opened this issue 3 years ago • 3 comments

Summary

Adding Codacy Scanner

mhamilton723 avatar Feb 24 '22 18:02 mhamilton723

MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 1 0 0.02s
❌ COPYPASTE jscpd yes 322 21.82s
✅ CREDENTIALS secretlint yes no 4.42s
✅ GIT git_diff yes no 0.09s
❌ SPELL cspell 1 1 2.02s
✅ SPELL misspell 1 0 0 0.15s
✅ YAML prettier 1 0 0 1.31s
✅ YAML v8r 1 0 1.72s
✅ YAML yamllint 1 0 0.19s

See errors details in artifact MegaLinter reports on CI Job page Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

github-actions[bot] avatar Feb 24 '22 18:02 github-actions[bot]

@mhamilton723 if there are too many, you can just remove copy-paste detector, or update .jscpd.json at the root of the repo to ignore some paths :)

https://megalinter.github.io/latest/descriptors/copypaste_jscpd/

You can also set GITHUB_STATUS_REPORTER: false , because it's kind of doubling with Github Comment reporter :)

nvuillam avatar Feb 28 '22 23:02 nvuillam

@mhamilton723 there is now a tuto for install, if it can help :)

https://nicolas.vuillamy.fr/improve-uniformize-and-secure-your-code-base-with-megalinter-62ebab422c1

nvuillam avatar Mar 23 '22 23:03 nvuillam