megalinter
megalinter copied to clipboard
oxsecurity
Prevent uv to download Python and use the one in the image
This ensures Python 3.13 from the container is really used, not 3.12 in .python-version
Extracted from work in PR #2273, but lost in a merge in commit https://github.com/oxsecurity/megalinter/pull/2273/commits/9092829051059ebf25822077ae063eb7bb451ea7
Since it is backporting some work from that PR, including the empty platform-specific stage selection override to still have the comment near the end valid.
Proposed Changes
- …
- …
- …
Readiness Checklist
Author/Contributor
- [ ] Add entry to the CHANGELOG listing the change and linking to the corresponding issue (if appropriate)
- [ ] If documentation is needed for this change, has that been included in this pull request
Reviewing Maintainer
- [ ] Label as
breakingif this is a large fundamental change - [ ] Label as either
automation,bug,documentation,enhancement,infrastructure, orperformance
[!NOTE] Updates all Dockerfiles to enforce system Python 3.13 by disabling uv Python downloads, introduce platform-specific build stages, and standardize uv/caching and install steps.
- Build/Docker:
- Introduce platform-specific
build-ml-corestages (selected viaTARGETOS/TARGETARCH/TARGETVARIANT) for multi-arch builds.- Enforce system Python usage:
- Set
UV_PYTHON_DOWNLOADS=0andUV_LINK_MODE=copyin build and final stages.- Standardize base as
FROM python:3.13-alpine3.22 as final.- Optimize dependency resolution:
- Switch
uv syncto--locked --no-dev(replacing--frozen).- Use cache mounts with
sharing=lockedand runuvfrom theuvstage.- Align final install steps across images and add notes about cache/wheel availability.
- Applies consistently to root, flavor, and linter Dockerfiles.
Written by Cursor Bugbot for commit 75a810f8300f836db328697a097566c91a9727e1. This will update automatically on new commits. Configure here.
/build
Command dispatch failed. Command run output Command run output Build command workflow started. Installing dependencies Running script
./build.shBuild command workflow completed updating files.
❌MegaLinter analysis: Error
❌ DOCKERFILE / hadolint - 1 error
Dockerfile:95 DL3006 warning: Always tag the version of an image explicitly
linters/action_actionlint/Dockerfile:38 DL3006 warning: Always tag the version of an image explicitly
linters/ansible_ansible_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/api_spectral/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/arm_arm_ttk/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/bash_exec/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/bash_shellcheck/Dockerfile:34 DL3006 warning: Always tag the version of an image explicitly
linters/bash_shfmt/Dockerfile:34 DL3006 warning: Always tag the version of an image explicitly
linters/bicep_bicep_linter/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/c_clang_format/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/c_cppcheck/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/c_cpplint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/clojure_clj_kondo/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/clojure_cljstyle/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/cloudformation_cfn_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/coffee_coffeelint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/copypaste_jscpd/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/cpp_clang_format/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/cpp_cppcheck/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/cpp_cpplint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/csharp_csharpier/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/csharp_dotnet_format/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/csharp_roslynator/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/css_stylelint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/dart_dartanalyzer/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/dockerfile_hadolint/Dockerfile:34 DL3006 warning: Always tag the version of an image explicitly
linters/editorconfig_editorconfig_checker/Dockerfile:34 DL3006 warning: Always tag the version of an image explicitly
linters/env_dotenv_linter/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/gherkin_gherkin_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/go_golangci_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/go_revive/Dockerfile:39 DL3006 warning: Always tag the version of an image explicitly
linters/graphql_graphql_schema_linter/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/groovy_npm_groovy_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/html_djlint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/html_htmlhint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/java_checkstyle/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/java_pmd/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/javascript_es/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/javascript_prettier/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/javascript_standard/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/json_eslint_plugin_jsonc/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/json_jsonlint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/json_npm_package_json_lint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/json_prettier/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/json_v8r/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/jsx_eslint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/kotlin_detekt/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/kotlin_ktlint/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/kubernetes_helm/Dockerfile:33 DL3006 warning: Always tag the version of an image explicitly
linters/kubernetes_kubeconform/Dockerfile:34 DL3006 warning: Always tag the version of an i
(Truncated to 5000 characters out of 13240)
🤖 AI-Powered Fix Suggestions for DOCKERFILE_HADOLINT (by openai gpt-4.1-mini)
-
Summary: The main issue flagged by hadolint is DL3006: "Always tag the version of an image explicitly." This warning appears repeatedly across many Dockerfiles. It means base images are referenced without a specific tag (e.g.,
ubuntuinstead ofubuntu:20.04). -
Explanation: Using untagged images (like
ubuntuornode) pulls the latest version by default, which can lead to unpredictable builds if the base image updates. Explicit tags ensure reproducible, stable builds. -
How to fix:
- Always specify an explicit version tag or digest for base images in your Dockerfiles.
- Avoid using
latesttag; prefer specific versions or digests. - Review all
FROMinstructions and add appropriate tags.
- Example fix:
# Before (causes DL3006 warning)
FROM node
# After (fixed)
FROM node:18-alpine
This change ensures your builds are consistent and secure.
⚠️ PYTHON / bandit - 69 errors
Run started:2025-11-29 10:44:34.892134+00:00
Test results:
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
Severity: Low Confidence: High
CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_imports.html#b404-import-subprocess
Location: ./.automation/build.py:11:0
10 import shutil
11 import subprocess
12 import sys
--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ''
Severity: Low Confidence: Medium
CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
Location: ./.automation/build.py:3050:35
3049 api_github_headers = {"content-type": "application/json"}
3050 use_github_token = ""
3051 if "GITHUB_TOKEN" in os.environ:
--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ' (with GITHUB_TOKEN)'
Severity: Low Confidence: Medium
CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
Location: ./.automation/build.py:3054:39
3053 api_github_headers["authorization"] = f"Bearer {github_token}"
3054 use_github_token = " (with GITHUB_TOKEN)"
3055 logging.info(
--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
Severity: High Confidence: High
CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
Location: ./.automation/build.py:3432:14
3431 cwd=cwd,
3432 shell=True,
3433 executable=None if sys.platform == "win32" else which("bash"),
3434 )
3435 stdout = utils.clean_string(process.stdout)
3436 logging.info(f"Format table results: ({process.returncode})\n" + stdout)
3437
3438
3439 def generate_json_schema_docs():
3440 logging.info("Generating json schema html docs…")
3441 if sys.platform == "win32":
--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
Severity: High Confidence: High
CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
Location: ./.automation/build.py:3455:14
3454 cwd=cwd,
3455 shell=True,
3456 executable=None if sys.platform == "win32" else which("bash"),
3457 )
3458 stdout = utils.clean_string(process.stdout)
3459 logging.info(
3460 f"Generate json schema docs results: ({process.returncode})\n" + stdout
3461 )
3462
3463
3464 def generate_version():
--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
Severity: Low Confidence: High
CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b607_start_process_with_partial_path.html
Location: ./.automation/build.py:3468:14
3467 cwd_to_use = os.getcwd() + "/mega-linter-runner"
3468 process = subprocess.run(
3469 [
3470 "npm",
3471 "version",
3472 "--newversion",
3473 RELEASE_TAG,
3474 "-no-git-tag-version",
3475 "--no-commit-hooks",
3476 ],
3477 stdout=subprocess.PIPE,
3478 universal_newlines=True,
3479 cwd=cwd_to_use,
3480 shell=True,
3481 )
3482 print(process.stdout)
--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
Severity: High Confidence: High
CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
Location: ./.automation/build.py:3480:14
3479 cwd=cwd_to_use,
3480 shell=True,
3481 )
3482 print(process.stdout)
3483 print(process.stderr)
3484 # Update python project version:
3485 process = subprocess.run(
3486 ["hatch", "version", RELEASE_TAG],
3487 stdout=subprocess.PIPE,
3488 text=True,
3489 shell=True,
3490 check=True,
3491 )
3492 # Update changelog
3493 if UPDATE_CHANGELOG is True:
3494 changelog_file = f"{REPO_
(Truncated to 5000 characters out of 43897)
⚠️ BASH / bash-exec - 1 error
Results of bash-exec linter (version 5.2.37)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------
✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
Error: File:[sh/megalinter_exec] is not executable
⚠️ REPOSITORY / grype - 35 errors
[0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not
(Truncated to 5000 characters out of 32461)
⚠️ SPELL / lychee - 31 errors
[WARN ] WARNING: `--exclude-mail` is deprecated and will soon be removed; E-Mail is no longer checked by default. Use `--include-mail` to enable E-Mail checking.
[403] https://medium.com/@caodanju/30-seconds-to-setup-megalinter-your-go-to-tool-for-automated-code-quality-and-iac-security-969d90a5a99c | Network error: Forbidden
[403] https://nklya.medium.com/hot-to-linter-basic-things-like-trailing-whitespaces-and-newlines-7b40da8f688d | Network error: Forbidden
[403] https://medium.com/@RunningMattress | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/improve-uniformize-and-secure-your-code-base-with-megalinter-62ebab422c1 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/megalinter-sells-his-soul-and-joins-ox-security-2a91a0027628 | Network error: Forbidden
[403] https://medium.com/@RunningMattress/level-up-your-unity-packages-with-ci-cd-9498d2791211 | Network error: Forbidden
[403] https://medium.com/datamindedbe/integrating-megalinter-to-automate-linting-across-multiple-codebases-a-technical-description-a200bb235b71 | Network error: Forbidden
[403] https://nklya.medium.com/ | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://javascript.plainenglish.io/node-js-coding-standard-tools-with-megalinter-on-gitlab-ci-a43b55915811 | Network error: Forbidden
[404] https://github.com/$ | Network error: Not Found
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[ERROR] https://eslint.org/ | Network error: error sending request for url (https://eslint.org/) Maybe a certificate error?
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found
[404] https://github.com/Lightning-Flow-Scanner | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_list.html | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_basics.html#selecting-and-ignoring-rules | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/configuration/configuration.html | Network error: Not Found
[404] https://github.com/pderichs/sublime_rubocop | Network error: Not Found
[404] https://lychee.cli.rs/usage/config/ | Network error: Not Found
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png | Network error: Not Found
[404] https://raku.org/camelia-logo.png | Network error: Not Found
[404] https://lychee.cli.rs/usage/cli/ | Network error: Not Found
📝 Summary
---------------------
🔍 Total.........2381
✅ Successful....1886
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.......464
❓ Unknown..........0
🚫 Errors..........31
Errors in mega-linter-runner/README.md
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
Errors in megalinter/descriptors/robotframework.megalinter-descriptor.yml
[404] https://robocop.readthedocs.io/en/stable/configuration/configuration.html | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_list.html | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_basics.html#selecting-and-ignoring-rules | Network error: Not Found
Errors in megalinter/descriptors/spell.megalinter-descriptor.yml
[404] https://lychee.cli.rs/usage/cli/ | Network error: Not Found
[404] https://lychee.cli.rs/usage/config/ | Network error: Not Found
Errors in mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml
[404] https://github.com/$ | Network error: Not Found
Errors in megalinter/descriptors/python.megalinter-descriptor.yml
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found
Errors in megalinter/descriptors/ruby.megalinter-descriptor.yml
[404] https://github.com/pderichs/sublime_rubocop | Network error: Not Found
Errors in megalinter/descriptors/markdown.megalinter-descriptor.yml
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-g
(Truncated to 5000 characters out of 7229)
⚠️ MARKDOWN / markdownlint - 312 errors
.github/copilot-instructions.md:9 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/copilot-instructions.md:156 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/linters/valestyles/proselint/README.md:12:601 MD013/line-length Line length [Expected: 600; Actual: 755]
CHANGELOG.md:178:90 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
CHANGELOG.md:2199:87 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/articles.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "They talk about MegaLinter"]
docs/badge.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Badge"]
docs/config-activation.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Activation and deactivation"]
docs/config-apply-fixes.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Apply fixes"]
docs/config-cli-lint-mode.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLI lint mode"]
docs/config-file.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: ".mega-linter.yml file"]
docs/config-filtering.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Filter linted files"]
docs/config-linters.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Linter specific variables"]
docs/config-postcommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Post-commands"]
docs/config-precommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Pre-commands"]
docs/config-variables-security.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Environment variables security"]
docs/config-variables.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Common variables"]
docs/configuration.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Configuration"]
docs/descriptors/action_actionlint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "actionlint"]
docs/descriptors/action.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ACTION"]
docs/descriptors/ansible_ansible_lint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ansible-lint"]
docs/descriptors/ansible_ansible_lint.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/ansible.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ANSIBLE"]
docs/descriptors/api_spectral.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 746]
docs/descriptors/api.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "API"]
docs/descriptors/arm_arm_ttk.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "arm-ttk"]
docs/descriptors/arm.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ARM"]
docs/descriptors/bash_bash_exec.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bash-exec"]
docs/descriptors/bash_shellcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shellcheck"]
docs/descriptors/bash_shellcheck.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 785]
docs/descriptors/bash_shfmt.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shfmt"]
docs/descriptors/bash.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BASH"]
docs/descriptors/bicep_bicep_linter.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bicep_linter"]
docs/descriptors/bicep.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BICEP"]
docs/descriptors/c_clang_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/c_clang_format.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/c_cppcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/c_cpplint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cpplint"]
docs/descriptors/c.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C"]
docs/
(Truncated to 5000 characters out of 38740)
⚠️ YAML / prettier - 6 errors
.automation/plugins.yml 146ms (unchanged)
.github/FUNDING.yml 6ms (unchanged)
.github/dependabot.yml 37ms (unchanged)
.github/linters/.cfnlintrc.yml 5ms (unchanged)
.github/linters/.checkov.yml 5ms (unchanged)
.github/linters/.golangci.yml 12ms (unchanged)
.github/linters/.hadolint.yml 3ms (unchanged)
.github/linters/.openapirc.yml 7ms (unchanged)
.github/linters/.protolintrc.yml 12ms (unchanged)
.github/linters/.ruby-lint.yml 2ms (unchanged)
.github/linters/.yamllint.yml 12ms (unchanged)
.github/linters/analysis_options.yml 14ms (unchanged)
.github/linters/valestyles/Microsoft/AMPM.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Accessibility.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Acronyms.yml 19ms (unchanged)
.github/linters/valestyles/Microsoft/Adverbs.yml 25ms (unchanged)
.github/linters/valestyles/Microsoft/Auto.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Avoid.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/ComplexWords.yml 32ms (unchanged)
.github/linters/valestyles/Microsoft/Contractions.yml 8ms (unchanged)
.github/linters/valestyles/Microsoft/Dashes.yml 13ms (unchanged)
.github/linters/valestyles/Microsoft/DateFormat.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/DateNumbers.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/DateOrder.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ellipses.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/FirstPerson.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Foreign.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Gender.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/GenderBias.yml 8ms (unchanged)
.github/linters/valestyles/Microsoft/GeneralURL.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingAcronyms.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingColons.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingPunctuation.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Headings.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Hyphens.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Negative.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ordinal.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/OxfordComma.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Passive.yml 10ms (unchanged)
.github/linters/valestyles/Microsoft/Percentages.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Quotes.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/RangeFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/RangeTime.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Ranges.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Semicolon.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/SentenceLength.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Spacing.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Suspended.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Terms.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/URLFormat.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Units.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Vocab.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/We.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Wordiness.yml 16ms (unchanged)
.github/linters/valestyles/proselint/Airlinese.yml 2ms (unchanged)
.github/linters/valestyles/proselint/AnimalLabels.yml 7ms (unchanged)
.github/linters/valestyles/proselint/Annotations.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Apologizing.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Archaisms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/But.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Cliches.yml 71ms (unchanged)
.github/linters/valestyles/proselint/CorporateSpeak.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Currency.yml 3ms (unchanged)
.github/linters/valestyles/proselint/Cursing.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateCase.yml 3ms (unchanged)
.github/linters/valestyles/proselint/DateMidnight.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateRedundancy.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateSpacing.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DenizenLabels.yml 8ms (unchanged)
.github/linters/valestyles/proselint/Diacritical.yml 16ms (unchanged)
.github/linters/valestyles/proselint/GenderBias.yml 7ms (unchanged)
.github/linters/valestyles/proselint/GroupTerms.yml 8ms (unchanged)
.github/linters/valestyles/proselint/Hedging.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Hyperbole.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Jargon.yml 1ms (unchanged)
.github/linters/valestyles/proselint/LGBTOffensive.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTTerms.yml 5ms (unchanged)
.github/linters/valestyles/proselint/Malapropisms.yml 2ms (unchanged)
.github/linters/
(Truncated to 5000 characters out of 11529)
⚠️ YAML / yamllint - 189 errors
.automation/plugins.yml
1:1 warning missing document start "---" (document-start)
.github/FUNDING.yml
3:1 warning missing document start "---" (document-start)
.github/dependabot.yml
4:1 warning missing document start "---" (document-start)
.github/linters/.cfnlintrc.yml
1:1 warning missing document start "---" (document-start)
.github/linters/.checkov.yml
2:1 warning missing document start "---" (document-start)
.github/linters/.golangci.yml
1:1 warning missing document start "---" (document-start)
.github/linters/.hadolint.yml
1:1 warning missing document start "---" (document-start)
.github/linters/.protolintrc.yml
2:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/AMPM.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Accessibility.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Acronyms.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Adverbs.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Auto.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Avoid.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/ComplexWords.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Contractions.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Dashes.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/DateFormat.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/DateNumbers.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/DateOrder.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Ellipses.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/FirstPerson.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Foreign.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Gender.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/GenderBias.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/GeneralURL.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/HeadingAcronyms.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/HeadingColons.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/HeadingPunctuation.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Headings.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Hyphens.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Negative.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Ordinal.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/OxfordComma.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Passive.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Percentages.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Quotes.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/RangeFormat.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/RangeTime.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Ranges.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Semicolon.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/SentenceLength.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valestyles/Microsoft/Spacing.yml
1:1 warning missing document start "---" (document-start)
.github/linters/valesty
(Truncated to 5000 characters out of 21449)
✅ Linters with no issues
black, checkov, cspell, flake8, git_diff, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy, trivy-sbom, trufflehog, v8r, v8r, xmllint
See detailed reports in MegaLinter artifacts
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}