git-extra-commands
git-extra-commands copied to clipboard
Published
20 hours ago •
unixorn
unixorn
Bump megalinter/megalinter from 7 to 8
Bumps megalinter/megalinter from 7 to 8.
Release notes
Sourced from megalinter/megalinter's releases.
v8.0.0
What's Changed
Run
npx mega-linter-runner@latest --upgradeto upgrade to MegaLinter v8 :)
- Reporters
- New ApiReporter (can be used to build Grafana dashboards), by
@nvuillamin oxsecurity/megalinter#3540
Removed deprecated linters, by
@nvuillamin oxsecurity/megalinter#3854
- CSS_SCSSLINT: Project discontinued and advising to use stylelint
- OPENAPI_SPECTRAL: Replaced by API_SPECTRAL (same linter but more formats handled)
- SQL_SQL_LINT: Project no longer maintained
Core
- Hide to linters by default all environment variables that contain TOKEN, USERNAME or PASSWORD, by
@nvuillamin oxsecurity/megalinter#3881- Allow to override CLI_LINT_MODE when defined as project, by
@nvuillamin oxsecurity/megalinter#3772- Allow to use absolute paths for LINTER_RULES_PATH, by
@nvuillamin oxsecurity/megalinter#3775- Allow to update variables from PRE/POST Commands using
output_variablesproperty, by@nvuillamin oxsecurity/megalinter#3861Media
Linters enhancements
- bandit Call bandit with quiet mode to generate less logs, by
@nvuillamin oxsecurity/megalinter#3892- grype Count number of errors returned by Grype, by
@nvuillamin oxsecurity/megalinter#3906- yamllint Fix yamllint default format to avoid special characters or GitHub sections in text logs, by
@nvuillamin oxsecurity/megalinter#3898Fixes
- terrascan fixed errors and removed redundant code, by
@TommyE123in oxsecurity/megalinter#3767- dotnet-format various performance improvements and ability to specify sln or proj paths, by
@TommyE123in oxsecurity/megalinter#3741- swiftlint Remove deprecated argument --path
- Salesforce linters: Disable SF CLI auto update warning, by
@nvuillamin oxsecurity/megalinter#3883Doc
- Add images and links to Git, CI/CD & other tools integrations at the beginning of the README, by
@nvuillamin oxsecurity/megalinter#3885- Create README animated GIF presentation of MegaLinter, by
@nvuillamin oxsecurity/megalinter#3910- Format mkdocs search index in place, by
@echoixin oxsecurity/megalinter#3890- Use consistent spelling of 'flavor', by
@InputUsernamein oxsecurity/megalinter#3789CI
- Fix docker warnings, by
@nvuillamin oxsecurity/megalinter#3853
- FromAsCasing: 'as' and 'FROM' keywords' casing do not match
- NoEmptyContinuation: Empty continuation line
- SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data
- Port Beta workflows to use docker/metadata-action, by
@echoixin oxsecurity/megalinter#3860- AutoUpdate linters: Always create a PR if the job has been started manually, by
@nvuillamin oxsecurity/megalinter#3863
... (truncated)
Changelog
Sourced from megalinter/megalinter's changelog.
[v7.0.2] - 2023-05-27
- Quick Fix mega-linter-runner --upgrade (Warning: bug with npm, not publish yet in mega-linter-runner)
- Dead link to configuration.md
- Regex issue with megalinter-reports
[v7.0.0] - 2023-05-27
To upgrade to MegaLinter v7, run
npx mega-linter-runner@latest --upgrade, comment here if you have any issue :)
MAJOR Updates
- SECURED_ENV_VARIABLES & core scoped configuration by
@nvuillamin oxsecurity/megalinter#2601
- New configuration variables SECURED_ENV_VARIABLES and SECURED_ENV_VARIABLES_DEFAULT to hide your environment sensitive variables to the linters called by MegaLinter
- Read documentation to enhance security using MegaLinter
- Use relative file paths to call linters by
@nvuillamin oxsecurity/megalinter#1877
- This can be a breaking change for customizations, post an issue if you see a problem !
New linters
- Add linter cljstyle, Clojure formatter, by
@practicalli-johnin oxsecurity/megalinter#2115- Add kubescape, kubernetes linter, by
@muandanein oxsecurity/megalinter#2531- Add Vale, a powerful enforcer of writing style, by
@wesley-dean-flexionin oxsecurity/megalinter#2406Removed linters
- KUBERNETES_KUBEVAL: Not maintained anymore (kubeconform recommended by the authors)
- REPOSITORY_GOODCHECK: Not open-source anymore
- SPELL_MISSPELL: Not maintained anymore (last commit in 2018)
- TERRAFORM_CHECKOV: Replaced by REPOSITORY_CHECKOV
- TERRAFORM_KICS: Replaced by REPOSITORY_KICS
Medias
- Article: Use the Workflows JSON schema in your IDE, by Google Cloud
- Video: Ortelius Architecture Meeting, with a review of MegaLinter, by Steve Taylor from Ortelius
- Web site: my-devops-lab.com
Linter enhancements & fixes
- cspell
- Fix corrective .cspell.json file generated from cspell output by
@nvuillamin oxsecurity/megalinter#2562- eslint
- Ensure ESLint actually runs in project mode (#1572) by
@Kurt-von-Lavenin oxsecurity/megalinter#2455- jscpd
- Prevent jscpd to create output folder if the repo is not writable by
@nvuillamin oxsecurity/megalinter#2556- Gitleaks
- Add support to scan PR commits only on PRs when
VALIDATE_ALL_CODEBASEis set tofalse, by@DariuszPorowski#2504- KICS
- Move KICS to REPOSITORY descriptor, so it can analyze all types of files, not terraform only, by
@nvuillamin oxsecurity/megalinter#2689- KICS can now output SARIF
- The new version can have performance issues: customize of disable REPOSITORY_KICS if necessary
- KubeConform
- Simplify kubeconform install & get version by
@nvuillamin oxsecurity/megalinter#2629- PHPLint
... (truncated)
Commits
c217fe8Release MegaLinter v8.0.086cbb00changelog1c2e933[automation] Auto-update linters version, help and documentation (#3912)7e48b0bFix upgrade script (#3911)434c5a7Add GIF presentation & fix Table of contents (#3910)9e8beccAdd gif header1b80507[automation] Auto-update linters version, help and documentation (#3909)96b1bd0[automation] Auto-update linters version, help and documentation (#3907)d8cbb09Count number of errors in Grype (#3906)d133868[automation] Auto-update linters version, help and documentation (#3905)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
Code Climate has analyzed commit 7b0192cd and detected 0 issues on this pull request.
View more on Code Climate.
![qlty-cloud-legacy[bot] avatar](https://avatars.githubusercontent.com/in/9403?v=4 "Published by a pub.dev verified publisher"){kind=small}