Update article: GitHub Actions: sharing your secrets with third-party actions

[josecelano]

MegaLinter is releasing a new version where they remove env vars before calling the linters so you do not have to trust them (the linters). You still have to trust the MegaLinter team.

[github-actions[bot]]

MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	2		0	0.03s
✅ CREDENTIALS	secretlint	yes		no	1.66s
✅ GIT	git_diff	yes		no	0.08s
✅ JSON	eslint-plugin-jsonc	3	0	0	1.32s
✅ JSON	jsonlint	3		0	0.85s
✅ JSON	prettier	3	0	0	0.69s
✅ JSON	v8r	3		0	4.23s
✅ MARKDOWN	markdownlint	18	1	0	1.12s
❌ MARKDOWN	markdown-link-check	18		2	54.51s
✅ MARKDOWN	markdown-table-formatter	18	1	0	0.39s
✅ PYTHON	bandit	1		0	0.27s
✅ PYTHON	black	1	0	0	0.38s
✅ PYTHON	flake8	1		0	0.39s
✅ PYTHON	isort	1	0	0	0.23s
✅ PYTHON	mypy	1		0	5.42s
✅ SPELL	cspell	49		0	3.51s
✅ SPELL	misspell	49	1	0	0.19s
✅ YAML	prettier	5	0	0	0.71s
❌ YAML	v8r	5		1	6.85s
✅ YAML	yamllint	5		0	0.16s

See errors details in artifact MegaLinter reports on CI Job page

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• megalinter/megalinter/flavors/python@v5 (49 linters)

[josecelano]

New PR for the new Svelte implementation.