Open dependabot[bot] opened 12 hours ago
Descriptor | Linter | Files | Fixed | Errors | Elapsed time |
---|---|---|---|---|---|
β EDITORCONFIG | editorconfig-checker | 1 | 0 | 0.01s | |
β REPOSITORY | gitleaks | yes | no | 0.89s | |
β REPOSITORY | git_diff | yes | no | 0.01s | |
β REPOSITORY | grype | yes | no | 10.34s | |
β REPOSITORY | secretlint | yes | no | 1.17s | |
β REPOSITORY | trivy | yes | no | 23.88s | |
β REPOSITORY | trivy-sbom | yes | no | 0.3s | |
β REPOSITORY | trufflehog | yes | no | 3.06s | |
β SPELL | cspell | 2 | 0 | 2.77s |
See detailed report in MegaLinter reports
_Set VALIDATE_ALL_CODEBASE: true
in mega-linter.yml to validate all sources, not only the diff_
Bumps the npm_and_yarn group with 1 update: cross-spawn.
Updates
cross-spawn
from 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
77cd97f
chore(release): 7.0.66717de4
chore: upgrade standard-versionf700743
fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2
chore: fix build status badge0852683
chore(release): 7.0.5640d391
fix: fix escaping bug introduced by backtrackingbff0c87
chore: remove codecova7c6abc
chore: replace travis with github workflows9b9246e
chore(release): 7.0.45ff3a07
fix: disable regexp backtracking (#160)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show