oxsecurity / megalinter

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
https://megalinter.io
GNU Affero General Public License v3.0
1.81k stars 215 forks source link

Upgrade tflint #3594

Closed nvuillam closed 1 month ago

github-actions[bot] commented 1 month ago

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ API spectral 2 0 3.7s
✅ BASH bash-exec 5 0 0.08s
✅ BASH shellcheck 5 0 0.15s
✅ BASH shfmt 5 0 0 0.63s
✅ COPYPASTE jscpd yes no 4.84s
✅ DOCKERFILE hadolint 129 0 20.51s
✅ JSON jsonlint 18 0 0.32s
✅ JSON v8r 20 0 34.95s
⚠️ MARKDOWN markdownlint 264 0 270 48.44s
✅ MARKDOWN markdown-table-formatter 264 0 0 155.81s
✅ OPENAPI spectral 2 0 3.61s
⚠️ PYTHON bandit 210 64 4.78s
✅ PYTHON black 210 0 0 6.45s
✅ PYTHON flake8 210 0 3.05s
✅ PYTHON isort 210 0 0 1.36s
✅ PYTHON mypy 210 0 22.62s
✅ PYTHON pylint 210 0 21.97s
✅ PYTHON ruff 210 0 0 0.78s
✅ REPOSITORY checkov yes no 51.28s
✅ REPOSITORY git_diff yes no 0.67s
⚠️ REPOSITORY grype yes 1 28.18s
✅ REPOSITORY secretlint yes no 21.5s
✅ REPOSITORY trivy yes no 34.07s
✅ REPOSITORY trivy-sbom yes no 11.97s
⚠️ REPOSITORY trufflehog yes 1 14.91s
✅ SPELL cspell 689 0 36.85s
⚠️ SPELL lychee 344 5 8.16s
✅ XML xmllint 3 0 0 0.73s
✅ YAML prettier 161 0 0 7.19s
✅ YAML v8r 102 0 232.53s
✅ YAML yamllint 162 0 2.45s

See detailed report in MegaLinter reports

_MegaLinter is graciously provided by OX Security_

echoix commented 1 month ago

I'd prefer another naming convention for easier integration next week with renovate.

Simply the tool name (uppercase), underscore, and VERSION. It is quite standard across projects, and will not put us on our own as we follow a pattern that others use.

Take a look at this commit: https://github.com/echoix/megalinter/commit/fcaa24f96a50dc7b3b2b5b8e266365100b7d7649

And the resulting renovate PR: https://github.com/echoix/megalinter/pull/53/files (it updates the descriptor as well)

nvuillam commented 1 month ago

@echoix changed :)

nvuillam commented 1 month ago

@echoix i merged coz i'd like to make a new release today, but we can make updates, like maybe an intermediate variable with docker image name that would be calculated from version semver if not overridden :)