actions/superlint
1
0
Fork 0
mirror of https://github.com/super-linter/super-linter.git synced 2024-11-10 02:53:36 -05:00
Code Issues Projects Releases Packages Wiki Activity
4533 commits 24 branches 135 tags 148 MiB
Commit graph

829 commits

Author SHA1 Message Date
Masaya Suzuki
69249882f3
feat: support GoReleaser (#5505) 2024-04-15 12:38:25 +00:00
Junya Okabe
e71a37d49d
feat: add depndency (#5456) 
feat: configure ruff

feat: update the orchestration scripts

feat: update the test suite

docs: update README

feat: add test cases for ruff

fix: CI error

chore: del .github/linters/.ruff.toml

fix: CI error

fix: README

update: LINTER_NAMES_ARRAY

fix: Dockerfile

fix: .github/linters/.jscpd.json

fix: test files

fix: del version_command
 2024-04-10 12:02:28 +00:00
dependabot[bot]
613d661448
deps(docker): bump scalameta/scalafmt from v3.8.0 to v3.8.1 (#5463) 
Bumps scalameta/scalafmt from v3.8.0 to v3.8.1.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-09 12:40:18 +00:00
dependabot[bot]
e9d347187e
deps(docker): bump golang from 1.22.1-alpine to 1.22.2-alpine (#5488) 
Bumps golang from 1.22.1-alpine to 1.22.2-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-09 07:32:37 +00:00
dependabot[bot]
62a763d748
deps(docker): bump yoheimuta/protolint from 0.49.3 to 0.49.4 (#5490) 
Bumps yoheimuta/protolint from 0.49.3 to 0.49.4.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-09 07:31:17 +00:00
dependabot[bot]
4edb99eac9
deps(docker): bump dotnet/sdk (#5464) 
Bumps dotnet/sdk from 8.0.101-alpine3.19 to 8.0.203-alpine3.19.

---
updated-dependencies:
- dependency-name: dotnet/sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-05 06:49:12 +00:00
dependabot[bot]
0764966580
deps(docker): bump golangci/golangci-lint from v1.56.2 to v1.57.2 (#5462) 
Bumps golangci/golangci-lint from v1.56.2 to v1.57.2.

---
updated-dependencies:
- dependency-name: golangci/golangci-lint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-04 11:31:57 +00:00
dependabot[bot]
41f1f2d22f
deps(docker): bump dart from 3.3.1-sdk to 3.3.3-sdk (#5461) 
Bumps dart from 3.3.1-sdk to 3.3.3-sdk.

---
updated-dependencies:
- dependency-name: dart
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-04-04 11:30:05 +00:00
Marco Ferrari
6842e2d3cc
build(docker): update psscript analyzer to 1.22.0 (#5428) 2024-03-25 13:44:56 +01:00
Ioan Rogers
b00466d6b1
fix: remove cpanm cache (#5385) 
Pulling v6.3.0 is failing when using docker with user uid remapping:
```
failed to register layer: Container ID 197609 cannot be mapped to a host ID
```

Trying to pull with rootless podman show a more useful:

```
Error: copying system image from manifest list: writing blob: adding layer with
blob "sha256:98088679e87a1114d3dafa114c911c1d8e5d33fffe624cfdd43b589a136a5f0f":
ApplyLayer stdout:  stderr: potentially insufficient UIDs or GIDs available in
user namespace (requested 197609:197609 for /root/.cpanm/work/1708379740.11/PPI-1.277):
Check /etc/subuid and /etc/subgid if configured locally and run podman-system-migrate:
lchown /root/.cpanm/work/1708379740.11/PPI-1.277: invalid argument exit status 1
```

The `/root/.cpanm` is just a build cache and can be safely removed.
 2024-03-22 13:41:18 +00:00
dependabot[bot]
abfcf4e3d5
deps(docker): bump hashicorp/terraform from 1.7.4 to 1.7.5 (#5387) 
Bumps hashicorp/terraform from 1.7.4 to 1.7.5.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-22 10:36:45 +00:00
dependabot[bot]
81ab1ad60b
deps(docker): bump clj-kondo/clj-kondo (#5388) 
Bumps [clj-kondo/clj-kondo](https://github.com/clj-kondo/clj-kondo) from 2024.02.12-alpine to 2024.03.13-alpine.
- [Release notes](https://github.com/clj-kondo/clj-kondo/releases)
- [Changelog](https://github.com/clj-kondo/clj-kondo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clj-kondo/clj-kondo/compare/v2024.02.12...v2024.03.13)

---
updated-dependencies:
- dependency-name: clj-kondo/clj-kondo
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 17:31:55 +00:00
Marco Ferrari
3e1c570d32
fix: revert eslint-config and enable strict checks (#5423) 
- Revert "deps(npm): bump @react-native/eslint-config in /dependencies (#5417)"
  This reverts commit 6e35bed012.
- Enable strict npm dependency check to avoid these failures in the
  future.

Fix #5422
 2024-03-21 15:49:14 +01:00
dependabot[bot]
a72dd13e76
deps(docker): bump alpine/terragrunt from 1.7.4 to 1.7.5 (#5389) 
Bumps alpine/terragrunt from 1.7.4 to 1.7.5.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 10:07:01 +00:00
dependabot[bot]
5fcd5927d4
deps(docker): bump yoheimuta/protolint from 0.47.6 to 0.49.3 (#5386) 
Bumps yoheimuta/protolint from 0.47.6 to 0.49.3.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 09:33:26 +00:00
dependabot[bot]
d21db8d843
deps(docker): bump dart from 3.3.0-sdk to 3.3.1-sdk (#5368) 
Bumps dart from 3.3.0-sdk to 3.3.1-sdk.

---
updated-dependencies:
- dependency-name: dart
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 09:30:06 +00:00
dependabot[bot]
63a458fa81
deps(docker): bump golang from 1.22.0-alpine to 1.22.1-alpine (#5366) 
Bumps golang from 1.22.0-alpine to 1.22.1-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 09:29:51 +00:00
dependabot[bot]
4f182d764e
deps(docker): bump koalaman/shellcheck from v0.9.0 to v0.10.0 (#5365) 
Bumps koalaman/shellcheck from v0.9.0 to v0.10.0.

---
updated-dependencies:
- dependency-name: koalaman/shellcheck
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-21 09:29:37 +00:00
Chongyi Zheng
252a980961
build: add glibc via gcompat layer (#5334) 2024-02-29 17:12:01 +00:00
dependabot[bot]
6c1f40c903
deps(docker): bump scalameta/scalafmt from v3.7.17 to v3.8.0 (#5323) 
Bumps scalameta/scalafmt from v3.7.17 to v3.8.0.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-28 16:05:10 +01:00
dependabot[bot]
a3046b34e6
deps(docker): bump alpine/terragrunt from 1.7.3 to 1.7.4 (#5325) 
Bumps alpine/terragrunt from 1.7.3 to 1.7.4.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-27 19:52:39 +00:00
dependabot[bot]
413f82782d
deps(docker): bump yoheimuta/protolint from 0.47.5 to 0.47.6 (#5321) 
Bumps yoheimuta/protolint from 0.47.5 to 0.47.6.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-27 18:28:07 +00:00
dependabot[bot]
495881bd33
deps(docker): bump hashicorp/terraform from 1.7.3 to 1.7.4 (#5322) 
Bumps hashicorp/terraform from 1.7.3 to 1.7.4.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-27 18:27:53 +00:00
dependabot[bot]
7a349acb0d
deps(docker): bump rhysd/actionlint from 1.6.26 to 1.6.27 (#5324) 
Bumps rhysd/actionlint from 1.6.26 to 1.6.27.

---
updated-dependencies:
- dependency-name: rhysd/actionlint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-27 18:22:56 +00:00
dependabot[bot]
d900e66ee1
deps(docker): bump golangci/golangci-lint from v1.56.1 to v1.56.2 (#5299) 
Bumps golangci/golangci-lint from v1.56.1 to v1.56.2.

---
updated-dependencies:
- dependency-name: golangci/golangci-lint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-19 20:39:23 +00:00
dependabot[bot]
ac14610d3f
deps(docker): bump dart from 3.2.6-sdk to 3.3.0-sdk (#5300) 
Bumps dart from 3.2.6-sdk to 3.3.0-sdk.

---
updated-dependencies:
- dependency-name: dart
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-19 20:39:14 +00:00
dependabot[bot]
e4bcc5d47d
deps(docker): bump hashicorp/terraform from 1.7.2 to 1.7.3 (#5273) 
Bumps hashicorp/terraform from 1.7.2 to 1.7.3.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 12:13:56 +00:00
dependabot[bot]
d4f6d04fe1
deps(docker): bump alpine/terragrunt from 1.7.2 to 1.7.3 (#5275) 
Bumps alpine/terragrunt from 1.7.2 to 1.7.3.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 11:22:39 +00:00
dependabot[bot]
acc794fd56
deps(docker): bump golang from 1.21.6-alpine to 1.22.0-alpine (#5274) 
Bumps golang from 1.21.6-alpine to 1.22.0-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 11:22:28 +00:00
dependabot[bot]
3e6a272033
deps(docker): bump powershell from 7.3-alpine-3.17 to 7.4-alpine-3.17 (#5279) 
Bumps powershell from 7.3-alpine-3.17 to 7.4-alpine-3.17.

---
updated-dependencies:
- dependency-name: powershell
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 11:10:18 +00:00
dependabot[bot]
5dc9a6a8fa
deps(docker): bump terraform-linters/tflint from v0.50.2 to v0.50.3 (#5258) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.50.2 to v0.50.3.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.50.2...v0.50.3)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 08:48:08 +00:00
dependabot[bot]
9b1e9361ee
deps(docker): bump mvdan/shfmt from v3.7.0 to v3.8.0 (#5257) 
Bumps mvdan/shfmt from v3.7.0 to v3.8.0.

---
updated-dependencies:
- dependency-name: mvdan/shfmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-13 08:47:38 +00:00
dependabot[bot]
edd813ae55
deps(docker): bump golangci/golangci-lint from v1.55.2 to v1.56.1 (#5256) 
Bumps golangci/golangci-lint from v1.55.2 to v1.56.1.

---
updated-dependencies:
- dependency-name: golangci/golangci-lint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-12 21:04:52 +00:00
dependabot[bot]
07e5032e39
deps(docker): bump python from 3.12.1-alpine3.19 to 3.12.2-alpine3.19 (#5259) 
Bumps python from 3.12.1-alpine3.19 to 3.12.2-alpine3.19.

---
updated-dependencies:
- dependency-name: python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-12 21:02:29 +00:00
dependabot[bot]
02e9da59ae
deps(docker): bump clj-kondo/clj-kondo (#5260) 
Bumps clj-kondo/clj-kondo from 2023.12.15-alpine to 2024.02.12-alpine.

---
updated-dependencies:
- dependency-name: clj-kondo/clj-kondo
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-12 21:02:12 +00:00
Marco Ferrari
49320c834b
build: install dotnet and powershell from images (#5245) 
Install the .NET SDK and PowerShell from their container images so that
we avoid spending time running their installers, and we can control
their updates automatically.

Close #5243
 2024-02-10 08:51:09 +00:00
Marco Ferrari
5b5e54ad5c
fix: initialize terrascan at runtime (#5246) 
Terrascan runs initialization anyway when scanning files, so there's no
point in running it at build time. Also, this works around a Terrascan
bug that caused it to fail its initialization if $HOME/.terrascan
directory is not present. This happens on GitHub Actions because it
configures a $HOME directory that is different from ours.
 2024-02-09 22:57:01 +00:00
Marco Ferrari
1f2fbb14cd
build: install lintr in a dedicated stage (#5247) 2024-02-09 17:44:49 +00:00
dependabot[bot]
27bb6abc56
deps(docker): bump hashicorp/terraform from 1.7.1 to 1.7.2 (#5231) 
Bumps hashicorp/terraform from 1.7.1 to 1.7.2.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 17:28:15 +00:00
dependabot[bot]
299dbf00a2
deps(docker): bump zricethezav/gitleaks from v8.18.1 to v8.18.2 (#5232) 
Bumps zricethezav/gitleaks from v8.18.1 to v8.18.2.

---
updated-dependencies:
- dependency-name: zricethezav/gitleaks
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 17:27:31 +00:00
dependabot[bot]
ee5337123f
deps(docker): bump dart from 3.2.5-sdk to 3.2.6-sdk (#5233) 
Bumps dart from 3.2.5-sdk to 3.2.6-sdk.

---
updated-dependencies:
- dependency-name: dart
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 17:27:16 +00:00
dependabot[bot]
31c3195838
deps(docker): bump alpine/terragrunt from 1.7.1 to 1.7.2 (#5234) 
Bumps alpine/terragrunt from 1.7.1 to 1.7.2.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 17:27:06 +00:00
Marco Ferrari
d7790e4f1c
build: move linter verions logic outside runtime (#5197) 
Move the logic to build the linter versions file outside the main
runtime. There's no need to include it there because it's used only when
building the image.

Move the list of linters by name in linterVersions.sh because we don't
need it in any other place.
 2024-02-05 13:31:36 +01:00
Marco Ferrari
eded42747b
fix: don't add unnecessary empty lines (#5221) 2024-02-05 11:49:22 +01:00
Marco Ferrari
99e41ce451
feat: run linters in parallel (#5177) 2024-01-30 19:24:55 +00:00
dependabot[bot]
91dab1ed86
deps(docker): bump hashicorp/terraform from 1.7.0 to 1.7.1 (#5181) 
Bumps hashicorp/terraform from 1.7.0 to 1.7.1.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-29 20:47:09 +00:00
dependabot[bot]
a1be60308a
deps(docker): bump alpine/terragrunt from 1.7.0 to 1.7.1 (#5182) 
Bumps alpine/terragrunt from 1.7.0 to 1.7.1.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-29 20:47:00 +00:00
dependabot[bot]
ed014e511e
deps(docker): bump dart from 3.2.4-sdk to 3.2.5-sdk (#5163) 
Bumps dart from 3.2.4-sdk to 3.2.5-sdk.

---
updated-dependencies:
- dependency-name: dart
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 21:38:47 +00:00
dependabot[bot]
6f1f9f3adc
deps(docker): bump alpine/terragrunt from 1.6.6 to 1.7.0 (#5160) 
Bumps alpine/terragrunt from 1.6.6 to 1.7.0.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 21:08:31 +00:00
dependabot[bot]
d1fcddcc10
deps(docker): bump terraform-linters/tflint from v0.50.1 to v0.50.2 (#5162) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.50.1 to v0.50.2.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.50.1...v0.50.2)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 18:53:27 +00:00
dependabot[bot]
f26b3de848
deps(docker): bump hashicorp/terraform from 1.6.6 to 1.7.0 (#5161) 
Bumps hashicorp/terraform from 1.6.6 to 1.7.0.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 18:51:28 +00:00
Marco Ferrari
bf832c60ae
build: cache more standard image layers (#5133) 
Run the steps to copy super-linter configs and executables in both the
standard and the slim images so that we can cache the steps to install
additional linters for the standard image even if we modify super-linter
configs and executables.
 2024-01-15 21:02:51 +01:00
dependabot[bot]
e0011b38a0
deps(docker): bump yoheimuta/protolint from 0.47.4 to 0.47.5 (#5138) 
Bumps yoheimuta/protolint from 0.47.4 to 0.47.5.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-15 14:36:36 +00:00
dependabot[bot]
16b7c50a0e
deps(docker): bump golang from 1.21.5-alpine to 1.21.6-alpine (#5137) 
Bumps golang from 1.21.5-alpine to 1.21.6-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-15 14:35:31 +00:00
Marco Ferrari
877cdf4ea1
build: standard image from base_image stage (#5129) 
Build the standard image starting from the base_image stage because we
don't need anything from the slim image.
 2024-01-11 23:16:41 +01:00
Marco Ferrari
d5da0ceac9
build: run versions command in the slim stage (#5127) 
Move the invocation of the command to build the linter versions file in
the slim stage because we run it again in the standard stage anyway, so
there's no need for the standard stage to wait for this command to run.
 2024-01-11 20:30:18 +00:00
Marco Ferrari
df911171c4
build: python venvs and npm in dedicated stages (#5078) 
Move the following tasks to dedicated stages so we can run these steps
in parallel with other stages:

- Build Python virtual environments
- Install npm packages
- Build clang-format
- Download and install TFlint plugins

Add missing target stage when building the container image
 2024-01-10 11:09:53 +01:00
dependabot[bot]
f3431d7d7c
deps(docker): bump terraform-linters/tflint from v0.50.0 to v0.50.1 (#5109) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.50.0 to v0.50.1.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.50.0...v0.50.1)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-09 10:22:43 +00:00
Marco Ferrari
19e39e211e
build: install clang-format from OS package repo (#5071) 
Build and install clang-format instead of pulling it from a (potentially)
unmaintained repository
 2024-01-01 11:39:59 +01:00
Marco Ferrari
690d422fd6
build: install chktex (#5074) 
Install chktex directly instead of using a third-party container image.
 2023-12-30 16:07:07 +01:00
Marco Ferrari
1ca3ebccd6
build: reduce container image size (#5072) 
- Remove build-time dependencies
- Remove cached NPM packages
- Remove cached PyPi packages
- Remove dependency descriptors. These still count against the total space,
  although it's a few KBs
- Install rust-clippy and rust-fmt using the OS package manager instead of
  maintaining our own installation script
- Add tests for build time dependencies that are not supposed to be installed
 2023-12-29 19:30:58 +01:00
dependabot[bot]
0355c996e0
deps(docker): bump yoheimuta/protolint from 0.47.3 to 0.47.4 (#5068) 
Bumps yoheimuta/protolint from 0.47.3 to 0.47.4.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-27 12:39:04 +01:00
dependabot[bot]
c208173f27
deps(docker): bump clj-kondo/clj-kondo (#5069) 
Bumps clj-kondo/clj-kondo from 2023.05.18-alpine to 2023.12.15-alpine.

---
updated-dependencies:
- dependency-name: clj-kondo/clj-kondo
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-27 08:27:34 +00:00
Marco Ferrari
4d9eaa5c54
build: update Dart, dart analyzer to 3.2.4 (#5065) 
Recent versions of dart analyzer don't support the --options
configuration option anymore, so we cannot pass an arbitrary
configuration file. This commit removes the default dart analyzer
configuration file as well, because it's not needed anymore.
 2023-12-26 22:14:57 +01:00
Marco Ferrari
1dc74e194e
build: install clj-kondo from its container image (#5064) 
Instead of providing a script to install clj-kondo, grab it from its
container image so that we can benefit from automated dependency
updates.
 2023-12-25 12:41:40 +01:00
dependabot[bot]
dc166ec78d
deps(docker): bump terraform-linters/tflint from v0.49.0 to v0.50.0 (#5053) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.49.0 to v0.50.0.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:18 +00:00
dependabot[bot]
88562ff546
deps(docker): bump tenable/terrascan from 1.18.9 to 1.18.11 (#5055) 
Bumps tenable/terrascan from 1.18.9 to 1.18.11.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:18 +00:00
dependabot[bot]
57218d3e19
deps(docker): bump yoheimuta/protolint from 0.47.2 to 0.47.3 (#5052) 
Bumps yoheimuta/protolint from 0.47.2 to 0.47.3.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:13 +00:00
Marco Ferrari
fa7cb563d8
feat: automatically handle ktlint updates (#5049) 2023-12-24 14:47:34 +01:00
Marco Ferrari
9d7268fb99
feat: add support for checkov to lint iac files (#4925) 
- Add support to run Checkov against infrastructure as code descriptors
  that are in a given (configurable) directory. Defaults to lint the
  whole workspace.
- Establish a baseline for our own codebase so we don't have to fix
  issues right away with this change.
 2023-12-22 13:22:15 +01:00
Marco Ferrari
60983d395f
fix: fail if r package installation fails (#4994) 
- Fail if the installation of a R package fails.
- Install the remotes package once during the image build, and not when we scan
  files at runtime.
- Reuse the default R library directory instead of moving it to /home/r-library
 2023-12-21 20:52:57 +01:00
dependabot[bot]
17d5a62cc0
build(docker): bump yoheimuta/protolint from 0.47.0 to 0.47.2 (#5034) 
Bumps yoheimuta/protolint from 0.47.0 to 0.47.2.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-21 14:14:14 +00:00
Marco Ferrari
d8ca23519b
build: use a base image (#5033) 
- Refactor Dockerfile to use a base image so that we can reuse the cache
  for the standard image and not just the base image.
- Simplify the cd workflow to take into account the Production
  environment only for latest images.
 2023-12-20 17:45:35 +01:00
dependabot[bot]
a574fdc634
Bump tenable/terrascan from 1.18.5 to 1.18.9 (#5005) 
Bumps tenable/terrascan from 1.18.5 to 1.18.9.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 20:23:33 +00:00
dependabot[bot]
7803a7c4f9
Bump hashicorp/terraform from 1.6.5 to 1.6.6 (#5003) 
Bumps hashicorp/terraform from 1.6.5 to 1.6.6.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:27:27 +00:00
dependabot[bot]
96f9115f12
Bump terraform-linters/tflint from v0.48.0 to v0.49.0 (#5004) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.48.0 to v0.49.0.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:26:59 +00:00
dependabot[bot]
06fd2a9f45
Bump yoheimuta/protolint from 0.46.3 to 0.47.0 (#5006) 
Bumps yoheimuta/protolint from 0.46.3 to 0.47.0.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:25:32 +00:00
dependabot[bot]
8cda5efa9c
Bump alpine/terragrunt from 1.6.5 to 1.6.6 (#5007) 
Bumps alpine/terragrunt from 1.6.5 to 1.6.6.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:25:14 +00:00
Marco Ferrari
22b8624f61
Simplify container image build (#4962) 2023-12-15 11:59:36 +01:00
Marco Ferrari
22564fb65c
Switch to tflint image because tflint-bundle is deprecated (#4990) 
* Switch to tflint image because tflint-bundle is deprecated

* Fix version string

* Don't copy plugins

* Don't copy plugins

* Set terraform log vars globally

* Fix tflint error
 2023-12-15 09:29:34 +00:00
dependabot[bot]
b9d7d8d9ab
Bump alpine from 3.18.5 to 3.19.0 and PHP from 8.1 to 8.2 (#4979) 
* Bump alpine from 3.18.5 to 3.19.0

Bumps alpine from 3.18.5 to 3.19.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update to php 8.3

* Revert to php82 because it's the default version in alpine 3.19.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Ferrari <ferrari.marco@gmail.com>
 2023-12-13 09:28:05 +01:00
dependabot[bot]
078f64a965
Bump golang from 1.21.4-alpine to 1.21.5-alpine (#4978) 
Bumps golang from 1.21.4-alpine to 1.21.5-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-12-11 18:40:53 +00:00
Zack Koppert
c5fa6a999a
Update Maintainer and authors (#4948) 2023-12-06 01:34:46 +00:00
dependabot[bot]
3a9513a4ea
Bump tenable/terrascan from 1.18.4 to 1.18.5 (#4943) 
Bumps tenable/terrascan from 1.18.4 to 1.18.5.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 14:44:41 +00:00
dependabot[bot]
4645b7663a
Bump alpine from 3.18.4 to 3.18.5 (#4942) 
Bumps alpine from 3.18.4 to 3.18.5.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 14:43:24 +00:00
dependabot[bot]
d19efe3071
Bump tenable/terrascan from 1.18.3 to 1.18.4 (#4918) 
Bumps tenable/terrascan from 1.18.3 to 1.18.4.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 11:23:11 +00:00
dependabot[bot]
676723874f
Bump hashicorp/terraform from 1.6.4 to 1.6.5 (#4920) 
Bumps hashicorp/terraform from 1.6.4 to 1.6.5.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 09:09:12 +00:00
dependabot[bot]
e994aa6a9e
Bump alpine/terragrunt from 1.6.4 to 1.6.5 (#4919) 
Bumps alpine/terragrunt from 1.6.4 to 1.6.5.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 09:07:23 +00:00
Marco Ferrari
3d4a31240f
Automatically handle Java dependencies updates (#4891) 
* Automatically handle Java dependencies updates

* Fix commands

* Fix commands

* Fix paths

* Copy deps
 2023-11-30 08:20:19 +00:00
dependabot[bot]
c819bd688b
Bump scalameta/scalafmt from 3.7.16 to v3.7.17 (#4872) 
* Bump scalameta/scalafmt from 3.7.16 to v3.7.17

Bumps scalameta/scalafmt from 3.7.16 to v3.7.17.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update scala config version to match version installed

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-23 19:04:29 +00:00
dependabot[bot]
f61ff00deb
Bump hashicorp/terraform from 1.6.3 to 1.6.4 (#4873) 
Bumps hashicorp/terraform from 1.6.3 to 1.6.4.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:49:48 +00:00
dependabot[bot]
aeb88e179a
Bump alpine/terragrunt from 1.6.3 to 1.6.4 (#4874) 
Bumps alpine/terragrunt from 1.6.3 to 1.6.4.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:49:13 +00:00
dependabot[bot]
096216df4a
Bump zricethezav/gitleaks from 8.18.0 to v8.18.1 (#4875) 
Bumps zricethezav/gitleaks from 8.18.0 to v8.18.1.

---
updated-dependencies:
- dependency-name: zricethezav/gitleaks
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:38:34 +00:00
dependabot[bot]
693d482d11
Bump yannh/kubeconform from 0.6.3 to v0.6.4 (#4876) 
Bumps [yannh/kubeconform](https://github.com/yannh/kubeconform) from 0.6.3 to v0.6.4.
- [Release notes](https://github.com/yannh/kubeconform/releases)
- [Changelog](https://github.com/yannh/kubeconform/blob/master/.goreleaser.yml)
- [Commits](https://github.com/yannh/kubeconform/compare/v0.6.3...v0.6.4)

---
updated-dependencies:
- dependency-name: yannh/kubeconform
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:38:10 +00:00
dependabot[bot]
f3279a4414
Bump scalameta/scalafmt from 3.7.15 to v3.7.16 (#4861) 
* Bump scalameta/scalafmt from 3.7.15 to v3.7.16

Bumps scalameta/scalafmt from 3.7.15 to v3.7.16.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* add write permissions to workflow

* Update scala config version to match version installed

* fix indentation

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
Co-authored-by: zkoppert <zkoppert@users.noreply.github.com>
 2023-11-15 19:14:06 +00:00
dependabot[bot]
be10bdbd00
Bump golang from 1.21.3-alpine to 1.21.4-alpine (#4860) 
Bumps golang from 1.21.3-alpine to 1.21.4-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-15 05:58:11 +00:00
Zack Koppert
071f051633
Update google java format and JDK (#4848) 
* Update google java format and JDK

* update to use non-deprecated function

* update jdk to v18

* update to jdk v18

* try v17 jdk

* try v17 jdk
 2023-11-10 22:46:25 -08:00
dependabot[bot]
98695c3688
Bump golangci/golangci-lint from 1.55.1 to v1.55.2 (#4831) 
Bumps golangci/golangci-lint from 1.55.1 to v1.55.2.

---
updated-dependencies:
- dependency-name: golangci/golangci-lint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 21:41:32 +00:00
dependabot[bot]
f5964d2fd9
Bump hashicorp/terraform from 1.6.2 to 1.6.3 (#4832) 
Bumps hashicorp/terraform from 1.6.2 to 1.6.3.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 21:41:06 +00:00
dependabot[bot]
0803e67951
Bump alpine/terragrunt from 1.6.2 to 1.6.3 (#4833) 
Bumps alpine/terragrunt from 1.6.2 to 1.6.3.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 21:40:42 +00:00