actions/superlint
1
0
Fork 0
mirror of https://github.com/super-linter/super-linter.git synced 2024-12-22 23:32:10 -05:00
Code Issues Projects Releases Packages Wiki Activity
4056 commits 27 branches 137 tags 170 MiB
Commit graph

730 commits

Author SHA1 Message Date
dependabot[bot]
d1fcddcc10
deps(docker): bump terraform-linters/tflint from v0.50.1 to v0.50.2 (#5162) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.50.1 to v0.50.2.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.50.1...v0.50.2)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 18:53:27 +00:00
dependabot[bot]
f26b3de848
deps(docker): bump hashicorp/terraform from 1.6.6 to 1.7.0 (#5161) 
Bumps hashicorp/terraform from 1.6.6 to 1.7.0.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-22 18:51:28 +00:00
Marco Ferrari
bf832c60ae
build: cache more standard image layers (#5133) 
Run the steps to copy super-linter configs and executables in both the
standard and the slim images so that we can cache the steps to install
additional linters for the standard image even if we modify super-linter
configs and executables.
 2024-01-15 21:02:51 +01:00
dependabot[bot]
e0011b38a0
deps(docker): bump yoheimuta/protolint from 0.47.4 to 0.47.5 (#5138) 
Bumps yoheimuta/protolint from 0.47.4 to 0.47.5.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-15 14:36:36 +00:00
dependabot[bot]
16b7c50a0e
deps(docker): bump golang from 1.21.5-alpine to 1.21.6-alpine (#5137) 
Bumps golang from 1.21.5-alpine to 1.21.6-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-15 14:35:31 +00:00
Marco Ferrari
877cdf4ea1
build: standard image from base_image stage (#5129) 
Build the standard image starting from the base_image stage because we
don't need anything from the slim image.
 2024-01-11 23:16:41 +01:00
Marco Ferrari
d5da0ceac9
build: run versions command in the slim stage (#5127) 
Move the invocation of the command to build the linter versions file in
the slim stage because we run it again in the standard stage anyway, so
there's no need for the standard stage to wait for this command to run.
 2024-01-11 20:30:18 +00:00
Marco Ferrari
df911171c4
build: python venvs and npm in dedicated stages (#5078) 
Move the following tasks to dedicated stages so we can run these steps
in parallel with other stages:

- Build Python virtual environments
- Install npm packages
- Build clang-format
- Download and install TFlint plugins

Add missing target stage when building the container image
 2024-01-10 11:09:53 +01:00
dependabot[bot]
f3431d7d7c
deps(docker): bump terraform-linters/tflint from v0.50.0 to v0.50.1 (#5109) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.50.0 to v0.50.1.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.50.0...v0.50.1)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-09 10:22:43 +00:00
Marco Ferrari
19e39e211e
build: install clang-format from OS package repo (#5071) 
Build and install clang-format instead of pulling it from a (potentially)
unmaintained repository
 2024-01-01 11:39:59 +01:00
Marco Ferrari
690d422fd6
build: install chktex (#5074) 
Install chktex directly instead of using a third-party container image.
 2023-12-30 16:07:07 +01:00
Marco Ferrari
1ca3ebccd6
build: reduce container image size (#5072) 
- Remove build-time dependencies
- Remove cached NPM packages
- Remove cached PyPi packages
- Remove dependency descriptors. These still count against the total space,
  although it's a few KBs
- Install rust-clippy and rust-fmt using the OS package manager instead of
  maintaining our own installation script
- Add tests for build time dependencies that are not supposed to be installed
 2023-12-29 19:30:58 +01:00
dependabot[bot]
0355c996e0
deps(docker): bump yoheimuta/protolint from 0.47.3 to 0.47.4 (#5068) 
Bumps yoheimuta/protolint from 0.47.3 to 0.47.4.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-27 12:39:04 +01:00
dependabot[bot]
c208173f27
deps(docker): bump clj-kondo/clj-kondo (#5069) 
Bumps clj-kondo/clj-kondo from 2023.05.18-alpine to 2023.12.15-alpine.

---
updated-dependencies:
- dependency-name: clj-kondo/clj-kondo
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-27 08:27:34 +00:00
Marco Ferrari
4d9eaa5c54
build: update Dart, dart analyzer to 3.2.4 (#5065) 
Recent versions of dart analyzer don't support the --options
configuration option anymore, so we cannot pass an arbitrary
configuration file. This commit removes the default dart analyzer
configuration file as well, because it's not needed anymore.
 2023-12-26 22:14:57 +01:00
Marco Ferrari
1dc74e194e
build: install clj-kondo from its container image (#5064) 
Instead of providing a script to install clj-kondo, grab it from its
container image so that we can benefit from automated dependency
updates.
 2023-12-25 12:41:40 +01:00
dependabot[bot]
dc166ec78d
deps(docker): bump terraform-linters/tflint from v0.49.0 to v0.50.0 (#5053) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.49.0 to v0.50.0.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:18 +00:00
dependabot[bot]
88562ff546
deps(docker): bump tenable/terrascan from 1.18.9 to 1.18.11 (#5055) 
Bumps tenable/terrascan from 1.18.9 to 1.18.11.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:18 +00:00
dependabot[bot]
57218d3e19
deps(docker): bump yoheimuta/protolint from 0.47.2 to 0.47.3 (#5052) 
Bumps yoheimuta/protolint from 0.47.2 to 0.47.3.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-24 14:13:13 +00:00
Marco Ferrari
fa7cb563d8
feat: automatically handle ktlint updates (#5049) 2023-12-24 14:47:34 +01:00
Marco Ferrari
9d7268fb99
feat: add support for checkov to lint iac files (#4925) 
- Add support to run Checkov against infrastructure as code descriptors
  that are in a given (configurable) directory. Defaults to lint the
  whole workspace.
- Establish a baseline for our own codebase so we don't have to fix
  issues right away with this change.
 2023-12-22 13:22:15 +01:00
Marco Ferrari
60983d395f
fix: fail if r package installation fails (#4994) 
- Fail if the installation of a R package fails.
- Install the remotes package once during the image build, and not when we scan
  files at runtime.
- Reuse the default R library directory instead of moving it to /home/r-library
 2023-12-21 20:52:57 +01:00
dependabot[bot]
17d5a62cc0
build(docker): bump yoheimuta/protolint from 0.47.0 to 0.47.2 (#5034) 
Bumps yoheimuta/protolint from 0.47.0 to 0.47.2.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-21 14:14:14 +00:00
Marco Ferrari
d8ca23519b
build: use a base image (#5033) 
- Refactor Dockerfile to use a base image so that we can reuse the cache
  for the standard image and not just the base image.
- Simplify the cd workflow to take into account the Production
  environment only for latest images.
 2023-12-20 17:45:35 +01:00
dependabot[bot]
a574fdc634
Bump tenable/terrascan from 1.18.5 to 1.18.9 (#5005) 
Bumps tenable/terrascan from 1.18.5 to 1.18.9.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 20:23:33 +00:00
dependabot[bot]
7803a7c4f9
Bump hashicorp/terraform from 1.6.5 to 1.6.6 (#5003) 
Bumps hashicorp/terraform from 1.6.5 to 1.6.6.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:27:27 +00:00
dependabot[bot]
96f9115f12
Bump terraform-linters/tflint from v0.48.0 to v0.49.0 (#5004) 
Bumps [terraform-linters/tflint](https://github.com/terraform-linters/tflint) from v0.48.0 to v0.49.0.
- [Release notes](https://github.com/terraform-linters/tflint/releases)
- [Changelog](https://github.com/terraform-linters/tflint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terraform-linters/tflint/compare/v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: terraform-linters/tflint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:26:59 +00:00
dependabot[bot]
06fd2a9f45
Bump yoheimuta/protolint from 0.46.3 to 0.47.0 (#5006) 
Bumps yoheimuta/protolint from 0.46.3 to 0.47.0.

---
updated-dependencies:
- dependency-name: yoheimuta/protolint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:25:32 +00:00
dependabot[bot]
8cda5efa9c
Bump alpine/terragrunt from 1.6.5 to 1.6.6 (#5007) 
Bumps alpine/terragrunt from 1.6.5 to 1.6.6.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 18:25:14 +00:00
Marco Ferrari
22b8624f61
Simplify container image build (#4962) 2023-12-15 11:59:36 +01:00
Marco Ferrari
22564fb65c
Switch to tflint image because tflint-bundle is deprecated (#4990) 
* Switch to tflint image because tflint-bundle is deprecated

* Fix version string

* Don't copy plugins

* Don't copy plugins

* Set terraform log vars globally

* Fix tflint error
 2023-12-15 09:29:34 +00:00
dependabot[bot]
b9d7d8d9ab
Bump alpine from 3.18.5 to 3.19.0 and PHP from 8.1 to 8.2 (#4979) 
* Bump alpine from 3.18.5 to 3.19.0

Bumps alpine from 3.18.5 to 3.19.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update to php 8.3

* Revert to php82 because it's the default version in alpine 3.19.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco Ferrari <ferrari.marco@gmail.com>
 2023-12-13 09:28:05 +01:00
dependabot[bot]
078f64a965
Bump golang from 1.21.4-alpine to 1.21.5-alpine (#4978) 
Bumps golang from 1.21.4-alpine to 1.21.5-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-12-11 18:40:53 +00:00
Zack Koppert
c5fa6a999a
Update Maintainer and authors (#4948) 2023-12-06 01:34:46 +00:00
dependabot[bot]
3a9513a4ea
Bump tenable/terrascan from 1.18.4 to 1.18.5 (#4943) 
Bumps tenable/terrascan from 1.18.4 to 1.18.5.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 14:44:41 +00:00
dependabot[bot]
4645b7663a
Bump alpine from 3.18.4 to 3.18.5 (#4942) 
Bumps alpine from 3.18.4 to 3.18.5.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 14:43:24 +00:00
dependabot[bot]
d19efe3071
Bump tenable/terrascan from 1.18.3 to 1.18.4 (#4918) 
Bumps tenable/terrascan from 1.18.3 to 1.18.4.

---
updated-dependencies:
- dependency-name: tenable/terrascan
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 11:23:11 +00:00
dependabot[bot]
676723874f
Bump hashicorp/terraform from 1.6.4 to 1.6.5 (#4920) 
Bumps hashicorp/terraform from 1.6.4 to 1.6.5.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 09:09:12 +00:00
dependabot[bot]
e994aa6a9e
Bump alpine/terragrunt from 1.6.4 to 1.6.5 (#4919) 
Bumps alpine/terragrunt from 1.6.4 to 1.6.5.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-30 09:07:23 +00:00
Marco Ferrari
3d4a31240f
Automatically handle Java dependencies updates (#4891) 
* Automatically handle Java dependencies updates

* Fix commands

* Fix commands

* Fix paths

* Copy deps
 2023-11-30 08:20:19 +00:00
dependabot[bot]
c819bd688b
Bump scalameta/scalafmt from 3.7.16 to v3.7.17 (#4872) 
* Bump scalameta/scalafmt from 3.7.16 to v3.7.17

Bumps scalameta/scalafmt from 3.7.16 to v3.7.17.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update scala config version to match version installed

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-23 19:04:29 +00:00
dependabot[bot]
f61ff00deb
Bump hashicorp/terraform from 1.6.3 to 1.6.4 (#4873) 
Bumps hashicorp/terraform from 1.6.3 to 1.6.4.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:49:48 +00:00
dependabot[bot]
aeb88e179a
Bump alpine/terragrunt from 1.6.3 to 1.6.4 (#4874) 
Bumps alpine/terragrunt from 1.6.3 to 1.6.4.

---
updated-dependencies:
- dependency-name: alpine/terragrunt
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:49:13 +00:00
dependabot[bot]
096216df4a
Bump zricethezav/gitleaks from 8.18.0 to v8.18.1 (#4875) 
Bumps zricethezav/gitleaks from 8.18.0 to v8.18.1.

---
updated-dependencies:
- dependency-name: zricethezav/gitleaks
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:38:34 +00:00
dependabot[bot]
693d482d11
Bump yannh/kubeconform from 0.6.3 to v0.6.4 (#4876) 
Bumps [yannh/kubeconform](https://github.com/yannh/kubeconform) from 0.6.3 to v0.6.4.
- [Release notes](https://github.com/yannh/kubeconform/releases)
- [Changelog](https://github.com/yannh/kubeconform/blob/master/.goreleaser.yml)
- [Commits](https://github.com/yannh/kubeconform/compare/v0.6.3...v0.6.4)

---
updated-dependencies:
- dependency-name: yannh/kubeconform
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
 2023-11-22 17:38:10 +00:00
dependabot[bot]
f3279a4414
Bump scalameta/scalafmt from 3.7.15 to v3.7.16 (#4861) 
* Bump scalameta/scalafmt from 3.7.15 to v3.7.16

Bumps scalameta/scalafmt from 3.7.15 to v3.7.16.

---
updated-dependencies:
- dependency-name: scalameta/scalafmt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* add write permissions to workflow

* Update scala config version to match version installed

* fix indentation

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
Co-authored-by: zkoppert <zkoppert@users.noreply.github.com>
 2023-11-15 19:14:06 +00:00
dependabot[bot]
be10bdbd00
Bump golang from 1.21.3-alpine to 1.21.4-alpine (#4860) 
Bumps golang from 1.21.3-alpine to 1.21.4-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-15 05:58:11 +00:00
Zack Koppert
071f051633
Update google java format and JDK (#4848) 
* Update google java format and JDK

* update to use non-deprecated function

* update jdk to v18

* update to jdk v18

* try v17 jdk

* try v17 jdk
 2023-11-10 22:46:25 -08:00
dependabot[bot]
98695c3688
Bump golangci/golangci-lint from 1.55.1 to v1.55.2 (#4831) 
Bumps golangci/golangci-lint from 1.55.1 to v1.55.2.

---
updated-dependencies:
- dependency-name: golangci/golangci-lint
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 21:41:32 +00:00
dependabot[bot]
f5964d2fd9
Bump hashicorp/terraform from 1.6.2 to 1.6.3 (#4832) 
Bumps hashicorp/terraform from 1.6.2 to 1.6.3.

---
updated-dependencies:
- dependency-name: hashicorp/terraform
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-06 21:41:06 +00:00