chore(deps): bump oxsecurity/megalinter from 8 to 10 - #1
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) from 8 to 10. - [Release notes](https://github.com/oxsecurity/megalinter/releases) - [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md) - [Commits](oxsecurity/megalinter@v8...v10) --- updated-dependencies: - dependency-name: oxsecurity/megalinter dependency-version: '10' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Max errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 1 | 0 | 0 | 0.03s | ||
| zizmor | 1 | 0 | 1 | 0 | 0.65s | ||
| ✅ COPYPASTE | jscpd | yes | no | no | 0.87s | ||
| ✅ MARKDOWN | markdownlint | 1 | 1 | 0 | 0 | 1.0s | |
| ✅ MARKDOWN | markdown-table-formatter | 1 | 1 | 0 | 0 | 0.23s | |
| ✅ REPOSITORY | betterleaks | yes | no | no | 1.34s | ||
| ✅ REPOSITORY | checkov | yes | no | no | 22.64s | ||
| ✅ REPOSITORY | devskim | yes | no | no | 1.99s | ||
| ✅ REPOSITORY | dustilock | yes | no | no | 0.02s | ||
| ✅ REPOSITORY | git_diff | yes | no | no | 0.01s | ||
| ✅ REPOSITORY | grype | yes | no | no | 63.04s | ||
| ✅ REPOSITORY | kingfisher | yes | no | no | 23.93s | ||
| ✅ REPOSITORY | osv-scanner | yes | no | no | 0.18s | ||
| ✅ REPOSITORY | secretlint | yes | no | no | 1.34s | ||
| ✅ REPOSITORY | syft | yes | no | no | 2.33s | ||
| ✅ REPOSITORY | trivy | yes | no | no | 12.11s | ||
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.23s | ||
| ✅ REPOSITORY | trufflehog | yes | no | no | 4.36s | ||
| cspell | 7 | 3 | 0 | 3.96s | |||
| lychee | 4 | 3 | 0 | 0.6s | |||
| ✅ YAML | prettier | 3 | 1 | 0 | 0 | 0.71s | |
| ✅ YAML | v8r | 3 | 0 | 0 | 5.03s | ||
| ✅ YAML | yamllint | 3 | 0 | 0 | 0.48s |
Detailed Issues
⚠️ SPELL / cspell - 3 errors
CNAME:1:27 - Unknown word (oriz) -- installation-instructions.oriz.in
Suggestions: [orig, orin, ortiz, Orin, Ortiz]
LICENSE:3:20 - Unknown word (Chirag) -- Copyright (c) 2026 Chirag Singhal
Suggestions: [chirac, Chirac, Chiral, Chia, Crag]
LICENSE:3:27 - Unknown word (Singhal) -- Copyright (c) 2026 Chirag Singhal
Suggestions: [Signal, singh, Singh, Sangha, Singh's]
CSpell: Files checked: 7, Issues found: 3 in 2 files.
You can skip this misspellings by defining the following .cspell.json file at the root of your repository
Of course, please correct real typos before :)
{
"version": "0.2",
"language": "en",
"ignorePaths": [
"**/node_modules/**",
"**/vscode-extension/**",
"**/.git/**",
"**/.pnpm-lock.json",
".vscode",
"package-lock.json",
"megalinter-reports"
],
"words": [
"Chirag",
"Singhal",
"oriz"
]
}
You can also copy-paste megalinter-reports/.cspell.json at the root of your repository
⚠️ SPELL / lychee - 3 errors
[ERROR] failed to verify TLS certificate: invalid peer certificate: certificate not valid for name "installation-instructions.oriz.in"; certificate is only valid for DnsName("*.github.com"), DnsName("*.github.io"), DnsName("*.githubusercontent.com"), DnsName("github.com"), DnsName("github.io") or DnsName("githubusercontent.com")
[ERROR] failed to verify TLS certificate: invalid peer certificate: certificate not valid for name "installation-instructions.oriz.in"; certificate is only valid for DnsName("*.github.com"), DnsName("*.github.io"), DnsName("*.githubusercontent.com"), DnsName("github.com"), DnsName("github.io") or DnsName("githubusercontent.com")
📝 Summary
---------------------
🔍 Total...........12
🔗 Unique..........10
✅ Successful.......9
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........3
⛔ Unsupported......3
Errors in README.md
[ERROR] https://github.com/chirag127/Installation-Instructions/stargazers (at 6:1) | HTTP/2 protocol error. Server may not support HTTP/2 properly
[ERROR] https://installation-instructions.oriz.in/ (at 5:1) | SSL certificate error. Check certificate validity
[ERROR] https://installation-instructions.oriz.in/ (at 9:9) | SSL certificate error. Check certificate validity
⚠️ ACTION / zizmor - 1 error
INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'ref-confusion' audit failed on file://.github/workflows/megalinter.yml
Caused by:
0: error in 'ref-confusion' audit
1: couldn't list branches for actions/checkout
2: request error while accessing GitHub API
3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)
[ACTION_ZIZMOR_ERROR_GITHUB_API_UNREACHABLE] Zizmor could not access a repository referenced by a `uses:` clause via the GitHub API (missing token, insufficient scope, or cross-repo private access).
To allow zizmor to authenticate with GITHUB_TOKEN (or a PAT with `Contents: read-only`), whitelist the variable in your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
- GITHUB_TOKEN
If the referenced workflow is in a private repo outside the current one, provide a PAT with cross-repo access instead of the default GITHUB_TOKEN, or run zizmor in offline mode.
See detailed reports in MegaLinter artifacts
Show us your support by starring ⭐ the repository
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps oxsecurity/megalinter from 8 to 10.
Release notes
Sourced from oxsecurity/megalinter's releases.
... (truncated)
Changelog
Sourced from oxsecurity/megalinter's changelog.
... (truncated)
Commits
15e5b45Release MegaLinter v10.0.0861855amegalinter-setup skill: enforce ghcr.io image references in upgrade mode (#8694)572dc81[automation] Auto-update linters version, help and documentation (#8695)2f62977Refresh OX Security PR comment banner and home page banner (#8692)3b8c632chore(deps): update dependency mongodb/kingfisher to v1.112.0 (#8691)7efac01chore(deps): update mstruebing/editorconfig-checker docker tag to v3.10.0 (#8...8cea326Make custom flavor generator output pass MegaLinter (#8686)a057dcb[automation] Auto-update linters version, help and documentation (#8690)6dece72chore(deps): update dependency virtualenv to v21.7.2 (#8683)08a6d16docs: highlight impactful contributors in the Special thanks section (#8688)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)