Skip to content

Commit f18f43a

Browse files
authored
[automation] Auto-update linters version, help and documentation (#6187)
* [automation] Auto-update linters version, help and documentation * trivy exception * [MegaLinter] Apply linters fixes * Fix markdown * Upate LLM Advisor doc --------- Co-authored-by: nvuillam <[email protected]>
1 parent 038b1d5 commit f18f43a

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

42 files changed

+321
-298
lines changed

.automation/generated/linter-helps.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.trivyignore

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,11 @@ CVE-2024-45338
2626
CVE-2025-22869
2727
CVE-2025-22874
2828
CVE-2025-30204
29+
CVE-2025-47906
2930
# https://avd.aquasec.com/nvd/2025/cve-2025-47907/ , not a security issue in MegaLinter context
3031
CVE-2025-47907
3132

33+
3234
# go-git
3335
CVE-2025-21613
3436
CVE-2025-21614

README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
[![MegaLinter](https://github.com/oxsecurity/megalinter/workflows/MegaLinter/badge.svg?branch=main)](https://github.com/oxsecurity/megalinter/actions?query=workflow%3AMegaLinter+branch%3Amain)
2424
[![codecov](https://codecov.io/gh/oxsecurity/megalinter/branch/main/graph/badge.svg)](https://codecov.io/gh/oxsecurity/megalinter)
2525
<!-- gh-dependents-info-used-by-start -->
26-
[![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=2659&color=informational&logo=slickpic)](https://github.com/oxsecurity/megalinter/blob/main/./docs/used-by-stats.md)<!-- gh-dependents-info-used-by-end -->
26+
[![Generated by github-dependents-info](https://img.shields.io/static/v1?label=Used%20by&message=2657&color=informational&logo=slickpic)](https://github.com/oxsecurity/megalinter/blob/main/./docs/used-by-stats.md)<!-- gh-dependents-info-used-by-end -->
2727
[![Secured with Trivy](https://img.shields.io/badge/Trivy-secured-green?logo=docker)](https://github.com/aquasecurity/trivy)
2828
[![GitHub contributors](https://img.shields.io/github/contributors/oxsecurity/megalinter.svg)](https://github.com/oxsecurity/megalinter/graphs/contributors/)
2929
[![GitHub Sponsors](https://img.shields.io/github/sponsors/nvuillam)](https://github.com/sponsors/nvuillam)
@@ -32,14 +32,14 @@
3232
<!-- mega-linter-badges-end -->
3333

3434
<!-- welcome-phrase-start -->
35-
MegaLinter is an **open-source** tool for **CI/CD workflows** that analyzes the **consistency of your code**, **IaC**, **configuration**, and **scripts** in your repository to **ensure all your project sources are clean and formatted**, regardless of the IDE or tools used by your developers. Powered by [**OX Security**](https://www.ox.security/?ref=megalinter).
35+
MegaLinter is an **open-source** tool for **CI/CD workflows** that analyzes the **consistency of your code**, **IaC**, **configuration**, and **scripts** in your repository to **ensure all your project sources are clean and formatted**, no matter which IDE or toolbox is used by your developers. Powered by [**OX Security**](https://www.ox.security/?ref=megalinter).
3636

37-
Supporting [**65** languages](#languages), [**22** formats](#formats), and [**20** tooling formats](#tooling-formats). It is **ready to use out of the box** as a GitHub Action or with any CI system, **highly configurable**, and **free for all uses**.
37+
Supports [**65** languages](#languages), [**22** formats](#formats), [**20** tooling formats](#tooling-formats), and is **ready to use out of the box** as a GitHub Action or with any CI system. It is **highly configurable** and **free for all uses**.
3838

3939
MegaLinter has **native integrations** with many major CI/CD tools.
4040

4141
[![GitHub](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/github.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/reporters/GitHubCommentReporter.md)
42-
[![Gitlab](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/gitlab.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/reporters/GitlabCommentReporter.md)
42+
[![GitLab](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/gitlab.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/reporters/GitlabCommentReporter.md)
4343
[![Azure](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/azure.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/reporters/AzureCommentReporter.md)
4444
[![Bitbucket](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/bitbucket.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/reporters/BitbucketCommentReporter.md)
4545
[![Jenkins](https://github.com/oxsecurity/megalinter/blob/main/docs/assets/icons/integrations/jenkins.png?raw=true>)](https://github.com/oxsecurity/megalinter/tree/main/docs/install-jenkins.md)

docs/badge.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,11 @@ description: Show that your repositories are cleaned and secured with MegaLinter
88

99
# Badge
1010

11-
You can show MegaLinter status with a badge in your repository README
11+
You can show the MegaLinter status with a badge in your repository README.
1212

1313
[![MegaLinter](https://github.com/oxsecurity/megalinter/workflows/MegaLinter/badge.svg?branch=main)](https://github.com/oxsecurity/megalinter/actions?query=workflow%3AMegaLinter+branch%3Amain)
1414

15-
_If your main branch is **master** , replace **main** by **master** in URLs_
15+
If your main branch is named `master`, replace `main` with `master` in the URLs.
1616

1717
## Markdown
1818

docs/config-activation.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,14 @@ description: You can enable, disable, make not blocking, allow a minimum number
88

99
# Activation and deactivation
1010

11-
MegaLinter have all linters enabled by default, but allows to enable only some, or disable only some
12-
13-
- If `ENABLE` isn't set, all descriptors are activated by default. If set, all linters of listed descriptors will be activated by default
14-
- If `ENABLE_LINTERS` is set, only listed linters will be processed
15-
- If `DISABLE` is set, the linters in the listed descriptors will be skipped
16-
- If `DISABLE_LINTERS` is set, the listed linters will be skipped
17-
- If `DISABLE_ERRORS_LINTERS` is set, the listed linters will be run, but if errors are found, they will be considered as non blocking
18-
- If `ENABLE_ERRORS_LINTERS` is set, only the linters in this list will be considered as blocking.
11+
MegaLinter has all linters enabled by default, but allows enabling or disabling specific ones.
12+
13+
- If `ENABLE` isn't set, all descriptors are activated by default. If set, all linters of listed descriptors are activated by default.
14+
- If `ENABLE_LINTERS` is set, only the listed linters are processed.
15+
- If `DISABLE` is set, the linters in the listed descriptors are skipped.
16+
- If `DISABLE_LINTERS` is set, the listed linters are skipped.
17+
- If `DISABLE_ERRORS_LINTERS` is set, the listed linters will run, but if errors are found, they will be considered non-blocking.
18+
- If `ENABLE_ERRORS_LINTERS` is set, only the linters in this list will be considered blocking.
1919

2020

2121
Examples:

docs/config-apply-fixes.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -8,35 +8,35 @@ description: Use MegaLinter to auto apply corrections on your repository files
88

99
# Apply fixes
1010

11-
Mega-linter is able to apply fixes provided by linters. To use this capability, you need 3 **env variables** defined at top level
11+
MegaLinter can apply fixes provided by linters. To use this capability, you need three environment variables defined at the top level.
1212

1313
- **APPLY_FIXES**: `all` to apply fixes of all linters, or a list of linter keys (ex: `JAVASCRIPT_ES`,`MARKDOWN_MARKDOWNLINT`)
1414

15-
Only for GitHub Action Workflow file if you use it:
15+
Only for the GitHub Actions workflow file, if you use it:
1616

1717
- **APPLY_FIXES_EVENT**: `all`, `push`, `pull_request`, `none` _(use none in case of use of [Updated sources reporter](reporters/UpdatedSourcesReporter.md))_
1818
- **APPLY_FIXES_MODE**: `commit` to create a new commit and push it on the same branch, or `pull_request` to create a new PR targeting the branch.
1919

2020
## Apply fixes issues
2121

22-
You may see **github permission errors**, or workflows not run on the new commit.
22+
You may see GitHub permission errors, or workflows not running on the new commit.
2323

24-
To solve these issues, you can apply one of the following solutions.
24+
To solve these issues, apply one of the following solutions.
2525

2626
- Method 1: The most secured
27-
- [Create Fine Grained Personal Access Token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token#creating-a-fine-grained-personal-access-token), scoped only on your repository and with **Contents: Read/Write** and then copy the PAT value
27+
- [Create a Fine-Grained Personal Access Token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token#creating-a-fine-grained-personal-access-token), scoped only to your repository and with **Contents: Read/Write**, then copy the PAT value
2828
- [Define environment secret variable](https://docs.github.com/en/actions/security-guides/encrypted-secrets#creating-encrypted-secrets-for-an-environment) named **PAT** on your repository, and paste the PAT value
29-
- Update your Github Actions Workflow to add the environment name
29+
- Update your GitHub Actions workflow to add the environment name
3030

31-
- Method 2: Easier, but any contributor with write access can see your Personal Access Token, so use it only on private repositories.
32-
- [Create Classic Personal Access Token](https://docs.github.com/en/free-pro-team@latest/github/authenticating-to-github/creating-a-personal-access-token#creating-a-token), then copy the PAT value
33-
- [Define secret variable](https://docs.github.com/en/free-pro-team@latest/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-a-repository) named **PAT** on your repository, and paste the PAT value
31+
-- Method 2: Easier, but any contributor with write access can see your Personal Access Token, so use it only on private repositories.
32+
- [Create a Classic Personal Access Token](https://docs.github.com/en/free-pro-team@latest/github/authenticating-to-github/creating-a-personal-access-token#creating-a-token), then copy the PAT value
33+
- [Define secret variable](https://docs.github.com/en/free-pro-team@latest/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-a-repository) named **PAT** on your repository, and paste the PAT value
3434

3535
## Notes
3636

37-
- You can use [**Updated sources reporter**](reporters/UpdatedSourcesReporter.md) if you don't want fixes to be automatically applied on git branch, but **download them in a zipped file** and manually **extract them in your project**
38-
- If used, **APPLY_FIXES_EVENT** and **APPLY_FIXES_MODE** can not be defined in `.mega-linter.yml`config file, they must be set as environment variables
39-
- If you use **APPLY_FIXES**, add the following line in your `.gitignore file`
37+
- You can use the [Updated sources reporter](reporters/UpdatedSourcesReporter.md) if you don't want fixes to be automatically applied on the Git branch. Instead, download them in a ZIP file and manually extract them into your project.
38+
- If used, `APPLY_FIXES_EVENT` and `APPLY_FIXES_MODE` cannot be defined in the `.mega-linter.yml` config file; they must be set as environment variables.
39+
- If you use `APPLY_FIXES`, add the following line to your `.gitignore` file:
4040

4141
```shell
4242
megalinter-reports/

docs/config-cli-lint-mode.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -8,22 +8,22 @@ description: Cli lint mode can be list_of_files, project or files
88

99
# CLI lint mode
1010

11-
Each linter is pre-configured to use a default lint mode, which are visible in the MegaLinter documentation ([example](https://megalinter.io/latest/descriptors/repository_trivy/#how-the-linting-is-performed)). The possible values are:
11+
Each linter is preconfigured to use a default lint mode, which is visible in the MegaLinter documentation ([example](https://megalinter.io/latest/descriptors/repository_trivy/#how-the-linting-is-performed)). The possible values are:
1212

1313
- `list_of_files`: The linter is called only once, and passed a list of all the files to be processed
14-
- `project`: The linter is called only once, from the root folder of the repository, and it scans for the files to process, as no file names are provided it
14+
- `project`: The linter is called only once, from the root folder of the repository, and it scans for the files to process, as no file names are provided to it
1515
- `file`: The linter is called once per file, which hurts performance
1616

17-
You can override the CLI_LINT_MODE by using a configuration variable for each linter (see [linters documentation](https://megalinter.io/supported-linters/)).
17+
You can override the CLI_LINT_MODE by using a configuration variable for each linter (see the [linters documentation](https://megalinter.io/supported-linters/)).
1818

19-
- Linters that default to the `file` lint mode cannot be overridden to use the `list_of_files` lint mode
19+
- Linters that default to the `file` lint mode cannot be overridden to use the `list_of_files` lint mode.
2020
- Linters that default to the `project` lint mode cannot be overridden to use either the `list_of_files` or `file` lint modes.
2121

22-
Allowing `file` or `list_of_files` to be overridden to `project` is mostly for workarounds. For example, some linters have a problem finding their config file when the current folder isn't the repository's root folder.
22+
Allowing `file` or `list_of_files` to be overridden to `project` is mostly for workarounds. For example, some linters have a problem finding their config file when the current folder isn't the repository root.
2323

2424
Special considerations:
2525

26-
- Linters that are configured to use the `project` lint mode ignore variables like `FILTER_REGEX_INCLUDE` and `FILTER_REGEX_EXCLUDE`, as they are not passed a list of files to lint. For those linters, you must check their documentation to see if a linter can be configured to ignore specific files. For example, the [Secretlint](https://megalinter.io/latest/descriptors/repository_secretlint/) linter ignore files listed in `~/.secretlintignore` by default, or it can be configured to instead ignore files listed in `~/.gitignore` by setting `REPOSITORY_SECRETLINT_ARGUMENTS` to `--secretlintignore .gitignore.`.
26+
- Linters that are configured to use the `project` lint mode ignore variables like `FILTER_REGEX_INCLUDE` and `FILTER_REGEX_EXCLUDE`, as they are not passed a list of files to lint. For those linters, you must check their documentation to see if a linter can be configured to ignore specific files. For example, the [Secretlint](https://megalinter.io/latest/descriptors/repository_secretlint/) linter ignores files listed in `~/.secretlintignore` by default, or it can be configured to instead ignore files listed in `~/.gitignore` by setting `REPOSITORY_SECRETLINT_ARGUMENTS` to `--secretlintignore .gitignore.`
2727

2828

2929
<!-- config-cli-lint-mode-section-end -->

docs/config-file.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,15 @@ description: Use config file with auto-completion to customize MegaLinter behavi
99
# .mega-linter.yml file
1010

1111
MegaLinter configuration variables are defined in a **.mega-linter.yml** file at the root of the repository or with **environment variables**.
12-
You can see an example config file in this repo: [**.mega-linter.yml**](https://github.com/oxsecurity/megalinter/blob/main/.mega-linter.yml)
12+
You can see an example config file in this repo: [**.mega-linter.yml**](https://github.com/oxsecurity/megalinter/blob/main/.mega-linter.yml).
1313

14-
Configuration is assisted with autocompletion and validation in most commonly used IDEs, thanks to [JSON schema](https://megalinter.io/json-schemas/configuration.html) stored on [schemastore.org](https://www.schemastore.org/)
14+
Configuration is assisted with autocompletion and validation in most commonly used IDEs, thanks to the [JSON schema](https://megalinter.io/json-schemas/configuration.html) stored on [schemastore.org](https://www.schemastore.org/).
1515

16-
- VSCode: You need a VSCode extension like [Red Hat YAML](https://marketplace.visualstudio.com/items?itemName=redhat.vscode-yaml)
17-
- IDEA family: Auto-completion natively supported
16+
- VS Code: You need an extension like [Red Hat YAML](https://marketplace.visualstudio.com/items?itemName=redhat.vscode-yaml).
17+
- IntelliJ IDEA family: Autocompletion is supported natively.
1818

1919
You can also define variables as environment variables.
20-
- In case a variable exists in both ENV and `.mega-linter.yml` file, priority is given to ENV variable.
20+
- If a variable exists in both ENV and the `.mega-linter.yml` file, priority is given to the ENV variable.
2121

2222
![Assisted configuration](https://github.com/oxsecurity/megalinter/raw/main/docs/assets/images/assisted-configuration.gif)
2323

docs/config-filtering.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,16 +8,16 @@ description: Exclude files from linting
88

99
# Filter linted files
1010

11-
If you need to lint only a folder or exclude some files from linting, you can use optional environment parameters `FILTER_REGEX_INCLUDE` and `FILTER_REGEX_EXCLUDE`
12-
You can apply filters to a single linter by defining variable `<LINTER_KEY>_FILTER_REGEX_INCLUDE` and `<LINTER_KEY>_FILTER_REGEX_EXCLUDE`
11+
If you need to lint only a folder or exclude some files from linting, you can use the optional environment parameters `FILTER_REGEX_INCLUDE` and `FILTER_REGEX_EXCLUDE`.
12+
You can apply filters to a single linter by defining the variables `<LINTER_KEY>_FILTER_REGEX_INCLUDE` and `<LINTER_KEY>_FILTER_REGEX_EXCLUDE`.
1313

1414
Examples:
1515

1616
- Lint only src folder: `FILTER_REGEX_INCLUDE: (src/)`
1717
- Don't lint files inside test and example folders: `FILTER_REGEX_EXCLUDE: (test/|examples/)`
1818
- Don't lint javascript files inside test folder: `FILTER_REGEX_EXCLUDE: (test/.*\.js)`
1919

20-
Warning: not applicable with linters using CLI lint mode `project` ([see details](config-cli-lint-mode.md))
20+
Warning: Not applicable with linters using CLI lint mode `project` ([see details](config-cli-lint-mode.md)).
2121

2222

2323
<!-- config-filtering-section-end -->

docs/config-postcommands.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,15 +8,15 @@ description: Customize your MegaLinter run by running commands after linters are
88

99
# Post-commands
1010

11-
MegaLinter can run custom commands after running linters (for example, running additional tests)
11+
MegaLinter can run custom commands after running linters (for example, running additional tests).
1212

1313
Example in `.mega-linter.yml` config file
1414

1515
```yaml
1616
POST_COMMANDS:
1717
- command: npm run test
1818
cwd: "workspace" # Will be run at the root of the workspace (usually your repository root)
19-
continue_if_failed: False # Will stop the process if command is failed (return code > 0)
19+
continue_if_failed: False # Will stop the process if the command fails (return code > 0)
2020
```
2121
2222

0 commit comments

Comments
 (0)