Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 15 additions & 14 deletions .automation/generated/linter-helps.json

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion .automation/generated/linter-versions.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"actionlint": "1.7.9",
"ansible-lint": "25.11.1",
"arm-ttk": "0.0.0",
"bandit": "1.9.1",
"bandit": "1.9.2",
"bash-exec": "5.2.37",
"bicep_linter": "0.39.26",
"black": "25.11.0",
Expand Down
4 changes: 2 additions & 2 deletions .automation/test/r/r_good_1.r
Original file line number Diff line number Diff line change
Expand Up @@ -21,8 +21,8 @@ my_metric <- function(x) {

x <- 1:10
x[2]
seq_len(x) %>%
lapply(function(x) x * 2) %>%
seq_len(x) |>
lapply(function(x) x * 2) |>
head()

message("single_quotes")
Expand Down
4 changes: 2 additions & 2 deletions .automation/test/r/subfolder/r_good_2.r
Original file line number Diff line number Diff line change
Expand Up @@ -21,8 +21,8 @@ my_metric <- function(x) {

x <- 1:10
x[2]
seq_len(x) %>%
lapply(function(x) x * 2) %>%
seq_len(x) |>
lapply(function(x) x * 2) |>
head()

message("single_quotes")
Expand Down
2 changes: 2 additions & 0 deletions .trivyignore
Original file line number Diff line number Diff line change
Expand Up @@ -164,6 +164,8 @@ CVE-2025-64118
CVE-2025-65106
# https://avd.aquasec.com/nvd/cve-2025-64756 : Glob command injection. Harmless in MegaLinter context as user inputs are not passed to glob patterns
CVE-2025-64756
# https://avd.aquasec.com/nvd/cve-2025-65965 : Credentials are hidden to linters logs, so not applicable in MegaLinter context
CVE-2025-65965
# Dockerfile
DS001
DS002
Expand Down
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,7 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
- [gitleaks](https://github.com/gitleaks/gitleaks) from 8.28.0 to **8.29.1** on 2025-11-24
- [grype](https://github.com/anchore/grype) from 0.104.0 to **0.104.1** on 2025-11-24
- [ansible-lint](https://ansible-lint.readthedocs.io/) from 25.11.0 to **25.11.1** on 2025-11-25
- [bandit](https://bandit.readthedocs.io/en/latest/) from 1.9.1 to **1.9.2** on 2025-11-28
<!-- linter-versions-end -->

## [v9.1.0] - 2025-10-07
Expand Down
2 changes: 1 addition & 1 deletion docs/all_linters.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
| [**actionlint**](https://github.com/rhysd/actionlint){target=_blank} | 1.7.9 | [MIT](licenses/actionlint.md) | [![GitHub stars](https://img.shields.io/github/stars/rhysd/actionlint?cacheSeconds=3600)](https://github.com/rhysd/actionlint){target=_blank} | [ACTION](descriptors/action_actionlint.md) | :white_circle: | [Repository](https://github.com/rhysd/actionlint){target=_blank} |
| [**ansible-lint**](https://github.com/ansible/ansible-lint){target=_blank} | 25.11.1 | [GPL-3.0-only](licenses/ansible-lint.md) | [![GitHub stars](https://img.shields.io/github/stars/ansible/ansible-lint?cacheSeconds=3600)](https://github.com/ansible/ansible-lint){target=_blank} | [ANSIBLE](descriptors/ansible_ansible_lint.md) | :white_circle: | [Repository](https://github.com/ansible/ansible-lint){target=_blank} |
| [**arm-ttk**](https://github.com/Azure/arm-ttk){target=_blank} | N/A | [MIT](licenses/arm-ttk.md) | [![GitHub stars](https://img.shields.io/github/stars/Azure/arm-ttk?cacheSeconds=3600)](https://github.com/Azure/arm-ttk){target=_blank} | [ARM](descriptors/arm_arm_ttk.md) | :white_circle: | [Repository](https://github.com/Azure/arm-ttk){target=_blank} |
| [**bandit**](https://github.com/PyCQA/bandit){target=_blank} | 1.9.1 | [Apache-2.0](licenses/bandit.md) | [![GitHub stars](https://img.shields.io/github/stars/PyCQA/bandit?cacheSeconds=3600)](https://github.com/PyCQA/bandit){target=_blank} | [PYTHON](descriptors/python_bandit.md) | :white_circle: | [Repository](https://github.com/PyCQA/bandit){target=_blank} |
| [**bandit**](https://github.com/PyCQA/bandit){target=_blank} | 1.9.2 | [Apache-2.0](licenses/bandit.md) | [![GitHub stars](https://img.shields.io/github/stars/PyCQA/bandit?cacheSeconds=3600)](https://github.com/PyCQA/bandit){target=_blank} | [PYTHON](descriptors/python_bandit.md) | :white_circle: | [Repository](https://github.com/PyCQA/bandit){target=_blank} |
| [**bash-exec**](https://www.gnu.org/software/bash/){target=_blank} | 5.2.37 | GPL-3.0-or-later | <!-- --> | [BASH](descriptors/bash_bash_exec.md) | <!-- --> | [Web Site](https://www.gnu.org/software/bash/){target=_blank} |
| [**bicep_linter**](https://github.com/Azure/bicep){target=_blank} | 0.39.26 | [MIT](licenses/bicep_linter.md) | [![GitHub stars](https://img.shields.io/github/stars/Azure/bicep?cacheSeconds=3600)](https://github.com/Azure/bicep){target=_blank} | [BICEP](descriptors/bicep_bicep_linter.md) | :white_circle: | [Repository](https://github.com/Azure/bicep){target=_blank} |
| [**black**](https://github.com/psf/black){target=_blank} | 25.11.0 | [MIT](licenses/black.md) | [![GitHub stars](https://img.shields.io/github/stars/psf/black?cacheSeconds=3600)](https://github.com/psf/black){target=_blank} | [PYTHON](descriptors/python_black.md) | :white_circle: | [Repository](https://github.com/psf/black){target=_blank} |
Expand Down
1 change: 1 addition & 0 deletions docs/descriptors/kubernetes_kubescape.md
Original file line number Diff line number Diff line change
Expand Up @@ -158,6 +158,7 @@ Flags:
--server string Backend discovery server URL

Use "kubescape [command] --help" for more information about a command.
{"level":"info","ts":"2025-11-28T22:18:41Z","msg":"Received interrupt signal, exiting..."}
```

### Installation on mega-linter Docker image
Expand Down
8 changes: 4 additions & 4 deletions docs/descriptors/python_bandit.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ Bandit is essential for maintaining secure Python codebases and is widely used i

## bandit documentation

- Version in MegaLinter: **1.9.1**
- Version in MegaLinter: **1.9.2**
- Visit [Official Web Site](https://bandit.readthedocs.io/en/latest/){target=_blank}
- See [How to configure bandit rules](https://bandit.readthedocs.io/en/latest/config.html#){target=_blank}
- If custom `.bandit.yml` config file isn't found, [.bandit.yml](https://github.com/oxsecurity/megalinter/tree/main/TEMPLATES/.bandit.yml){target=_blank} will be used
Expand Down Expand Up @@ -302,12 +302,12 @@ The following tests were discovered and loaded:
- Dockerfile commands :
```dockerfile
# renovate: datasource=pypi depName=bandit
ARG PIP_BANDIT_VERSION=1.9.1
ARG PIP_BANDIT_VERSION=1.9.2
# renovate: datasource=pypi depName=bandit_sarif_formatter
ARG PIP_BANDIT_SARIF_FORMATTER_VERSION=1.1.1
```

- PIP packages (Python):
- [bandit==1.9.1](https://pypi.org/project/bandit/1.9.1)
- [bandit==1.9.2](https://pypi.org/project/bandit/1.9.2)
- [bandit_sarif_formatter==1.1.1](https://pypi.org/project/bandit_sarif_formatter/1.1.1)
- [bandit[toml]==1.9.1](https://pypi.org/project/bandit[toml]/1.9.1)
- [bandit[toml]==1.9.2](https://pypi.org/project/bandit[toml]/1.9.2)
4 changes: 2 additions & 2 deletions docs/descriptors/repository_checkov.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions docs/descriptors/salesforce_code_analyzer_apex.md
Original file line number Diff line number Diff line change
Expand Up @@ -138,7 +138,7 @@ GLOBAL FLAGS


Streaming logs in real time to:
/tmp/sfca-2025_11_25_22_19_15_109.log
/tmp/sfca-2025_11_28_22_19_02_326.log

Selecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 0%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 14%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 28%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 30%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 31%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 32%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 33%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 34%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 35%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 36%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 37%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 38%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 39%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 40%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 41%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 42%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 53%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 57%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 62%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 72%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 74%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 75%; Elapsed time: 0sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 75%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 84%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 85%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 87%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 96%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 98%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 99%; Elapsed time: 1sSelecting rules... Eligible engines: retire-js, regex, eslint, flow, pmd, cpd, sfge; Completion: 100%; Elapsed time: 1sSelecting rules... done.

Expand Down Expand Up @@ -406,7 +406,7 @@ Found 248 rule(s) from 6 engine(s):
4 cpd rule(s) found.

Additional log information written to:
/tmp/sfca-2025_11_25_22_19_15_109.log
/tmp/sfca-2025_11_28_22_19_02_326.log
```

### Installation on mega-linter Docker image
Expand Down
Loading
Loading