Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create codeql.yml #461

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

Create codeql.yml #461

wants to merge 1 commit into from

Conversation

richardapeters
Copy link
Collaborator

No description provided.

@richardapeters richardapeters requested a review from a team as a code owner December 5, 2024 07:56
Copy link
Contributor

github-actions bot commented Dec 5, 2024

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 7 0 0.05s
✅ CPP clang-format 14 3 0 0.95s
✅ DOCKERFILE hadolint 1 0 0.13s
✅ JSON jsonlint 7 0 0.19s
✅ JSON prettier 7 2 0 1.08s
⚠️ MARKDOWN markdownlint 6 1 7 1.34s
⚠️ MARKDOWN markdown-link-check 6 2 14.9s
✅ MARKDOWN markdown-table-formatter 6 1 0 4.74s
❌ REPOSITORY checkov yes 1 25.77s
✅ REPOSITORY git_diff yes no 0.41s
✅ REPOSITORY grype yes no 9.59s
✅ REPOSITORY ls-lint yes no 0.06s
✅ REPOSITORY secretlint yes no 33.88s
✅ REPOSITORY trivy yes no 4.99s
✅ REPOSITORY trivy-sbom yes no 0.09s
✅ REPOSITORY trufflehog yes no 10.13s
⚠️ SPELL lychee 33 1 55.35s
✅ YAML prettier 10 2 0 1.15s
✅ YAML v8r 10 0 5.48s
✅ YAML yamllint 10 0 0.31s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

Comment on lines +31 to +32
permissions:
# required for all workflows

Check failure

Code scanning / Checkov (MegaLinter REPOSITORY_CHECKOV)

Ensure top-level permissions are not set to write-all Error

Ensure top-level permissions are not set to write-all
@richardapeters richardapeters marked this pull request as draft December 6, 2024 07:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant