Merge branch 'main' into alpha

oxsecurity · Aug 5, 2024 · 1d0defd · 1d0defd
2 parents 6edacba + 2002d8a
commit 1d0defd
Show file tree

Hide file tree

Showing 201 changed files with 3,621 additions and 3,376 deletions.
diff --git a/.automation/build.py b/.automation/build.py
@@ -1745,12 +1745,12 @@ def process_type(linters_by_type, type1, type_label, linters_tables_md):
                         f"| {icon_html} | {md_ide(ide)} | [{ide_extension['name']}]({ide_extension['url']}) | "
                         f"{install_link} |"
                     ]
-        # Mega-linter flavours
+        # Mega-linter flavors
         linter_doc_md += [
             "",
-            "## MegaLinter Flavours",
+            "## MegaLinter Flavors",
             "",
-            "This linter is available in the following flavours",
+            "This linter is available in the following flavors",
             "",
         ]
         linter_doc_md += build_flavors_md_table(

diff --git a/.automation/generated/linter-helps.json b/.automation/generated/linter-helps.json
diff --git a/.automation/generated/linter-versions.json b/.automation/generated/linter-versions.json
@@ -4,21 +4,21 @@
     "arm-ttk": "0.0.0",
     "bandit": "1.7.9",
     "bash-exec": "5.2.26",
-    "bicep_linter": "0.28.1",
-    "black": "24.4.2",
-    "cfn-lint": "1.6.1",
+    "bicep_linter": "0.29.47",
+    "black": "24.8.0",
+    "cfn-lint": "1.9.3",
     "checkmake": "0.2.0",
-    "checkov": "3.2.190",
+    "checkov": "3.2.217",
     "checkstyle": "10.17.0",
     "chktex": "1.7.8",
     "clang-format": "17.0.6",
-    "clippy": "0.1.79",
-    "clj-kondo": "2024.05.24",
+    "clippy": "0.1.80",
+    "clj-kondo": "2024.08.01",
     "cljstyle": "0.15.0",
     "coffeelint": "5.2.11",
     "cpplint": "1.6.1",
     "csharpier": "0.28.2",
-    "cspell": "8.10.4",
+    "cspell": "8.13.1",
     "dartanalyzer": "0.0.0",
     "detekt": "1.23.6",
     "devskim": "1.0.33",
@@ -37,7 +37,7 @@
     "golangci-lint": "1.59.1",
     "goodcheck": "3.1.0",
     "graphql-schema-linter": "3.0.1",
-    "grype": "0.79.3",
+    "grype": "0.79.4",
     "hadolint": "2.12.0",
     "helm": "3.14.3",
     "htmlhint": "1.1.4",
@@ -46,10 +46,10 @@
     "jsonlint": "14.0.3",
     "kics": "2.1.1",
     "ktlint": "1.3.1",
-    "kubeconform": "0.6.6",
+    "kubeconform": "0.6.7",
     "kubescape": "2.9.0",
     "kubeval": "0.16.1",
-    "lightning-flow-scanner": "2.30.0",
+    "lightning-flow-scanner": "2.32.0",
     "lintr": "0.0.0",
     "ls-lint": "2.2.3",
     "luacheck": "1.2.0",
@@ -58,42 +58,42 @@
     "markdown-table-formatter": "1.6.1",
     "markdownlint": "0.41.0",
     "misspell": "0.3.4",
-    "mypy": "1.10.1",
+    "mypy": "1.11.1",
     "npm-groovy-lint": "14.6.0",
     "npm-package-json-lint": "8.0.0",
     "perlcritic": "1.152",
     "php": "7.4.26",
-    "php-cs-fixer": "3.59.3",
-    "phpcs": "3.10.1",
+    "php-cs-fixer": "3.61.1",
+    "phpcs": "3.10.2",
     "phplint": "9.4.1",
-    "phpstan": "1.11.7",
-    "pmd": "7.3.0",
+    "phpstan": "1.11.9",
+    "pmd": "7.4.0",
     "powershell": "7.4.2",
     "powershell_formatter": "7.4.2",
     "prettier": "3.3.3",
     "proselint": "0.14.0",
-    "protolint": "0.50.3",
+    "protolint": "0.50.4",
     "psalm": "Psalm.5.25.0@",
     "puppet-lint": "4.2.4",
-    "pylint": "3.2.5",
-    "pyright": "1.1.371",
+    "pylint": "3.2.6",
+    "pyright": "1.1.374",
     "raku": "2020.10",
     "remark-lint": "14.0.2",
     "revive": "1.3.7",
     "roslynator": "0.8.9.0",
     "rst-lint": "1.4.0",
     "rstcheck": "6.2.4",
     "rstfmt": "0.0.14",
-    "rubocop": "1.65.0",
-    "ruff": "0.5.2",
+    "rubocop": "1.65.1",
+    "ruff": "0.5.6",
     "scalafix": "0.12.1",
     "scss-lint": "0.60.0",
     "secretlint": "8.2.4",
     "semgrep": "3.12",
     "sfdx-scanner": "2.8.0",
-    "sfdx-scanner-apex": "4.3.2",
-    "sfdx-scanner-aura": "4.3.2",
-    "sfdx-scanner-lwc": "4.3.2",
+    "sfdx-scanner-apex": "4.4.0",
+    "sfdx-scanner-aura": "4.4.0",
+    "sfdx-scanner-lwc": "4.4.0",
     "shellcheck": "0.10.0",
     "shfmt": "3.8.0",
     "snakefmt": "0.10.2",
@@ -102,21 +102,21 @@
     "sql-lint": "1.0.0",
     "sqlfluff": "3.1.0",
     "standard": "17.1.0",
-    "stylelint": "16.7.0",
+    "stylelint": "16.8.1",
     "swiftlint": "0.55.1",
-    "syft": "1.9.0",
+    "syft": "1.10.0",
     "tekton-lint": "1.1.0",
-    "terraform-fmt": "1.9.2",
-    "terragrunt": "0.62.0",
+    "terraform-fmt": "1.9.3",
+    "terragrunt": "0.64.1",
     "terrascan": "1.18.11",
     "tflint": "0.52.0",
-    "trivy": "0.53.0",
-    "trivy-sbom": "0.53.0",
-    "trufflehog": "3.79.0",
+    "trivy": "0.54.1",
+    "trivy-sbom": "0.54.1",
+    "trufflehog": "3.81.4",
     "ts-standard": "12.0.2",
     "tsqllint": "1.15.3.0",
-    "v8r": "3.1.0",
-    "vale": "3.6.1",
+    "v8r": "3.1.1",
+    "vale": "3.7.0",
     "xmllint": "21207",
     "yamllint": "1.35.1"
 }
diff --git a/.cspell.json b/.cspell.json
@@ -83,6 +83,7 @@
         "gardar",
         "gfch",
         "gotit",
+        "gouverner",
         "has-bigints",
         "has-tostringtag",
         "hiqr",
@@ -149,6 +150,7 @@
         "sisteransi",
         "taketalk",
         "tootallnate",
+        "tous",
         "treeverse",
         "ubar",
         "uiet",

diff --git a/.trivyignore b/.trivyignore
@@ -3,6 +3,9 @@ CVE-2024-0057
 CVE-2024-30105
 CVE-2024-38095
 
+# Docker
+CVE-2024-41110
+
 # Devskim
 CVE-2018-8292
 CVE-2019-0820
@@ -47,6 +50,8 @@ CVE-2022-23539
 CVE-2022-25857
 CVE-2024-37890
 CVE-2024-4068
+GHSA-xpw8-rcwv-8f8p
+CVE-2024-41818
 
 # terrascan
 # https://github.com/tenable/terrascan/issues/1674

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -15,12 +15,15 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - Allow to use absolute paths for LINTER_RULES_PATH
 
 - Media
+  - [MegaLinter: un linter pour les gouverner tous](https://blog.wescale.fr/megalinter-un-linter-pour-les-gouverner-tous) (FR), by [Guillaume Arnaud](https://www.linkedin.com/in/guillaume-arnaud/) from [WeScale](https://www.wescale.fr/)
 
 - Linters enhancements
 
 - Reporters
 
 - Fixes
+  - [terrascan](https://runterrascan.io/) fixed errors and removed redundant code
+  - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) various performance improvements and ability to specify sln or proj paths
 
 - Doc
 
@@ -57,6 +60,76 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l
   - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.9.1 to **1.9.2** on 2024-07-15
   - [terragrunt](https://terragrunt.gruntwork.io) from 0.60.0 to **0.62.0** on 2024-07-15
   - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 2.28.0 to **2.30.0** on 2024-07-16
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.6.1 to **1.7.0** on 2024-07-16
+  - [checkov](https://www.checkov.io/) from 3.2.190 to **3.2.191** on 2024-07-16
+  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.10.4 to **8.11.0** on 2024-07-16
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.7.0 to **1.7.1** on 2024-07-17
+  - [pyright](https://github.com/Microsoft/pyright) from 1.1.371 to **1.1.372** on 2024-07-17
+  - [checkov](https://www.checkov.io/) from 3.2.191 to **3.2.192** on 2024-07-17
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.7.1 to **1.7.2** on 2024-07-17
+  - [checkov](https://www.checkov.io/) from 3.2.192 to **3.2.193** on 2024-07-17
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.7.2 to **1.8.0** on 2024-07-17
+  - [checkov](https://www.checkov.io/) from 3.2.193 to **3.2.194** on 2024-07-18
+  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.79.0 to **3.80.1** on 2024-07-18
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.8.0 to **1.8.1** on 2024-07-18
+  - [ruff](https://github.com/astral-sh/ruff) from 0.5.2 to **0.5.3** on 2024-07-18
+  - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.28.1 to **0.29.45** on 2024-07-18
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.8.1 to **1.8.2** on 2024-07-19
+  - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.10.1 to **1.11.0** on 2024-07-19
+  - [ruff](https://github.com/astral-sh/ruff) from 0.5.3 to **0.5.4** on 2024-07-20
+  - [phpcs](https://github.com/PHPCSStandards/PHP_CodeSniffer) from 3.10.1 to **3.10.2** on 2024-07-22
+  - [pylint](https://pylint.readthedocs.io) from 3.2.5 to **3.2.6** on 2024-07-22
+  - [checkov](https://www.checkov.io/) from 3.2.194 to **3.2.196** on 2024-07-22
+  - [terragrunt](https://terragrunt.gruntwork.io) from 0.62.0 to **0.63.2** on 2024-07-22
+  - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.29.45 to **0.29.47** on 2024-07-27
+  - [revive](https://revive.run/) from 1.3.7 to **1.3.9** on 2024-07-27
+  - [pmd](https://pmd.github.io/) from 7.3.0 to **7.4.0** on 2024-07-27
+  - [php-cs-fixer](https://cs.symfony.com/) from 3.59.3 to **3.60.0** on 2024-07-27
+  - [phpstan](https://phpstan.org/) from 1.11.7 to **1.11.8** on 2024-07-27
+  - [pyright](https://github.com/Microsoft/pyright) from 1.1.372 to **1.1.373** on 2024-07-27
+  - [ruff](https://github.com/astral-sh/ruff) from 0.5.4 to **0.5.5** on 2024-07-27
+  - [checkov](https://www.checkov.io/) from 3.2.196 to **3.2.208** on 2024-07-27
+  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.80.1 to **3.80.2** on 2024-07-27
+  - [clippy](https://github.com/rust-lang/rust-clippy) from 0.1.79 to **0.1.80** on 2024-07-27
+  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.11.0 to **8.12.1** on 2024-07-27
+  - [revive](https://revive.run/) from 1.3.9 to **1.3.7** on 2024-07-28
+  - [checkov](https://www.checkov.io/) from 3.2.208 to **3.2.209** on 2024-07-28
+  - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.9.2 to **1.9.3** on 2024-07-28
+  - [terragrunt](https://terragrunt.gruntwork.io) from 0.63.2 to **0.64.1** on 2024-07-28
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.8.2 to **1.9.0** on 2024-07-29
+  - [stylelint](https://stylelint.io) from 16.7.0 to **16.8.0** on 2024-07-29
+  - [checkov](https://www.checkov.io/) from 3.2.209 to **3.2.213** on 2024-07-29
+  - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 2.30.0 to **2.31.0** on 2024-07-29
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.9.0 to **1.9.1** on 2024-07-30
+  - [stylelint](https://stylelint.io) from 16.8.0 to **16.8.1** on 2024-07-30
+  - [checkov](https://www.checkov.io/) from 3.2.213 to **3.2.216** on 2024-07-30
+  - [syft](https://github.com/anchore/syft) from 1.9.0 to **1.10.0** on 2024-07-30
+  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.80.2 to **3.80.3** on 2024-07-30
+  - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** on 2024-07-30
+  - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** on 2024-07-30
+  - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 4.3.2 to **4.4.0** on 2024-07-30
+  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.12.1 to **8.13.0** on 2024-07-30
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.9.1 to **1.9.2** on 2024-07-31
+  - [kubeconform](https://github.com/yannh/kubeconform) from 0.6.6 to **0.6.7** on 2024-07-31
+  - [php-cs-fixer](https://cs.symfony.com/) from 3.60.0 to **3.61.1** on 2024-07-31
+  - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.11.0 to **1.11.1** on 2024-07-31
+  - [pyright](https://github.com/Microsoft/pyright) from 1.1.373 to **1.1.374** on 2024-07-31
+  - [grype](https://github.com/anchore/grype) from 0.79.3 to **0.79.4** on 2024-07-31
+  - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.53.0 to **0.54.1** on 2024-07-31
+  - [trivy](https://aquasecurity.github.io/trivy/) from 0.53.0 to **0.54.1** on 2024-07-31
+  - [vale](https://vale.sh/) from 3.6.1 to **3.7.0** on 2024-07-31
+  - [clj-kondo](https://github.com/borkdude/clj-kondo) from 2024.05.24 to **2024.08.01** on 2024-08-02
+  - [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) from 1.9.2 to **1.9.3** on 2024-08-02
+  - [phpstan](https://phpstan.org/) from 1.11.8 to **1.11.9** on 2024-08-02
+  - [black](https://black.readthedocs.io/en/stable/) from 24.4.2 to **24.8.0** on 2024-08-02
+  - [ruff](https://github.com/astral-sh/ruff) from 0.5.5 to **0.5.6** on 2024-08-02
+  - [checkov](https://www.checkov.io/) from 3.2.216 to **3.2.217** on 2024-08-02
+  - [trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.80.3 to **3.81.4** on 2024-08-02
+  - [rubocop](https://rubocop.org/) from 1.65.0 to **1.65.1** on 2024-08-02
+  - [lightning-flow-scanner](https://github.com/Lightning-Flow-Scanner) from 2.31.0 to **2.32.0** on 2024-08-02
+  - [cspell](https://github.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 8.13.0 to **8.13.1** on 2024-08-02
+  - [v8r](https://github.com/chris48s/v8r) from 3.1.0 to **3.1.1** on 2024-08-03
+  - [protolint](https://github.com/yoheimuta/protolint) from 0.50.3 to **0.50.4** on 2024-08-03
 <!-- linter-versions-end -->
 
 ## [v7.13.0] - 2024-07-06

diff --git a/Dockerfile b/Dockerfile
@@ -20,23 +20,23 @@ ARG DOCKERFILE_HADOLINT_VERSION=v2.12.0-alpine
 # renovate: datasource=docker depName=mstruebing/editorconfig-checker
 ARG EDITORCONFIG_EDITORCONFIG_CHECKER_VERSION=v3.0.3
 # renovate: datasource=docker depName=ghcr.io/yannh/kubeconform
-ARG KUBERNETES_KUBECONFORM_VERSION=v0.6.6-alpine
+ARG KUBERNETES_KUBECONFORM_VERSION=v0.6.7-alpine
 # renovate: datasource=docker depName=yoheimuta/protolint
-ARG PROTOBUF_PROTOLINT_VERSION=0.50.3
+ARG PROTOBUF_PROTOLINT_VERSION=0.50.4
 # renovate: datasource=docker depName=zricethezav/gitleaks
 ARG REPOSITORY_GITLEAKS_VERSION=v8.18.4
 # renovate: datasource=docker depName=checkmarx/kics
 ARG REPOSITORY_KICS_VERSION=v2.1.1-alpine
 # renovate: datasource=docker depName=trufflesecurity/trufflehog 
-ARG REPOSITORY_TRUFFLEHOG_VERSION=3.79.0
+ARG REPOSITORY_TRUFFLEHOG_VERSION=3.81.4
 # renovate: datasource=docker depName=jdkato/vale
-ARG SPELL_VALE_VERSION=v3.6.1
+ARG SPELL_VALE_VERSION=v3.7.0
 # renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TERRAFORM_TFLINT_VERSION=0.52.0
 # renovate: datasource=docker depName=alpine/terragrunt
 ARG TERRAFORM_TERRASCAN_VERSION=1.18.11
 # renovate: datasource=docker depName=alpine/terragrunt
-ARG TERRAFORM_TERRAGRUNT_VERSION=1.9.2
+ARG TERRAFORM_TERRAGRUNT_VERSION=1.9.3
 #ARGTOP__END
 
 #############################################################################################
@@ -55,7 +55,9 @@ FROM golang:1-alpine as revive
 ## The golang image used as a builder is a temporary workaround (https://github.com/mgechev/revive/issues/787)
 ## for the released revive binaries not returning version numbers (devel). 
 ## The install command should then be what is commented in the go.megalinter-descriptor.yml
-RUN GOBIN=/usr/bin go install github.com/mgechev/revive@latest
+# renovate: datasource=github-tags depName=mgechev/revive
+ARG GO_REVIVE_VERSION=v1.3.7
+RUN GOBIN=/usr/bin go install github.com/mgechev/revive@$GO_REVIVE_VERSION
 FROM ghcr.io/yannh/kubeconform:${KUBERNETES_KUBECONFORM_VERSION} as kubeconform
 FROM ghcr.io/assignuser/chktex-alpine:latest as chktex
 FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} as protolint
@@ -83,11 +85,11 @@ FROM python:3.12.4-alpine3.20
 #############################################################################################
 #ARG__START
 # renovate: datasource=npm depName=@salesforce/cli
-ARG SALESFORCE_CLI_VERSION=2.49.7
+ARG SALESFORCE_CLI_VERSION=2.52.6
 # renovate: datasource=npm depName=@salesforce/plugin-packaging
-ARG SALESFORCE_PLUGIN_PACKAGING_VERSION=2.7.1
+ARG SALESFORCE_PLUGIN_PACKAGING_VERSION=2.7.4
 # renovate: datasource=npm depName=sfdx-hardis
-ARG SFDX_HARDIS_VERSION=4.45.0
+ARG SFDX_HARDIS_VERSION=4.52.0
 ARG ARM_TTK_NAME='master.zip'
 ARG ARM_TTK_URI='https://github.com/Azure/arm-ttk/archive/master.zip'
 ARG ARM_TTK_DIRECTORY='/opt/microsoft'
@@ -96,7 +98,7 @@ ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-lin
 ARG BICEP_DIR='/usr/local/bin'
 ARG DART_VERSION='2.8.4'
 # renovate: datasource=github-tags depName=pmd/pmd extractVersion=^pmd_releases/(?<version>.*)$
-ARG PMD_VERSION=7.3.0
+ARG PMD_VERSION=7.4.0
 
 # renovate: datasource=github-tags depName=detekt/detekt
 ARG DETEKT_VERSION=1.23.6
@@ -105,9 +107,9 @@ ARG DETEKT_VERSION=1.23.6
 ARG PSSA_VERSION='1.22.0'
 
 # renovate: datasource=npm depName=@salesforce/sfdx-scanner
-ARG SALESFORCE_SFDX_SCANNER_VERSION=4.3.2
+ARG SALESFORCE_SFDX_SCANNER_VERSION=4.4.0
 # renovate: datasource=npm depName=lightning-flow-scanner
-ARG LIGHTNING_FLOW_SCANNER_VERSION=2.30.0
+ARG LIGHTNING_FLOW_SCANNER_VERSION=2.32.0
 #ARG__END
 
 # Static args