-
Notifications
You must be signed in to change notification settings - Fork 24
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Removing checkov as action failure but warn instead.
- Loading branch information
1 parent
7a6b3f3
commit 12ac786
Showing
1 changed file
with
56 additions
and
56 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,3 @@ | ||
| --- | ||
| # MegaLinter GitHub Action configuration file | ||
| # More info at https://megalinter.io | ||
| name: MegaLinter | ||
|
|
@@ -30,64 +29,65 @@ jobs: | |
| issues: write | ||
| pull-requests: write | ||
| steps: | ||
| # Git Checkout | ||
| - name: Checkout Code | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | ||
| fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances | ||
| # Git Checkout | ||
| - name: Checkout Code | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | ||
| fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances | ||
|
|
||
| # MegaLinter | ||
| - name: MegaLinter | ||
| id: ml | ||
| # You can override MegaLinter flavor used to have faster performances | ||
| # More info at https://megalinter.io/flavors/ | ||
| uses: oxsecurity/megalinter@v7 | ||
| env: | ||
| # All available variables are described in documentation | ||
| # https://megalinter.io/configuration/ | ||
| VALIDATE_ALL_CODEBASE: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }} # Validates all source when push on main, else just the git diff with main. Override with true if you always want to lint all sources | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| # ADD YOUR CUSTOM ENV VARIABLES HERE OR DEFINE THEM IN A FILE .mega-linter.yml AT THE ROOT OF YOUR REPOSITORY | ||
| DISABLE: COPYPASTE,SPELL # Uncomment to disable copy-paste and spell checks | ||
| DISABLE_LINTERS: YAML_V8R,YAML_YAMLLINT,YAML_PRETTIER | ||
| REPOSITORY_CHECKOV_ARGUMENTS: --skip-check CKV2_GHA_1 | ||
| # MegaLinter | ||
| - name: MegaLinter | ||
| id: ml | ||
| # You can override MegaLinter flavor used to have faster performances | ||
| # More info at https://megalinter.io/flavors/ | ||
| uses: oxsecurity/megalinter@v7 | ||
| env: | ||
| # All available variables are described in documentation | ||
| # https://megalinter.io/configuration/ | ||
| VALIDATE_ALL_CODEBASE: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }} # Validates all source when push on main, else just the git diff with main. Override with true if you always want to lint all sources | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| # ADD YOUR CUSTOM ENV VARIABLES HERE OR DEFINE THEM IN A FILE .mega-linter.yml AT THE ROOT OF YOUR REPOSITORY | ||
| DISABLE: COPYPASTE,SPELL # Uncomment to disable copy-paste and spell checks | ||
| DISABLE_LINTERS: YAML_V8R,YAML_YAMLLINT,YAML_PRETTIER | ||
| REPOSITORY_CHECKOV_DISABLE_ERRORS: true | ||
| REPOSITORY_CHECKOV_ARGUMENTS: --skip-check CKV2_GHA_1 | ||
|
|
||
| # Upload MegaLinter artifacts | ||
| - name: Archive production artifacts | ||
| if: ${{ success() }} || ${{ failure() }} | ||
| uses: actions/upload-artifact@v3 | ||
| with: | ||
| name: MegaLinter reports | ||
| path: | | ||
| megalinter-reports | ||
| mega-linter.log | ||
| # Upload MegaLinter artifacts | ||
| - name: Archive production artifacts | ||
| if: ${{ success() }} || ${{ failure() }} | ||
| uses: actions/upload-artifact@v3 | ||
| with: | ||
| name: MegaLinter reports | ||
| path: | | ||
| megalinter-reports | ||
| mega-linter.log | ||
| - name: Create Pull Request with applied fixes | ||
| # Create pull request if applicable (for now works only on PR from same repository, not from forks) | ||
| - name: Create Pull Request with applied fixes | ||
| id: cpr | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| uses: peter-evans/create-pull-request@v5 | ||
| with: | ||
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | ||
| commit-message: "[MegaLinter] Apply linters automatic fixes" | ||
| title: "[MegaLinter] Apply linters automatic fixes" | ||
| labels: bot | ||
| - name: Create PR output | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| run: | | ||
| echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}" | ||
| echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}" | ||
| id: cpr | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| uses: peter-evans/create-pull-request@v5 | ||
| with: | ||
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | ||
| commit-message: "[MegaLinter] Apply linters automatic fixes" | ||
| title: "[MegaLinter] Apply linters automatic fixes" | ||
| labels: bot | ||
| - name: Create PR output | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| run: | | ||
| echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}" | ||
| echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}" | ||
| - name: Prepare commit | ||
| # Push new commit if applicable (for now works only on PR from same repository, not from forks) | ||
| - name: Prepare commit | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| run: sudo chown -Rc $UID .git/ | ||
| - name: Commit and push applied linter fixes | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| uses: stefanzweifel/git-auto-commit-action@v4 | ||
| with: | ||
| branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }} | ||
| commit_message: "[MegaLinter] Apply linters fixes" | ||
| commit_user_name: megalinter-bot | ||
| commit_user_email: [email protected] | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| run: sudo chown -Rc $UID .git/ | ||
| - name: Commit and push applied linter fixes | ||
| if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') | ||
| uses: stefanzweifel/git-auto-commit-action@v4 | ||
| with: | ||
| branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }} | ||
| commit_message: "[MegaLinter] Apply linters fixes" | ||
| commit_user_name: megalinter-bot | ||
| commit_user_email: [email protected] | ||