chore(deps): update checkmarx/kics docker tag to v2.1.18 - abandoned by renovate[bot] · Pull Request #295 · echoix/megalinter

renovate · 2025-12-21T00:24:26Z

This PR contains the following updates:

Package	Type	Update	Change
checkmarx/kics		patch	`v2.1.17-alpine` -> `v2.1.18-alpine`
checkmarx/kics	stage	patch	`v2.1.17-alpine` -> `v2.1.18-alpine`

Release Notes

Checkmarx/kics (checkmarx/kics)

`v2.1.18`

Compare Source

What's Changed

feat(query): implements "Beta - Activity Log Alert For Create Policy Assignment Not Configured" by @cx-andre-pereira in #7805
feat(query): implements "Beta - Activity Log Alert For Delete Policy Assignment Not Configured" by @cx-andre-pereira in #7806
feat(query): implemented 'ensure critical contacts is configured for organization' query for terraform/gcp by @cx-ricardo-jesus in #7841
perf(engine): optimize Terraform parser with directory caching and LOC-based memory calculation by @cx-artur-ribeiro in #7864
feat(query): implements "Beta - Activity Log Alert For Create Or Update Network Security Group Not Configured" by @cx-andre-pereira in #7808
feat(query): implements "Beta - Activity Log Alert For Delete Network Security Group Not Configured" by @cx-andre-pereira in #7810
feat(query): implements "Beta - Activity Log Alert For Create or Update Security Solution Not Configured" by @cx-andre-pereira in #7811
feat(query): implements "Beta - Activity Log Alert For Delete Security Solution Not Configured" by @cx-andre-pereira in #7812
feat(query): implements "Beta - Activity Log Alert For Create or Update SQL Server Firewall Rule Not Configured" by @cx-andre-pereira in #7813
feat(query): implements "Beta - Activity Log Alert For Delete SQL Server Firewall Rule Not Configured" by @cx-andre-pereira in #7814
feat(query): implements "Beta - Activity Log Alert For Create or Update Public IP Address Rule Not Configured" by @cx-andre-pereira in #7819
chore(ci): add CES CI workflows by @cx-rafael-carvalho in #7869
feat(query): implements "Beta - Activity Log Alert For Delete Public IP Address Rule Not Configured" by @cx-andre-pereira in #7815
feat(query): implements "Beta - File Share Without Soft Delete" by @cx-andre-pereira in #7827
feat(query): implements "Beta - Storage Account Not Using Latest SMB Protocol Version" by @cx-andre-pereira in #7828
feat(query): implements "Beta - Storage Account Using Unsafe SMB Channel Encryption" by @cx-andre-pereira in #7830
feat(query): implements "Beta - Blob Storage Without Soft Delete" by @cx-andre-pereira in #7831
feat(query): implements "Beta - Storage Account With Shared Access Key" by @cx-andre-pereira in #7832
feat(query): implements "Beta - Containers Without Soft Delete" by @cx-andre-pereira in #7834
feat(query): implements "Beta - Storage Account With Cross Tenant Replication Enabled" by @cx-andre-pereira in #7835
feat(query): implements "Beta - Storage Account Without Delete Lock" by @cx-andre-pereira in #7836
feat(query): implements "Beta - Activity Log Alert For Service Health Not Configured" by @cx-andre-pereira in #7821
feat(query): implements "Beta - Service Without Resource Logging" by @cx-andre-pereira in #7837
feat(query): new query "Beta - Databricks Workspace Without CMK" - Terraform/azure by @cx-andre-pereira in #7770
feat(query): implements "Beta - Logs And Alerts Missing Project Ownership Assignment And Changes" by @cx-andre-pereira in #7804
feat(query): implements "Beta - Logs And Alerts Missing Audit Configuration Changes" by @cx-andre-pereira in #7801
feat(query): implements "Beta - Logs And Alerts Missing Custom Role Changes" - Terraform/gcp by @cx-andre-pereira in #7772
feat(query): implements "Beta - Resource Without Diagnostic Settings" by @cx-andre-pereira in #7793
feat(query): implements "Beta - Diagnostic Settings Without Appropriate Logging" by @cx-andre-pereira in #7794
feat(query): implements "Beta - Databricks Diagnostic Logging Unconfigured" - Terraform/azure by @cx-andre-pereira in #7769
feat(query): implements "Beta - Cloud Asset Inventory Disabled" - Terraform/gcp by @cx-andre-pereira in #7775
feat(query): implemented query to cover "Ensure Legacy Networks Do Not Exist For Older Project" for terraform/gcp by @cx-ricardo-jesus in #7822
feat(query): implements "Beta - Backup Vault Without Soft Delete" by @cx-andre-pereira in #7845
feat(query): implements "Beta - Backup Vault Without Immutability" by @cx-andre-pereira in #7848
feat(query): implements "Beta - Recovery Services Vault Without Soft Delete" by @cx-andre-pereira in #7849
feat(query): implemented query that checks if the use of user access administrator is not restricted for terraform/azure by @cx-ricardo-jesus in #7842
fix(action): bump grype anchore action by @cx-miguel-silva in #7909
feat(query): implements "Beta - Recovery Services Vault Without Immutability" by @cx-andre-pereira in #7850
feat(query): implements "Beta - Recovery Services Vault With Public Network Access" by @cx-andre-pereira in #7851
feat(query): implemented query Beta - Key Vault Purge Protection Is Enabled for terraform/azure and fixed remediation problems by @cx-ricardo-jesus in #7838
feat(query): implements "Beta - VM Without Managed Disk" by @cx-andre-pereira in #7856
feat(query): implements "Beta - SQL Database Without Data Encryption" by @cx-andre-pereira in #7858
docs(queries): update queries catalog by @kicsbot in #7894
docs(kicsbot): preparing for release 2.1.18 by @kicsbot in #7914

New Contributors

@cx-rafael-carvalho made their first contribution in #7869

Full Changelog: Checkmarx/kics@v2.1.17...v2.1.18

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-12-21T00:28:37Z

❌MegaLinter analysis: Error

❌ REPOSITORY / trivy - 1 error

2025-12-21T00:28:00Z	INFO	[vulndb] Need to update DB
2025-12-21T00:28:00Z	INFO	[vulndb] Downloading vulnerability DB...
2025-12-21T00:28:00Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
61.58 MiB / 78.75 MiB [----------------------------------------------->_____________] 78.19% ? p/s ?78.75 MiB / 78.75 MiB [----------------------------------------------------------->] 100.00% ? p/s ?78.75 MiB / 78.75 MiB [----------------------------------------------------------->] 100.00% ? p/s ?78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 28.61 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 28.61 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 28.61 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 26.76 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 26.76 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 26.76 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 25.04 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 25.04 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [---------------------------------------------->] 100.00% 25.04 MiB p/s ETA 0s78.75 MiB / 78.75 MiB [-------------------------------------------------] 100.00% 33.04 MiB p/s 2.6s2025-12-21T00:28:04Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2025-12-21T00:28:04Z	INFO	[vuln] Vulnerability scanning is enabled
2025-12-21T00:28:04Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-12-21T00:28:04Z	INFO	[misconfig] Need to update the checks bundle
2025-12-21T00:28:04Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-12-21T00:28:06Z	INFO	[python] Licenses acquired from one or more METADATA files may be subject to additional terms. Use `--debug` flag to see all affected packages.
2025-12-21T00:28:10Z	WARN	[yarn] Protocol error	err="failed to parse version: 'version-range@^4.15.0:"
2025-12-21T00:28:10Z	INFO	Suppressing dependencies for development and testing. To display them, try the '--include-dev-deps' flag.
2025-12-21T00:28:10Z	INFO	Number of language-specific files	num=4
2025-12-21T00:28:10Z	INFO	[pip] Detecting vulnerabilities...
2025-12-21T00:28:10Z	INFO	[uv] Detecting vulnerabilities...
2025-12-21T00:28:10Z	INFO	[yarn] Detecting vulnerabilities...
2025-12-21T00:28:10Z	INFO	Detected config files	num=154
2025-12-21T00:28:10Z	INFO	Some vulnerabilities have been ignored/suppressed. Use the "--show-suppressed" flag to display them.

Report Summary

┌──────────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│                        Target                        │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ .config/python/dev/requirements.txt                  │    pip     │        0        │         -         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ mega-linter-runner/yarn.lock                         │    yarn    │        0        │         -         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ server/requirements.txt                              │    pip     │        0        │         -         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ uv.lock                                              │     uv     │        2        │         -         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ .config/gitpod/Dockerfile                            │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ .devcontainer/Dockerfile                             │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile                                           │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ flavors/c_cpp/Dockerfile                             │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ flavors/ci_light/Dockerfile                          │ dockerfile │        -     

(Truncated to 5000 characters out of 39898)

⚠️ PYTHON / bandit - 69 errors

Run started:2025-12-21 00:27:21.602333+00:00

Test results:
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./.automation/build.py:11:0
10	import shutil
11	import subprocess
12	import sys

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ''
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3050:35
3049	                api_github_headers = {"content-type": "application/json"}
3050	                use_github_token = ""
3051	                if "GITHUB_TOKEN" in os.environ:

--------------------------------------------------
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: ' (with GITHUB_TOKEN)'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b105_hardcoded_password_string.html
   Location: ./.automation/build.py:3054:39
3053	                    api_github_headers["authorization"] = f"Bearer {github_token}"
3054	                    use_github_token = " (with GITHUB_TOKEN)"
3055	                logging.info(

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3432:14
3431	        cwd=cwd,
3432	        shell=True,
3433	        executable=None if sys.platform == "win32" else which("bash"),
3434	    )
3435	    stdout = utils.clean_string(process.stdout)
3436	    logging.info(f"Format table results: ({process.returncode})\n" + stdout)
3437	
3438	
3439	def generate_json_schema_docs():
3440	    logging.info("Generating json schema html docs…")
3441	    if sys.platform == "win32":

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3455:14
3454	        cwd=cwd,
3455	        shell=True,
3456	        executable=None if sys.platform == "win32" else which("bash"),
3457	    )
3458	    stdout = utils.clean_string(process.stdout)
3459	    logging.info(
3460	        f"Generate json schema docs results: ({process.returncode})\n" + stdout
3461	    )
3462	
3463	
3464	def generate_version():

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b607_start_process_with_partial_path.html
   Location: ./.automation/build.py:3468:14
3467	    cwd_to_use = os.getcwd() + "/mega-linter-runner"
3468	    process = subprocess.run(
3469	        [
3470	            "npm",
3471	            "version",
3472	            "--newversion",
3473	            RELEASE_TAG,
3474	            "-no-git-tag-version",
3475	            "--no-commit-hooks",
3476	        ],
3477	        stdout=subprocess.PIPE,
3478	        universal_newlines=True,
3479	        cwd=cwd_to_use,
3480	        shell=True,
3481	    )
3482	    print(process.stdout)

--------------------------------------------------
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue.
   Severity: High   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b602_subprocess_popen_with_shell_equals_true.html
   Location: ./.automation/build.py:3480:14
3479	        cwd=cwd_to_use,
3480	        shell=True,
3481	    )
3482	    print(process.stdout)
3483	    print(process.stderr)
3484	    # Update python project version:
3485	    process = subprocess.run(
3486	        ["hatch", "version", RELEASE_TAG],
3487	        stdout=subprocess.PIPE,
3488	        text=True,
3489	        shell=True,
3490	        check=True,
3491	    )
3492	    # Update changelog
3493	    if UPDATE_CHANGELOG is True:
3494	        changelog_file = f"{REPO_

(Truncated to 5000 characters out of 43897)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.3)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable

⚠️ REPOSITORY / grype - 36 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not 

(Truncated to 5000 characters out of 32645)

⚠️ SPELL / lychee - 21 errors

[WARN ] WARNING: `--exclude-mail` is deprecated and will soon be removed; E-Mail is no longer checked by default. Use `--include-mail` to enable E-Mail checking.
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[404] https://github.com/$ | Network error: Not Found
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found
[404] https://github.com/Lightning-Flow-Scanner | Network error: Not Found
[404] https://lychee.cli.rs/usage/config/ | Network error: Not Found
[404] https://github.com/pderichs/sublime_rubocop | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_list.html | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_basics.html#selecting-and-ignoring-rules | Network error: Not Found
[404] https://github.com/Flow-Scanner/lightning-flow-scanner-cli/raw/main/docs/images/banner.png | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/configuration/configuration.html | Network error: Not Found
[404] https://lychee.cli.rs/usage/cli/ | Network error: Not Found
[404] https://raku.org/camelia-logo.png | Network error: Not Found
📝 Summary
---------------------
🔍 Total.........2395
✅ Successful....1908
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.......466
❓ Unknown..........0
🚫 Errors..........21

Errors in README.md
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden

Errors in megalinter/descriptors/markdown.megalinter-descriptor.yml
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden

Errors in mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml
[404] https://github.com/$ | Network error: Not Found

Errors in megalinter/descriptors/ruby.megalinter-descriptor.yml
[404] https://github.com/pderichs/sublime_rubocop | Network error: Not Found

Errors in megalinter/descriptors/robotframework.megalinter-descriptor.yml
[404] https://robocop.readthedocs.io/en/stable/rules/rules_basics.html#selecting-and-ignoring-rules | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/rules/rules_list.html | Network error: Not Found
[404] https://robocop.readthedocs.io/en/stable/configuration/configuration.html | Network error: Not Found

Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/configuration/ | Network error: Forbidden

Errors in megalinter/descriptors/spell.megalinter-descriptor.yml
[404] https://lychee.cli.rs/usage/cli/ | Network error: Not Found
[404] https://lychee.cli.rs/usage/config/ | Network error: Not Found

Errors in megalinter/descriptors/raku.megalinter-descriptor.yml
[404] https://raku.org/camelia-logo.png | Network error: Not Found

Errors in mega-linter-runner/README.md
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)

Errors in megalinter/descriptors/salesforce.megalinter-descriptor.yml
[404] https://github.com/Flow-Scanner/lightning-flow-scanner-cli/raw/main/docs/images/banner.png | Network error: Not Found
[404] https://github.com/Lightning-Flow-Scanner | Network error: Not Found

Errors in megalinter/descriptors/python.megalinter-descriptor.yml
[404] https://plugins.jetbrains.com/plugin/11563-flake8-support | Network error: Not Found

⚠️ MARKDOWN / markdownlint - 314 errors

.github/copilot-instructions.md:9 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/copilot-instructions.md:156 MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.github/linters/valestyles/proselint/README.md:12:601 MD013/line-length Line length [Expected: 600; Actual: 755]
CHANGELOG.md:171:90 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
CHANGELOG.md:2192:87 MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/articles.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "They talk about MegaLinter"]
docs/badge.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Badge"]
docs/config-activation.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Activation and deactivation"]
docs/config-apply-fixes.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Apply fixes"]
docs/config-cli-lint-mode.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "CLI lint mode"]
docs/config-file.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: ".mega-linter.yml file"]
docs/config-filtering.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Filter linted files"]
docs/config-linters.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Linter specific variables"]
docs/config-postcommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Post-commands"]
docs/config-precommands.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Pre-commands"]
docs/config-variables-security.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Environment variables security"]
docs/config-variables.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Common variables"]
docs/configuration.md:9 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Configuration"]
docs/descriptors/action_actionlint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "actionlint"]
docs/descriptors/action.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ACTION"]
docs/descriptors/ansible_ansible_lint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ansible-lint"]
docs/descriptors/ansible_ansible_lint.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 795]
docs/descriptors/ansible.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ANSIBLE"]
docs/descriptors/api_spectral.md:14:601 MD013/line-length Line length [Expected: 600; Actual: 746]
docs/descriptors/api.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "API"]
docs/descriptors/arm_arm_ttk.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "arm-ttk"]
docs/descriptors/arm.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "ARM"]
docs/descriptors/bash_bash_exec.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bash-exec"]
docs/descriptors/bash_shellcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shellcheck"]
docs/descriptors/bash_shellcheck.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 785]
docs/descriptors/bash_shfmt.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "shfmt"]
docs/descriptors/bash.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BASH"]
docs/descriptors/bicep_bicep_linter.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "bicep_linter"]
docs/descriptors/bicep.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "BICEP"]
docs/descriptors/c_clang_format.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "clang-format"]
docs/descriptors/c_clang_format.md:8:601 MD013/line-length Line length [Expected: 600; Actual: 768]
docs/descriptors/c_cppcheck.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cppcheck"]
docs/descriptors/c_cpplint.md:7 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "cpplint"]
docs/descriptors/c.md:8 MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "C"]
docs/

(Truncated to 5000 characters out of 38980)

⚠️ YAML / prettier - 6 errors

.automation/plugins.yml 83ms (unchanged)
.github/FUNDING.yml 8ms (unchanged)
.github/dependabot.yml 44ms (unchanged)
.github/linters/.cfnlintrc.yml 4ms (unchanged)
.github/linters/.checkov.yml 4ms (unchanged)
.github/linters/.golangci.yml 8ms (unchanged)
.github/linters/.hadolint.yml 5ms (unchanged)
.github/linters/.openapirc.yml 3ms (unchanged)
.github/linters/.protolintrc.yml 8ms (unchanged)
.github/linters/.ruby-lint.yml 2ms (unchanged)
.github/linters/.yamllint.yml 11ms (unchanged)
.github/linters/analysis_options.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/AMPM.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/Accessibility.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Acronyms.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/Adverbs.yml 43ms (unchanged)
.github/linters/valestyles/Microsoft/Auto.yml 6ms (unchanged)
.github/linters/valestyles/Microsoft/Avoid.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/ComplexWords.yml 28ms (unchanged)
.github/linters/valestyles/Microsoft/Contractions.yml 9ms (unchanged)
.github/linters/valestyles/Microsoft/Dashes.yml 12ms (unchanged)
.github/linters/valestyles/Microsoft/DateFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/DateNumbers.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/DateOrder.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Ellipses.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/FirstPerson.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Foreign.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Gender.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/GenderBias.yml 10ms (unchanged)
.github/linters/valestyles/Microsoft/GeneralURL.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingAcronyms.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingColons.yml 7ms (unchanged)
.github/linters/valestyles/Microsoft/HeadingPunctuation.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Headings.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Hyphens.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Negative.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Ordinal.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/OxfordComma.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Passive.yml 15ms (unchanged)
.github/linters/valestyles/Microsoft/Percentages.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/Quotes.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/RangeFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/RangeTime.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/Ranges.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Semicolon.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/SentenceLength.yml 3ms (unchanged)
.github/linters/valestyles/Microsoft/Spacing.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Suspended.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Terms.yml 4ms (unchanged)
.github/linters/valestyles/Microsoft/URLFormat.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Units.yml 2ms (unchanged)
.github/linters/valestyles/Microsoft/Vocab.yml 5ms (unchanged)
.github/linters/valestyles/Microsoft/We.yml 1ms (unchanged)
.github/linters/valestyles/Microsoft/Wordiness.yml 15ms (unchanged)
.github/linters/valestyles/proselint/Airlinese.yml 1ms (unchanged)
.github/linters/valestyles/proselint/AnimalLabels.yml 12ms (unchanged)
.github/linters/valestyles/proselint/Annotations.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Apologizing.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Archaisms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/But.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Cliches.yml 42ms (unchanged)
.github/linters/valestyles/proselint/CorporateSpeak.yml 5ms (unchanged)
.github/linters/valestyles/proselint/Currency.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Cursing.yml 8ms (unchanged)
.github/linters/valestyles/proselint/DateCase.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateMidnight.yml 1ms (unchanged)
.github/linters/valestyles/proselint/DateRedundancy.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DateSpacing.yml 2ms (unchanged)
.github/linters/valestyles/proselint/DenizenLabels.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Diacritical.yml 11ms (unchanged)
.github/linters/valestyles/proselint/GenderBias.yml 5ms (unchanged)
.github/linters/valestyles/proselint/GroupTerms.yml 4ms (unchanged)
.github/linters/valestyles/proselint/Hedging.yml 1ms (unchanged)
.github/linters/valestyles/proselint/Hyperbole.yml 2ms (unchanged)
.github/linters/valestyles/proselint/Jargon.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTOffensive.yml 2ms (unchanged)
.github/linters/valestyles/proselint/LGBTTerms.yml 3ms (unchanged)
.github/linters/valestyles/proselint/Malapropisms.yml 2ms (unchanged)
.github/linters/val

(Truncated to 5000 characters out of 11517)

⚠️ YAML / yamllint - 189 errors

.automation/plugins.yml
  1:1       warning  missing document start "---"  (document-start)

.github/FUNDING.yml
  3:1       warning  missing document start "---"  (document-start)

.github/dependabot.yml
  4:1       warning  missing document start "---"  (document-start)

.github/linters/.cfnlintrc.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.checkov.yml
  2:1       warning  missing document start "---"  (document-start)

.github/linters/.golangci.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.hadolint.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/.protolintrc.yml
  2:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/AMPM.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Accessibility.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Acronyms.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Adverbs.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Auto.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Avoid.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/ComplexWords.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Contractions.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Dashes.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateFormat.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateNumbers.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/DateOrder.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ellipses.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/FirstPerson.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Foreign.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Gender.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/GenderBias.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/GeneralURL.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingAcronyms.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingColons.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/HeadingPunctuation.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Headings.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Hyphens.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Negative.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ordinal.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/OxfordComma.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Passive.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Percentages.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Quotes.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/RangeFormat.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/RangeTime.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Ranges.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Semicolon.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/SentenceLength.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valestyles/Microsoft/Spacing.yml
  1:1       warning  missing document start "---"  (document-start)

.github/linters/valesty

(Truncated to 5000 characters out of 21449)

✅ Linters with no issues

black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy-sbom, trufflehog, v8r, v8r, xmllint

See detailed reports in MegaLinter artifacts

renovate · 2025-12-23T16:20:29Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

renovate · 2026-01-11T11:57:38Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

echoix and others added 2 commits December 14, 2025 16:21

Update slash-command-dispatch.yml

67ab835

chore(deps): update checkmarx/kics docker tag to v2.1.18

b8afca0

renovate Bot added the dependencies Pull requests that update a dependency file label Dec 21, 2025

renovate Bot requested a review from echoix as a code owner December 21, 2025 00:24

renovate Bot added the dependencies Pull requests that update a dependency file label Dec 21, 2025

renovate Bot temporarily deployed to dev December 21, 2025 00:24 Inactive

renovate Bot had a problem deploying to dev December 21, 2025 00:24 Failure

echoix force-pushed the main branch from 67ab835 to 24982c6 Compare December 23, 2025 16:01

renovate Bot changed the title ~~chore(deps): update checkmarx/kics docker tag to v2.1.18~~ chore(deps): update checkmarx/kics docker tag to v2.1.18 - abandoned Dec 23, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update checkmarx/kics docker tag to v2.1.18 - abandoned - #295

chore(deps): update checkmarx/kics docker tag to v2.1.18 - abandoned#295
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/checkmarx-kics-2.1.x

renovate Bot commented Dec 21, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Dec 21, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 23, 2025

Uh oh!

renovate Bot commented Jan 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Dec 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.1.18

What's Changed

New Contributors

Configuration

Uh oh!

github-actions Bot commented Dec 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

✅ Linters with no issues

Uh oh!

renovate Bot commented Dec 23, 2025

Autoclosing Skipped

Uh oh!

renovate Bot commented Jan 11, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Dec 21, 2025 •

edited

Loading

`v2.1.18`

github-actions Bot commented Dec 21, 2025 •

edited

Loading