chore(deps): update dependency kubescape/kubescape to v4.0.11

[renovate]

This PR contains the following updates:

Package	Update	Change
kubescape/kubescape	patch	4.0.9 → 4.0.11

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

kubescape/kubescape (kubescape/kubescape)

v4.0.11

Compare Source

Changelog

• 411b179 Cache compiled CEL programs across scanned objects (#​2503)
• 6bbcccd Derive cmd/vap policy metadata from the embedded VAP bundle (#​2485)
• 1a6cf89 Embed and load VAP YAML from the vendored bundle (#​2474)
• 6cb59a4 Expand encryption and decryption coverage for resource metadata (#​2442)
• df44c79 Fix air-gapped mode -- thread explicit offline flag to policy getters instead of relying on nil (#​2458)
• 949a569 Fix control-inputs fallback to return real local getter instead of unloaded store (#​2515)
• e4ab628 Fix local control cache (#​2463)
• 3c4b059 Fix/helm templates plain yaml warnings (#​2509)
• efb658f Vendor the CEL admission policy bundle (#​2455)
• 7dbe430 [ LFX 2026] feat(exceptions): honor objectSelector.matchExpressions via PostureExceptionPolicy.ObjectSelector (#​2480)
• 8a2e1a2 [Fix] : severity-based image exceptions in JSON, SARIF, and patch output -- use filtered Matches instead of RemainingMatches (#​2522)
• 5afd77b add unit tests for GetPreReqCmd and kubeconfig flag (#​2486)
• 21e2db5 core: Add test coverage for Kubescape.Diff pretty-printer output path (#​2467)
• 55df2bd docs(cli): document report protection workflow (#​2508)
• ef65747 docs(cli): improve report protection help and examples (#​2510)
• 80191c7 feat(anonymizer): support reversible container metadata transformation (#​2473)
• 3f29f09 feat(mcp): Add headless OPAProcessor for low-latency Network Policy s… (#​2512)
• 062d9cf feat(mcp): implement headless OPAProcessor rbac scanner (#​2492)
• f68fdc0 feat(operator): add quarantine action to remediate CLI subcommand (#​2461)
• 29928b8 feat(patch): add support for OCI and Local exports (#​2471)
• 79ae44e feat(printer): add GitLab SAST report output format (#​2505)
• df68301 feat(reportcrypto): add decryption support for encrypted resource metadata (#​2493)
• b830283 feat: add container profile tools and resources to MCP server (#​2479)
• 5757418 feat: implement AWS ECR vulnerability adaptor (#​2488)
• 20b5a83 feat: introduce Container Image Vulnerability (CIV) Adaptor interfaces (#​2482)
• 9ea839a feat: run CEL controls as part of the scan (#​2525)
• f7e805a fix(httphandler): add missing panic recovery to Metrics handler (#​2465)
• 05e3cc9 fix(httphandler): decouple prometheus metrics scan from request context (#​2451)
• 8d5d0d7 fix(httphandler): populate report in synchronous scan response (#​2483)
• 4d80ab4 fix(imagescan): preserve matches on metadata lookup errors (#​2519)
• 5b93069 fix(mcp): add double-checked mutex locking to k8sClient lazy init (#​2506)
• 0b3d0f6 fix(printer): don't append .txt to /dev/null in PrettyPrinter.SetWriter (#​2502)
• 6ba3a1d fix(sarif): don't os.Exit on unencodable fix, avoid empty SARIF file (#​2499)
• ef6b608 fix(sarif): surface PrettyWrite errors instead of silently writing empty file (#​2497)
• 8fb2eb1 fix(scan): don't let --exceptions/--controls-config/--attack-tracks trigger air-gapped mode (#​2532)
• 497f086 fix(scan): restore root PersistentPreRun for kubescape scan invocations (#​2530)
• 2adea95 fix(vap): deploy-library serves the embedded bundle, downloads only via --from-release (#​2507) (#​2514)
• 82dd34d fix: preserve explicit exceptions/inputs with use-artifacts-from (#​2490)
• 81617ed fix: support namespace/kind/name workload format (#​2459) (#​2460)
• 85933c9 rbac file todo to check api version is resolved (#​2523)
• 5bffddf refactor: decompose monolithic Results API handler (#​2477)
• 11a05e1 test(core): cover Kubescape.Download unknown-target error path (#​2468)

---

Released by GoReleaser.

v4.0.10

Compare Source

Changelog

• 960d6ce chore(crd): remove orphan, uninstallable SecurityException CRD and its test (#​2403)
• 778ec11 feat(operator): add operator remediate CLI subcommand (annotate + dry-run) (#​2448)
• 7542e40 fix(httphandler): surface async scan failures via Results endpoint (#​2339)
• bef62c9 Add CEL env builder for the VAP engine (#​2416)
• d31fc8b Add CEL evaluator (#​2443)
• 695c8d1 Add encryption transformer integration tests (#​2351)
• 932cd5b Add offline request stub for the CEL engine (#​2439)
• 820fa31 Docs: add circleci integration guide (#​2385)
• 34f531a Emit security-severity on SARIF rules (#​2398)
• 1917984 Fail closed on repo metadata transformation errors (#​2353)
• ffc7f92 Fix nil pointer panic on image scan when ScanData is nil (#​2431)
• 6a44d6c Fix panic parsing image names without an organization (#​2397)
• 80fa300 Fix relative path and Name typo (#​2343)
• add18bf Integrate report encryption metadata and DEK wrapping into anonymization workflow (#​2380)
• ccadbba Set HTTP timeouts on the scan listener server (#​2396)
• f8ae044 [ LFX 2026 ] Fixes bugs found before implementation of LFX 1982 (#​2366)
• f2e42ca [feat] : add scan coverage score to measure and report scan co… (#​2410)
• 554dd66 [fix] : Fall back to bundled defaults and surface degradation when control-inputs fetch fails (#​2395)
• cd5dba9 anonymizer: hide service account names in pod specs (#​2333)
• 865b036 backend: imagescan: add missing unit tests for getMatchers and newScanServiceIntegration (#​2427)
• e4a8f7d backend: ksinit: add success case for CreateKsObjectConnection (#​2429)
• f69c88b chore: modernize codebase to Go 1.26 (#​2415)
• f956507 feat(httphandler): add SSRF-hardened scan-completion webhook callback (#​2447)
• 1f2e83a feat(opaprocessor): add per-control evaluation timeout (#​2375)
• fed74dc feat(opaprocessor): wire CEL language dispatch with stub evaluator (#​2405)
• 8274975 feat(report): add encrypted report decryption (#​2425)
• 494b0e5 feat(reportcrypto): decrypt resource source metadata in reports (#​2440)
• 273a92e feat: add SLSA build provenance attestation to release workflow (#​2346)
• 1c7e2e8 feat: add encrypted repo metadata workflow (#​2365)
• 38bb518 fix(anonymizer): detect separator-less sensitive env variable names t… (#​2367)
• b66104d fix(coverage) : penalise silent failed GVR pulls in coverage score (#​2420)
• cc88b0f fix(diff): move --fail-on-new exit to cmd layer so output writer is closed (#​2434)
• bf4f796 fix(diff): validate format input and clean up status handling (#​2438)
• 8c24435 fix(hostsensorutils): normalize infoMap keys using ResourceGroupToString (#​2360)
• 9baa4e9 fix(httphandler): add panic recovery to scan execution goroutine (#​2352)
• ee4a4bc fix(httphandler): log persistence failure as warning, return valid result (#​2342)
• ab5d74b fix(list): emit JSON objects for list controls --format json (#​2401)
• ddc278f fix(offline): dynamically populate allcontrols framework and fix loadpolicy search (#​2338)
• 6349ae6 fix(opa): fail fast on cancelled cosign verification contexts (#​2368)
• 741b243 fix(opaprocessor) : discard partial results from timed-out controls (#​2404)
• d6bdc28 fix(opaprocessor): count timed-out controls as 0 in compliance score (#​2424)
• 8af7c84 fix(opaprocessor): stop processing after context cancellation (#​2386)
• 7f13c3e fix(portforwarder): avoid blocking on repeated stop signals (#​2381)
• e23bdbb fix(resourcehandler): dedup resources found by different providers (#​2336)
• f91a798 fix(resourcehandler): fail fast on cancelled contexts after resource pulls (#​2372)
• 1f7cb75 fix(resourcehandler): merge host-sensor infoMap instead of replacing it (#​2349)
• fb151f6 fix(resourcehandler): trim spaces from namespaces in field selectors (#​2382)
• c9ff488 fix(sarif): resolve correct line numbers for absolute-path file scans (#​2406)
• 387537a fix(scan): reject invalid format values before scanning (#​2370)
• c6781c1 fix(storage): skip orphaned RoleBinding instead of aborting scan persistence (#​2392)
• 3d6a657 fix(vap): add missing C-0199, C-0200, C-0201 to control ID map (#​2371)
• f0f07ba fix(vap): require params for configurable controls (#​2334)
• 55fb134 fix: anonymize LocalRootPath in hidden report output (#​2344)
• a60d9bc fix: prevent silent output overwrite when multiple formats share one path (#​2414)
• 7dd401a fix: read severity from summaryDetails instead of missing controls field (#​2412)
• c2e6123 fix: restrict config.json permissions to owner-only (#​2340)
• 96a764d fix: return clear error when wrong JSON structure passed to kubescape fix (#​2358)
• bb5a7a9 fix: return error when related RBAC objects share the same category (#​2422)
• d577fca fix: typos in core and cmd directories (#​2356)
• 93bacb5 fix: use filepath.Join instead of path.Join for filesystem paths (#​2407)
• c53c8c9 refactor: eliminate package-level mutable state in workload command (#​2379)
• 674b5f3 refactor: introduce transformer abstraction for repo metadata (#​2347)
• c070927 refactor: upgrade to standard error wrapping (%w) in MCP server (#​2377)
• 1ca0da2 reportcrypto: add DEK wrapping support (#​2374)
• 72d0bce test(opaprocessor): improve temporary resource cleanup (#​2388)

---

Released by GoReleaser.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

❌MegaLinter analysis: Error

❌ REPOSITORY / grype - 1 error

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME             INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS         RISK  
brace-expansion  2.1.2      5.0.8     npm   GHSA-mh99-v99m-4gvg  High      0.3% (26th)  0.3
[0113] ERROR discovered vulnerabilities at or above the severity threshold

❌ REPOSITORY / trivy - 1 error

────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/terraform_terraform_fmt/Dockerfile           │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/terraform_terragrunt/Dockerfile              │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/terraform_terrascan/Dockerfile               │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/terraform_tflint/Dockerfile                  │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/tsx_eslint/Dockerfile                        │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/typescript_es/Dockerfile                     │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/typescript_prettier/Dockerfile               │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/typescript_standard/Dockerfile               │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/vbdotnet_dotnet_format/Dockerfile            │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/xml_xmllint/Dockerfile                       │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/yaml_prettier/Dockerfile                     │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/yaml_v8r/Dockerfile                          │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ linters/yaml_yamllint/Dockerfile                     │ dockerfile │        -        │         0         │
├──────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ server/Dockerfile                                    │ dockerfile │        -        │         0         │
└──────────────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.72/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


mega-linter-runner/yarn.lock (yarn)
===================================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌─────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│     Library     │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                          Title                           │
├─────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ brace-expansion │ CVE-2026-14257 │ HIGH     │ fixed  │ 2.1.2             │ 5.0.8         │ brace-expansion through 5.0.7 is vulnerable to denial of │
│                 │                │          │        │                   │               │ service via m ......                                     │
│                 │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-14257               │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘

(Truncated to last 5000 characters out of 39965)

⚠️ PYTHON / bandit - 135 errors

uuid.uuid4())
172	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
173	    linter_name = linter.linter_name

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:246:4
245	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
246	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
247	    if os.path.isfile(workspace + os.path.sep + "no_test_failure"):

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:501:4
500	    )
501	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
502	    expected_file_name = ""

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:601:4
600	        workspace += os.path.sep + "bad"
601	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
602	    # Call linter

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:695:4
694	        workspace = workspace + os.path.sep + "fix"
695	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
696	

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:801:12
800	            ]
801	            assert (len(list(diffs))) > 0, f"No changes in the {file} file"
802	

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:81:42
80	    if item.fileUploadId:
81	        uploaded_file_path = os.path.join("/tmp/server-files", item.fileUploadId)
82	        if not os.path.isdir(uploaded_file_path):

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:103:38
102	    file_upload_id = "FILE_" + str(uuid1())
103	    uploaded_file_path = os.path.join("/tmp/server-files", file_upload_id)
104	    os.makedirs(uploaded_file_path)

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.4/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server_worker.py:98:34
97	        temp_dir = self.create_temp_dir()
98	        upload_dir = os.path.join("/tmp/server-files", file_upload_id)
99	        if os.path.exists(upload_dir):

--------------------------------------------------

Code scanned:
	Total lines of code: 20450
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 104
		Medium: 22
		High: 9
	Total issues (by confidence):
		Undefined: 0
		Low: 14
		Medium: 20
		High: 101
Files skipped (0):

(Truncated to last 5000 characters out of 91273)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.9)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec.sh
    Error: File:[sh/megalinter_exec.sh] is not executable

✅ [SUCCESS] sh/setup-runtime-user.sh

⚠️ SPELL / lychee - 51 errors

https://raw.githubusercontent.com/oxsecurity/megalinter/main/docs/assets/icons/linters/betterleaks.png (at 448:26) | Rejected status code: 404 Not Found

Errors in megalinter/descriptors/rst.megalinter-descriptor.yml
[403] https://docutils.sourceforge.io/docs/ref/rst/directives.html#raw-data-pass-through (at 34:38) | Rejected status code: 403 Forbidden

Errors in megalinter/descriptors/salesforce.megalinter-descriptor.yml
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/config.html (at 366:37) | Rejected status code: 403 Forbidden
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-flow.html (at 363:17) | Rejected status code: 403 Forbidden
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 172:17) | Error (cached)
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 270:17) | Error (cached)
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 466:17) | Error (cached)
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 568:17) | Error (cached)
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 661:17) | Error (cached)
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html (at 72:17) | Rejected status code: 403 Forbidden
[403] https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/rules-flow.html (at 365:23) | Rejected status code: 403 Forbidden
[404] https://github.com/Lightning-Flow-Scanner/lightning-flow-scanner-core#rules (at 746:23) | Rejected status code: 404 Not Found

Errors in megalinter/descriptors/terraform.megalinter-descriptor.yml
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png (at 176:23) | Rejected status code: 404 Not Found | Followed 1 redirect. Redirects: https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png --[302]--> https://github.com/gruntwork-io/terragrunt/blob/main/docs/assets/img/favicon/ms-icon-310x310.png

Errors in megalinter/descriptors/tsx.megalinter-descriptor.yml
[404] https://eslint-react.xyz/docs/getting-started/installation (at 82:37) | Rejected status code: 404 Not Found

Errors in megalinter/descriptors/xml.megalinter-descriptor.yml
[406] https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home (at 38:17) | Rejected status code: 406 Not Acceptable

Errors in README.md
[301] https://future-architect.github.io/authors/%E5%AE%AE%E6%B0%B8%E5%B4%87%E5%8F%B2 (at 1792:104) | Rejected status code: 301 Moved Permanently
[TIMEOUT] https://generated.at/ (at 1148:301) | Request timed out
[404] https://github.com/oxsecurity/megalinter/stargazers (at 1927:3) | Rejected status code: 404 Not Found
[404] https://github.com/oxsecurity/megalinter/stargazers/ (at 22:1) | Rejected status code: 404 Not Found
[403] https://medium.com/@caodanju/30-seconds-to-setup-megalinter-your-go-to-tool-for-automated-code-quality-and-iac-security-969d90a5a99c (at 1760:3) | Rejected status code: 403 Forbidden
[403] https://medium.com/@RunningMattress (at 1769:255) | Rejected status code: 403 Forbidden
[403] https://medium.com/@RunningMattress/level-up-your-unity-packages-with-ci-cd-9498d2791211 (at 1769:3) | Rejected status code: 403 Forbidden
[403] https://medium.com/@SeasonedDeveloper (at 1756:255) | Rejected status code: 403 Forbidden
[403] https://medium.com/@SeasonedDeveloper/looking-for-the-best-ci-cd-pipeline-linting-tool-try-megalinter-d89c9eba850d (at 1756:3) | Rejected status code: 403 Forbidden
[403] https://medium.com/datamindedbe/integrating-megalinter-to-automate-linting-across-multiple-codebases-a-technical-description-a200bb235b71 (at 1757:3) | Rejected status code: 403 Forbidden
[403] https://npmjs.org/package/mega-linter-runner (at 1063:1) | Error (cached)
[403] https://npmjs.org/package/mega-linter-runner (at 1064:1) | Error (cached)
[403] https://npmjs.org/package/mega-linter-runner (at 1065:1) | Error (cached)
[403] https://npmjs.org/package/mega-linter-runner (at 21:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/mega-linter-runner --[301]--> https://www.npmjs.com/package/mega-linter-runner
[403] https://pmd.sourceforge.io/pmd-6.55.0/pmd_userdocs_tools_ci.html (at 1859:3) | Error (cached)
[403] https://www.npmjs.com/package/@downatthebottomofthemolehole/megalinter-mcp-server (at 1734:354) | Rejected status code: 403 Forbidden

Hint: Followed 737 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: Rejected redirectional status codes. This means some redirects were not followed. You might want to increase the limit for `-m`/`--max-redirects`.

(Truncated to last 5000 characters out of 31059)

⚠️ MARKDOWN / markdownlint - 363 errors

orters/GitHubCommentReporter.md:27:196 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:27:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:174 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:196 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:28:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:160 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:29:48 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:143 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:30:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:152 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubStatusReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "GitHub Status Reporter"]
docs/reporters/GitlabCommentReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Gitlab Comment Reporter"]
docs/reporters/JsonReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "JSON Reporter"]
docs/reporters/MarkdownSummaryReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Markdown Summary Reporter"]
docs/reporters/SarifReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "SARIF Reporter (beta)"]
docs/reporters/TapReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "TAP Reporter"]
docs/reporters/TextReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Text Reporter"]
docs/reporters/UpdatedSourcesReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Updated Sources Reporter"]
docs/special-thanks.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Special thanks"]
docs/special-thanks.md:23:3 error MD045/no-alt-text Images should have alternate text (alt text)
docs/sponsor.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Sponsoring"]
docs/supported-linters.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Supported Linters"]
mega-linter-runner/generators/mega-linter-custom-flavor/templates/README.md:69 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "How to use the custom flavor"]
mega-linter-runner/README.md:27:274 error MD051/link-fragments Link fragments should be valid [Context: "[**apply formatting and auto-fixes**](#apply-fixes)"]
mega-linter-runner/README.md:27:217 error MD051/link-fragments Link fragments should be valid [Context: "[**reports in several formats**](#reports)"]
README.md:190:127 error MD051/link-fragments Link fragments should be valid [Context: "[many additional features](#mega-linter-vs-super-linter)"]
README.md:1954:3 error MD045/no-alt-text Images should have alternate text (alt text)

(Truncated to last 5000 characters out of 47895)

⚠️ YAML / prettier - 14 errors

r-runner/generators/mega-linter/templates/mega-linter.yml: SyntaxError: Implicit map keys need to be followed by map values (67:11)
[error]   65 |           # Only define `secrets.PAT` if you fully understand the trade-off.
[error]   66 |           token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
[error] > 67 |           <%- PERSIST_CREDENTIALS %>
[error]      |           ^^^^^^^^^^^^^^^^^^^^^^^^^^
[error]   68 |
[error]   69 |           # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to
[error]   70 |           # improve performance
megalinter/descriptors/action.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/ansible.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/api.megalinter-descriptor.yml 16ms (unchanged)
megalinter/descriptors/arm.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/bash.megalinter-descriptor.yml 31ms (unchanged)
megalinter/descriptors/bicep.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/c.megalinter-descriptor.yml 23ms (unchanged)
megalinter/descriptors/clojure.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/cloudformation.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/coffee.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/copypaste.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/cpp.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/csharp.megalinter-descriptor.yml 34ms (unchanged)
megalinter/descriptors/css.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/dart.megalinter-descriptor.yml 16ms (unchanged)
megalinter/descriptors/dockerfile.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/editorconfig.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/env.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/gherkin.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/go.megalinter-descriptor.yml 25ms (unchanged)
megalinter/descriptors/graphql.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/groovy.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/html.megalinter-descriptor.yml 25ms (unchanged)
megalinter/descriptors/java.megalinter-descriptor.yml 25ms (unchanged)
megalinter/descriptors/javascript.megalinter-descriptor.yml 41ms (unchanged)
megalinter/descriptors/json.megalinter-descriptor.yml 34ms (unchanged)
megalinter/descriptors/jsx.megalinter-descriptor.yml 26ms (unchanged)
megalinter/descriptors/kotlin.megalinter-descriptor.yml 16ms (unchanged)
megalinter/descriptors/kubernetes.megalinter-descriptor.yml 30ms (unchanged)
megalinter/descriptors/latex.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/lua.megalinter-descriptor.yml 19ms (unchanged)
megalinter/descriptors/makefile.megalinter-descriptor.yml 5ms (unchanged)
megalinter/descriptors/markdown.megalinter-descriptor.yml 30ms (unchanged)
megalinter/descriptors/perl.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/php.megalinter-descriptor.yml 52ms (unchanged)
megalinter/descriptors/powershell.megalinter-descriptor.yml 17ms (unchanged)
megalinter/descriptors/protobuf.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/puppet.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/python.megalinter-descriptor.yml 128ms (unchanged)
megalinter/descriptors/r.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/raku.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/repository.megalinter-descriptor.yml 143ms (unchanged)
megalinter/descriptors/robotframework.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/rst.megalinter-descriptor.yml 13ms (unchanged)
megalinter/descriptors/ruby.megalinter-descriptor.yml 13ms (unchanged)
megalinter/descriptors/rust.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/salesforce.megalinter-descriptor.yml 90ms (unchanged)
megalinter/descriptors/scala.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/snakemake.megalinter-descriptor.yml 21ms (unchanged)
megalinter/descriptors/spell.megalinter-descriptor.yml 46ms (unchanged)
megalinter/descriptors/sql.megalinter-descriptor.yml 17ms (unchanged)
megalinter/descriptors/swift.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/tekton.megalinter-descriptor.yml 15ms (unchanged)
megalinter/descriptors/terraform.megalinter-descriptor.yml 39ms (unchanged)
megalinter/descriptors/tsx.megalinter-descriptor.yml 16ms (unchanged)
megalinter/descriptors/typescript.megalinter-descriptor.yml 36ms (unchanged)
megalinter/descriptors/vbdotnet.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/xml.megalinter-descriptor.yml 24ms (unchanged)
megalinter/descriptors/yaml.megalinter-descriptor.yml 41ms (unchanged)
server/docker-compose-dev.yml 7ms (unchanged)
server/docker-compose.yml 6ms (unchanged)
trivy-secret.yaml 1ms (unchanged)
zizmor.yml 33ms (unchanged)

(Truncated to last 5000 characters out of 12080)

⚠️ YAML / yamllint - 42 errors

.grype.yaml
  6:1       warning  missing document start "---"  (document-start)

mega-linter-runner/.eslintrc.yml
  11:9      warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml
  48:15     warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml
  7:1       error    syntax error: could not find expected ':' (syntax)

mega-linter-runner/generators/mega-linter/templates/mega-linter.yml
  38:15     warning  too few spaces inside empty braces  (braces)
  69:11     error    syntax error: could not find expected ':' (syntax)

megalinter/descriptors/copypaste.megalinter-descriptor.yml
  18:301    warning  line too long (313 > 300 characters)  (line-length)

megalinter/descriptors/javascript.megalinter-descriptor.yml
  54:301    warning  line too long (475 > 300 characters)  (line-length)
  348:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/jsx.megalinter-descriptor.yml
  30:301    warning  line too long (475 > 300 characters)  (line-length)

megalinter/descriptors/markdown.megalinter-descriptor.yml
  89:301    warning  line too long (366 > 300 characters)  (line-length)

megalinter/descriptors/perl.megalinter-descriptor.yml
  26:301    warning  line too long (310 > 300 characters)  (line-length)

megalinter/descriptors/php.megalinter-descriptor.yml
  195:301   warning  line too long (389 > 300 characters)  (line-length)
  209:301   warning  line too long (302 > 300 characters)  (line-length)

megalinter/descriptors/repository.megalinter-descriptor.yml
  183:301   warning  line too long (408 > 300 characters)  (line-length)
  273:301   warning  line too long (329 > 300 characters)  (line-length)
  305:301   warning  line too long (306 > 300 characters)  (line-length)
  310:301   warning  line too long (321 > 300 characters)  (line-length)
  450:301   warning  line too long (345 > 300 characters)  (line-length)
  627:301   warning  line too long (338 > 300 characters)  (line-length)
  718:301   warning  line too long (306 > 300 characters)  (line-length)
  881:301   warning  line too long (316 > 300 characters)  (line-length)
  1206:301  warning  line too long (1263 > 300 characters)  (line-length)
  1299:301  warning  line too long (879 > 300 characters)  (line-length)
  1313:301  warning  line too long (358 > 300 characters)  (line-length)
  1375:301  warning  line too long (346 > 300 characters)  (line-length)
  1382:301  warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/salesforce.megalinter-descriptor.yml
  52:301    warning  line too long (359 > 300 characters)  (line-length)
  446:301   warning  line too long (359 > 300 characters)  (line-length)

megalinter/descriptors/spell.megalinter-descriptor.yml
  174:301   warning  line too long (315 > 300 characters)  (line-length)

megalinter/descriptors/sql.megalinter-descriptor.yml
  103:301   warning  line too long (319 > 300 characters)  (line-length)

megalinter/descriptors/terraform.megalinter-descriptor.yml
  27:301    warning  line too long (330 > 300 characters)  (line-length)
  92:301    warning  line too long (391 > 300 characters)  (line-length)
  150:301   warning  line too long (346 > 300 characters)  (line-length)
  216:301   warning  line too long (328 > 300 characters)  (line-length)

megalinter/descriptors/tsx.megalinter-descriptor.yml
  30:301    warning  line too long (475 > 300 characters)  (line-length)

megalinter/descriptors/typescript.megalinter-descriptor.yml
  41:301    warning  line too long (475 > 300 characters)  (line-length)
  338:301   warning  line too long (314 > 300 characters)  (line-length)

mkdocs.yml
  8:301     warning  line too long (552 > 300 characters)  (line-length)
  66:5      warning  wrong indentation: expected 6 but found 4  (indentation)
  78:5      warning  wrong indentation: expected 6 but found 4  (indentation)

zizmor.yml
  1:1       warning  missing document start "---"  (document-start)

✅ Linters with no issues

actionlint, betterleaks, black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, osv-scanner, pylint, ruff, secretlint, shellcheck, shfmt, syft, trivy-sbom, trufflehog, v8r, v8r, xmllint, zizmor

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository