Update docker/build-push-action action to v6#649
Merged
Conversation
Contributor
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| actionlint | 4 | 3 | 0 | 0.36s | ||
| ✅ COPYPASTE | jscpd | yes | no | no | 2.2s | |
| hadolint | 2 | 1 | 0 | 0.39s | ||
| ✅ JSON | jsonlint | 3 | 0 | 0 | 0.18s | |
| ✅ JSON | prettier | 3 | 0 | 0 | 0 | 0.44s |
| ✅ JSON | v8r | 3 | 0 | 0 | 4.21s | |
| markdownlint | 12 | 0 | 18 | 0 | 1.05s | |
| ✅ MARKDOWN | markdown-table-formatter | 12 | 0 | 0 | 0 | 0.29s |
| ✅ PYTHON | bandit | 6 | 0 | 0 | 0.98s | |
| ✅ PYTHON | black | 6 | 0 | 0 | 0 | 1.31s |
| ✅ PYTHON | flake8 | 6 | 0 | 0 | 0.53s | |
| ✅ PYTHON | isort | 6 | 0 | 0 | 0 | 0.19s |
| mypy | 6 | 4 | 0 | 6.35s | ||
| ✅ PYTHON | pylint | 6 | 0 | 0 | 4.59s | |
| pyright | 6 | 5 | 0 | 2.45s | ||
| ✅ PYTHON | ruff | 6 | 0 | 0 | 0 | 0.02s |
| ✅ REPOSITORY | checkov | yes | no | no | 14.52s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 16.2s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.01s | |
| ✅ REPOSITORY | grype | yes | no | no | 26.61s | |
| ✅ REPOSITORY | secretlint | yes | no | no | 0.49s | |
| ✅ REPOSITORY | syft | yes | no | no | 1.16s | |
| ✅ REPOSITORY | trivy | yes | no | no | 5.18s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.53s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 2.26s | |
| ✅ SPELL | codespell | 30 | 0 | 0 | 0 | 0.31s |
| ✅ SPELL | cspell | 48 | 0 | 0 | 3.72s | |
| ✅ SPELL | lychee | 30 | 0 | 0 | 1.92s | |
| ✅ YAML | prettier | 15 | 0 | 0 | 0 | 0.88s |
| ✅ YAML | v8r | 15 | 0 | 0 | 7.26s | |
| ✅ YAML | yamllint | 15 | 0 | 0 | 0.64s |
Detailed Issues
⚠️ ACTION / actionlint - 3 errors
.github/workflows/github-dependents-info.yml:52:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
|
52 | run: sudo chown -R $USER:$USER .
| ^~~~
.github/workflows/github-dependents-info.yml:52:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
|
52 | run: sudo chown -R $USER:$USER .
| ^~~~
.github/workflows/release.yml:63:9: shellcheck reported issue in this script: SC2086:info:1:55: Double quote to prevent globbing and word splitting [shellcheck]
|
63 | run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> ${GITHUB_ENV}
| ^~~~
⚠️ DOCKERFILE / hadolint - 1 error
Dockerfile:5 DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
docker/Dockerfile:7 DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
docker/Dockerfile:12 DL3045 warning: `COPY` to a relative destination without `WORKDIR` set.
docker/Dockerfile:15 DL3003 warning: Use WORKDIR to switch to a directory
docker/Dockerfile:15 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/Dockerfile:15 SC2226 warning: This ln has no destination. Check the arguments, or specify '.' explicitly.
docker/Dockerfile:24 DL3025 warning: Use arguments JSON notation for CMD and ENTRYPOINT arguments
⚠️ MARKDOWN / markdownlint - 18 errors
.github/PULL_REQUEST_TEMPLATE.md:1 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "## Description"]
README.md:45:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:46:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:47:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:48:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:212:3 MD051/link-fragments Link fragments should be valid [Context: "[Installation](#⚙️-installation)"]
README.md:213:3 MD051/link-fragments Link fragments should be valid [Context: "[Usage](#🛠️-usage)"]
README.md:214:3 MD051/link-fragments Link fragments should be valid [Context: "[Examples](#🧪-examples)"]
README.md:240:185 MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:241:1 MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: trailing_only; Missing leading pipe]
README.md:241:271 MD056/table-column-count Table column count [Expected: 3; Actual: 1; Too few cells, row will be missing data]
README.md:256 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:260 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:265 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:269 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:273 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:277 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:281 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
⚠️ PYTHON / mypy - 4 errors
Collecting types-requests
Downloading types_requests-2.32.4.20250913-py3-none-any.whl.metadata (2.0 kB)
Collecting urllib3>=2 (from types-requests)
Downloading urllib3-2.6.2-py3-none-any.whl.metadata (6.6 kB)
Downloading types_requests-2.32.4.20250913-py3-none-any.whl (20 kB)
Downloading urllib3-2.6.2-py3-none-any.whl (131 kB)
Installing collected packages: urllib3, types-requests
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2/2 [types-requests]
Successfully installed types-requests-2.32.4.20250913 urllib3-2.6.2
github_dependents_info/gh_dependents_info.py:44: error: Need type annotation for "packages" (hint: "packages: list[<type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:45: error: Need type annotation for "all_public_dependent_repos" (hint: "all_public_dependent_repos: list[<type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:46: error: Need type annotation for "badges" (hint: "badges: dict[<type>, <type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:47: error: Need type annotation for "result" (hint: "result: dict[<type>, <type>] = ...") [var-annotated]
Installing missing stub packages:
/venvs/mypy/bin/python3 -m pip install types-requests
Found 4 errors in 1 file (checked 6 source files)
⚠️ PYTHON / pyright - 5 errors
github_dependents_info/__main__.py
github_dependents_info/__main__.py:6:6 - error: Import "rich.console" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py
github_dependents_info/gh_dependents_info.py:9:8 - error: Import "pandas" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:11:6 - error: Import "bs4" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:13:6 - error: Import "requests.packages.urllib3.util.retry" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:147:49 - error: "total_public_stars" is possibly unbound (reportPossiblyUnboundVariable)
5 errors, 0 warnings, 0 informations
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@beta --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,SPELL_CODESPELL,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R
5dd5268 to
26043b2
Compare
26043b2 to
0148481
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

This PR contains the following updates:
v5->v6Release Notes
docker/build-push-action (docker/build-push-action)
v6Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.