Conversation
Contributor
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| actionlint | 4 | 3 | 0 | 0.4s | ||
| ✅ COPYPASTE | jscpd | yes | no | no | 1.89s | |
| hadolint | 2 | 1 | 0 | 0.4s | ||
| ✅ JSON | jsonlint | 3 | 0 | 0 | 0.15s | |
| ✅ JSON | prettier | 3 | 0 | 0 | 0 | 0.34s |
| ✅ JSON | v8r | 3 | 0 | 0 | 4.03s | |
| markdownlint | 12 | 0 | 18 | 0 | 0.96s | |
| ✅ MARKDOWN | markdown-table-formatter | 12 | 0 | 0 | 0 | 0.25s |
| ✅ PYTHON | bandit | 6 | 0 | 0 | 0.76s | |
| ✅ PYTHON | black | 6 | 0 | 0 | 0 | 1.04s |
| ✅ PYTHON | flake8 | 6 | 0 | 0 | 0.43s | |
| ✅ PYTHON | isort | 6 | 0 | 0 | 0 | 0.18s |
| mypy | 6 | 4 | 0 | 4.79s | ||
| ✅ PYTHON | pylint | 6 | 0 | 0 | 4.58s | |
| pyright | 6 | 5 | 0 | 2.57s | ||
| ✅ PYTHON | ruff | 6 | 0 | 0 | 0 | 0.02s |
| ✅ REPOSITORY | checkov | yes | no | no | 14.05s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 15.18s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.01s | |
| ✅ REPOSITORY | grype | yes | no | no | 36.31s | |
| ✅ REPOSITORY | secretlint | yes | no | no | 0.45s | |
| ✅ REPOSITORY | syft | yes | no | no | 1.22s | |
| ✅ REPOSITORY | trivy | yes | no | no | 6.84s | |
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 0.45s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 2.31s | |
| ✅ SPELL | codespell | 30 | 0 | 0 | 0 | 0.24s |
| ✅ SPELL | cspell | 48 | 0 | 0 | 3.53s | |
| ✅ SPELL | lychee | 30 | 0 | 0 | 9.64s | |
| ✅ YAML | prettier | 15 | 0 | 0 | 0 | 0.67s |
| ✅ YAML | v8r | 15 | 0 | 0 | 6.96s | |
| ✅ YAML | yamllint | 15 | 0 | 0 | 0.67s |
Detailed Issues
⚠️ ACTION / actionlint - 3 errors
.github/workflows/github-dependents-info.yml:52:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
|
52 | run: sudo chown -R $USER:$USER .
| ^~~~
.github/workflows/github-dependents-info.yml:52:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
|
52 | run: sudo chown -R $USER:$USER .
| ^~~~
.github/workflows/release.yml:63:9: shellcheck reported issue in this script: SC2086:info:1:55: Double quote to prevent globbing and word splitting [shellcheck]
|
63 | run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> ${GITHUB_ENV}
| ^~~~
⚠️ DOCKERFILE / hadolint - 1 error
Dockerfile:5 DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
docker/Dockerfile:7 DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
docker/Dockerfile:12 DL3045 warning: `COPY` to a relative destination without `WORKDIR` set.
docker/Dockerfile:15 DL3003 warning: Use WORKDIR to switch to a directory
docker/Dockerfile:15 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/Dockerfile:15 SC2226 warning: This ln has no destination. Check the arguments, or specify '.' explicitly.
docker/Dockerfile:24 DL3025 warning: Use arguments JSON notation for CMD and ENTRYPOINT arguments
⚠️ MARKDOWN / markdownlint - 18 errors
.github/PULL_REQUEST_TEMPLATE.md:1 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "## Description"]
README.md:45:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:46:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:47:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:48:2 MD045/no-alt-text Images should have alternate text (alt text)
README.md:212:3 MD051/link-fragments Link fragments should be valid [Context: "[Installation](#⚙️-installation)"]
README.md:213:3 MD051/link-fragments Link fragments should be valid [Context: "[Usage](#🛠️-usage)"]
README.md:214:3 MD051/link-fragments Link fragments should be valid [Context: "[Examples](#🧪-examples)"]
README.md:240:185 MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:241:1 MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: trailing_only; Missing leading pipe]
README.md:241:271 MD056/table-column-count Table column count [Expected: 3; Actual: 1; Too few cells, row will be missing data]
README.md:256 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:260 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:265 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:269 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:273 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:277 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:281 MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
⚠️ PYTHON / mypy - 4 errors
Collecting types-requests
Downloading types_requests-2.32.4.20250913-py3-none-any.whl.metadata (2.0 kB)
Collecting urllib3>=2 (from types-requests)
Downloading urllib3-2.6.2-py3-none-any.whl.metadata (6.6 kB)
Downloading types_requests-2.32.4.20250913-py3-none-any.whl (20 kB)
Downloading urllib3-2.6.2-py3-none-any.whl (131 kB)
Installing collected packages: urllib3, types-requests
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2/2 [types-requests]
Successfully installed types-requests-2.32.4.20250913 urllib3-2.6.2
github_dependents_info/gh_dependents_info.py:44: error: Need type annotation for "packages" (hint: "packages: list[<type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:45: error: Need type annotation for "all_public_dependent_repos" (hint: "all_public_dependent_repos: list[<type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:46: error: Need type annotation for "badges" (hint: "badges: dict[<type>, <type>] = ...") [var-annotated]
github_dependents_info/gh_dependents_info.py:47: error: Need type annotation for "result" (hint: "result: dict[<type>, <type>] = ...") [var-annotated]
Installing missing stub packages:
/venvs/mypy/bin/python3 -m pip install types-requests
Found 4 errors in 1 file (checked 6 source files)
⚠️ PYTHON / pyright - 5 errors
github_dependents_info/__main__.py
github_dependents_info/__main__.py:6:6 - error: Import "rich.console" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py
github_dependents_info/gh_dependents_info.py:9:8 - error: Import "pandas" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:11:6 - error: Import "bs4" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:13:6 - error: Import "requests.packages.urllib3.util.retry" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py:152:49 - error: "total_public_stars" is possibly unbound (reportPossiblyUnboundVariable)
5 errors, 0 warnings, 0 informations
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx mega-linter-runner@beta --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,SPELL_CODESPELL,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R
d34480b to
9b8f6e6
Compare
9b8f6e6 to
2626833
Compare
44fc6ae to
3d53a76
Compare
3d53a76 to
cdfd878
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

This PR contains the following updates:
>=13.9.4,<14.0->>=14.2,<14.3==13.9.4->==14.2.0Release Notes
Textualize/rich (rich)
v14.2.0Compare Source
Changed
v14.1.0Compare Source
Changed
typing_extensionsfrom runtime dependencies #3763Fixed
Paneltitle missing the panel background style #3569Added
TTY_INTERACTIVEenvironment variable to force interactive mode off or on #3777v14.0.0Compare Source
Added
TTY_COMPATIBLEto override auto-detection of TTY support (See console.rst for details). #3675Changed
NO_COLORenv var is now considered disabled. #3675FORCE_COLORenv var is now considered disabled. #3675Exception.add_note) #3676Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.