diff --git a/.mega-linter.yaml b/.mega-linter.yaml index 81256722e3861615f63e82ce5eb009012271592b..d1b6a8ae5f54688cad8b95dc012fd9acdacd9bc5 100644 --- a/.mega-linter.yaml +++ b/.mega-linter.yaml @@ -4,8 +4,6 @@ DISABLE: - SPELL DISABLE_LINTERS: - # Unable to import 'requests' (import-error) - - PYTHON_PYLINT # can't be configured (bugs), too many checks - REPOSITORY_KICS # can't be configured @@ -31,23 +29,25 @@ ANSIBLE_ANSIBLE_LINT_ARGUMENTS: >- # B603:subprocess_without_shell_equals_true: needed PYTHON_BANDIT_ARGUMENTS: --skip B105,B404,B603 +# Unable to import 'requests' (import-error) +PYTHON_PYLINT_ARGUMENTS: --disable=import-error + # CKV2_ANSIBLE_1 (http): local comunication # CKV_OPENSTACK_2: useless check -# CKV_SECRET_6 (base64): just crazy check -# FIXME: jupyterhub-jwt.yaml +# CKV_SECRET_6 (base64): weird useless check +# XXX: jupyterhub-jwt.yaml REPOSITORY_CHECKOV_ARGUMENTS: >- --skip-check CKV2_ANSIBLE_1,CKV_OPENSTACK_2,CKV_SECRET_6 - --skip-path .*/playbooks/files/(jupyterhub-jwt|calico).yaml - --skip-path .*/playbooks/upgrade.yaml + --skip-path /.*/playbooks/files/(jupyterhub-jwt|calico).yaml + --skip-path /.*/playbooks/upgrade.yaml # DS126858 (algorithm): false positive, used as images tag # DS137138 (http): local communication # DS169125 (ssl): protocol actually banned # DS169126 (ssl): protocol actually banned -# DS176209: FIXME jupyterhub-jwt.yaml REPOSITORY_DEVSKIM_ARGUMENTS: >- - --ignore-globs /tmp/lint/.ansible/**,/tmp/lint/.git/**,/tmp/lint/**/playbooks/files/calico.yaml - --ignore-rule-ids DS126858,DS137138,DS169125,DS169126,DS176209 + --ignore-globs **/.ansible/**,**/.git/**,**/playbooks/files/calico.yaml + --ignore-rule-ids DS126858,DS137138,DS169125,DS169126 # no check for terraform plugins REPOSITORY_GRYPE_ARGUMENTS: --exclude ./*/terraform/**