Skip to content

Conversation

@Mehdi-Cloudity
Copy link
Contributor

No description provided.

@github-actions
Copy link

github-actions bot commented Nov 5, 2025

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 10 0 0 1.35s
✅ BASH shfmt 3 0 0 0 0.44s
✅ COPYPASTE jscpd yes no no 7.05s
✅ DOCKERFILE hadolint 1 0 0 0.06s
❌ JSON v8r 26 1 0 80.23s
✅ MARKDOWN markdown-table-formatter 341 0 0 0 0.8s
✅ REPOSITORY checkov yes no no 18.73s
⚠️ REPOSITORY gitleaks yes 5 no 69.97s
⚠️ REPOSITORY grype yes 2 no 28.28s
❌ REPOSITORY trivy yes 1 no 11.88s
✅ REPOSITORY trufflehog yes no no 3.03s
✅ SPELL cspell 663 0 0 9.58s
⚠️ SPELL lychee 385 29 0 88.33s
✅ TYPESCRIPT eslint 263 0 0 0 6.66s
⚠️ YAML v8r 16 1 0 82.85s

Detailed Issues

❌ REPOSITORY / trivy - 1 error
2025-11-07T09:22:45Z	INFO	[vulndb] Need to update DB
2025-11-07T09:22:45Z	INFO	[vulndb] Downloading vulnerability DB...
2025-11-07T09:22:45Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
6.77 MiB / 74.33 MiB [----->_________________________________________________________] 9.10% ? p/s ?35.28 MiB / 74.33 MiB [---------------------------->________________________________] 47.46% ? p/s ?64.75 MiB / 74.33 MiB [----------------------------------------------------->_______] 87.11% ? p/s ?74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 112.55 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 112.55 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 112.55 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 105.29 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 105.29 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [--------------------------------------------->] 100.00% 105.29 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [---------------------------------------------->] 100.00% 98.50 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [---------------------------------------------->] 100.00% 98.50 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [---------------------------------------------->] 100.00% 98.50 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [---------------------------------------------->] 100.00% 92.14 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [---------------------------------------------->] 100.00% 92.14 MiB p/s ETA 0s74.33 MiB / 74.33 MiB [-------------------------------------------------] 100.00% 28.04 MiB p/s 2.9s2025-11-07T09:22:49Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2025-11-07T09:22:49Z	INFO	[vuln] Vulnerability scanning is enabled
2025-11-07T09:22:49Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-11-07T09:22:49Z	INFO	[misconfig] Need to update the checks bundle
2025-11-07T09:22:49Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-11-07T09:22:52Z	WARN	[yarn] Protocol error	err="failed to parse version: 'version-range@^4.13.0:"
2025-11-07T09:22:52Z	INFO	Suppressing dependencies for development and testing. To display them, try the '--include-dev-deps' flag.
2025-11-07T09:22:52Z	INFO	Number of language-specific files	num=1
2025-11-07T09:22:52Z	INFO	[yarn] Detecting vulnerabilities...
2025-11-07T09:22:52Z	INFO	Detected config files	num=1
2025-11-07T09:22:52Z	INFO	Some vulnerabilities have been ignored/suppressed. Use the "--show-suppressed" flag to display them.

Report Summary

┌────────────┬────────────┬─────────────────┬───────────────────┐
│   Target   │    Type    │ Vulnerabilities │ Misconfigurations │
├────────────┼────────────┼─────────────────┼───────────────────┤
│ yarn.lock  │    yarn    │        1        │         -         │
├────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile │ dockerfile │        -        │         0         │
└────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/v0.67/docs/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


yarn.lock (yarn)
================
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌───────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│  Library  │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                            Title                             │
├───────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ expr-eval │ CVE-2025-12735 │ HIGH     │ affected │ 2.0.2             │               │ expr-eval does not restrict functions passed to the evaluate │
│           │                │          │          │                   │               │ function                                                     │
│           │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2025-12735                   │
└───────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

🤖 AI-Powered Fix Suggestions for REPOSITORY_TRIVY (by openai gpt-4.1-mini)

  1. Summary:
  • Trivy found 1 high-severity vulnerability (CVE-2025-12735) in the expr-eval package version 2.0.2 listed in your yarn.lock.
  • No misconfigurations or vulnerabilities detected in the Dockerfile.
  • There was a yarn protocol parsing warning, but it did not block scanning.
  • Some vulnerabilities may be suppressed; use --show-suppressed to review.
  1. Advice to fix:
  • Update the vulnerable package: Check if a fixed version of expr-eval is available and update your package.json and yarn.lock accordingly.
  • Run yarn upgrade expr-eval or specify a safe version explicitly.
  • If no fixed version exists, consider replacing expr-eval with a safer alternative or apply mitigations to restrict function inputs.
  • Re-run Trivy after updates to confirm the vulnerability is resolved.
  • Address the yarn protocol warning by verifying your package.json and yarn.lock for malformed version strings or dependencies.
  • Regularly update Trivy’s vulnerability database and your dependencies to minimize risks.
❌ JSON / v8r - 1 error
ℹ No config file found
ℹ Pre-warming the cache
✖ Failed fetching https://json.schemastore.org/eslintrc.json
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Service Unavailable</h2>
<hr><p>HTTP Error 503. The service is unavailable.</p>
</BODY></HTML>

🤖 AI-Powered Fix Suggestions for JSON_V8R (by openai gpt-4.1-mini)

  1. Summary:
  • The v8r linter failed to fetch the JSON schema from https://json.schemastore.org/eslintrc.json due to an HTTP 503 Service Unavailable error.
  • No local config file was found, so the linter tried to retrieve the schema online but the service was down.
  • This caused the linter to be unable to validate your ESLint config files against the schema.
  1. Advice to fix:
  • The 503 error is a server-side issue with schemastore.org, so you cannot fix it directly.
  • Retry the linting later when the schemastore service is available again.
  • Alternatively, download the required JSON schema file manually from a reliable source and configure v8r to use the local copy instead of fetching online.
  • Ensure you have a local config file for v8r if required, to avoid reliance on external schemas.
  • Check your internet connection and proxy settings if the problem persists.

Example fix:

⚠️ REPOSITORY / gitleaks - 5 errors
○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        salesforce-ci-cd-setup-integration-api/index.html
Line:        9991
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-11-06T22:44:15Z
Fingerprint: d9858368aac49bd847d934f4088f0aa407b7b0d2:salesforce-ci-cd-setup-integration-api/index.html:grafana-cloud-api-token:9991
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/d9858368aac49bd847d934f4088f0aa407b7b0d2/salesforce-ci-cd-setup-integration-api/index.html#L9991

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        salesforce-ci-cd-setup-integration-api/index.html
Line:        9992
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-11-06T22:44:15Z
Fingerprint: d9858368aac49bd847d934f4088f0aa407b7b0d2:salesforce-ci-cd-setup-integration-api/index.html:grafana-cloud-api-token:9992
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/d9858368aac49bd847d934f4088f0aa407b7b0d2/salesforce-ci-cd-setup-integration-api/index.html#L9992

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED\nNOTIF_API_METRICS_BA...
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        search/search_index.json
Line:        1
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-11-06T22:44:15Z
Fingerprint: d9858368aac49bd847d934f4088f0aa407b7b0d2:search/search_index.json:grafana-cloud-api-token:1
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/d9858368aac49bd847d934f4088f0aa407b7b0d2/search/search_index.json#L1

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED\nNOTIF_API_METRICS_BA...
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        search/search_index.json
Line:        1
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-11-06T22:44:15Z
Fingerprint: d9858368aac49bd847d934f4088f0aa407b7b0d2:search/search_index.json:grafana-cloud-api-token:1
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/d9858368aac49bd847d934f4088f0aa407b7b0d2/search/search_index.json#L1

Finding:     const AMPLITUDE_TOKEN = 'REDACTED'
Secret:      REDACTED
RuleID:      generic-api-key
Entropy:     3.715018
File:        src/common/analytics.ts
Line:        7
Commit:      HIDDEN_BY_MEGALINTERAuthor:      NicolasVuillamy
Email:       [email protected]
Date:        2021-01-31T00:23:50Z
Fingerprint: ca439c204d52687b82fb54e56ed9644d245c79c5:src/common/analytics.ts:generic-api-key:7
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/ca439c204d52687b82fb54e56ed9644d245c79c5/src/common/analytics.ts#L7

9:22AM INF 2222 commits scanned.
9:22AM INF scanned ~96783719 bytes (96.78 MB) in 1m9.8s
9:22AM WRN leaks found: 5
⚠️ REPOSITORY / grype - 2 errors
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
NAME         INSTALLED  TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   
expr-eval    2.0.2      npm   GHSA-jc85-fpwf-qm7x  High      < 0.1% (23rd)  < 0.1  
fast-redact  3.5.0      npm   GHSA-ffrw-9mx8-89p8  Low       < 0.1% (16th)  < 0.1
[0028] ERROR discovered vulnerabilities at or above the severity threshold
⚠️ SPELL / lychee - 29 errors
[ERROR] file:///github/.github/copilot-instructions.md | Cannot find file
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Network error: Not Found
[403] https://npmjs.org/package/sfdx-hardis | Network error: Forbidden
[404] https://sfdx-hardis.cloudity.com/hardis/doc/project/deploy/smart/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/salesforce-ci-cd-setup-integrations-bitbucket/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Network error: Not Found
[403] https://www.npmjs.com/package/prompts | Network error: Forbidden
[ERROR] file://assets/images/cloudity-map.jpg | Cannot find file
[ERROR] file://assets/images/cloudity-logo.jpg | Cannot find file
[404] https://sfdx-hardis.cloudity.com/hardis/org/configure/auth/ | Network error: Not Found
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Error (cached)
[403] https://www.npmjs.com/package/inquirer | Network error: Forbidden
[404] https://www.schemastore.org/json/ | Network error: Not Found
[ERROR] file://docs/hardis/doc/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-project-documentation | Cannot find file
[ERROR] https://tickets.mycompany.com/ticket/%7BticketId%7D | Network error: error sending request for url (https://tickets.mycompany.com/ticket/%7BticketId%7D) Maybe a certificate error?
[ERROR] https://your-instance.service-now.com/ | Network error: error sending request for url (https://your-instance.service-now.com/) Maybe a certificate error?
[403] https://help.sfdmu.com/full-documentation/advanced-features/delete-from-source | Network error: Forbidden
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-ci-cd-publish-task | Cannot find file
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/hardis/project/clean/references | Cannot find file
[403] https://npmjs.org/package/sfdx-hardis | Error (cached)
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Error (cached)
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found
[403] https://some.sharepoint.com/file.xlsx | Network error: Forbidden
[403] https://platform.openai.com/ | Network error: Forbidden
[404] https://myclient.force.com/ | Network error: Not Found
[ERROR] http://127.0.0.1:8000/ | Network error: error sending request for url (http://127.0.0.1:8000/) Maybe a certificate error?
[TIMEOUT] https://www.cloudity.com/ | Timeout
[TIMEOUT] https://www.cloudity.com/ | Timeout
[TIMEOUT] https://www.cloudity.com/ | Timeout
📝 Summary
---------------------
🔍 Total.........2077
✅ Successful....1867
⏳ Timeouts.........3
🔀 Redirected.......0
👻 Excluded.......178
❓ Unknown..........0
🚫 Errors..........29

Errors in docs/articles-videos.md
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Error (cached)

Errors in docs/hardis/project/deploy/smart.md
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)

Errors in docs/hardis/org/refresh/after-refresh.md
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found

Errors in README.md
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Network error: Not Found
[TIMEOUT] https://www.cloudity.com/ | Timeout
[403] https://npmjs.org/package/sfdx-hardis | Network error: Forbidden

Errors in docs/contributors.md
[TIMEOUT] https://www.cloudity.com/ | Timeout

Errors in GEMINI.md
[ERROR] file:///github/.github/copilot-instructions.md | Cannot find file

Errors in config/sfdx-hardis.jsonschema.json
[ERROR] https://tickets.mycompany.com/ticket/%7BticketId%7D | Network error: error sending request for url (https://tickets.mycompany.com/ticket/%7BticketId%7D) Maybe a certificate error?
[403] https://some.sharepoint.com/file.xlsx | Network error: Forbidden
[404] https://myclient.force.com/ | Network error: Not Found

Errors in docs/hardis/misc/servicenow-report.md
[ERROR] https://your-instance.service-now.com/ | Network error: error sending request for url (https://your-instance.service-now.com/) Maybe a certificate error?

Errors in docs/index.md
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Error (cached)
[403] https://npmjs.org/package/sfdx-hardis | Error (cached)
[TIMEOUT] https://www.cloudity.com/ | Timeout

Errors in docs/hardis/org/refresh/before-refresh.md
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found

Errors in docs/salesforce-project-doc-generate.md
[ERROR] http://127.0.0.1:8000/ | Network error: error sending request for url (http://127.0.0.1:8000/) Maybe a certificate error?

Errors in docs/cloudity-consulting-partner.md
[ERROR] file://assets/images/cloudity-map.jpg | Cannot find file
[ERROR] file://assets/images/cloudity-logo.jpg | Cannot find file

Errors in docs/hardis/doc/mkdocs-to-salesforce.md
[ERROR] file://docs/hardis/doc/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-project-documentation | Cannot find file

Errors in docs/hardis/project/deploy/sources/dx.md
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)

Errors in CHANGELOG.md
[404] https://sfdx-hardis.cloudity.com/hardis/org/configure/auth/ | Network error: Not Found
[404] https://www.schemastore.org/json/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/hardis/doc/project/deploy/smart/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/salesforce-ci-cd-setup-integrations-bitbucket/ | Network error: Not Found
[403] https://www.npmjs.com/package/prompts | Network error: Forbidden
[403] https://help.sfdmu.com/full-documentation/advanced-features/delete-from-source | Network error: Forbidden
[403] https://www.npmjs.com/package/inquirer | Network error: Forbidden
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Network error: Not Found

Errors in docs/hardis/work/save.md
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/hardis/project/clean/references | Cannot find file
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-ci-cd-publish-task | Cannot find file

Errors in docs/salesforce-ai-setup.md
[403] https://platform.openai.com/ | Network error: Forbidden
⚠️ YAML / v8r - 1 error
ℹ No config file found
ℹ Pre-warming the cache
ℹ Processing .github/dependabot.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/dependabot.yml against schema from https://www.schemastore.org/dependabot-2.0.json ...
✔ .github/dependabot.yml is valid

ℹ Processing .github/linters/.checkov.yml
✖ Could not find a schema to validate .github/linters/.checkov.yml

ℹ Processing .github/workflows/build-deploy-docs.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/build-deploy-docs.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/build-deploy-docs.yml is valid

ℹ Processing .github/workflows/deploy-ALPHA.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/deploy-ALPHA.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/deploy-ALPHA.yml is valid

ℹ Processing .github/workflows/deploy-CANARY.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/deploy-CANARY.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/deploy-CANARY.yml is valid

ℹ Processing .github/workflows/deploy-PROD.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/deploy-PROD.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/deploy-PROD.yml is valid

ℹ Processing .github/workflows/deploy-RELEASE.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/deploy-RELEASE.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/deploy-RELEASE.yml is valid

ℹ Processing .github/workflows/devScripts.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/devScripts.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/devScripts.yml is valid

ℹ Processing .github/workflows/docker-security-scan.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/docker-security-scan.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/docker-security-scan.yml is valid

ℹ Processing .github/workflows/mega-linter.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/mega-linter.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/mega-linter.yml is valid

ℹ Processing .github/workflows/retrieve-dashboards.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/retrieve-dashboards.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/retrieve-dashboards.yml is valid

ℹ Processing .github/workflows/test.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/test.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/test.yml is valid

ℹ Processing .mega-linter.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .mega-linter.yml against schema from https://raw.githubusercontent.com/megalinter/megalinter/main/megalinter/descriptors/schemas/megalinter-configuration.jsonschema.json ...
✖ .mega-linter.yml is invalid

.mega-linter.yml#/LLM_ADVISOR_LEVEL must be equal to one of the allowed values
.mega-linter.yml#/LLM_MAX_TOKENS must be string
.mega-linter.yml#/LLM_TEMPERATURE must be string

ℹ Processing config/sfdx-hardis.mega-linter-config.yml
✖ Could not find a schema to validate config/sfdx-hardis.mega-linter-config.yml

ℹ Processing mkdocs.yml
ℹ Found multiple possible matches for mkdocs.yml. Possible matches:

  mkdocs.yml (1.0)
  MkDocs configuration file
  https://www.schemastore.org/mkdocs-1.0.json

  mkdocs.yml (1.6)
  MkDocs configuration file
  https://www.schemastore.org/mkdocs-1.6.json

✖ Found multiple possible schemas to validate mkdocs.yml

ℹ Processing test/.sfdx-hardis.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating test/.sfdx-hardis.yml against schema from https://raw.githubusercontent.com/hardisgroupcom/sfdx-hardis/main/config/sfdx-hardis.jsonschema.json ...
✖ reference "http://github.com/hardisgroupcom/sfdx-hardis.json#/properties/commandsPostDeploy/items/properties/customUsername" resolves to more than one schema

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@beta --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_SHFMT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_V8R,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_ES,YAML_V8R

MegaLinter is graciously provided by OX Security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

hardis:source:retrieve calling force:source:retrieve -> migrate !

2 participants