Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,12 +30,12 @@ jobs:

steps:
- name: Checkout code
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
with:
persist-credentials: false

- name: Run analysis
uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
with:
results_file: results.sarif
results_format: sarif
Expand All @@ -57,14 +57,14 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: Upload artifact
uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
with:
name: SARIF file
path: results.sarif
retention-days: 5

# Upload the results to GitHub's code scanning dashboard.
- name: Upload to code-scanning
uses: github/codeql-action/upload-sarif@807578363a7869ca324a79039e6db9c843e0e100 # v2.1.27
uses: github/codeql-action/upload-sarif@3ebbd71c74ef574dbc558c82f70e52732c8b44fe # v2.2.1
with:
sarif_file: results.sarif
6 changes: 3 additions & 3 deletions linters/brakeman/test_data/Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,13 @@ source 'https://rubygems.org'


# Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
gem 'rails', '>= 5.0.0.beta1', '< 5.1'
gem 'rails', '>= 5.0.0.beta1', '< 5.2.9'
# Use sqlite3 as the database for Active Record
gem 'sqlite3'
# Use Uglifier as compressor for JavaScript assets
gem 'uglifier', '>= 1.3.0'
# Use CoffeeScript for .coffee assets and views
gem 'coffee-rails', '~> 4.1.0'
gem 'coffee-rails', '~> 4.2.0'
# See https://github.com/rails/execjs#readme for more supported runtimes
# gem 'therubyracer', platforms: :ruby

Expand All @@ -21,7 +21,7 @@ gem 'jbuilder', '~> 2.0'
# Use Puma as the app server
gem 'puma'

gem 'actionpack-page_caching', '1.2.0'
gem 'actionpack-page_caching', '1.2.4'

# Use ActiveModel has_secure_password
# gem 'bcrypt', '~> 3.1.7'
Expand Down
13 changes: 0 additions & 13 deletions linters/brakeman/test_data/brakeman_v5.4.0_CUSTOM.check.shot
Original file line number Diff line number Diff line change
Expand Up @@ -3,19 +3,6 @@
exports[`Testing linter brakeman test CUSTOM 1`] = `
Object {
"issues": Array [
Object {
"bucket": "brakeman",
"code": "PageCachingCVE",
"column": "1",
"file": "test_data/Gemfile",
"issueClass": "ISSUE_CLASS_EXISTING",
"issueUrl": "https://groups.google.com/d/msg/rubyonrails-security/CFRVkEytdP8/c5gmICECAgAJ",
"level": "LEVEL_MEDIUM",
"line": "24",
"linter": "brakeman",
"message": "Directory traversal vulnerability in actionpack-page_caching 1.2.0 (CVE-2020-8159). Upgrade to actionpack-page_caching 1.2.2",
"targetType": "ruby",
},
Object {
"bucket": "brakeman",
"code": "CSRFTokenForgeryCVE",
Expand Down
Binary file not shown.
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
distributionBase=GRADLE_USER_HOME
distributionPath=wrapper/dists
distributionUrl=https\://services.gradle.org/distributions/gradle-7.4.1-bin.zip
distributionUrl=https\://services.gradle.org/distributions/gradle-7.6-bin.zip
networkTimeout=10000
zipStoreBase=GRADLE_USER_HOME
zipStorePath=wrapper/dists
18 changes: 14 additions & 4 deletions linters/detekt/test_data/detekt_gradle/gradlew

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

15 changes: 9 additions & 6 deletions linters/detekt/test_data/detekt_gradle/gradlew.bat

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions linters/detekt/test_data/detekt_gradle/lib/build.gradle.kts
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
plugins {
// Java deps
id("org.jetbrains.kotlin.jvm") version "1.5.31"
id("org.jetbrains.kotlin.jvm") version "1.8.10"
`java-library`

// Detekt
id("io.gitlab.arturbosch.detekt").version("1.20.0-RC1")
id("io.gitlab.arturbosch.detekt").version("1.22.0")
}

repositories {
Expand Down
4 changes: 2 additions & 2 deletions linters/eslint/test_data/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@
"@typescript-eslint/parser": "^5.47.1",
"eslint": "^8.10.0",
"eslint-config-prettier": "^8.5.0",
"eslint-plugin-import": "2.26.0",
"eslint-plugin-import": "2.27.5",
"eslint-plugin-prettier": "^4.2.1",
"eslint-plugin-node": "^11.1.0",
"prettier": "^2.8.0",
"typescript": "4.9.3"
"typescript": "4.9.5"
}
}
2 changes: 1 addition & 1 deletion linters/tflint/test_data/.tflint.hcl
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
plugin "aws" {
enabled = true
version = "0.13.2"
version = "0.21.2"
source = "github.com/terraform-linters/tflint-ruleset-aws"
}