diff --git a/.trivyignore b/.trivyignore index 1beb8f5b879..2c1ce9689ec 100644 --- a/.trivyignore +++ b/.trivyignore @@ -5,6 +5,7 @@ CVE-2020-14040 CVE-2020-14343 CVE-2020-16250 CVE-2020-28469 +CVE-2020-28477 CVE-2020-29529 CVE-2020-29529 CVE-2020-29651 @@ -15,13 +16,20 @@ CVE-2020-7219 CVE-2020-8558 CVE-2020-9283 CVE-2021-22569 +CVE-2021-23337 +CVE-2021-23358 +CVE-2021-23406 +CVE-2021-23436 +CVE-2021-23807 CVE-2021-25741 +CVE-2021-28918 CVE-2021-29482 CVE-2021-3121 CVE-2021-32803 CVE-2021-32804 CVE-2021-32923 CVE-2021-33503 +CVE-2021-3538 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 @@ -31,6 +39,7 @@ CVE-2021-36222 CVE-2021-3711 CVE-2021-3712 CVE-2021-37219 +CVE-2021-3757 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 diff --git a/CHANGELOG.md b/CHANGELOG.md index 6f394a39f88..4339b2e202c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), Note: Can be used with `megalinter/megalinter@beta` in your GitHub Action mega-linter.yml file, or with `megalinter/megalinter:beta` docker image +- Fixes + - Use latest version of npm + - Linter versions upgrades - [cpplint](https://github.com/cpplint/cpplint) from 1.5.5 to **1.6.0** on 2022-02-20 diff --git a/Dockerfile b/Dockerfile index 30fda1cc04b..8ae80f8b613 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,6 +45,8 @@ ARG PSSA_VERSION='latest' # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -160,9 +162,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/ci_light/Dockerfile b/flavors/ci_light/Dockerfile index 9a47040a3ad..207bb6fdfb5 100644 --- a/flavors/ci_light/Dockerfile +++ b/flavors/ci_light/Dockerfile @@ -30,6 +30,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -93,9 +95,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/dart/Dockerfile b/flavors/dart/Dockerfile index ca869d5506d..5530fd33db9 100644 --- a/flavors/dart/Dockerfile +++ b/flavors/dart/Dockerfile @@ -33,6 +33,8 @@ ARG GLIBC_VERSION='2.31-r0' # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile index 76743827230..8b3ef0aff71 100644 --- a/flavors/documentation/Dockerfile +++ b/flavors/documentation/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile index 8c12d517938..0e8e42603f3 100644 --- a/flavors/dotnet/Dockerfile +++ b/flavors/dotnet/Dockerfile @@ -37,6 +37,8 @@ ARG PSSA_VERSION='latest' # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -107,9 +109,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile index acba2113153..5162cd3e95e 100644 --- a/flavors/go/Dockerfile +++ b/flavors/go/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile index 6b880de3068..cdb1f9c81d9 100644 --- a/flavors/java/Dockerfile +++ b/flavors/java/Dockerfile @@ -33,6 +33,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -100,9 +102,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile index 0969195dcfb..95bea79a9a8 100644 --- a/flavors/javascript/Dockerfile +++ b/flavors/javascript/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile index 36eb2c2f93e..15fc7946cf6 100644 --- a/flavors/php/Dockerfile +++ b/flavors/php/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -119,9 +121,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile index 58f7d3a88fe..52aa2729fff 100644 --- a/flavors/python/Dockerfile +++ b/flavors/python/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -108,9 +110,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/ruby/Dockerfile b/flavors/ruby/Dockerfile index 1bcca3a91b5..eb23e9effea 100644 --- a/flavors/ruby/Dockerfile +++ b/flavors/ruby/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -102,9 +104,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/rust/Dockerfile b/flavors/rust/Dockerfile index c9e44c82175..dc2409b5224 100644 --- a/flavors/rust/Dockerfile +++ b/flavors/rust/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/salesforce/Dockerfile b/flavors/salesforce/Dockerfile index 86c8b0e7f11..f39924caa49 100644 --- a/flavors/salesforce/Dockerfile +++ b/flavors/salesforce/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/scala/Dockerfile b/flavors/scala/Dockerfile index 4e6c176be32..e59015b65f4 100644 --- a/flavors/scala/Dockerfile +++ b/flavors/scala/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/swift/Dockerfile b/flavors/swift/Dockerfile index da5c36ef523..4a32abf1a42 100644 --- a/flavors/swift/Dockerfile +++ b/flavors/swift/Dockerfile @@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -100,9 +102,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \ diff --git a/flavors/terraform/Dockerfile b/flavors/terraform/Dockerfile index cd584a75d93..fd6abe6234f 100644 --- a/flavors/terraform/Dockerfile +++ b/flavors/terraform/Dockerfile @@ -36,6 +36,8 @@ FROM python:3.9.7-alpine3.13 # Run APK installs # #################### +WORKDIR / + # APK Packages used by mega-linter core architecture RUN apk add --update --no-cache \ bash \ @@ -102,9 +104,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u ############################################################################################# # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile -RUN npm install npm@latest-6 -g -# Disable package-lock.json to avoid sudden crash. Try to remove later if possible -RUN echo 'package-lock=false' >> .npmrc ENV NODE_OPTIONS="--max-old-space-size=8192" #NPM__START RUN npm install --no-cache --ignore-scripts \