Skip to content

Upgrade MegaLinter to v10.0.0 - #5271

Merged
FlorianPfaff merged 2 commits into
mainfrom
agent/upgrade-megalinter-v10
Aug 11, 2026
Merged

Upgrade MegaLinter to v10.0.0#5271
FlorianPfaff merged 2 commits into
mainfrom
agent/upgrade-megalinter-v10

Conversation

@FlorianPfaff

@FlorianPfaff FlorianPfaff commented Aug 11, 2026

Copy link
Copy Markdown
Owner

What changed

  • Updated .github/workflows/mega-linter.yml from oxsecurity/megalinter/flavors/python@v9.6.0 to @v10.0.0.
  • Added a documented REPOSITORY_TRUFFLEHOG exclusion for MegaLinter 10 because its Lob detector reports false positives inside the repository's vendored SciPy and virtualenv wheel archives.
  • Preserved Betterleaks, Secretlint, CodeQL, the separate security workflow, the customized Alpine wheel build, cache, permissions, reporting, and automatic-fix configuration.

Validation

  • MegaLinter 10 completed successfully on commit 1792c407cbfcca23da3432e5142efd7577fcb520.
  • CodeQL, dependency review, documentation examples, release-notes preview, and the separate security checks also passed on that commit.
  • The upstream v10.0.0 Python flavor action resolves to the ghcr.io/oxsecurity/megalinter-python:v10.0.0 image.

@FlorianPfaff
FlorianPfaff marked this pull request as ready for review August 11, 2026 13:24
@FlorianPfaff
FlorianPfaff enabled auto-merge (squash) August 11, 2026 13:25
@github-actions

github-actions Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ COPYPASTE jscpd yes no no 6.02s
✅ JSON prettier 7 0 0 0 0.52s
✅ JSON v8r 7 0 0 3.76s
✅ MARKDOWN markdownlint 68 0 0 0 2.27s
✅ MARKDOWN markdown-table-formatter 68 0 0 0 0.57s
✅ PYTHON black 1872 90 0 0 64.34s
✅ PYTHON isort 1872 146 0 0 2.36s
✅ REPOSITORY betterleaks yes no no 1.61s
✅ REPOSITORY checkov yes no no 30.12s
✅ REPOSITORY git_diff yes no no 0.1s
✅ REPOSITORY secretlint yes no no 93.61s
✅ REPOSITORY syft yes no no 2.66s
✅ REPOSITORY trivy-sbom yes no no 2.07s
✅ YAML prettier 11 0 0 0 0.52s
✅ YAML v8r 11 0 0 14.55s
✅ YAML yamllint 11 0 0 0.92s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MAKEFILE_CHECKMAKE. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_ISORT,COPYPASTE_JSCPD,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@FlorianPfaff
FlorianPfaff merged commit 0c07f23 into main Aug 11, 2026
20 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant