From 0c808276e64404d3c8c4d4a50c607c07479115e0 Mon Sep 17 00:00:00 2001 From: Badlop Date: Tue, 14 Feb 2023 19:10:12 +0100 Subject: [PATCH] Codacy: Disable many checks in several tools for now --- .github/workflows/codacy.yml | 46 ++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index af390e38398..4eececa09b9 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -38,6 +38,52 @@ jobs: - name: Checkout code uses: actions/checkout@v3 + - name: Setup Checkov + run: | + sed -i '/PASSWORD/i #checkov:skip=CKV_SECRET_6:' .github/workflows/ci.yml + sed -i '/PASSWORD/i #checkov:skip=CKV_SECRET_6:' test/docker/docker-compose.yml + + - name: Setup CSSlint + run: | + echo "{\"exclude-list\": [\"priv/css/\"]}" > .csslintrc + + - name: Setup Markdownlint + run: | + sed -i '1i\' .github/ISSUE_TEMPLATE/bug_report.md + sed -i '1i\' .github/ISSUE_TEMPLATE/feature_request.md + sed -i '1i\' CODE_OF_CONDUCT.md + sed -i '1i\' CHANGELOG.md + sed -i '1i\' README.md + sed -i '1i\' test/docker/README.md + sed -i '1i\' CONTAINER.md + sed -i '1i\' COMPILE.md + sed -i '1i\' CONTRIBUTING.md + sed -i '1i\' CONTRIBUTORS.md + + - name: Setup Shellcheck + run: | + sed -i '1a\# shellcheck disable=all' tools/captcha-ng.sh + sed -i '1a\# shellcheck disable=SC2013,SC3014,SC3060' tools/check_xep_versions.sh + + - name: Setup Stylelint + run: | + sed -i '1i\/* stylelint-disable */' priv/css/admin.css + sed -i '1i\/* stylelint-disable */' priv/css/bosh.css + sed -i '1i\/* stylelint-disable */' priv/css/muc.css + sed -i '1i\/* stylelint-disable */' priv/css/oauth.css + sed -i '1i\/* stylelint-disable */' priv/css/register.css + + - name: Setup TSQLlint + run: | + sed -i '1i\-- tsqllint-disable' sql/*.sql + sed -i '1s\disable\disable data-compression set-transaction-isolation-level\' sql/mssql*.sql + + - name: Remove escript files which are not shell scripts + run: | + rm tools/extract-tr.sh + rm tools/hook_deps.sh + rm tools/opt_types.sh + # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis - name: Run Codacy Analysis CLI uses: codacy/codacy-analysis-cli-action@5cc54a75f9ad88159bb54046196d920e40e367a5