feat: build custom flavor image for linux/arm64 by bdovaz · Pull Request #6988 · oxsecurity/megalinter

bdovaz · 2026-01-19T16:42:36Z

If there are no typos and I haven't made any mistakes, this change should cause the image from megalinter-custom-flavor-builder to also be generated for linux/arm64.

This is the first step towards gradually generating the different images in this repository for linux/arm64.

I based it on the official example: https://docs.docker.com/build/ci/github-actions/multi-platform/#distribute-build-across-multiple-runners

Which I tested myself in:

https://github.com/bdovaz/docker-multi-platform/blob/main/.github/workflows/docker.yml

https://github.com/bdovaz/docker-multi-platform/pkgs/container/docker-multi-platform

bdovaz · 2026-01-19T16:43:29Z

Ready for review @nvuillam @echoix

I would appreciate it if you could do a thorough review to check for any typos, as I am unable to test the changes in the PR checks.

github-actions · 2026-01-19T16:45:00Z

✅⚠️MegaLinter analysis: Success with warnings

⚠️ PYTHON / bandit - 77 errors

rt os.path.isdir(config.get(request_id, "DEFAULT_WORKSPACE")), (
118	        "DEFAULT_WORKSPACE "
119	        + config.get(request_id, "DEFAULT_WORKSPACE")
120	        + " is not a valid folder"
121	    )
122	

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:165:4
164	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
165	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
166	    linter_name = linter.linter_name

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:231:4
230	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
231	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
232	    if os.path.isfile(workspace + os.path.sep + "no_test_failure"):

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:466:4
465	    )
466	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
467	    expected_file_name = ""

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:566:4
565	        workspace += os.path.sep + "bad"
566	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
567	    # Call linter

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:670:4
669	    tmp_report_folder = tempfile.gettempdir() + os.path.sep + str(uuid.uuid4())
670	    assert os.path.isdir(workspace), f"Test folder {workspace} is not existing"
671	

--------------------------------------------------
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
   Severity: Low   Confidence: High
   CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b101_assert_used.html
   Location: ./megalinter/utilstest.py:768:12
767	            ]
768	            assert (len(list(diffs))) > 0, f"No changes in the {file} file"
769	

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:81:42
80	    if item.fileUploadId:
81	        uploaded_file_path = os.path.join("/tmp/server-files", item.fileUploadId)
82	        if not os.path.isdir(uploaded_file_path):

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server.py:103:38
102	    file_upload_id = "FILE_" + str(uuid1())
103	    uploaded_file_path = os.path.join("/tmp/server-files", file_upload_id)
104	    os.makedirs(uploaded_file_path)

--------------------------------------------------
>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.
   Severity: Medium   Confidence: Medium
   CWE: CWE-377 (https://cwe.mitre.org/data/definitions/377.html)
   More Info: https://bandit.readthedocs.io/en/1.9.3/plugins/b108_hardcoded_tmp_directory.html
   Location: ./server/server_worker.py:98:34
97	        temp_dir = self.create_temp_dir()
98	        upload_dir = os.path.join("/tmp/server-files", file_upload_id)
99	        if os.path.exists(upload_dir):

--------------------------------------------------

Code scanned:
	Total lines of code: 17799
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 49
		Medium: 19
		High: 9
	Total issues (by confidence):
		Undefined: 0
		Low: 11
		Medium: 18
		High: 48
Files skipped (0):

(Truncated to last 5714 characters out of 51675)

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.3)
See documentation on https://megalinter.io/beta/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .automation/build_schemas_doc.sh
✅ [SUCCESS] .automation/format-tables.sh
✅ [SUCCESS] .vscode/testlinter.sh
✅ [SUCCESS] build.sh
✅ [SUCCESS] entrypoint.sh
❌ [ERROR] sh/megalinter_exec
    Error: File:[sh/megalinter_exec] is not executable

⚠️ REPOSITORY / grype - 42 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                           INSTALLED  FIXED IN  TYPE           VULNERABILITY        SEVERITY  EPSS           RISK   
ejs                            3.1.6      3.1.7     npm            GHSA-phwq-j96m-2c2q  Critical  93.5% (99th)   87.9   
ip                             1.1.5                npm            GHSA-2p57-rm9w-gvfp  High      86.8% (99th)   67.7   
tar                            6.0.1      6.1.1     npm            GHSA-3jfq-g458-7qm9  High      85.0% (99th)   66.7   
requests                       2.24.0     2.31.0    python         GHSA-j8r2-6x86-q33q  Medium    6.4% (90th)    3.6    
minimist                       1.2.5      1.2.6     npm            GHSA-xvch-5gv4-984h  Critical  0.8% (73rd)    0.8    
ejs                            3.1.6      3.1.10    npm            GHSA-ghr5-ch3p-vcr6  Medium    1.3% (79th)    0.6    
tar                            6.0.1      6.1.9     npm            GHSA-5955-9wpr-37jh  High      0.6% (69th)    0.5    
minimatch                      3.0.4      3.0.5     npm            GHSA-f8q6-p94x-37v3  High      0.5% (64th)    0.4    
node-fetch                     2.6.6      2.6.7     npm            GHSA-r683-j2x4-v87g  High      0.4% (60th)    0.3    
@octokit/request               5.6.2      8.4.1     npm            GHSA-rmvr-2pp2-xj38  Medium    0.6% (67th)    0.3    
tar                            6.0.1      6.2.1     npm            GHSA-f5x3-32g6-xq36  Medium    0.4% (63rd)    0.3    
tar                            6.1.11     6.2.1     npm            GHSA-f5x3-32g6-xq36  Medium    0.4% (63rd)    0.3    
semver                         7.3.5      7.5.2     npm            GHSA-c2qf-rxjj-qqgw  High      0.3% (54th)    0.2    
tar                            6.0.1      6.1.2     npm            GHSA-r628-mhmh-qjhw  High      0.2% (39th)    0.1    
ip                             1.1.5      1.1.9     npm            GHSA-78xj-cgh5-2h22  Low       0.4% (62nd)    0.1    
http-cache-semantics           4.1.0      4.1.1     npm            GHSA-rc47-6667-2j5j  High      0.2% (38th)    0.1    
braces                         3.0.2      3.0.3     npm            GHSA-grv7-fg5c-xmjg  High      0.2% (37th)    0.1    
@octokit/plugin-paginate-rest  2.17.0     9.2.2     npm            GHSA-h5c3-5r3r-rr8q  Medium    0.2% (45th)    0.1    
@octokit/request-error         2.1.0      5.1.1     npm            GHSA-xx4v-prfh-6cgc  Medium    0.2% (43rd)    0.1    
ansi-regex                     3.0.0      3.0.1     npm            GHSA-93q8-gq69-wqmw  High      0.1% (31st)    < 0.1  
micromatch                     4.0.4      4.0.8     npm            GHSA-952p-6rrq-rcjv  Medium    0.1% (28th)    < 0.1  
requests                       2.24.0     2.32.4    python         GHSA-9hjg-9r4m-mvj7  Medium    < 0.1% (27th)  < 0.1  
cross-spawn                    7.0.3      7.0.5     npm            GHSA-3xgq-45jj-v275  High      < 0.1% (20th)  < 0.1  
lodash                         4.17.21    4.17.23   npm            GHSA-xxjr-mmjv-4gpg  Medium    < 0.1% (18th)  < 0.1  
lodash-es                      4.17.21    4.17.23   npm            GHSA-xxjr-mmjv-4gpg  Medium    < 0.1% (18th)  < 0.1  
debug                          4.2.0      4.3.1     npm            GHSA-gxpj-cx7g-858c  Low       < 0.1% (27th)  < 0.1  
tar                            6.0.1      7.5.7     npm            GHSA-34x7-hfp2-rc4v  High      < 0.1% (6th)   < 0.1  
tar                            6.1.11     7.5.7     npm            GHSA-34x7-hfp2-rc4v  High      < 0.1% (6th)   < 0.1  
tmp                            0.0.33     0.2.4     npm            GHSA-52f5-9888-hmc6  Low       < 0.1% (22nd)  < 0.1  
tar                            6.0.1      6.1.7     npm            GHSA-9r2w-394v-53qc  High      < 0.1% (6th)   < 0.1  
diff                           5.2.0      5.2.2     npm            GHSA-73rr-hh4g-fpgx  Low       < 0.1% (17th)  < 0.1  
diff                           7.0.0      8.0.3     npm            GHSA-73rr-hh4g-fpgx  Low       < 0.1% (17th)  < 0.1  
tar                            6.0.1      6.1.9     npm            GHSA-qq89-hq3f-393p  High      < 0.1% (2nd)   < 0.1  
tar                            6.0.1      7.5.4     npm            GHSA-r6q2-hw4h-h46w  High      < 0.1% (2nd)   < 0.1  
tar                            6.1.11     7.5.4     npm            GHSA-r6q2-hw4h-h46w  High      < 0.1% (2nd)   < 0.1  
requests                       2.24.0     2.32.0    python         GHSA-9wx4-h78v-vm56  Medium    < 0.1% (5th)   < 0.1  
js-yaml                        3.14.0     3.14.2    npm            GHSA-mh29-5h37-fv8m  Medium    < 0.1% (4th)   < 0.1  
word-wrap                      1.2.3      1.2.4     npm            GHSA-j8xg-fqg3-53r7  Medium    < 0.1% (4th)   < 0.1  
brace-expansion                1.1.11     1.1.12    npm            GHSA-v6h2-p8h4-qcjw  Low       < 0.1% (4th)   < 0.1  
tar                            6.0.1      7.5.3     npm            GHSA-8qq5-rm4j-mr97  High      < 0.1% (0th)   < 0.1  
tar                            6.1.11     7.5.3     npm            GHSA-8qq5-rm4j-mr97  High      < 0.1% (0th)   < 0.1  
actions/download-artifact      v4         4.1.3     github-action  GHSA-cxww-7g56-2vh6  High      N/A            N/A
[0063] ERROR discovered vulnerabilities at or above the severity threshold

⚠️ SPELL / lychee - 25 errors

cs_tools_ci.html | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[404] https://github.com/$ | Network error: Not Found
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden
[403] https://stackoverflow.com/a/73711302 | Error (cached)
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden
[403] https://cppcheck.sourceforge.io/ | Network error: Forbidden
[403] https://cppcheck.sourceforge.io/manual.html#configuration | Network error: Forbidden
[403] https://cppcheck.sourceforge.io/manual.html#configuration | Error (cached)
[403] https://cppcheck.sourceforge.io/ | Error (cached)
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://pmd.sourceforge.io/pmd-6.55.0/pmd_userdocs_tools_ci.html | Error (cached)
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden
[403] https://htmlhint.com/ | Network error: Forbidden
[404] https://htmlhint.com/_astro/htmlhint.DIRCoA_t_Z1czEXa.webp | Network error: Not Found
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[403] https://stackoverflow.com/a/73711302 | Error (cached)
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden
[403] https://docutils.sourceforge.io/docs/ref/rst/directives.html#raw-data-pass-through | Network error: Forbidden
[404] https://github.com/mongodb/kingfisher/tree/main/data/rules | Network error: Not Found
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png | Network error: Not Found
[TIMEOUT] https://generated.at/ | Timeout
[TIMEOUT] https://generated.at/ | Timeout
[TIMEOUT] https://www.gnu.org/software/bash/manual/bash.html | Timeout
[TIMEOUT] https://www.gnu.org/software/bash/ | Timeout
[TIMEOUT] https://www.nongnu.org/chktex/ | Timeout
[TIMEOUT] https://www.nongnu.org/chktex | Timeout
📝 Summary
---------------------
🔍 Total.........2424
✅ Successful....1923
⏳ Timeouts.........6
🔀 Redirected.......0
👻 Excluded.......470
❓ Unknown..........0
🚫 Errors..........25

Errors in megalinter/descriptors/rst.megalinter-descriptor.yml
[403] https://docutils.sourceforge.io/docs/ref/rst/directives.html#raw-data-pass-through | Network error: Forbidden

Errors in mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml
[404] https://github.com/$ | Network error: Not Found

Errors in megalinter/descriptors/bicep.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden

Errors in megalinter/descriptors/repository.megalinter-descriptor.yml
[404] https://github.com/mongodb/kingfisher/tree/main/data/rules | Network error: Not Found

Errors in megalinter/descriptors/clojure.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Error (cached)

Errors in megalinter/descriptors/bash.megalinter-descriptor.yml
[TIMEOUT] https://www.gnu.org/software/bash/ | Timeout
[TIMEOUT] https://www.gnu.org/software/bash/manual/bash.html | Timeout

Errors in megalinter/descriptors/powershell.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Error (cached)

Errors in megalinter/descriptors/arm.megalinter-descriptor.yml
[403] https://stackoverflow.com/a/73711302 | Network error: Forbidden

Errors in README.md
[403] https://cloudtuned.hashnode.dev/introducing-megalinter-streamlining-code-quality-checks-across-multiple-languages | Network error: Forbidden
[403] https://pmd.sourceforge.io/pmd-6.55.0/pmd_userdocs_tools_ci.html | Network error: Forbidden
[TIMEOUT] https://generated.at/ | Timeout
[403] https://htmlhint.com/integrations/task-runner/ | Network error: Forbidden
[403] https://cloudtuned.hashnode.dev/ | Network error: Forbidden
[403] https://npmjs.org/package/mega-linter-runner | Network error: Forbidden

Errors in megalinter/descriptors/cpp.megalinter-descriptor.yml
[403] https://cppcheck.sourceforge.io/ | Error (cached)
[403] https://cppcheck.sourceforge.io/manual.html#configuration | Error (cached)

Errors in megalinter/descriptors/html.megalinter-descriptor.yml
[403] https://htmlhint.com/integrations/task-runner/ | Error (cached)
[403] https://htmlhint.com/ | Network error: Forbidden
[403] https://htmlhint.com/configuration/ | Network error: Forbidden
[404] https://htmlhint.com/_astro/htmlhint.DIRCoA_t_Z1czEXa.webp | Network error: Not Found
[403] https://htmlhint.com/docs/user-guide/list-rules | Network error: Forbidden

Errors in megalinter/descriptors/c.megalinter-descriptor.yml
[403] https://cppcheck.sourceforge.io/manual.html#configuration | Network error: Forbidden
[403] https://cppcheck.sourceforge.io/ | Network error: Forbidden

Errors in megalinter/descriptors/latex.megalinter-descriptor.yml
[TIMEOUT] https://www.nongnu.org/chktex/ | Timeout
[TIMEOUT] https://www.nongnu.org/chktex | Timeout

Errors in megalinter/descriptors/java.megalinter-descriptor.yml
[403] https://pmd.sourceforge.io/pmd-6.55.0/pmd_userdocs_tools_ci.html | Error (cached)

Errors in mega-linter-runner/README.md
[403] https://npmjs.org/package/mega-linter-runner | Error (cached)

Errors in megalinter/descriptors/terraform.megalinter-descriptor.yml
[404] https://github.com/gruntwork-io/terragrunt/blob/master/docs/assets/img/favicon/ms-icon-310x310.png | Network error: Not Found

Errors in megalinter/descriptors/markdown.megalinter-descriptor.yml
[403] https://www.npmjs.com/package/markdown-table-formatter | Network error: Forbidden

(Truncated to last 5714 characters out of 6077)

⚠️ MARKDOWN / markdownlint - 333 errors

ngle-h1 Multiple top-level headings in the same document [Context: "IDE Configuration Reporter"]
docs/reporters/ConsoleReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Console Reporter"]
docs/reporters/EmailReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "E-mail Reporter"]
docs/reporters/FileIoReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "File.io Reporter"]
docs/reporters/GitHubCommentReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "GitHub Comment Reporter"]
docs/reporters/GitHubCommentReporter.md:27:196 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:27:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:174 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:27:196 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:28:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:160 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:28:179 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:29:48 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:143 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:29:159 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
docs/reporters/GitHubCommentReporter.md:30:46 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:152 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubCommentReporter.md:30:171 error MD060/table-column-style Table column style [Table pipe does not align with header for style "aligned"]
docs/reporters/GitHubStatusReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "GitHub Status Reporter"]
docs/reporters/GitlabCommentReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Gitlab Comment Reporter"]
docs/reporters/JsonReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "JSON Reporter"]
docs/reporters/MarkdownSummaryReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Markdown Summary Reporter"]
docs/reporters/SarifReporter.md:6 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "SARIF Reporter (beta)"]
docs/reporters/TapReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "TAP Reporter"]
docs/reporters/TextReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Text Reporter"]
docs/reporters/UpdatedSourcesReporter.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Updated Sources Reporter"]
docs/special-thanks.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Special thanks"]
docs/special-thanks.md:23:3 error MD045/no-alt-text Images should have alternate text (alt text)
docs/sponsor.md:5 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Sponsoring"]
docs/supported-linters.md:9 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: "Supported Linters"]
mega-linter-runner/generators/mega-linter-custom-flavor/templates/README.md:63 error MD024/no-duplicate-heading Multiple headings with the same content [Context: "How to use the custom flavor"]
mega-linter-runner/README.md:27:274 error MD051/link-fragments Link fragments should be valid [Context: "[**apply formatting and auto-fixes**](#apply-fixes)"]
mega-linter-runner/README.md:27:217 error MD051/link-fragments Link fragments should be valid [Context: "[**reports in several formats**](#reports)"]
README.md:190:127 error MD051/link-fragments Link fragments should be valid [Context: "[many additional features](#mega-linter-vs-super-linter)"]
README.md:1767:3 error MD045/no-alt-text Images should have alternate text (alt text)

(Truncated to last 5714 characters out of 43683)

⚠️ YAML / prettier - 6 errors

codecov.yml 4ms (unchanged)
mega-linter-runner/.eslintrc.yml 3ms (unchanged)
mega-linter-runner/.mega-linter.yml 9ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/action.yml 6ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/check-new-megalinter-version.yml 21ms (unchanged)
mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor-builder.yml 16ms (unchanged)
[error] mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml: SyntaxError: Implicit map keys need to be followed by map values (6:1)
[error]   4 | label: <%= CUSTOM_FLAVOR_LABEL %>
[error]   5 | linters:
[error] > 6 | <%= CUSTOM_FLAVOR_LINTERS %>
[error]     | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[error]   7 |
mega-linter-runner/generators/mega-linter/templates/.drone.yml 3ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/.gitlab-ci.yml 5ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/azure-pipelines.yml 3ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/bitbucket-pipelines.yml 5ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/concourse-task.yml 2ms (unchanged)
mega-linter-runner/generators/mega-linter/templates/mega-linter.yml 28ms (unchanged)
megalinter/descriptors/action.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/ansible.megalinter-descriptor.yml 13ms (unchanged)
megalinter/descriptors/api.megalinter-descriptor.yml 14ms (unchanged)
megalinter/descriptors/arm.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/bash.megalinter-descriptor.yml 50ms (unchanged)
megalinter/descriptors/bicep.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/c.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/clojure.megalinter-descriptor.yml 17ms (unchanged)
megalinter/descriptors/cloudformation.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/coffee.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/copypaste.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/cpp.megalinter-descriptor.yml 15ms (unchanged)
megalinter/descriptors/csharp.megalinter-descriptor.yml 23ms (unchanged)
megalinter/descriptors/css.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/dart.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/dockerfile.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/editorconfig.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/env.megalinter-descriptor.yml 4ms (unchanged)
megalinter/descriptors/gherkin.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/go.megalinter-descriptor.yml 12ms (unchanged)
megalinter/descriptors/graphql.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/groovy.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/html.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/java.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/javascript.megalinter-descriptor.yml 20ms (unchanged)
megalinter/descriptors/json.megalinter-descriptor.yml 46ms (unchanged)
megalinter/descriptors/jsx.megalinter-descriptor.yml 13ms (unchanged)
megalinter/descriptors/kotlin.megalinter-descriptor.yml 5ms (unchanged)
megalinter/descriptors/kubernetes.megalinter-descriptor.yml 14ms (unchanged)
megalinter/descriptors/latex.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/lua.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/makefile.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/markdown.megalinter-descriptor.yml 23ms (unchanged)
megalinter/descriptors/perl.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/php.megalinter-descriptor.yml 29ms (unchanged)
megalinter/descriptors/powershell.megalinter-descriptor.yml 22ms (unchanged)
megalinter/descriptors/protobuf.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/puppet.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/python.megalinter-descriptor.yml 53ms (unchanged)
megalinter/descriptors/r.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/raku.megalinter-descriptor.yml 6ms (unchanged)
megalinter/descriptors/repository.megalinter-descriptor.yml 85ms (unchanged)
megalinter/descriptors/robotframework.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/rst.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/ruby.megalinter-descriptor.yml 10ms (unchanged)
megalinter/descriptors/rust.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/salesforce.megalinter-descriptor.yml 67ms (unchanged)
megalinter/descriptors/scala.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/snakemake.megalinter-descriptor.yml 11ms (unchanged)
megalinter/descriptors/spell.megalinter-descriptor.yml 33ms (unchanged)
megalinter/descriptors/sql.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/swift.megalinter-descriptor.yml 7ms (unchanged)
megalinter/descriptors/tekton.megalinter-descriptor.yml 3ms (unchanged)
megalinter/descriptors/terraform.megalinter-descriptor.yml 18ms (unchanged)
megalinter/descriptors/tsx.megalinter-descriptor.yml 9ms (unchanged)
megalinter/descriptors/typescript.megalinter-descriptor.yml 23ms (unchanged)
megalinter/descriptors/vbdotnet.megalinter-descriptor.yml 8ms (unchanged)
megalinter/descriptors/xml.megalinter-descriptor.yml 15ms (unchanged)
megalinter/descriptors/yaml.megalinter-descriptor.yml 24ms (unchanged)
server/docker-compose-dev.yml 6ms (unchanged)
server/docker-compose.yml 8ms (unchanged)
trivy-secret.yaml 1ms (unchanged)

(Truncated to last 5714 characters out of 11506)

⚠️ YAML / yamllint - 30 errors

mega-linter-runner/.eslintrc.yml
  11:9      warning  too few spaces inside empty braces  (braces)

mega-linter-runner/generators/mega-linter-custom-flavor/templates/megalinter-custom-flavor.yml
  7:1       error    syntax error: could not find expected ':' (syntax)

megalinter/descriptors/copypaste.megalinter-descriptor.yml
  18:301    warning  line too long (313 > 300 characters)  (line-length)

megalinter/descriptors/javascript.megalinter-descriptor.yml
  234:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/markdown.megalinter-descriptor.yml
  74:301    warning  line too long (366 > 300 characters)  (line-length)

megalinter/descriptors/perl.megalinter-descriptor.yml
  26:301    warning  line too long (310 > 300 characters)  (line-length)

megalinter/descriptors/php.megalinter-descriptor.yml
  149:301   warning  line too long (389 > 300 characters)  (line-length)
  163:301   warning  line too long (302 > 300 characters)  (line-length)

megalinter/descriptors/repository.megalinter-descriptor.yml
  155:301   warning  line too long (408 > 300 characters)  (line-length)
  268:301   warning  line too long (306 > 300 characters)  (line-length)
  273:301   warning  line too long (321 > 300 characters)  (line-length)
  450:301   warning  line too long (338 > 300 characters)  (line-length)
  518:301   warning  line too long (306 > 300 characters)  (line-length)
  568:301   warning  line too long (316 > 300 characters)  (line-length)
  818:301   warning  line too long (1263 > 300 characters)  (line-length)
  883:301   warning  line too long (879 > 300 characters)  (line-length)
  897:301   warning  line too long (358 > 300 characters)  (line-length)
  953:301   warning  line too long (346 > 300 characters)  (line-length)
  960:301   warning  line too long (307 > 300 characters)  (line-length)

megalinter/descriptors/salesforce.megalinter-descriptor.yml
  51:301    warning  line too long (359 > 300 characters)  (line-length)
  295:301   warning  line too long (359 > 300 characters)  (line-length)

megalinter/descriptors/sql.megalinter-descriptor.yml
  64:301    warning  line too long (319 > 300 characters)  (line-length)

megalinter/descriptors/terraform.megalinter-descriptor.yml
  27:301    warning  line too long (330 > 300 characters)  (line-length)
  86:301    warning  line too long (391 > 300 characters)  (line-length)
  142:301   warning  line too long (346 > 300 characters)  (line-length)
  199:301   warning  line too long (328 > 300 characters)  (line-length)

megalinter/descriptors/typescript.megalinter-descriptor.yml
  225:301   warning  line too long (314 > 300 characters)  (line-length)

mkdocs.yml
  8:301     warning  line too long (552 > 300 characters)  (line-length)
  66:5      warning  wrong indentation: expected 6 but found 4  (indentation)
  78:5      warning  wrong indentation: expected 6 but found 4  (indentation)

✅ Linters with no issues

black, checkov, cspell, flake8, git_diff, hadolint, isort, jscpd, jsonlint, markdown-table-formatter, mypy, npm-groovy-lint, pylint, ruff, secretlint, shellcheck, shfmt, spectral, syft, trivy, trivy-sbom, trufflehog, v8r, v8r, xmllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

…ty/megalinter into arm-custom-flavor-builder-image

bdovaz · 2026-01-25T14:18:04Z

@nvuillam fixed: https://github.com/oxsecurity/megalinter/actions/runs/21333862700/job/61402966050

Published image (you can see that it targets AMD and ARM): https://github.com/oxsecurity/megalinter/pkgs/container/megalinter-custom-flavor-builder/656247808?tag=alpha

echoix

Looks fine, is everything fixed and ready now?

nvuillam · 2026-02-03T22:55:38Z

I tested with alpha branch, the docker build then merge into a single image seems to work :)

https://github.com/oxsecurity/megalinter/actions/runs/21650936876/job/62415155448#step:7:1

@bdovaz @echoix if the result seems good to you, let's merge :)

My only interrogation is about the parts in black below ("unknow/unknown" platforms)

Name: ghcr.io/oxsecurity/megalinter-custom-flavor-builder:alpha
MediaType: application/vnd.oci.image.index.v1+json
Digest: sha256:5a47976e11435cbba759166362fb7314ec8ae4204cf8a6f75a02555d13748b13

Manifests:
Name: ghcr.io/oxsecurity/megalinter-custom-flavor-builder:alpha@sha256:a438662465c65a06ab4fd10996fce620ad0eb7ea6427662c0413fa3875f5b68e
MediaType: application/vnd.oci.image.manifest.v1+json
Platform: linux/arm64

Name: ghcr.io/oxsecurity/megalinter-custom-flavor-builder:alpha@sha256:41038e3227c801ddd8d5606a616cc9ec4056c3a670b62a6f1adec7cfd734c326
MediaType: application/vnd.oci.image.manifest.v1+json
Platform: unknown/unknown
Annotations:
vnd.docker.reference.digest: sha256:a438662465c65a06ab4fd10996fce620ad0eb7ea6427662c0413fa3875f5b68e
vnd.docker.reference.type: attestation-manifest

Name: ghcr.io/oxsecurity/megalinter-custom-flavor-builder:alpha@sha256:6e6db3eaf43cf5e0d072cb0cd5dc90e97a9c559a86c33a0c987652703f8825fa
MediaType: application/vnd.oci.image.manifest.v1+json
Platform: linux/amd64

Name: ghcr.io/oxsecurity/megalinter-custom-flavor-builder:alpha@sha256:2de629a305f3dddaf2ccc5bf21b12997d933c1d5cc4bcc274ca8e391d8938bd8
MediaType: application/vnd.oci.image.manifest.v1+json
Platform: unknown/unknown
Annotations:
vnd.docker.reference.digest: sha256:6e6db3eaf43cf5e0d072cb0cd5dc90e97a9c559a86c33a0c987652703f8825fa
vnd.docker.reference.type: attestation-manifest

bdovaz · 2026-02-04T09:53:08Z

@nvuillam, if you're referring to the unknown/unknown issue, it's caused by https://github.com/docker/build-push-action/releases/tag/v4.0.0, as mentioned at docker/build-push-action#820

And the solution seems to be to disable that, do you agree? I don't know what it involves either, but I do know that there are a lot of references over the years to that PR issue from different repositories disabling it.

cc @echoix

nvuillam · 2026-02-04T10:57:02Z

let's have a leap of faith ! ;) (and it doesn't seem blocking)

Merged ^^

echoix · 2026-02-04T11:00:05Z

let's have a leap of faith ! ;) (and it doesn't seem blocking)

Merged ^^

I agree, it would be something to address after.

But for the linked issue, I don't think removing the provenance is better, but maybe playing around with the platform could work around it. Because removing the provenance/attestation makes no sense if we are already working towards pinning everything, running trivy, and trying to have something SBOM-able

feat: build custom flavor image for linux/arm64

7316eb6

bdovaz requested a review from nvuillam as a code owner January 19, 2026 16:42

bdovaz temporarily deployed to dev January 19, 2026 16:42 — with GitHub Actions Inactive

[MegaLinter] Apply linters fixes

694ecca

nvuillam requested review from Kurt-von-Laven and echoix as code owners January 19, 2026 16:48

nvuillam temporarily deployed to dev January 19, 2026 16:48 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev January 19, 2026 16:48 — with GitHub Actions Error

nvuillam temporarily deployed to dev January 19, 2026 16:48 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev January 19, 2026 16:48 — with GitHub Actions Error

bdovaz added 2 commits January 19, 2026 17:51

wip

72b2fc1

Merge branch 'arm-custom-flavor-builder-image' of github.com:oxsecuri…

fc0743c

…ty/megalinter into arm-custom-flavor-builder-image

bdovaz temporarily deployed to dev January 19, 2026 16:52 — with GitHub Actions Inactive

Merge branch 'main' into arm-custom-flavor-builder-image

9fe6974

bdovaz had a problem deploying to dev January 21, 2026 08:02 — with GitHub Actions Failure

Merge branch 'main' into arm-custom-flavor-builder-image

0ce2801

bdovaz temporarily deployed to dev January 22, 2026 06:16 — with GitHub Actions Inactive

Merge branch 'main' into arm-custom-flavor-builder-image

0198a72

bdovaz temporarily deployed to dev January 25, 2026 14:16 — with GitHub Actions Inactive

Merge branch 'main' into arm-custom-flavor-builder-image

fe01e28

nvuillam temporarily deployed to dev February 1, 2026 14:39 — with GitHub Actions Inactive

Merge branch 'main' into arm-custom-flavor-builder-image

7d09863

nvuillam temporarily deployed to dev February 1, 2026 23:57 — with GitHub Actions Inactive

echoix approved these changes Feb 3, 2026

View reviewed changes

nvuillam had a problem deploying to dev February 3, 2026 22:46 — with GitHub Actions Error

nvuillam temporarily deployed to dev February 3, 2026 22:46 — with GitHub Actions Inactive

nvuillam had a problem deploying to dev February 3, 2026 22:47 — with GitHub Actions Error

nvuillam temporarily deployed to dev February 3, 2026 22:47 — with GitHub Actions Inactive

Merge branch 'main' into arm-custom-flavor-builder-image

141c36c

nvuillam temporarily deployed to dev February 3, 2026 22:55 — with GitHub Actions Inactive

nvuillam merged commit 970221c into main Feb 4, 2026
136 checks passed

nvuillam deleted the arm-custom-flavor-builder-image branch February 4, 2026 10:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: build custom flavor image for linux/arm64#6988

feat: build custom flavor image for linux/arm64#6988
nvuillam merged 15 commits intomainfrom
arm-custom-flavor-builder-image

bdovaz commented Jan 19, 2026

Uh oh!

bdovaz commented Jan 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

bdovaz commented Jan 25, 2026

Uh oh!

echoix left a comment

Uh oh!

nvuillam commented Feb 3, 2026 •

edited

Loading

Uh oh!

bdovaz commented Feb 4, 2026

Uh oh!

Uh oh!

nvuillam commented Feb 4, 2026

Uh oh!

echoix commented Feb 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

bdovaz commented Jan 19, 2026

Uh oh!

bdovaz commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅⚠️MegaLinter analysis: Success with warnings

✅ Linters with no issues

Uh oh!

bdovaz commented Jan 25, 2026

Uh oh!

echoix left a comment

Choose a reason for hiding this comment

Uh oh!

nvuillam commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

bdovaz commented Feb 4, 2026

Uh oh!

Uh oh!

nvuillam commented Feb 4, 2026

Uh oh!

echoix commented Feb 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

bdovaz commented Jan 19, 2026 •

edited

Loading

github-actions Bot commented Jan 19, 2026 •

edited

Loading

nvuillam commented Feb 3, 2026 •

edited

Loading